$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a8c4bf8c-ad80-35e8-a79e-c44440af7e1c.roa File: a8c4bf8c-ad80-35e8-a79e-c44440af7e1c.roa (raw, json) Hash identifier: iZwTD/zqKbd7xMT4hYaDDS0RJrs/6UbWXz41UtHAPcc= Subject key identifier: CF:34:BD:55:35:A1:2A:77:DB:84:56:97:1A:D9:BF:2D:61:CE:78:96 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584CF5879927678865C7A47B3A00 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a8c4bf8c-ad80-35e8-a79e-c44440af7e1c.roa Signing time: Mon 23 Feb 2026 14:00:41 +0000 ROA not before: Mon 23 Feb 2026 14:00:41 +0000 ROA not after: Sun 24 May 2026 13:00:41 +0000 asID: 16417 IP address blocks: 139.138.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f5:87:99:27:67:88:65:c7:a4:7b:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Feb 23 14:00:41 2026 GMT Not After : May 24 13:00:41 2026 GMT Subject: CN=2fd54857-3f71-4146-8876-b312b7ac66fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:10:14:86:69:cc:a3:0e:ed:be:77:ca:36:f1: 6d:6d:35:55:61:10:bf:cc:58:a1:83:96:49:7a:84: c8:4d:5d:41:ea:08:b8:90:fb:ca:df:12:62:d1:bc: b1:26:55:47:1c:5d:50:96:b2:35:3a:25:0c:7a:da: 14:bc:45:4a:04:12:13:d4:02:12:43:a2:9e:d6:1d: 32:b1:15:02:38:76:80:bf:99:2a:51:17:7f:00:07: 39:d9:11:b5:ce:5a:52:a8:f0:78:36:f7:28:e7:36: a1:3b:f6:53:ef:29:4c:d2:e1:27:70:6b:b4:0c:53: 8b:e9:9c:dc:8e:4d:15:6e:03:fe:8e:70:05:94:ce: 92:8e:b1:f0:f7:c5:4e:ac:5e:2e:17:db:a4:22:23: a0:2e:4a:fb:99:3c:08:81:25:16:83:bf:52:f0:f4: b2:5d:5d:bd:8e:b0:c9:8d:ba:2e:6b:47:e3:de:4f: 33:7a:7b:c0:58:01:a8:e2:0f:13:25:85:97:76:a4: 5a:76:0c:d0:41:f9:d3:f6:de:29:87:cf:37:d1:49: d9:98:6d:99:71:f5:39:87:63:1d:02:4c:46:ec:43: 47:5b:18:1c:0c:09:1f:35:2e:bd:19:fa:02:da:a0: 7b:ae:f3:4c:d1:67:f5:00:87:c3:f9:a3:f0:70:76: 07:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:34:BD:55:35:A1:2A:77:DB:84:56:97:1A:D9:BF:2D:61:CE:78:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a8c4bf8c-ad80-35e8-a79e-c44440af7e1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:ae:32:8a:0f:a1:4e:6f:17:90:9a:a3:bb:cb:c9:fd:98:e0: f4:54:4d:e1:5e:c0:9a:82:f5:9c:4b:2c:a7:a3:40:36:18:ed: 8c:d8:04:96:2a:43:1a:ce:f5:88:37:ba:47:a8:64:06:71:bb: fa:6a:b9:c6:6c:4f:b7:ed:8d:a6:6a:9f:f2:01:11:4e:71:07: d0:f7:a8:22:44:0f:28:56:03:76:34:d4:87:0d:2d:65:03:6d: e7:f9:30:bb:78:c1:d1:96:9d:86:2e:af:fa:26:af:29:15:22: b9:81:65:fb:17:83:14:ac:5c:28:52:09:95:65:c8:9a:70:6b: 52:25:f4:ad:f5:7a:07:12:41:66:0c:b7:9b:c5:dd:ef:34:f9: ff:b4:96:f0:45:43:20:c2:37:b2:c3:86:23:a1:03:c5:47:ef: 61:f8:c4:9f:98:32:da:7a:2b:bf:39:65:98:53:1b:d6:77:54: 8d:2a:6b:59:ee:f2:fe:52:5a:db:b5:66:eb:b7:59:c6:85:75: ad:f8:cb:89:61:17:f2:9c:5e:98:60:ee:14:73:e4:f8:ca:54: cd:7e:93:8d:fa:c3:4b:bd:d5:7f:65:58:1c:0b:41:d1:d7:f9: ca:2a:f8:90:19:4d:dd:9a:44:df:2e:95:93:0d:cd:a5:03:05: 7c:84:54:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz1h5knZ4hlx6R7OgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDIyMzE0MDA0MVoXDTI2MDUyNDEzMDA0MVowLzEtMCsGA1UEAxMk MmZkNTQ4NTctM2Y3MS00MTQ2LTg4NzYtYjMxMmI3YWM2NmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRAUhmnMow7tvnfKNvFtbTVVYRC/zFihg5ZJ eoTITV1B6gi4kPvK3xJi0byxJlVHHF1QlrI1OiUMetoUvEVKBBIT1AISQ6Ke1h0y sRUCOHaAv5kqURd/AAc52RG1zlpSqPB4Nvco5zahO/ZT7ylM0uEncGu0DFOL6Zzc jk0VbgP+jnAFlM6SjrHw98VOrF4uF9ukIiOgLkr7mTwIgSUWg79S8PSyXV29jrDJ jboua0fj3k8zenvAWAGo4g8TJYWXdqRadgzQQfnT9t4ph8830UnZmG2ZcfU5h2Md AkxG7ENHWxgcDAkfNS69GfoC2qB7rvNM0Wf1AIfD+aPwcHYHPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM80vVU1oSp324RWlxrZvy1hzniWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYThjNGJmOGMtYWQ4MC0z NWU4LWE3OWUtYzQ0NDQwYWY3ZTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4oaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByuMooPoU5vF5Cao7vLyf2Y4PRUTeFewJqC9ZxLLKejQDYY7YzYBJYq QxrO9Yg3ukeoZAZxu/pqucZsT7ftjaZqn/IBEU5xB9D3qCJEDyhWA3Y01IcNLWUD bef5MLt4wdGWnYYur/omrykVIrmBZfsXgxSsXChSCZVlyJpwa1Il9K31egcSQWYM t5vF3e80+f+0lvBFQyDCN7LDhiOhA8VH72H4xJ+YMtp6K785ZZhTG9Z3VI0qa1nu 8v5SWtu1Zuu3WcaFda34y4lhF/KcXphg7hRz5PjKVM1+k436w0u91X9lWBwLQdHX +coq+JAZTd2aRN8ulZMNzaUDBXyEVCg= -----END CERTIFICATE-----Generated at Mon Mar 2 11:08:16 2026 by rpki-client