$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/2bfa8a10-f913-38c6-b375-b9fc58571530.roa File: 2bfa8a10-f913-38c6-b375-b9fc58571530.roa (raw, json) Hash identifier: uzklp5Ve/liMsShzv55QQQDQIGKz6ccp3zkkpwcRAkw= Subject key identifier: 1F:D9:BD:1F:BD:59:0E:CD:B4:17:90:35:65:BC:B6:09:B8:79:92:0C Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584F348276B7544E4F69DBE9A400 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/2bfa8a10-f913-38c6-b375-b9fc58571530.roa Signing time: Thu 17 Sep 2026 13:00:12 +0000 ROA not before: Thu 17 Sep 2026 13:00:12 +0000 ROA not after: Wed 16 Dec 2026 14:00:12 +0000 asID: 30215 IP address blocks: 139.138.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:34:82:76:b7:54:4e:4f:69:db:e9:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 17 13:00:12 2026 GMT Not After : Dec 16 14:00:12 2026 GMT Subject: CN=a7764d48-3bdf-4844-bd2b-7c7963bec6c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:af:59:fb:36:7e:d9:84:e3:24:05:be:6e:0b: 44:21:87:df:92:65:42:01:60:3d:40:f2:d1:79:fc: 52:95:a6:ec:e8:60:be:43:e8:0c:ad:4c:31:22:d5: e0:e0:55:1c:80:e6:c1:d7:b8:29:80:84:66:24:91: fc:1d:0e:4f:16:70:84:74:8d:5a:3d:b8:14:e3:39: 09:7c:89:6c:7c:18:8f:f6:76:79:04:43:bb:80:d5: a5:c5:fc:a2:b5:be:ec:70:ce:9a:da:2b:2a:e7:47: 02:ca:25:4d:37:c8:e6:6e:ff:58:56:4b:9e:30:6e: 3a:a7:61:14:bf:a3:c3:db:70:5d:d1:50:1b:df:9f: 84:87:54:d1:ad:95:dc:e8:0e:27:57:c2:39:b2:15: c5:23:44:9d:cf:25:b4:9e:d4:09:0c:6d:7e:09:5a: a2:80:2f:5d:e2:81:ce:d0:63:5d:19:64:20:8c:52: 7f:92:c5:5c:56:62:a8:10:49:a1:62:20:c7:fb:cb: dc:ab:a0:84:29:9e:2e:9e:1f:bd:b0:e8:cd:4a:ee: 75:d9:81:4b:6f:25:ae:84:2a:84:58:9e:74:a2:c6: 46:45:bd:29:64:1a:ef:5c:95:65:33:e6:e5:d2:63: 91:93:22:1d:25:4d:3b:81:3f:11:90:54:29:9a:ed: f6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D9:BD:1F:BD:59:0E:CD:B4:17:90:35:65:BC:B6:09:B8:79:92:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/2bfa8a10-f913-38c6-b375-b9fc58571530.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:ec:19:69:2b:4e:4c:4b:49:43:9b:35:7f:13:36:08:8b:96: d8:9f:c6:8c:fa:45:cf:dd:dc:4c:e3:91:05:f7:f0:4b:76:0c: ba:88:45:2b:25:68:79:a6:30:35:d9:37:61:55:4e:49:86:0e: 88:51:0a:9d:af:3f:e9:5f:d4:ab:97:56:db:b8:ad:fe:da:3d: 4e:26:cc:6f:d7:64:5d:30:84:e3:cb:b6:e3:1c:8d:88:2d:d1: fa:9b:39:12:39:ee:ea:fe:fc:55:f0:b3:a6:d4:f6:46:47:d9: a6:10:e4:0d:49:f7:4e:a3:c9:0e:29:fe:43:0f:d3:18:71:9a: 94:86:c3:6b:1e:89:b9:d2:75:69:cc:bc:e4:d2:c9:5f:e9:e1: 6e:5a:25:03:a0:7e:67:cd:25:29:2f:12:77:32:49:cc:09:39: 76:4d:c7:7f:48:78:29:59:db:32:15:29:89:1c:d5:e0:9a:1d: c0:20:f8:4e:c9:f2:a3:12:db:82:c9:7a:dc:63:ed:82:fc:c1: 6b:7e:c8:1f:26:ba:25:6c:62:b4:a9:2a:81:ee:fc:96:87:02: 15:11:fd:45:05:d0:c4:e8:d8:ca:c7:f7:f9:33:68:2d:c8:3e: d3:8f:7b:1a:94:17:e0:cd:82:4d:82:a3:e5:83:6e:16:40:36: 3d:82:0d:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE80gna3VE5PadvppAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDkxNzEzMDAxMloXDTI2MTIxNjE0MDAxMlowLzEtMCsGA1UEAxMk YTc3NjRkNDgtM2JkZi00ODQ0LWJkMmItN2M3OTYzYmVjNmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxa9Z+zZ+2YTjJAW+bgtEIYffkmVCAWA9QPLR efxSlabs6GC+Q+gMrUwxItXg4FUcgObB17gpgIRmJJH8HQ5PFnCEdI1aPbgU4zkJ fIlsfBiP9nZ5BEO7gNWlxfyitb7scM6a2isq50cCyiVNN8jmbv9YVkueMG46p2EU v6PD23Bd0VAb35+Eh1TRrZXc6A4nV8I5shXFI0SdzyW0ntQJDG1+CVqigC9d4oHO 0GNdGWQgjFJ/ksVcVmKoEEmhYiDH+8vcq6CEKZ4unh+9sOjNSu512YFLbyWuhCqE WJ50osZGRb0pZBrvXJVlM+bl0mORkyIdJU07gT8RkFQpmu32BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/ZvR+9WQ7NtBeQNWW8tgm4eZIMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMmJmYThhMTAtZjkxMy0z OGM2LWIzNzUtYjlmYzU4NTcxNTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4osMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXsGWkrTkxLSUObNX8TNgiLltifxoz6Rc/d3EzjkQX38Et2DLqIRSsl aHmmMDXZN2FVTkmGDohRCp2vP+lf1KuXVtu4rf7aPU4mzG/XZF0whOPLtuMcjYgt 0fqbORI57ur+/FXws6bU9kZH2aYQ5A1J906jyQ4p/kMP0xhxmpSGw2seibnSdWnM vOTSyV/p4W5aJQOgfmfNJSkvEncyScwJOXZNx39IeClZ2zIVKYkc1eCaHcAg+E7J 8qMS24LJetxj7YL8wWt+yB8muiVsYrSpKoHu/JaHAhUR/UUF0MTo2MrH9/kzaC3I PtOPexqUF+DNgk2Co+WDbhZANj2CDbA= -----END CERTIFICATE-----Generated at Sat Oct 10 15:43:55 2026 by rpki-client