$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/147c0bf2-220f-3c91-9257-37befeaa7a3e.roa File: 147c0bf2-220f-3c91-9257-37befeaa7a3e.roa (raw, json) Hash identifier: VSuE/MpG9r6CUrgwix15jJ8YpjCnhEGfIt3sOVO6IpI= Subject key identifier: 9D:D6:CB:22:72:62:3E:45:7F:3E:6A:91:2D:3C:99:3C:3D:C9:F1:1D Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584E253F096573E66D3546F1EE80 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/147c0bf2-220f-3c91-9257-37befeaa7a3e.roa Signing time: Fri 12 Jun 2026 09:00:11 +0000 ROA not before: Fri 12 Jun 2026 09:00:11 +0000 ROA not after: Thu 10 Sep 2026 09:00:11 +0000 asID: 16417 IP address blocks: 139.138.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:25:3f:09:65:73:e6:6d:35:46:f1:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jun 12 09:00:11 2026 GMT Not After : Sep 10 09:00:11 2026 GMT Subject: CN=4481e0da-d4f9-4d5a-8533-4e1823daf476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:36:63:a7:00:22:fc:a4:b7:12:29:d6:5e:1d: 83:37:ea:bc:9f:5a:18:1e:98:bc:08:fe:44:27:3d: bd:3b:e7:ac:da:69:f7:56:e0:b5:9a:15:32:e5:ad: e4:fa:a9:f4:c1:69:09:70:90:2e:10:fe:55:9d:d3: b0:75:dc:34:35:45:b4:5f:76:46:20:d1:9e:98:43: 19:61:12:4e:90:12:06:f7:df:c0:b2:bf:73:02:35: 42:d1:3f:3c:a8:4a:88:91:fe:3b:c9:70:1e:83:67: b3:65:94:e9:1c:65:2f:19:92:e0:10:04:93:d7:be: c1:d9:82:4f:8f:05:6b:9e:86:48:63:a8:54:31:82: ec:d7:0b:c1:61:14:59:1a:e3:6b:db:ee:a7:ad:88: 9f:71:8e:61:36:ce:f4:be:30:a4:74:9c:8c:e5:e5: 5b:f8:0e:86:81:9f:6b:aa:49:19:3d:6c:24:b9:1a: b3:be:5f:5d:38:75:1d:b8:81:fa:09:98:3e:ec:cb: ee:90:98:a5:9c:09:2a:60:38:fb:f2:96:91:06:b5: 1d:81:4a:c6:f3:76:42:3f:86:ba:fe:5f:bd:ee:0f: 04:e3:ec:e6:d8:ef:1d:2a:25:e4:45:27:d6:41:6a: 4a:ae:35:35:3b:ce:44:36:43:33:33:cc:29:29:d1: a6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D6:CB:22:72:62:3E:45:7F:3E:6A:91:2D:3C:99:3C:3D:C9:F1:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/147c0bf2-220f-3c91-9257-37befeaa7a3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:38:be:98:d6:f7:bb:e4:bb:70:01:c6:e8:96:55:d2:51:06: 7c:4f:54:7c:e0:61:ef:17:86:06:3d:3f:69:4a:92:eb:fd:19: 86:89:1e:5e:3a:50:74:78:8f:b3:cd:fa:dd:09:44:b0:4f:82: 1b:b5:3b:76:b9:04:44:f1:b7:27:43:e8:f1:0e:0b:3c:3b:a4: 87:2a:e9:41:74:80:51:67:09:35:94:93:89:04:dc:15:a9:dc: 9b:16:c3:e7:72:f1:b9:31:fe:ee:e3:bf:4b:fe:29:14:84:1d: 87:9b:cb:f9:aa:a1:08:45:1c:5f:c8:78:dc:80:8f:10:ef:0a: ef:88:f1:47:fa:ed:59:53:f3:ca:90:b8:76:83:69:f8:33:5f: 5d:04:22:7b:4e:d2:2d:16:89:e0:d7:79:3d:ab:e1:26:75:73: 9b:75:e0:d6:83:0e:58:ec:15:c8:e1:85:7a:63:dd:a7:dc:3d: 5f:17:0e:95:ec:b6:ad:f8:77:8c:c6:fe:d5:fa:8c:dc:36:f1: cc:83:3f:c8:db:df:e3:22:59:3f:5c:73:ac:21:5e:81:e8:63: 8a:bf:58:98:5f:78:c8:fe:67:6e:d8:b4:f9:8e:e2:ef:35:ff: a5:bf:cc:e9:41:38:4b:2a:ea:3d:f0:de:ee:5b:2f:46:07:a5: f3:79:6b:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4lPwllc+ZtNUbx7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk NDQ4MWUwZGEtZDRmOS00ZDVhLTg1MzMtNGUxODIzZGFmNDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDZjpwAi/KS3EinWXh2DN+q8n1oYHpi8CP5E Jz29O+es2mn3VuC1mhUy5a3k+qn0wWkJcJAuEP5VndOwddw0NUW0X3ZGINGemEMZ YRJOkBIG99/Asr9zAjVC0T88qEqIkf47yXAeg2ezZZTpHGUvGZLgEAST177B2YJP jwVrnoZIY6hUMYLs1wvBYRRZGuNr2+6nrYifcY5hNs70vjCkdJyM5eVb+A6GgZ9r qkkZPWwkuRqzvl9dOHUduIH6CZg+7MvukJilnAkqYDj78paRBrUdgUrG83ZCP4a6 /l+97g8E4+zm2O8dKiXkRSfWQWpKrjU1O85ENkMzM8wpKdGmtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3WyyJyYj5Ffz5qkS08mTw9yfEdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMTQ3YzBiZjItMjIwZi0z YzkxLTkyNTctMzdiZWZlYWE3YTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4oYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJA4vpjW97vku3ABxuiWVdJRBnxPVHzgYe8XhgY9P2lKkuv9GYaJHl46 UHR4j7PN+t0JRLBPghu1O3a5BETxtydD6PEOCzw7pIcq6UF0gFFnCTWUk4kE3BWp 3JsWw+dy8bkx/u7jv0v+KRSEHYeby/mqoQhFHF/IeNyAjxDvCu+I8Uf67VlT88qQ uHaDafgzX10EIntO0i0WieDXeT2r4SZ1c5t14NaDDljsFcjhhXpj3afcPV8XDpXs tq34d4zG/tX6jNw28cyDP8jb3+MiWT9cc6whXoHoY4q/WJhfeMj+Z27YtPmO4u81 /6W/zOlBOEsq6j3w3u5bL0YHpfN5a+A= -----END CERTIFICATE-----Generated at Sat Jun 13 21:13:09 2026 by rpki-client