$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/147c0bf2-220f-3c91-9257-37befeaa7a3e.roa File: 147c0bf2-220f-3c91-9257-37befeaa7a3e.roa (raw, json) Hash identifier: q/O3YUUw5xboKeBreCaYw+ZlDPo056SOZcHFufSt0pI= Subject key identifier: 20:88:22:DC:BA:0F:B7:DF:92:C9:29:19:60:2C:F1:7A:40:99:63:CE Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584D44FA48377FF52B23A9289580 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/147c0bf2-220f-3c91-9257-37befeaa7a3e.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 16417 IP address blocks: 139.138.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:48:37:7f:f5:2b:23:a9:28:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=88342c8a-db66-451a-9ee8-472053f8e05a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:01:90:5d:23:bd:df:d3:64:3a:47:e5:b9:d5: c3:13:a7:bc:9b:15:4a:33:70:97:2e:ce:e9:30:77: 90:12:40:9d:bd:a1:8c:8c:55:ca:00:53:70:9f:4f: 15:67:1b:2b:be:c5:53:0a:aa:a8:42:ff:13:3f:f4: 17:d6:57:3c:43:8b:f4:59:48:be:eb:db:76:1d:17: 88:fe:56:11:08:59:de:8b:8c:da:10:3b:b1:7c:dc: 78:ee:00:2e:1b:e6:1d:91:a7:17:1a:24:de:21:b5: 04:3b:8a:e5:41:6b:e9:29:d6:c9:4a:18:4f:39:9b: f8:55:1e:91:7c:f5:57:85:44:c3:89:6c:2e:2c:85: 15:ff:53:2a:7e:aa:2a:9e:39:24:5b:c9:95:9e:b8: c8:9a:a6:4d:cc:5c:66:0f:28:c8:fb:60:34:a2:65: 85:66:eb:ef:9e:50:41:d4:d9:39:12:48:20:ea:db: bf:28:8a:45:8a:6f:77:78:ef:30:32:eb:46:80:41: 7a:c5:98:f2:07:dd:22:27:94:7b:33:7e:e2:a5:07: fd:7a:9c:5c:87:63:a5:ca:81:7d:89:c0:ba:58:5c: 2b:67:43:63:75:bc:ac:48:d0:a9:2a:09:d2:60:ff: 9a:d4:e9:1a:a7:0d:c5:02:f0:56:a9:c7:1c:82:73: 35:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:88:22:DC:BA:0F:B7:DF:92:C9:29:19:60:2C:F1:7A:40:99:63:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/147c0bf2-220f-3c91-9257-37befeaa7a3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:2f:ea:9a:ab:23:5d:d6:4d:58:33:b5:0a:38:60:f1:91:f5: db:ae:ce:b4:af:63:f7:d8:07:70:22:61:52:9a:33:4c:4b:4e: 45:c4:4f:d2:fa:4a:e3:13:19:7a:2b:30:c8:57:fb:27:e2:8c: 5c:0a:be:82:6e:dd:16:af:d1:3c:17:f5:70:89:b6:fe:1c:18: fc:12:9a:f5:e8:eb:9e:60:aa:b1:be:a8:be:f8:fe:c0:81:8a: 8f:d5:d7:13:fc:40:7e:23:fe:6e:36:cd:1e:ae:0a:5a:1b:4c: 43:b5:61:60:ca:e7:fe:c9:8f:c2:b8:59:a7:a5:2b:f4:cd:4b: 9b:6c:1d:9b:47:c9:d3:44:48:e7:b4:13:31:da:08:e9:4d:b3: 06:63:db:fe:07:6c:ec:2f:89:b7:bf:54:08:67:59:11:09:7b: 5e:f6:be:0f:df:01:50:93:5d:d6:63:16:53:73:84:a1:51:00: 86:1d:0d:4c:d3:c8:b7:38:f3:e3:d7:35:da:6e:6f:1e:a8:52: 1a:f3:cc:a4:34:ff:9e:5d:ac:3b:8b:23:af:ba:9c:2e:b1:55: f7:d8:c3:ce:77:da:44:3c:d6:f4:29:07:aa:6c:02:38:fd:1b: 86:67:86:96:0d:a4:b2:64:b0:ad:ea:8f:27:7e:99:7b:54:c7: 3a:f4:05:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+kg3f/UrI6kolYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk ODgzNDJjOGEtZGI2Ni00NTFhLTllZTgtNDcyMDUzZjhlMDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgGQXSO939NkOkfludXDE6e8mxVKM3CXLs7p MHeQEkCdvaGMjFXKAFNwn08VZxsrvsVTCqqoQv8TP/QX1lc8Q4v0WUi+69t2HReI /lYRCFnei4zaEDuxfNx47gAuG+YdkacXGiTeIbUEO4rlQWvpKdbJShhPOZv4VR6R fPVXhUTDiWwuLIUV/1MqfqoqnjkkW8mVnrjImqZNzFxmDyjI+2A0omWFZuvvnlBB 1Nk5Ekgg6tu/KIpFim93eO8wMutGgEF6xZjyB90iJ5R7M37ipQf9epxch2OlyoF9 icC6WFwrZ0NjdbysSNCpKgnSYP+a1Okapw3FAvBWqcccgnM1TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCIIty6D7ffkskpGWAs8XpAmWPOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMTQ3YzBiZjItMjIwZi0z YzkxLTkyNTctMzdiZWZlYWE3YTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4oYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJsv6pqrI13WTVgztQo4YPGR9duuzrSvY/fYB3AiYVKaM0xLTkXET9L6 SuMTGXorMMhX+yfijFwKvoJu3Rav0TwX9XCJtv4cGPwSmvXo655gqrG+qL74/sCB io/V1xP8QH4j/m42zR6uClobTEO1YWDK5/7Jj8K4WaelK/TNS5tsHZtHydNESOe0 EzHaCOlNswZj2/4HbOwvibe/VAhnWREJe172vg/fAVCTXdZjFlNzhKFRAIYdDUzT yLc48+PXNdpubx6oUhrzzKQ0/55drDuLI6+6nC6xVffYw8532kQ81vQpB6psAjj9 G4ZnhpYNpLJksK3qjyd+mXtUxzr0Bfc= -----END CERTIFICATE-----Generated at Thu Mar 26 23:50:02 2026 by rpki-client