$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/2121c5fd-7dae-3463-8bf4-b0288306ddb5.roa File: 2121c5fd-7dae-3463-8bf4-b0288306ddb5.roa (raw, json) Hash identifier: 3A9bK7V2wg23v7rMoIymGhz9eiREe2/Ujq6hYrg/2CQ= Subject key identifier: C2:0C:1D:3C:FD:AC:1B:63:1D:AB:65:CB:86:87:98:48:49:AA:0A:65 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584CF587996CD11C45E2CF2D7280 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/2121c5fd-7dae-3463-8bf4-b0288306ddb5.roa Signing time: Mon 23 Feb 2026 14:00:41 +0000 ROA not before: Mon 23 Feb 2026 14:00:41 +0000 ROA not after: Sun 24 May 2026 13:00:41 +0000 asID: 16417 IP address blocks: 139.138.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f5:87:99:6c:d1:1c:45:e2:cf:2d:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Feb 23 14:00:41 2026 GMT Not After : May 24 13:00:41 2026 GMT Subject: CN=73bbd3d7-59da-4d5a-8bc9-aacdd93b11ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d2:6a:8e:c6:97:1f:66:ce:05:b8:9a:d3:ff: 18:f3:e4:ff:72:df:61:72:b6:13:62:c1:f2:da:10: 25:5d:76:dc:57:08:29:0a:54:08:c4:ac:ec:00:27: 68:58:bd:a2:20:f1:de:e2:7c:85:95:e4:4c:ae:63: 49:ae:df:e1:b5:32:1a:ba:45:fa:9b:24:5e:bb:79: 85:53:0f:af:e0:9f:6c:4c:18:1d:f2:ce:98:d3:0d: b7:98:03:b3:b4:68:6b:38:45:28:8e:3a:b0:77:42: 45:74:58:e4:77:1d:fd:ed:76:28:be:59:e9:49:60: 71:78:e6:1c:b1:0b:a6:58:a7:03:10:4f:a5:4c:79: 5e:b3:1a:92:4c:7a:1e:58:89:a0:b7:f6:72:63:20: 86:93:eb:5b:06:67:cf:a8:ab:6f:18:05:17:c4:89: 73:e7:26:dc:14:1a:4f:fd:22:ba:bc:bb:60:5d:e5: 49:37:0c:f0:b1:11:b6:57:24:8f:bf:89:d4:e9:24: 7e:2d:2e:74:9b:19:74:32:4c:da:f6:40:65:de:92: c7:30:46:02:13:b2:7e:bc:96:55:8f:88:e8:55:8b: ab:5c:21:6c:58:13:98:dc:02:ff:de:bc:e7:3e:c0: 54:d4:d3:2f:96:6c:97:78:60:51:79:80:a0:b8:0c: 1a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:0C:1D:3C:FD:AC:1B:63:1D:AB:65:CB:86:87:98:48:49:AA:0A:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/2121c5fd-7dae-3463-8bf4-b0288306ddb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:d7:2f:b2:7f:3d:f1:8b:5c:a9:f6:66:35:1d:c3:74:30:f7: 02:28:23:4a:53:81:0b:10:a2:69:00:66:98:a2:3d:4a:97:9c: a0:db:04:25:9a:7a:26:9a:37:08:71:b7:e2:09:e4:f5:2b:2d: b2:16:79:5e:f9:1c:58:0c:d3:0b:09:c0:97:a4:bc:96:2a:b8: 96:b6:ae:10:96:7f:f7:70:73:48:f6:ae:87:45:bb:a7:9c:15: 50:e9:0d:aa:66:e1:50:1e:eb:88:50:1a:c0:4a:c4:0b:2a:9f: 99:a7:51:09:0b:3c:ab:ed:f1:da:9b:14:bf:39:90:62:df:76: 01:15:32:6d:57:3d:ff:26:f7:77:01:d7:56:e9:5d:a4:03:32: e3:36:4d:b2:ee:ba:0b:26:52:ba:e1:b6:91:3c:ca:ba:15:cd: be:b8:81:05:2e:9a:f9:74:05:6f:64:59:13:ec:e8:fe:29:7c: bc:9c:bf:e6:03:5e:d0:1d:b9:6e:f0:a6:f6:e8:13:77:3b:7e: 2c:4e:0e:37:99:23:34:4e:44:4a:6d:ef:9c:73:90:7c:f8:b7: a7:0f:8e:b5:1c:d8:40:7d:b8:98:93:1a:af:38:f8:1e:5a:5d: 67:2d:1a:08:6d:0f:f7:61:79:4d:ba:e4:c2:4d:a0:31:15:97: 89:e1:8a:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz1h5ls0RxF4s8tcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDIyMzE0MDA0MVoXDTI2MDUyNDEzMDA0MVowLzEtMCsGA1UEAxMk NzNiYmQzZDctNTlkYS00ZDVhLThiYzktYWFjZGQ5M2IxMWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNJqjsaXH2bOBbia0/8Y8+T/ct9hcrYTYsHy 2hAlXXbcVwgpClQIxKzsACdoWL2iIPHe4nyFleRMrmNJrt/htTIaukX6myReu3mF Uw+v4J9sTBgd8s6Y0w23mAOztGhrOEUojjqwd0JFdFjkdx397XYovlnpSWBxeOYc sQumWKcDEE+lTHlesxqSTHoeWImgt/ZyYyCGk+tbBmfPqKtvGAUXxIlz5ybcFBpP /SK6vLtgXeVJNwzwsRG2VySPv4nU6SR+LS50mxl0Mkza9kBl3pLHMEYCE7J+vJZV j4joVYurXCFsWBOY3AL/3rznPsBU1NMvlmyXeGBReYCguAwadwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIMHTz9rBtjHatly4aHmEhJqgplMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMjEyMWM1ZmQtN2RhZS0z NDYzLThiZjQtYjAyODgzMDZkZGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4oiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETXL7J/PfGLXKn2ZjUdw3Qw9wIoI0pTgQsQomkAZpiiPUqXnKDbBCWa eiaaNwhxt+IJ5PUrLbIWeV75HFgM0wsJwJekvJYquJa2rhCWf/dwc0j2rodFu6ec FVDpDapm4VAe64hQGsBKxAsqn5mnUQkLPKvt8dqbFL85kGLfdgEVMm1XPf8m93cB 11bpXaQDMuM2TbLuugsmUrrhtpE8yroVzb64gQUumvl0BW9kWRPs6P4pfLycv+YD XtAduW7wpvboE3c7fixODjeZIzROREpt75xzkHz4t6cPjrUc2EB9uJiTGq84+B5a XWctGghtD/dheU265MJNoDEVl4nhihY= -----END CERTIFICATE-----Generated at Mon Mar 2 11:08:03 2026 by rpki-client