$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/840eebe7-dd14-3e7e-b8f3-fb4c5cdbcd3c.roa File: 840eebe7-dd14-3e7e-b8f3-fb4c5cdbcd3c.roa (raw, json) Hash identifier: an97KYQHCsgaCXbtfk6UjME0eqNFwEwntrzRT142wZE= Subject key identifier: 46:EF:E6:AC:C0:B1:5E:48:75:79:A7:D8:D1:97:A2:29:71:AC:A5:3C Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584CF5879917295E19AE58045900 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/840eebe7-dd14-3e7e-b8f3-fb4c5cdbcd3c.roa Signing time: Mon 23 Feb 2026 14:00:41 +0000 ROA not before: Mon 23 Feb 2026 14:00:41 +0000 ROA not after: Sun 24 May 2026 13:00:41 +0000 asID: 16417 IP address blocks: 139.138.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f5:87:99:17:29:5e:19:ae:58:04:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Feb 23 14:00:41 2026 GMT Not After : May 24 13:00:41 2026 GMT Subject: CN=b060a287-89b9-42a4-a416-a0b638ed4e5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2b:42:d8:28:b0:4e:05:a0:58:be:39:2e:a6: 69:08:bb:c1:4b:fa:1d:39:af:68:0f:bf:21:a7:f0: e4:65:31:b1:1c:7c:bf:af:cd:72:29:4d:6b:01:c5: 02:0d:e4:84:ac:65:ed:f2:ae:e1:a8:e8:4a:85:d1: c3:04:ff:20:07:4e:6a:5f:92:3d:28:b8:f2:e6:fa: 47:8a:ff:82:2f:64:74:47:3c:b8:87:a3:bc:ec:0e: 80:f2:61:7f:27:d2:36:2f:90:c8:eb:56:5e:85:14: 8a:2c:bc:12:cc:59:14:07:71:e7:e7:92:97:9a:af: 3b:fa:c9:5a:dc:6b:df:d0:2a:d1:34:f8:25:6d:e7: 5f:18:4c:dc:3e:b7:9d:d7:4a:db:37:a8:de:15:a9: 00:52:92:06:1d:f5:88:be:ea:1b:e9:64:0a:6d:8f: 0d:9b:81:e6:32:c5:9d:75:4c:34:b5:82:ac:3c:af: b6:81:37:7d:71:ea:d6:3d:2a:ea:bb:7a:75:4f:f0: 72:29:1f:55:39:7a:fb:ac:7a:b6:ff:cf:11:22:e3: 1b:d7:3f:b2:44:de:de:6c:3f:21:59:b2:13:97:cf: 05:b5:b2:fe:44:ad:f7:8c:ac:03:ae:6c:30:0a:71: b1:3a:82:74:b7:64:4d:cf:d1:ab:39:51:d9:ce:eb: 7e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:EF:E6:AC:C0:B1:5E:48:75:79:A7:D8:D1:97:A2:29:71:AC:A5:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/840eebe7-dd14-3e7e-b8f3-fb4c5cdbcd3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:4a:5c:40:84:1e:fe:f8:ff:b6:f1:bd:79:53:c4:86:fc:bd: 42:e4:82:3a:9a:2b:a2:9d:0a:1c:89:a3:1b:a0:bf:73:aa:a3: 8b:59:de:9b:92:ac:37:e7:0c:13:70:64:88:b7:66:c6:67:01: 42:1c:48:15:38:d9:91:49:57:8f:c0:ef:5b:19:99:7e:25:ac: d4:82:8f:52:a2:67:ce:3a:ef:73:3c:cc:ec:58:50:88:15:7a: 94:e3:96:88:65:38:36:e3:49:4c:a8:c8:c9:b0:e1:46:87:9e: 8c:e6:a6:52:60:f2:5c:ed:54:3c:5d:d3:45:9c:85:5a:04:17: d1:e3:09:a7:6b:c4:e1:7b:e9:d6:bb:1f:f9:51:67:2b:be:99: d1:29:6f:ad:69:bb:38:40:e1:d6:b0:60:4f:af:fc:f7:ba:a6: b2:2c:a2:5c:e3:0a:ec:78:ae:5d:f6:eb:a2:67:ae:6e:b1:48: f1:cf:92:c4:ad:25:ea:e7:78:e1:dc:52:bf:40:9e:7e:fb:37: 90:5c:b4:c9:0c:a2:49:29:02:70:87:ac:c8:d8:5e:69:39:3b: 80:dc:31:35:14:d7:b9:05:2f:24:50:02:f6:bc:cf:a0:3e:a6: b3:c5:19:ff:74:be:82:ca:bc:80:bf:3c:1e:60:29:5a:e4:61: f9:b3:d0:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz1h5kXKV4ZrlgEWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDIyMzE0MDA0MVoXDTI2MDUyNDEzMDA0MVowLzEtMCsGA1UEAxMk YjA2MGEyODctODliOS00MmE0LWE0MTYtYTBiNjM4ZWQ0ZTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjStC2CiwTgWgWL45LqZpCLvBS/odOa9oD78h p/DkZTGxHHy/r81yKU1rAcUCDeSErGXt8q7hqOhKhdHDBP8gB05qX5I9KLjy5vpH iv+CL2R0Rzy4h6O87A6A8mF/J9I2L5DI61ZehRSKLLwSzFkUB3Hn55KXmq87+sla 3Gvf0CrRNPglbedfGEzcPred10rbN6jeFakAUpIGHfWIvuob6WQKbY8Nm4HmMsWd dUw0tYKsPK+2gTd9cerWPSrqu3p1T/ByKR9VOXr7rHq2/88RIuMb1z+yRN7ebD8h WbITl88FtbL+RK33jKwDrmwwCnGxOoJ0t2RNz9GrOVHZzut+DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbv5qzAsV5IdXmn2NGXoilxrKU8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvODQwZWViZTctZGQxNC0z ZTdlLWI4ZjMtZmI0YzVjZGJjZDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4oZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZKXECEHv74/7bxvXlTxIb8vULkgjqaK6KdChyJoxugv3Oqo4tZ3puS rDfnDBNwZIi3ZsZnAUIcSBU42ZFJV4/A71sZmX4lrNSCj1KiZ84673M8zOxYUIgV epTjlohlODbjSUyoyMmw4UaHnozmplJg8lztVDxd00WchVoEF9HjCadrxOF76da7 H/lRZyu+mdEpb61puzhA4dawYE+v/Pe6prIsolzjCux4rl3266Jnrm6xSPHPksSt JerneOHcUr9Ann77N5BctMkMokkpAnCHrMjYXmk5O4DcMTUU17kFLyRQAva8z6A+ prPFGf90voLKvIC/PB5gKVrkYfmz0F4= -----END CERTIFICATE-----Generated at Mon Mar 2 11:06:59 2026 by rpki-client