$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/28195898-3fff-3e7e-8cc9-3aec6de0de9e.roa File: 28195898-3fff-3e7e-8cc9-3aec6de0de9e.roa (raw, json) Hash identifier: 6BdfpgwAyZNWt5FbmUGGD5UT7eUtX6CKkQV3OGn42cY= Subject key identifier: 5C:15:C1:F4:51:2D:45:46:B6:8D:C8:4D:E2:D1:C7:9B:EF:73:11:D5 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584D44FA480DC3B270B8FB82EF80 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/28195898-3fff-3e7e-8cc9-3aec6de0de9e.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 16417 IP address blocks: 139.138.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:48:0d:c3:b2:70:b8:fb:82:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=5c50b237-c90e-4f4a-b101-338bd0cb849c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0e:ef:8f:57:ad:04:12:10:a3:10:45:6f:da: e7:a9:8c:6d:ca:6e:de:84:63:16:d5:46:38:37:63: 02:c8:b9:f0:6f:ca:84:ef:96:bc:ff:92:1b:ef:ae: 02:fa:b2:3e:02:f9:52:23:48:1c:63:24:2b:60:f1: dc:b3:88:3a:2c:89:2f:68:5e:95:8f:28:62:a6:28: e4:5c:03:cb:55:d1:a8:a5:12:7e:6b:a8:a1:2c:cf: 18:09:ce:e6:83:c6:f0:d7:58:b2:1e:2d:dd:7c:45: 2c:74:78:4d:b1:4a:1e:02:62:06:af:0b:e7:2a:04: 84:96:43:0f:d9:9b:cd:43:ab:ee:4e:0f:09:38:22: c2:2e:a6:1c:62:ee:62:62:c2:4a:af:00:b6:09:c2: 8f:a6:4a:d4:a9:1b:18:5b:d5:fb:6b:4d:87:7b:28: e6:5e:ee:c2:82:4e:70:d8:a8:32:49:ee:c7:92:f7: 48:60:7e:be:4e:d5:90:63:0e:f9:61:16:1e:25:a6: ae:e2:44:79:25:82:49:e2:69:04:0e:ba:2a:a6:1c: c3:27:d8:c0:b1:47:f1:d9:a1:b0:ba:c0:1f:19:83: d8:7c:c4:47:43:29:96:90:1e:73:3b:c2:e1:d2:c1: 61:d4:2f:39:11:20:55:18:64:dc:85:a6:d5:ef:72: 4f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:15:C1:F4:51:2D:45:46:B6:8D:C8:4D:E2:D1:C7:9B:EF:73:11:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/28195898-3fff-3e7e-8cc9-3aec6de0de9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:85:a6:9a:1e:60:24:c8:41:ab:ca:53:06:71:ce:5e:6c:a7: a4:41:a6:81:eb:c7:69:24:1c:f6:54:a3:9b:23:45:93:1c:01: 1d:ec:89:65:7b:7c:5f:4c:94:c9:35:52:88:c2:21:8e:1b:d7: 53:b5:41:ad:f5:4b:53:2c:4f:7f:ea:d5:a0:95:f0:66:36:5c: 03:0c:ce:e1:b5:ec:2c:dd:41:49:1a:60:e8:ec:c4:fd:0c:a6: 2f:b1:09:cb:25:d6:56:06:7d:1f:39:d5:38:ce:57:e0:92:5d: db:fa:8b:b2:c9:da:d3:f9:fa:d5:99:d8:33:68:79:46:dd:f7: 0f:fb:e0:16:f9:cc:7d:24:2e:55:6e:22:c0:78:78:1e:96:bc: 47:8f:8f:01:4c:8b:e3:56:a3:cd:45:86:98:24:d1:fb:27:09: c9:4c:da:88:25:da:8a:27:c4:10:e6:2c:dd:29:68:4d:85:cd: 59:d2:35:b2:ee:13:e9:7a:4a:40:e7:38:17:15:60:4f:90:4c: 6c:62:b7:d2:18:37:84:94:68:d3:f9:85:f2:30:bf:23:40:08: 59:e2:a1:64:5f:cd:95:93:d9:af:2e:dd:00:fc:c9:79:4e:bb: 5b:89:5f:ed:ae:c2:52:02:2d:0c:6f:72:27:7e:c2:40:93:8a: ae:0e:47:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+kgNw7JwuPuC74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk NWM1MGIyMzctYzkwZS00ZjRhLWIxMDEtMzM4YmQwY2I4NDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ7vj1etBBIQoxBFb9rnqYxtym7ehGMW1UY4 N2MCyLnwb8qE75a8/5Ib764C+rI+AvlSI0gcYyQrYPHcs4g6LIkvaF6Vjyhipijk XAPLVdGopRJ+a6ihLM8YCc7mg8bw11iyHi3dfEUsdHhNsUoeAmIGrwvnKgSElkMP 2ZvNQ6vuTg8JOCLCLqYcYu5iYsJKrwC2CcKPpkrUqRsYW9X7a02HeyjmXu7Cgk5w 2KgySe7HkvdIYH6+TtWQYw75YRYeJaau4kR5JYJJ4mkEDroqphzDJ9jAsUfx2aGw usAfGYPYfMRHQymWkB5zO8Lh0sFh1C85ESBVGGTchabV73JPsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwVwfRRLUVGto3ITeLRx5vvcxHVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMjgxOTU4OTgtM2ZmZi0z ZTdlLThjYzktM2FlYzZkZTBkZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4o6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKuFppoeYCTIQavKUwZxzl5sp6RBpoHrx2kkHPZUo5sjRZMcAR3siWV7 fF9MlMk1UojCIY4b11O1Qa31S1MsT3/q1aCV8GY2XAMMzuG17CzdQUkaYOjsxP0M pi+xCcsl1lYGfR851TjOV+CSXdv6i7LJ2tP5+tWZ2DNoeUbd9w/74Bb5zH0kLlVu IsB4eB6WvEePjwFMi+NWo81Fhpgk0fsnCclM2ogl2oonxBDmLN0paE2FzVnSNbLu E+l6SkDnOBcVYE+QTGxit9IYN4SUaNP5hfIwvyNACFnioWRfzZWT2a8u3QD8yXlO u1uJX+2uwlICLQxvcid+wkCTiq4OR54= -----END CERTIFICATE-----Generated at Thu Mar 26 21:00:13 2026 by rpki-client