$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7b9adaec-eb84-3ab8-b24a-6f02f73336e2.roa File: 7b9adaec-eb84-3ab8-b24a-6f02f73336e2.roa (raw, json) Hash identifier: y1qp888biDNIkVQebZVZdMMyu+Hwins+usPj9dsgkCI= Subject key identifier: 4E:20:BB:5A:45:D1:FD:61:45:DF:59:91:81:7A:C9:7B:01:FC:89:55 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F43285849C4D4C99030522857FDE88980 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7b9adaec-eb84-3ab8-b24a-6f02f73336e2.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 16417 IP address blocks: 139.138.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:c9:90:30:52:28:57:fd:e8:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=714670b6-d82a-4b52-8c57-d37eaffbc986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:06:8d:d1:9b:57:3f:d4:d4:d9:3a:7a:76:de: 09:98:0f:e8:59:37:24:be:a2:97:48:19:38:2d:12: 9f:ac:d1:0d:42:57:83:3a:a7:dc:fd:99:34:cc:24: ff:49:a9:c2:82:e9:c9:fb:d1:da:d0:40:b2:33:99: cc:3c:e1:39:69:7c:f6:55:de:d0:d0:44:36:a4:65: ab:7b:ef:97:c0:80:30:86:0e:df:6c:5d:29:a3:ef: 96:91:6e:81:db:03:82:3f:38:d4:9f:89:43:94:cb: 95:2b:51:9c:e9:46:b0:e3:d0:f2:65:24:79:ee:f5: 82:36:c6:90:48:f2:8f:61:d5:68:21:64:98:55:83: 59:64:40:33:f4:3a:7f:fd:cb:b6:3c:96:6c:02:ad: 49:fa:8b:a7:04:f9:58:5f:0c:82:08:dd:50:95:a6: 8a:3b:8d:4e:f8:2a:d7:31:12:c3:12:90:21:dc:e3: ae:69:d7:d7:2c:67:3d:b9:7f:cc:fe:61:90:62:c5: 49:7e:d5:42:fd:d4:24:f5:99:25:ff:38:db:2d:ee: 11:c6:a0:ce:3d:10:e7:3e:01:23:5f:ee:04:15:12: 7a:25:a8:90:ff:22:40:06:e6:97:fc:32:e5:5d:b4: dd:5a:24:be:3e:e8:3f:6d:21:13:0b:b6:3b:de:f9: 1a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:20:BB:5A:45:D1:FD:61:45:DF:59:91:81:7A:C9:7B:01:FC:89:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7b9adaec-eb84-3ab8-b24a-6f02f73336e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:de:1d:37:04:9f:38:f5:87:f3:37:a3:0e:7d:5a:0b:65:b7: 74:d9:b7:89:05:25:93:19:fa:e1:2d:fa:5d:05:94:d4:1e:d3: fb:d2:de:40:e0:b1:79:9b:65:80:e5:c3:3f:b5:8c:2b:b0:05: f7:c5:6b:b7:43:8d:2e:66:a5:06:0e:3d:f3:bc:d5:8b:b5:37: 54:98:b9:ae:28:ac:54:8c:56:66:f9:ab:3b:c1:d4:03:8e:d6: 00:e8:04:9f:48:09:8d:e5:17:f4:7b:6b:9f:57:2a:81:06:5e: 4a:74:db:ed:3d:07:98:5c:75:c5:4a:ef:30:50:85:bc:f2:01: 22:fe:c7:79:ba:3d:fd:9e:fc:b1:94:1f:21:3f:38:e5:cf:d0: 9d:cd:8a:1a:c2:b9:49:e9:a9:52:bb:87:51:ff:c5:cd:da:f8: 6c:93:e6:da:b4:86:76:d6:09:ce:94:5f:46:38:46:1e:48:b9: a4:1d:26:76:57:f5:64:4b:ab:35:55:2b:fb:91:0d:aa:f1:a8: e9:5c:14:be:2e:aa:e4:69:71:9a:a9:c1:6d:00:2f:6b:29:b9: 09:74:ed:39:2d:ae:21:b1:5e:73:26:58:91:e1:d5:be:7c:84: 2d:71:d4:03:ac:6e:0f:54:cb:ef:3c:87:53:4c:95:09:c3:24: bc:7b:33:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1MmQMFIoV/3oiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk NzE0NjcwYjYtZDgyYS00YjUyLThjNTctZDM3ZWFmZmJjOTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwaN0ZtXP9TU2Tp6dt4JmA/oWTckvqKXSBk4 LRKfrNENQleDOqfc/Zk0zCT/SanCgunJ+9Ha0ECyM5nMPOE5aXz2Vd7Q0EQ2pGWr e++XwIAwhg7fbF0po++WkW6B2wOCPzjUn4lDlMuVK1Gc6Uaw49DyZSR57vWCNsaQ SPKPYdVoIWSYVYNZZEAz9Dp//cu2PJZsAq1J+ounBPlYXwyCCN1QlaaKO41O+CrX MRLDEpAh3OOuadfXLGc9uX/M/mGQYsVJftVC/dQk9Zkl/zjbLe4RxqDOPRDnPgEj X+4EFRJ6JaiQ/yJABuaX/DLlXbTdWiS+Pug/bSETC7Y73vkaOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4gu1pF0f1hRd9ZkYF6yXsB/IlVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvN2I5YWRhZWMtZWI4NC0z YWI4LWIyNGEtNmYwMmY3MzMzNmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4ooMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjeHTcEnzj1h/M3ow59Wgtlt3TZt4kFJZMZ+uEt+l0FlNQe0/vS3kDg sXmbZYDlwz+1jCuwBffFa7dDjS5mpQYOPfO81Yu1N1SYua4orFSMVmb5qzvB1AOO 1gDoBJ9ICY3lF/R7a59XKoEGXkp02+09B5hcdcVK7zBQhbzyASL+x3m6Pf2e/LGU HyE/OOXP0J3NihrCuUnpqVK7h1H/xc3a+GyT5tq0hnbWCc6UX0Y4Rh5IuaQdJnZX 9WRLqzVVK/uRDarxqOlcFL4uquRpcZqpwW0AL2spuQl07TktriGxXnMmWJHh1b58 hC1x1AOsbg9Uy+88h1NMlQnDJLx7M9Y= -----END CERTIFICATE-----Generated at Sun Jun 15 15:42:08 2025 by rpki-client