$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/59d1f242-72ef-3a31-a323-8f22641c6746.roa File: 59d1f242-72ef-3a31-a323-8f22641c6746.roa (raw, json) Hash identifier: 0nQxTa1MESJW0TcvvjM6n3gXg55S4t3OCgWue2h5gXM= Subject key identifier: 27:BB:DB:B6:DC:A8:FB:DF:EB:F7:87:6F:98:1C:E3:BE:DE:A3:76:C1 Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F4328584C8476C16F2EF3F195FFCEDA00 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/59d1f242-72ef-3a31-a323-8f22641c6746.roa Signing time: Wed 14 Jan 2026 02:00:31 +0000 ROA not before: Wed 14 Jan 2026 02:00:31 +0000 ROA not after: Tue 14 Apr 2026 01:00:31 +0000 asID: 14297 IP address blocks: 139.131.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:84:76:c1:6f:2e:f3:f1:95:ff:ce:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Jan 14 02:00:31 2026 GMT Not After : Apr 14 01:00:31 2026 GMT Subject: CN=6f3f7c28-5fc6-49df-aa8a-309099605d74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:02:3f:0e:62:0f:d1:5d:08:c4:66:75:c0:bd: 4d:dc:fc:b3:19:9c:10:55:40:db:91:12:63:14:5d: f7:74:8c:ee:f2:c7:60:b4:47:16:bc:1a:e9:c4:07: e4:e1:fa:c4:12:0e:95:c7:55:da:3d:d3:63:90:c1: 3e:60:78:2a:56:30:52:58:24:0d:13:a4:39:e9:ea: b2:4f:69:87:2b:76:75:46:c2:89:52:c9:f7:4f:60: 0d:89:84:61:44:87:fb:b8:5f:99:ce:98:01:93:2b: 0f:ea:4c:d8:2a:de:6e:0d:5e:99:46:7e:89:4f:24: 6b:59:5b:b2:c9:cd:99:14:4a:d8:f0:d4:8c:86:52: 35:fd:ec:b8:65:76:56:80:0d:76:f0:6b:9d:6d:3f: 67:c2:34:96:f8:4f:f1:d5:45:23:80:c6:33:3c:72: 24:75:73:de:66:c4:8d:10:0c:12:87:f7:42:87:08: f9:12:cf:50:d2:75:01:33:dc:47:16:f7:f9:1a:cc: 9e:81:ab:60:f6:eb:1d:8c:c6:88:04:0c:8d:70:98: a6:98:42:43:56:24:65:76:e4:d7:d9:53:81:15:dc: 20:65:d5:73:4d:0e:10:93:ae:b9:ce:03:21:98:3a: e7:67:19:30:03:fe:ae:da:e6:03:0e:75:59:e1:74: 9f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:BB:DB:B6:DC:A8:FB:DF:EB:F7:87:6F:98:1C:E3:BE:DE:A3:76:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/59d1f242-72ef-3a31-a323-8f22641c6746.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:1f:1a:2d:07:56:1a:cf:91:ba:c3:99:b8:f0:35:ef:8e:18: 99:10:36:42:50:05:09:d2:5f:05:ee:05:4c:ac:e1:01:f0:4e: a9:b3:cc:43:d1:a0:1e:cb:da:dd:3d:6f:3b:60:39:d3:ac:00: de:7b:2e:6e:27:27:00:01:95:be:86:87:44:ba:6f:18:39:e7: 4f:5a:11:ee:57:72:bd:3b:5b:ff:46:62:67:83:22:8b:ef:d9: 12:76:58:b6:ab:38:ea:84:2c:92:30:6e:ff:bf:d3:57:ce:b0: 11:26:b0:8a:ed:e9:b1:48:7e:dc:eb:7a:a6:e5:1e:42:d8:14: 7c:ce:d3:e7:7a:0d:5c:24:d4:39:e2:aa:d2:f8:92:f2:ba:07: 70:02:47:a8:9a:1b:00:8c:af:c4:22:48:ea:8f:7b:21:84:d5: f6:ed:1f:16:14:cb:6b:79:8c:f3:cf:68:49:84:d0:74:a2:6d: c8:a6:f2:95:2b:80:02:ee:00:13:43:36:c9:62:60:93:09:e4: 36:98:2a:dd:91:bb:f7:be:83:f5:82:9d:52:05:eb:8a:cc:58: 47:09:e2:79:3b:f6:4c:d3:0c:43:7c:a2:85:3b:7f:0f:26:06: 34:83:a5:27:d6:7a:4d:35:b0:0c:a6:91:55:00:2c:3e:69:7d: 5e:0c:3c:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyEdsFvLvPxlf/O2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI2MDExNDAyMDAzMVoXDTI2MDQxNDAxMDAzMVowLzEtMCsGA1UEAxMk NmYzZjdjMjgtNWZjNi00OWRmLWFhOGEtMzA5MDk5NjA1ZDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAI/DmIP0V0IxGZ1wL1N3PyzGZwQVUDbkRJj FF33dIzu8sdgtEcWvBrpxAfk4frEEg6Vx1XaPdNjkME+YHgqVjBSWCQNE6Q56eqy T2mHK3Z1RsKJUsn3T2ANiYRhRIf7uF+ZzpgBkysP6kzYKt5uDV6ZRn6JTyRrWVuy yc2ZFErY8NSMhlI1/ey4ZXZWgA128GudbT9nwjSW+E/x1UUjgMYzPHIkdXPeZsSN EAwSh/dChwj5Es9Q0nUBM9xHFvf5Gsyegatg9usdjMaIBAyNcJimmEJDViRlduTX 2VOBFdwgZdVzTQ4Qk665zgMhmDrnZxkwA/6u2uYDDnVZ4XSf5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCe727bcqPvf6/eHb5gc477eo3bBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvNTlkMWYyNDItNzJlZi0z YTMxLWEzMjMtOGYyMjY0MWM2NzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBi4PCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8fGi0HVhrPkbrDmbjwNe+OGJkQNkJQBQnSXwXuBUys4QHwTqmzzEPR oB7L2t09bztgOdOsAN57Lm4nJwABlb6Gh0S6bxg5509aEe5Xcr07W/9GYmeDIovv 2RJ2WLarOOqELJIwbv+/01fOsBEmsIrt6bFIftzreqblHkLYFHzO0+d6DVwk1Dni qtL4kvK6B3ACR6iaGwCMr8QiSOqPeyGE1fbtHxYUy2t5jPPPaEmE0HSibcim8pUr gALuABNDNsliYJMJ5DaYKt2Ru/e+g/WCnVIF64rMWEcJ4nk79kzTDEN8ooU7fw8m BjSDpSfWek01sAymkVUALD5pfV4MPOE= -----END CERTIFICATE-----Generated at Mon Mar 2 17:44:05 2026 by rpki-client