$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/6cf7fe11-676a-30a2-84a3-46c07752a767.roa File: 6cf7fe11-676a-30a2-84a3-46c07752a767.roa (raw, json) Hash identifier: ced/wLpFpyvov9X9aGbt4g+m6vUSste+uu8f9vVlhxs= Subject key identifier: 14:48:E9:88:02:DE:C0:1A:11:C0:91:BF:B4:32:74:F9:F3:94:D8:59 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B84E78482369150139EAAFB00 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/6cf7fe11-676a-30a2-84a3-46c07752a767.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16417 IP address blocks: 139.138.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:84:82:36:91:50:13:9e:aa:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=32dea614-6037-4dd8-9a09-abe2ecd914a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6e:66:26:ff:bf:62:eb:2c:b7:28:79:7c:b5: 89:fa:5d:f0:ad:11:6f:8d:99:e9:7c:6b:27:a1:a2: 9e:18:34:1e:8c:64:19:eb:fe:80:d8:8c:18:84:c3: 2d:20:41:7d:c4:ce:4f:6f:99:de:fa:7c:98:92:73: a3:97:b2:90:4b:4e:49:f0:ce:fd:47:d6:21:3a:e9: 89:3b:b7:78:fa:f4:98:a6:b0:b6:dc:95:1b:07:5a: c6:47:7b:fa:ce:78:33:5f:c5:33:86:43:76:00:6e: 01:06:df:da:cd:57:ae:51:b5:a6:17:29:f1:7a:fa: 1a:c8:4f:0d:83:e7:46:5d:63:7c:a2:76:25:c3:b2: c2:85:7d:ba:42:ce:25:ba:9e:ae:ca:c2:12:70:e5: 0e:d8:91:39:83:1c:87:ac:46:78:24:c0:bb:41:46: f9:64:47:81:82:65:99:1e:c6:2a:2e:f7:c1:4b:c7: 09:81:8b:59:26:ec:7e:cc:cc:84:95:fe:07:a5:cc: 50:7f:b2:59:99:2e:21:3c:17:31:d8:1f:b3:ed:f8: a4:55:12:25:45:c2:eb:88:97:1f:70:67:07:ff:df: d5:a6:6f:d2:d4:9b:aa:00:c2:f8:7b:72:7b:27:67: eb:ee:85:dc:31:a6:ed:81:7f:80:68:17:dc:41:69: 40:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:48:E9:88:02:DE:C0:1A:11:C0:91:BF:B4:32:74:F9:F3:94:D8:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/6cf7fe11-676a-30a2-84a3-46c07752a767.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:7d:5c:5e:cf:d4:f4:df:ec:20:1d:9f:86:23:6c:e7:21:fb: 94:9a:09:ab:66:2e:06:d3:a6:39:39:91:37:65:f6:dd:d5:53: 87:3e:8d:e8:d7:e4:6b:01:cb:af:6c:a9:4d:eb:5e:1c:d7:47: 6b:99:65:af:a0:29:30:67:8b:c5:52:b6:76:9e:67:b7:e9:4f: 59:cb:cd:0a:30:ab:53:ab:58:9c:69:97:ec:9a:0e:df:ba:ac: 56:37:62:6e:19:e3:74:8e:29:28:9b:11:17:9c:f3:7b:fc:99: 35:ec:2f:cd:d8:fe:eb:e5:2f:07:c7:43:19:1c:63:f3:28:45: 5a:7c:31:26:b5:48:98:25:16:b6:51:a9:ae:67:89:b9:0a:66: 5d:f0:a3:56:0b:7e:0b:fb:d3:66:fe:ad:6f:81:fd:88:91:82: 12:b9:14:3f:39:60:33:44:97:a6:cd:c6:d4:dc:34:29:a8:0f: 21:52:ef:f0:17:8a:21:27:64:7c:08:34:73:3c:88:97:c5:48: 8f:eb:80:03:c4:3e:20:6d:73:f0:98:19:85:71:30:4b:dc:58: ae:97:88:43:0d:aa:7b:89:af:68:b8:45:2f:d2:22:a7:e4:4b: 90:b7:68:06:f8:15:09:37:fd:14:45:ea:d9:11:d4:8d:44:c4: 53:2b:93:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE54SCNpFQE56q+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk MzJkZWE2MTQtNjAzNy00ZGQ4LTlhMDktYWJlMmVjZDkxNGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw25mJv+/Yusstyh5fLWJ+l3wrRFvjZnpfGsn oaKeGDQejGQZ6/6A2IwYhMMtIEF9xM5Pb5ne+nyYknOjl7KQS05J8M79R9YhOumJ O7d4+vSYprC23JUbB1rGR3v6zngzX8UzhkN2AG4BBt/azVeuUbWmFynxevoayE8N g+dGXWN8onYlw7LChX26Qs4lup6uysIScOUO2JE5gxyHrEZ4JMC7QUb5ZEeBgmWZ HsYqLvfBS8cJgYtZJux+zMyElf4HpcxQf7JZmS4hPBcx2B+z7fikVRIlRcLriJcf cGcH/9/Vpm/S1JuqAML4e3J7J2fr7oXcMabtgX+AaBfcQWlAmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRI6YgC3sAaEcCRv7QydPnzlNhZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvNmNmN2ZlMTEtNjc2YS0z MGEyLTg0YTMtNDZjMDc3NTJhNzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4o5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACp9XF7P1PTf7CAdn4YjbOch+5SaCatmLgbTpjk5kTdl9t3VU4c+jejX 5GsBy69sqU3rXhzXR2uZZa+gKTBni8VStnaeZ7fpT1nLzQowq1OrWJxpl+yaDt+6 rFY3Ym4Z43SOKSibERec83v8mTXsL83Y/uvlLwfHQxkcY/MoRVp8MSa1SJglFrZR qa5nibkKZl3wo1YLfgv702b+rW+B/YiRghK5FD85YDNEl6bNxtTcNCmoDyFS7/AX iiEnZHwINHM8iJfFSI/rgAPEPiBtc/CYGYVxMEvcWK6XiEMNqnuJr2i4RS/SIqfk S5C3aAb4FQk3/RRF6tkR1I1ExFMrk9k= -----END CERTIFICATE-----Generated at Wed Nov 5 11:27:00 2025 by rpki-client