$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/59eddd7c-657a-3cc0-85bf-3c152be6b72a.roa File: 59eddd7c-657a-3cc0-85bf-3c152be6b72a.roa (raw, json) Hash identifier: kr0fOvDcYLe5nDgXQqMKG42DiwaWB1eAbbH8IurgVyY= Subject key identifier: E2:56:4C:CE:AA:2A:F8:61:91:D5:5F:05:4C:43:94:0F:73:94:87:88 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584CF587994D6155FED1B9C28000 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/59eddd7c-657a-3cc0-85bf-3c152be6b72a.roa Signing time: Mon 23 Feb 2026 14:00:41 +0000 ROA not before: Mon 23 Feb 2026 14:00:41 +0000 ROA not after: Sun 24 May 2026 13:00:41 +0000 asID: 16417 IP address blocks: 139.138.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f5:87:99:4d:61:55:fe:d1:b9:c2:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Feb 23 14:00:41 2026 GMT Not After : May 24 13:00:41 2026 GMT Subject: CN=eac937cf-e714-4a7b-b45e-5a706a01c448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:03:cb:c9:bf:fc:4a:6e:91:96:94:63:75:88: b0:84:18:27:ea:4e:f8:33:cf:83:db:fc:d8:d0:f0: 8b:a5:3e:02:72:e7:d0:54:49:7a:9b:b6:1b:66:e8: a3:72:43:8d:12:1a:73:23:57:05:22:75:f7:3e:60: f8:2b:9c:a1:fd:63:09:1b:0d:b0:02:ab:a9:6d:3c: 20:e9:d2:34:ca:5c:9f:d9:e5:1d:22:82:c0:70:04: 32:4a:8b:07:b8:e1:11:7a:99:ec:9b:38:3e:13:10: e5:93:c5:34:4a:eb:b8:00:ec:57:c6:2b:24:25:c3: 73:e9:84:44:18:ae:6e:14:e7:d2:04:b5:b3:74:2f: 07:29:90:57:22:b6:d0:ab:7f:47:b9:78:43:71:3e: 30:6d:7f:be:71:cc:38:e0:69:c7:a4:c4:58:e4:56: 7a:ae:0f:75:ab:e7:9a:d6:1c:23:00:e3:c4:6c:9b: ce:92:aa:70:7f:51:84:9b:30:f4:8a:08:0f:21:22: a5:1f:86:0b:dc:49:23:f2:2a:0c:85:b4:49:05:8f: 07:5f:20:8f:06:f7:67:8e:26:5c:e1:05:3c:60:02: e3:d2:11:e3:bd:da:8f:57:ba:26:ce:78:ea:5b:29: a0:db:57:19:4f:8a:7c:4f:a7:f8:ac:0e:bb:a8:b5: d5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:56:4C:CE:AA:2A:F8:61:91:D5:5F:05:4C:43:94:0F:73:94:87:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/59eddd7c-657a-3cc0-85bf-3c152be6b72a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:a3:4c:8b:6b:a7:22:89:cb:9b:3a:b8:84:10:d6:a4:4f:51: c5:a1:db:c3:c7:96:ef:22:74:6c:d3:aa:62:d5:cd:7f:1f:9d: dd:a0:82:bc:3a:19:f8:94:3a:f6:60:c7:77:a8:a3:7b:e1:9d: 89:f0:63:68:06:2b:5f:8a:ee:28:c3:3f:a3:1e:2f:42:91:4c: 5d:d9:aa:7f:49:53:1b:47:cc:74:92:17:d0:29:65:16:ef:3d: 04:4f:7a:77:c7:a2:85:98:35:f9:b6:2b:e0:1e:fd:ef:6d:32: 03:2f:11:ab:4e:91:9a:fa:48:07:59:b6:f9:b1:1b:e0:2d:ab: fe:88:23:f3:75:d8:60:17:bf:76:aa:95:34:93:d3:6f:5b:e9: a7:e0:3e:b4:73:c4:ab:af:35:3a:19:e0:35:5c:26:cb:85:f8: ff:5e:10:d1:9d:b6:f3:53:6e:af:a8:73:f2:4f:8a:64:3c:2b: 62:56:67:24:ce:b5:2c:36:17:5a:df:c3:08:81:78:74:3e:73: 57:a4:38:10:c3:a3:e2:1c:85:f1:4b:e3:66:f8:b5:02:4a:6a: 12:74:de:05:57:e1:e1:e5:79:dd:28:1e:fe:b2:1c:7c:41:b0: 3b:8f:18:c3:52:22:a6:dd:4e:81:ab:70:7f:a7:43:60:65:70: 49:ba:2f:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz1h5lNYVX+0bnCgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDIyMzE0MDA0MVoXDTI2MDUyNDEzMDA0MVowLzEtMCsGA1UEAxMk ZWFjOTM3Y2YtZTcxNC00YTdiLWI0NWUtNWE3MDZhMDFjNDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQPLyb/8Sm6RlpRjdYiwhBgn6k74M8+D2/zY 0PCLpT4CcufQVEl6m7YbZuijckONEhpzI1cFInX3PmD4K5yh/WMJGw2wAqupbTwg 6dI0ylyf2eUdIoLAcAQySosHuOERepnsmzg+ExDlk8U0Suu4AOxXxiskJcNz6YRE GK5uFOfSBLWzdC8HKZBXIrbQq39HuXhDcT4wbX++ccw44GnHpMRY5FZ6rg91q+ea 1hwjAOPEbJvOkqpwf1GEmzD0iggPISKlH4YL3Ekj8ioMhbRJBY8HXyCPBvdnjiZc 4QU8YALj0hHjvdqPV7omznjqWymg21cZT4p8T6f4rA67qLXVZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJWTM6qKvhhkdVfBUxDlA9zlIeIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvNTllZGRkN2MtNjU3YS0z Y2MwLTg1YmYtM2MxNTJiZTZiNzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4ogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECjTItrpyKJy5s6uIQQ1qRPUcWh28PHlu8idGzTqmLVzX8fnd2ggrw6 GfiUOvZgx3eoo3vhnYnwY2gGK1+K7ijDP6MeL0KRTF3Zqn9JUxtHzHSSF9ApZRbv PQRPenfHooWYNfm2K+Ae/e9tMgMvEatOkZr6SAdZtvmxG+Atq/6II/N12GAXv3aq lTST029b6afgPrRzxKuvNToZ4DVcJsuF+P9eENGdtvNTbq+oc/JPimQ8K2JWZyTO tSw2F1rfwwiBeHQ+c1ekOBDDo+IchfFL42b4tQJKahJ03gVX4eHled0oHv6yHHxB sDuPGMNSIqbdToGrcH+nQ2BlcEm6LwQ= -----END CERTIFICATE-----Generated at Mon Mar 2 11:08:23 2026 by rpki-client