$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/32a203ee-55ea-3425-bf43-24b1958aa53b.roa File: 32a203ee-55ea-3425-bf43-24b1958aa53b.roa (raw, json) Hash identifier: LBvS19q+pE/pC0wEHkIxXFdW/sjn4vo3Ad6SiALqByM= Subject key identifier: 1A:15:3E:3C:F2:0E:62:CC:C5:CA:7F:17:93:DF:C6:5F:BB:1C:04:7A Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584D8EF580B282CFA9965A7DF4F8 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/32a203ee-55ea-3425-bf43-24b1958aa53b.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 30238 IP address blocks: 139.138.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:80:b2:82:cf:a9:96:5a:7d:f4:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=2d9336a1-c7f0-416a-a365-6aba8d4e5c3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0b:84:9c:38:91:7b:91:45:a9:c1:11:95:ab: 0c:82:50:a6:6b:cc:3c:f6:d2:6a:09:a5:a9:44:40: 8a:ba:51:b0:6a:5e:4f:76:3d:4c:23:b8:69:6f:75: 8d:76:77:e9:88:27:48:9e:15:e5:56:24:2e:87:de: da:84:55:42:17:5f:5a:47:10:3d:9f:2a:0e:f5:22: 7f:b2:35:63:e7:39:fa:29:01:89:0a:43:44:f5:5d: 5b:fd:cb:53:0a:b1:d0:70:ca:9d:fb:8e:7f:e1:49: 57:10:a2:fb:9b:46:7c:d9:61:52:7e:88:22:cd:38: d5:ca:78:94:9d:8f:30:85:61:dd:6a:b6:53:a1:8f: 7a:a1:f2:73:f0:b8:e3:85:c1:7f:a8:68:a2:93:8c: e6:85:a3:e9:e5:63:15:d1:10:0a:c4:78:e4:82:e5: d1:e8:4c:2d:57:02:51:0a:26:6d:06:ad:d9:10:0b: 07:bc:62:b8:6c:b9:5c:f1:57:4a:bc:58:36:f7:27: a5:4d:56:e0:80:cf:82:53:06:7f:ae:ff:45:40:b1: 87:e4:e8:e9:33:59:24:88:5e:a2:eb:76:12:60:09: a8:ed:2a:fe:d1:2c:5a:e7:87:61:2a:9c:99:d7:5e: 20:92:8c:db:3a:b6:a5:b7:6d:d8:d8:a0:52:83:86: 08:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:15:3E:3C:F2:0E:62:CC:C5:CA:7F:17:93:DF:C6:5F:BB:1C:04:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/32a203ee-55ea-3425-bf43-24b1958aa53b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:9e:ba:08:59:35:22:3c:f8:8d:f3:e2:81:cc:ab:21:bf:e3: 2e:b4:09:d1:d8:a2:cf:85:ce:52:60:54:93:5e:68:d0:81:65: 40:82:63:e1:f5:e8:ef:bf:c3:56:54:c0:6c:ae:5c:19:fc:ee: 31:79:b9:9f:e1:d4:84:d2:61:14:50:c8:e8:56:27:43:f3:cf: 67:00:01:37:ab:b6:5c:ba:6b:cd:9a:00:5d:7b:46:80:3e:a5: c9:cf:79:48:04:4a:5c:ca:f7:88:b8:8c:39:0f:4f:29:00:96: 9c:a6:97:ac:ea:f1:47:45:d6:6a:26:10:88:0f:86:bb:9f:f6: 1f:c3:35:60:49:63:1c:48:68:62:a2:13:20:83:3a:af:9f:db: aa:b2:f4:93:6c:f8:87:68:23:25:71:c4:6a:00:9c:bc:2e:6a: 1f:8c:60:12:7c:e2:35:ed:aa:2a:4c:29:9b:be:b6:07:6a:21: 5c:59:5e:ff:5e:f5:dc:b1:29:5a:3d:0d:f2:5c:5e:53:09:9f: a0:7f:e0:bc:2c:8f:02:9e:a5:d0:60:d9:c2:7f:e9:d5:00:c9: e8:c5:4d:b1:e0:53:da:c9:ac:c0:3c:37:c6:5b:21:11:4f:1a: 04:44:3b:b6:6b:c0:aa:2d:d0:1e:9c:aa:4d:84:20:ac:62:d7: 2b:12:e9:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9YCygs+pllp99PgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MmQ5MzM2YTEtYzdmMC00MTZhLWEzNjUtNmFiYThkNGU1YzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAuEnDiRe5FFqcERlasMglCma8w89tJqCaWp RECKulGwal5Pdj1MI7hpb3WNdnfpiCdInhXlViQuh97ahFVCF19aRxA9nyoO9SJ/ sjVj5zn6KQGJCkNE9V1b/ctTCrHQcMqd+45/4UlXEKL7m0Z82WFSfogizTjVyniU nY8whWHdarZToY96ofJz8LjjhcF/qGiik4zmhaPp5WMV0RAKxHjkguXR6EwtVwJR CiZtBq3ZEAsHvGK4bLlc8VdKvFg29yelTVbggM+CUwZ/rv9FQLGH5OjpM1kkiF6i 63YSYAmo7Sr+0Sxa54dhKpyZ114gkozbOralt23Y2KBSg4YIbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBoVPjzyDmLMxcp/F5Pfxl+7HAR6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMzJhMjAzZWUtNTVlYS0z NDI1LWJmNDMtMjRiMTk1OGFhNTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4o/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmeughZNSI8+I3z4oHMqyG/4y60CdHYos+FzlJgVJNeaNCBZUCCY+H1 6O+/w1ZUwGyuXBn87jF5uZ/h1ITSYRRQyOhWJ0Pzz2cAATertly6a82aAF17RoA+ pcnPeUgESlzK94i4jDkPTykAlpyml6zq8UdF1momEIgPhruf9h/DNWBJYxxIaGKi EyCDOq+f26qy9JNs+IdoIyVxxGoAnLwuah+MYBJ84jXtqipMKZu+tgdqIVxZXv9e 9dyxKVo9DfJcXlMJn6B/4LwsjwKepdBg2cJ/6dUAyejFTbHgU9rJrMA8N8ZbIRFP GgREO7ZrwKot0B6cqk2EIKxi1ysS6SA= -----END CERTIFICATE-----Generated at Wed May 13 12:37:23 2026 by rpki-client