$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/eaa31326-e796-34db-a9ec-0438e65daf94.roa File: eaa31326-e796-34db-a9ec-0438e65daf94.roa (raw, json) Hash identifier: UXsojFbjh7elUGGEQqK07XaMDIVAvx4lv1lpsjhj8eI= Subject key identifier: 23:00:78:3F:FB:9E:17:11:6D:E5:74:5A:4A:A9:D1:F0:E0:77:F3:5B Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584CCE71FFA6445036DB80833280 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/eaa31326-e796-34db-a9ec-0438e65daf94.roa Signing time: Mon 09 Feb 2026 14:00:39 +0000 ROA not before: Mon 09 Feb 2026 14:00:39 +0000 ROA not after: Sun 10 May 2026 13:00:39 +0000 asID: 30215 IP address blocks: 139.138.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ce:71:ff:a6:44:50:36:db:80:83:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Feb 9 14:00:39 2026 GMT Not After : May 10 13:00:39 2026 GMT Subject: CN=4d34eaba-bdf6-438a-9f48-575c52199140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e4:a4:6d:ac:23:8e:af:7b:9c:32:a1:7b:f1: 0b:b2:f8:89:2b:45:ae:be:70:52:d9:bb:0b:83:e4: 46:16:85:a5:41:11:3e:42:d1:02:5a:4a:7a:92:96: 85:8a:33:f4:24:48:92:4e:81:7e:a5:38:d5:a1:66: 32:8e:25:9b:6b:9c:8a:7b:3d:ce:51:30:d5:02:f1: 80:92:af:f4:de:43:d2:c0:5b:ac:ed:ea:75:cf:2b: 71:cb:a6:10:5d:04:72:c2:be:91:8c:f3:52:be:1d: ad:7a:9e:e9:d7:2c:fb:c9:4c:4e:b3:ff:7a:90:a2: 0f:99:7d:2b:02:28:48:0a:74:88:49:93:31:9e:f1: b3:c4:a4:b3:4b:91:18:97:84:a6:47:c6:7f:e7:6e: 8c:75:42:b2:de:b6:20:ff:de:c5:9d:5f:df:1d:20: c8:a8:9d:4b:5a:bd:80:db:24:68:6a:86:38:c7:96: 7c:97:88:9c:72:a3:5f:c4:a3:69:ec:d2:ee:84:1c: e5:44:e5:b2:52:ca:16:67:da:e7:23:72:dc:a0:fb: 44:91:56:00:c1:bb:64:2b:02:1c:4f:ce:c9:95:84: da:33:60:66:ef:25:b3:13:93:07:e8:e9:37:11:e5: f5:a1:e3:bc:f6:76:a8:ac:68:db:78:85:0d:93:36: 80:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:00:78:3F:FB:9E:17:11:6D:E5:74:5A:4A:A9:D1:F0:E0:77:F3:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/eaa31326-e796-34db-a9ec-0438e65daf94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:46:a6:ac:25:48:b6:3d:b6:dc:24:f6:4e:90:b4:54:ec:98: 86:60:9f:73:4f:48:5a:3a:0c:c0:f2:ec:1b:d7:b1:d1:57:11: 96:04:77:c2:e8:c4:76:c7:34:74:0b:29:b5:18:eb:6b:46:86: 6b:06:9f:a4:f4:af:be:dc:44:03:9c:08:58:65:48:25:64:9a: c5:02:5e:ce:ab:6b:db:2b:23:85:0f:6d:b2:fb:69:4d:dc:e3: 85:d2:47:31:47:b2:6a:63:0d:be:ab:61:38:db:61:a2:93:93: f8:cc:4e:17:5c:69:e3:11:e5:5d:a6:64:d6:15:33:78:2e:4b: e7:04:16:10:e4:e8:ac:b9:e6:3d:dc:6d:00:cb:3c:14:9b:98: 0e:5d:63:38:eb:e6:d8:52:4f:dc:99:c7:4b:44:d5:ea:2e:5e: 8f:24:f9:d9:50:03:3f:49:1b:69:31:f8:2e:5d:b0:0a:6b:bb: ce:2e:67:a4:4b:27:72:0e:0e:8f:48:b2:0a:4b:43:20:af:19: e6:69:bd:6d:a8:17:d9:69:4d:35:13:20:6c:03:61:c6:84:59: 0c:2e:1f:be:23:df:84:a9:3e:59:51:05:31:ec:ff:79:ad:f0: 91:df:22:ab:8e:27:c4:70:b4:61:96:f2:16:ad:8b:50:0d:40: 9f:4c:ed:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzOcf+mRFA224CDMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDIwOTE0MDAzOVoXDTI2MDUxMDEzMDAzOVowLzEtMCsGA1UEAxMk NGQzNGVhYmEtYmRmNi00MzhhLTlmNDgtNTc1YzUyMTk5MTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOSkbawjjq97nDKhe/ELsviJK0WuvnBS2bsL g+RGFoWlQRE+QtECWkp6kpaFijP0JEiSToF+pTjVoWYyjiWba5yKez3OUTDVAvGA kq/03kPSwFus7ep1zytxy6YQXQRywr6RjPNSvh2tep7p1yz7yUxOs/96kKIPmX0r AihICnSISZMxnvGzxKSzS5EYl4SmR8Z/526MdUKy3rYg/97FnV/fHSDIqJ1LWr2A 2yRoaoY4x5Z8l4iccqNfxKNp7NLuhBzlROWyUsoWZ9rnI3LcoPtEkVYAwbtkKwIc T87JlYTaM2Bm7yWzE5MH6Ok3EeX1oeO89naorGjbeIUNkzaA/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMAeD/7nhcRbeV0Wkqp0fDgd/NbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvZWFhMzEzMjYtZTc5Ni0z NGRiLWE5ZWMtMDQzOGU2NWRhZjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4oeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK1GpqwlSLY9ttwk9k6QtFTsmIZgn3NPSFo6DMDy7BvXsdFXEZYEd8Lo xHbHNHQLKbUY62tGhmsGn6T0r77cRAOcCFhlSCVkmsUCXs6ra9srI4UPbbL7aU3c 44XSRzFHsmpjDb6rYTjbYaKTk/jMThdcaeMR5V2mZNYVM3guS+cEFhDk6Ky55j3c bQDLPBSbmA5dYzjr5thST9yZx0tE1eouXo8k+dlQAz9JG2kx+C5dsApru84uZ6RL J3IODo9IsgpLQyCvGeZpvW2oF9lpTTUTIGwDYcaEWQwuH74j34SpPllRBTHs/3mt 8JHfIquOJ8RwtGGW8hati1ANQJ9M7Ys= -----END CERTIFICATE-----Generated at Mon Mar 2 11:06:26 2026 by rpki-client