$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0ed937b7-7f60-36df-8d9f-63c86c63b9a4.roa File: 0ed937b7-7f60-36df-8d9f-63c86c63b9a4.roa (raw, json) Hash identifier: PIUwIfSA0DxCeHlmJR3ZMloiEGGeYde/LhQTE3dmWUc= Subject key identifier: CD:4F:08:53:C0:C4:74:ED:DA:66:90:8D:85:70:3E:98:16:6A:0C:EF Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584CF587995E26A023F0BC9CB240 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0ed937b7-7f60-36df-8d9f-63c86c63b9a4.roa Signing time: Mon 23 Feb 2026 14:00:41 +0000 ROA not before: Mon 23 Feb 2026 14:00:41 +0000 ROA not after: Sun 24 May 2026 13:00:41 +0000 asID: 16417 IP address blocks: 139.138.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f5:87:99:5e:26:a0:23:f0:bc:9c:b2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Feb 23 14:00:41 2026 GMT Not After : May 24 13:00:41 2026 GMT Subject: CN=71b22953-bdc9-4636-92f2-26d7f6cbc434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4c:62:d8:ad:e2:15:55:bd:d1:b3:16:96:4f: f7:19:ff:1b:06:02:58:6d:a0:8d:62:6c:18:d1:c6: 37:bb:41:eb:cc:9b:ed:eb:29:05:4a:48:9e:6a:90: 35:66:40:c6:b1:74:3f:52:9f:18:12:1f:93:00:5c: 5a:15:75:37:dd:72:f7:50:7f:3e:8d:35:3b:2b:7a: 5a:28:23:7f:ab:ac:e8:93:ac:78:db:3b:03:de:54: 5b:d9:d2:e9:a1:89:4a:64:36:34:df:09:87:41:d0: f9:1e:22:5b:e1:2b:56:cf:f6:34:6c:0c:4d:00:d3: c2:bf:12:e9:30:c4:86:77:16:c0:7f:08:59:ad:d3: 14:39:85:eb:3f:66:71:8b:ea:77:e6:c8:97:4c:7e: b7:fa:22:bb:d2:6c:71:0c:2b:6e:28:e9:38:0c:44: b8:b8:2d:9c:6e:87:94:67:22:ad:62:3b:8b:41:7a: ae:a5:da:58:00:73:6b:4a:72:d2:d4:98:fd:78:8f: 2b:e9:e8:d6:b9:56:c9:4f:f0:3b:51:07:02:52:57: fb:cc:b8:1e:a1:f1:1c:83:96:cc:78:04:09:ea:8d: de:d2:52:97:0b:71:dd:9e:cf:af:e7:f4:0a:37:db: f7:f7:b7:4b:b7:bb:69:29:76:14:c4:59:5c:5f:23: 10:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:4F:08:53:C0:C4:74:ED:DA:66:90:8D:85:70:3E:98:16:6A:0C:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0ed937b7-7f60-36df-8d9f-63c86c63b9a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:97:08:43:83:6e:ce:d5:0c:22:83:d8:15:01:61:9e:5e:16: d1:4f:cd:cd:63:5e:62:62:17:14:d9:0a:1e:b9:41:72:bb:15: c5:29:07:61:17:92:a4:9d:73:d5:6b:14:7b:44:aa:c4:cd:62: a1:6c:9b:86:e5:11:80:f0:7b:10:f0:dd:2d:37:42:d3:65:1d: c8:6a:5b:51:ff:83:a7:e5:73:26:dd:11:83:d1:b8:0b:6d:d6: e9:c4:09:9b:a3:ca:2e:90:70:4b:8f:20:7e:4b:5f:00:f6:5e: 8e:1d:6d:f8:03:70:53:4f:6b:20:e9:d7:0a:d5:ac:ce:5e:a0: 6f:ac:34:7c:8a:b7:26:f5:a0:cc:6a:f5:91:73:56:b1:cb:4c: e7:b2:7b:0c:c0:dc:e3:92:c7:6e:80:91:43:fe:b2:ff:ca:d6: 7e:3d:e0:72:07:0c:f5:6d:92:43:a7:83:be:dd:66:a9:75:98: a9:0e:3b:f3:a2:55:35:00:67:b3:ed:f8:67:60:c4:96:1a:1c: 6d:42:5c:69:8f:49:c5:7a:0f:16:ac:01:6b:1a:5c:d9:d1:77: 2b:22:e4:11:f4:f8:48:f6:82:15:57:fa:08:b8:96:ad:b9:01: b2:4a:a6:83:07:42:86:37:cc:c6:cf:c0:fe:97:c7:ab:e3:8e: 60:50:96:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz1h5leJqAj8LycskAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDIyMzE0MDA0MVoXDTI2MDUyNDEzMDA0MVowLzEtMCsGA1UEAxMk NzFiMjI5NTMtYmRjOS00NjM2LTkyZjItMjZkN2Y2Y2JjNDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0xi2K3iFVW90bMWlk/3Gf8bBgJYbaCNYmwY 0cY3u0HrzJvt6ykFSkieapA1ZkDGsXQ/Up8YEh+TAFxaFXU33XL3UH8+jTU7K3pa KCN/q6zok6x42zsD3lRb2dLpoYlKZDY03wmHQdD5HiJb4StWz/Y0bAxNANPCvxLp MMSGdxbAfwhZrdMUOYXrP2Zxi+p35siXTH63+iK70mxxDCtuKOk4DES4uC2cboeU ZyKtYjuLQXqupdpYAHNrSnLS1Jj9eI8r6ejWuVbJT/A7UQcCUlf7zLgeofEcg5bM eAQJ6o3e0lKXC3Hdns+v5/QKN9v397dLt7tpKXYUxFlcXyMQdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1PCFPAxHTt2maQjYVwPpgWagzvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMGVkOTM3YjctN2Y2MC0z NmRmLThkOWYtNjNjODZjNjNiOWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4ohMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+XCEODbs7VDCKD2BUBYZ5eFtFPzc1jXmJiFxTZCh65QXK7FcUpB2EX kqSdc9VrFHtEqsTNYqFsm4blEYDwexDw3S03QtNlHchqW1H/g6flcybdEYPRuAtt 1unECZujyi6QcEuPIH5LXwD2Xo4dbfgDcFNPayDp1wrVrM5eoG+sNHyKtyb1oMxq 9ZFzVrHLTOeyewzA3OOSx26AkUP+sv/K1n494HIHDPVtkkOng77dZql1mKkOO/Oi VTUAZ7Pt+GdgxJYaHG1CXGmPScV6DxasAWsaXNnRdysi5BH0+Ej2ghVX+gi4lq25 AbJKpoMHQoY3zMbPwP6Xx6vjjmBQlq8= -----END CERTIFICATE-----Generated at Mon Mar 2 11:08:49 2026 by rpki-client