$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/840eebe7-dd14-3e7e-b8f3-fb4c5cdbcd3c.roa File: 840eebe7-dd14-3e7e-b8f3-fb4c5cdbcd3c.roa (raw, json) Hash identifier: gFKz+7aTPgsMX5aAne5gFZYRzV1cqYIMbLiFwa9HdWc= Subject key identifier: AE:3C:D2:41:9E:0E:47:EA:14:F1:15:D8:23:6B:5B:8A:BC:97:51:3A Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B3556EA0EABA0FDDB81202700 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/840eebe7-dd14-3e7e-b8f3-fb4c5cdbcd3c.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 16417 IP address blocks: 139.138.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:ea:0e:ab:a0:fd:db:81:20:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=8229d166-cc13-441f-805e-093cf8933a40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a3:63:1b:2e:79:39:4e:72:27:ff:ca:65:d2: e4:4c:2c:da:82:d0:93:94:d0:de:37:54:f0:38:10: 23:a0:bc:6a:4f:ea:92:a2:8d:af:49:8c:f9:14:c7: 89:3a:38:67:f3:24:49:12:cc:a5:39:a1:2b:40:b9: d4:f6:9e:c0:7f:71:7d:8a:bb:7e:8d:84:9c:19:c8: e5:34:c9:ad:8e:31:8f:e3:0f:e2:14:f6:5f:d4:fa: 99:69:7b:55:ca:a0:12:75:4b:7b:c7:17:77:20:2e: 29:a9:68:fb:2c:9e:fe:8c:97:af:09:fb:9b:5b:c2: 34:41:c1:a9:f3:41:a6:3c:4d:f0:87:52:cf:a0:5d: 04:03:3d:a7:6a:17:d3:22:b9:ae:9e:df:d5:29:72: 22:06:67:64:91:73:dd:a8:fa:4d:c4:f9:2e:8b:8f: 14:5a:ab:fb:3e:a4:87:41:69:30:d0:cc:8a:80:e6: 15:c1:17:ba:62:59:12:c1:ff:78:e7:33:92:19:dc: 93:29:48:f8:69:da:1d:ae:76:49:6f:94:61:43:be: 7e:4f:30:5a:fc:f2:c3:4d:d6:3e:ac:01:e6:40:21: 33:56:44:4f:fe:e9:d0:1e:57:84:7c:77:2a:b5:37: eb:99:71:17:15:50:ed:1d:0a:36:e5:cd:79:f4:be: 65:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:3C:D2:41:9E:0E:47:EA:14:F1:15:D8:23:6B:5B:8A:BC:97:51:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/840eebe7-dd14-3e7e-b8f3-fb4c5cdbcd3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:02:3a:52:6c:4f:b5:4d:6a:ff:d5:d1:b5:b0:c2:d8:a0:fc: 59:9c:4f:76:6d:f0:96:8b:c1:40:21:ef:2e:01:c1:c0:37:bd: f3:7d:b1:5e:80:37:9b:52:8d:fe:74:5f:d3:4a:d6:ec:4a:a8: 26:b4:c3:35:a5:c9:d7:4b:7a:0e:ff:30:ee:75:31:29:81:c3: d8:32:da:30:4f:27:36:b3:f8:3a:f3:b9:51:95:33:79:47:38: 4a:c1:7b:ac:3d:21:d1:9c:cf:49:b1:68:bc:cc:fc:a0:5a:06: 77:54:56:47:40:ec:1e:b2:1b:2b:14:b5:9c:df:22:e8:26:45: c6:7c:94:ca:23:b9:85:9d:5b:aa:6e:98:e2:21:c4:f1:ed:a8: ba:d4:29:46:b8:92:6c:54:25:0b:92:bb:fc:37:32:b4:90:fc: ad:c0:74:00:dc:7f:2a:e3:8f:a8:58:72:93:e1:d1:53:df:8c: 0c:fb:0e:8c:5e:e4:e9:e6:2e:3d:7b:80:fd:c8:c7:bb:ca:59: 5f:9f:de:2a:bc:80:de:9b:5d:25:ce:62:14:d6:d0:87:0e:c2: f1:e1:80:10:6f:14:1d:a8:bc:89:1b:01:d7:0a:d9:10:b0:5f: a9:49:99:64:f1:c8:93:1e:84:43:3d:40:5c:10:c2:0e:dd:64: fc:35:76:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1VuoOq6D924EgJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk ODIyOWQxNjYtY2MxMy00NDFmLTgwNWUtMDkzY2Y4OTMzYTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraNjGy55OU5yJ//KZdLkTCzagtCTlNDeN1Tw OBAjoLxqT+qSoo2vSYz5FMeJOjhn8yRJEsylOaErQLnU9p7Af3F9irt+jYScGcjl NMmtjjGP4w/iFPZf1PqZaXtVyqASdUt7xxd3IC4pqWj7LJ7+jJevCfubW8I0QcGp 80GmPE3wh1LPoF0EAz2nahfTIrmunt/VKXIiBmdkkXPdqPpNxPkui48UWqv7PqSH QWkw0MyKgOYVwRe6YlkSwf945zOSGdyTKUj4adodrnZJb5RhQ75+TzBa/PLDTdY+ rAHmQCEzVkRP/unQHleEfHcqtTfrmXEXFVDtHQo25c159L5lXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK480kGeDkfqFPEV2CNrW4q8l1E6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvODQwZWViZTctZGQxNC0z ZTdlLWI4ZjMtZmI0YzVjZGJjZDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4oZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMACOlJsT7VNav/V0bWwwtig/FmcT3Zt8JaLwUAh7y4BwcA3vfN9sV6A N5tSjf50X9NK1uxKqCa0wzWlyddLeg7/MO51MSmBw9gy2jBPJzaz+DrzuVGVM3lH OErBe6w9IdGcz0mxaLzM/KBaBndUVkdA7B6yGysUtZzfIugmRcZ8lMojuYWdW6pu mOIhxPHtqLrUKUa4kmxUJQuSu/w3MrSQ/K3AdADcfyrjj6hYcpPh0VPfjAz7Doxe 5OnmLj17gP3Ix7vKWV+f3iq8gN6bXSXOYhTW0IcOwvHhgBBvFB2ovIkbAdcK2RCw X6lJmWTxyJMehEM9QFwQwg7dZPw1dmk= -----END CERTIFICATE-----Generated at Wed Nov 5 11:21:48 2025 by rpki-client