$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a359d9aa-5083-325a-87e4-6b285a87ef43.roa File: a359d9aa-5083-325a-87e4-6b285a87ef43.roa (raw, json) Hash identifier: zJymwYLzEJZvMfWc1KvBwhud3y/MNxKQBBVx/POfOo8= Subject key identifier: 58:9A:4E:BA:E7:FA:20:80:79:80:41:A1:5C:EB:35:F1:FC:22:80:91 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584CCE71FF97A33BB71657D21480 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a359d9aa-5083-325a-87e4-6b285a87ef43.roa Signing time: Mon 09 Feb 2026 14:00:39 +0000 ROA not before: Mon 09 Feb 2026 14:00:39 +0000 ROA not after: Sun 10 May 2026 13:00:39 +0000 asID: 30215 IP address blocks: 139.138.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ce:71:ff:97:a3:3b:b7:16:57:d2:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Feb 9 14:00:39 2026 GMT Not After : May 10 13:00:39 2026 GMT Subject: CN=8751f67e-6753-4101-a5a2-c8a42984b165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:51:70:24:ee:78:11:c2:45:f7:89:a1:86:d2: 33:80:c6:82:ac:fb:23:c8:07:39:3d:42:9c:2f:e0: 71:3b:88:d5:a4:09:c4:f6:c9:3a:2c:18:c8:74:86: 3a:36:aa:a6:5c:b6:03:dc:95:3e:c4:44:4a:8e:2c: 4a:69:dc:0a:65:32:c2:ee:75:a2:8e:02:37:d8:1c: e5:5f:ab:cc:82:f4:e7:d7:57:e8:23:2e:63:44:86: 74:70:13:31:db:e1:e3:85:e2:82:25:27:bf:79:5f: 17:f0:3f:4a:da:d3:35:66:d8:01:f7:c9:c4:b0:1d: 00:23:f3:22:91:ba:32:1d:6b:50:5c:64:89:2c:80: c3:8f:9c:2c:96:0e:d4:cf:7b:4d:64:be:44:94:93: e3:2b:20:fb:95:aa:ba:5e:3a:36:1f:a0:66:c8:d0: 16:67:fd:82:5b:06:14:52:2c:74:41:b6:87:a5:56: 1a:e3:3c:6f:bc:8d:16:fa:9d:e3:54:dc:bc:2f:c7: ee:ca:d0:43:0e:65:60:7f:f2:e5:3a:90:7f:27:3c: 3b:37:81:1d:32:dc:97:1d:72:47:f4:66:aa:96:a7: b2:09:7c:eb:a2:22:b3:58:4e:49:8d:6b:dc:0b:96: 9a:a2:8a:ff:62:dc:a2:80:e8:b2:83:e0:c7:1d:43: 0d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:9A:4E:BA:E7:FA:20:80:79:80:41:A1:5C:EB:35:F1:FC:22:80:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a359d9aa-5083-325a-87e4-6b285a87ef43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:93:25:4e:25:31:58:1c:8e:68:cf:77:0d:03:34:a0:87:ef: ef:3e:65:1b:cc:fe:cf:7f:b7:cc:9a:b6:79:83:82:2b:d1:f0: d2:db:33:76:0a:b1:10:d1:24:a2:2c:88:30:b7:fb:64:65:4a: a7:8e:e8:60:6f:56:0c:9c:88:1a:63:34:16:18:db:1e:3f:76: d5:0b:53:ee:84:e0:88:30:ac:01:64:b1:38:d7:7f:b1:d4:2f: da:47:d9:d6:b9:44:0e:45:5a:79:b3:d1:b7:39:cf:87:5a:e6: 67:a4:3d:76:88:98:4b:bf:36:f6:5e:17:7a:a8:36:e9:ed:80: 3a:dc:62:a9:cf:f9:04:bf:74:6a:45:ac:a8:05:3a:a2:01:54: 83:2b:e4:09:69:22:51:bc:a1:1c:c4:d1:c4:0d:26:5c:eb:6e: 69:0c:4c:35:fe:99:44:2b:06:5c:0f:e6:1d:40:b5:f2:45:fd: 8a:80:61:3d:c9:76:47:a0:cf:8f:59:87:af:68:81:1f:58:00: 22:3e:3b:6b:bb:cf:e2:83:d4:e6:4f:6b:89:d7:7d:76:b3:bf: 8f:23:42:43:c7:e0:6c:aa:cd:b1:25:09:85:6d:e8:05:1f:75: c3:16:70:4b:0f:42:ec:44:3e:a5:6f:1f:e8:cd:8f:9b:51:24: 11:20:42:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzOcf+Xozu3FlfSFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDIwOTE0MDAzOVoXDTI2MDUxMDEzMDAzOVowLzEtMCsGA1UEAxMk ODc1MWY2N2UtNjc1My00MTAxLWE1YTItYzhhNDI5ODRiMTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VFwJO54EcJF94mhhtIzgMaCrPsjyAc5PUKc L+BxO4jVpAnE9sk6LBjIdIY6NqqmXLYD3JU+xERKjixKadwKZTLC7nWijgI32Bzl X6vMgvTn11foIy5jRIZ0cBMx2+HjheKCJSe/eV8X8D9K2tM1ZtgB98nEsB0AI/Mi kboyHWtQXGSJLIDDj5wslg7Uz3tNZL5ElJPjKyD7laq6Xjo2H6BmyNAWZ/2CWwYU Uix0QbaHpVYa4zxvvI0W+p3jVNy8L8fuytBDDmVgf/LlOpB/Jzw7N4EdMtyXHXJH 9GaqlqeyCXzroiKzWE5JjWvcC5aaoor/YtyigOiyg+DHHUMNZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFiaTrrn+iCAeYBBoVzrNfH8IoCRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYTM1OWQ5YWEtNTA4My0z MjVhLTg3ZTQtNmIyODVhODdlZjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4odMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGiTJU4lMVgcjmjPdw0DNKCH7+8+ZRvM/s9/t8yatnmDgivR8NLbM3YK sRDRJKIsiDC3+2RlSqeO6GBvVgyciBpjNBYY2x4/dtULU+6E4IgwrAFksTjXf7HU L9pH2da5RA5FWnmz0bc5z4da5mekPXaImEu/NvZeF3qoNuntgDrcYqnP+QS/dGpF rKgFOqIBVIMr5AlpIlG8oRzE0cQNJlzrbmkMTDX+mUQrBlwP5h1AtfJF/YqAYT3J dkegz49Zh69ogR9YACI+O2u7z+KD1OZPa4nXfXazv48jQkPH4GyqzbElCYVt6AUf dcMWcEsPQuxEPqVvH+jNj5tRJBEgQsQ= -----END CERTIFICATE-----Generated at Mon Mar 2 11:07:50 2026 by rpki-client