$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/349277bf-1117-3421-ab89-a481dd456f55.roa File: 349277bf-1117-3421-ab89-a481dd456f55.roa (raw, json) Hash identifier: twtnEs2meOBtmik2/Lwvo2E+OE0xOAVQ1WRT+QrgCzY= Subject key identifier: C4:3E:16:12:0B:6E:30:45:7A:AB:53:E6:76:30:DA:AD:20:02:F3:DE Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584F4975517B851B61B53192AE40 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/349277bf-1117-3421-ab89-a481dd456f55.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16417 IP address blocks: 139.138.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:51:7b:85:1b:61:b5:31:92:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=def92eb4-65c3-4b45-b6f9-6afda539951b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f2:5e:89:78:86:49:11:d8:f5:f5:69:91:97: 6a:d0:b4:e8:99:d4:15:b6:5d:a1:8e:08:18:45:82: 88:9b:28:3e:6b:c2:06:3f:32:62:07:64:ce:0f:ed: 6b:b9:80:0b:90:db:54:0d:02:12:8d:96:96:87:d8: f7:e3:61:ec:db:fc:ef:44:40:40:58:c4:76:18:88: ec:85:d3:38:c9:c5:ad:13:b2:d1:6e:51:23:df:15: da:79:dc:8f:f5:16:0c:21:2a:42:b5:00:c8:ba:64: f1:78:af:0a:07:7d:28:87:35:21:2a:5e:d7:6f:d4: 5d:f8:6b:03:93:15:e2:61:73:e2:d8:71:69:21:cb: d0:f6:7c:ef:6a:e7:cf:06:e9:db:47:46:ac:9c:95: f3:c6:1d:4e:54:d3:b3:26:72:7f:7a:72:2d:c7:1d: d4:b8:96:31:6f:96:e4:a2:35:f1:9e:a2:16:5d:18: 93:75:ee:d0:f9:f8:13:da:f9:c7:82:d2:b6:78:22: 85:37:04:d5:5d:fb:f0:9b:02:57:58:73:9d:07:46: 99:70:82:df:ec:96:be:c1:f4:f5:0b:45:87:1f:d8: 74:bc:73:e2:6c:c5:06:e1:6f:04:cb:91:79:88:8c: ad:e8:b9:fa:98:47:54:1d:3e:cc:fe:c4:c4:3f:f2: 40:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:3E:16:12:0B:6E:30:45:7A:AB:53:E6:76:30:DA:AD:20:02:F3:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/349277bf-1117-3421-ab89-a481dd456f55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:e2:6e:66:34:b9:78:ec:d6:62:48:d7:46:7d:08:32:80:49: a5:11:7e:c9:38:25:68:18:47:a8:3a:5f:ce:97:4b:b5:50:7f: 7d:da:07:3c:44:45:67:60:82:e0:60:b3:57:d8:6b:7c:c3:51: 8a:64:61:40:6e:e2:40:4b:9e:0c:aa:78:78:ac:7d:68:a8:35: be:64:4f:f7:bb:bb:98:25:65:f2:c2:be:4e:39:47:01:51:ae: e1:d2:66:66:bd:c7:f9:e9:9a:50:ee:1e:14:ec:c8:81:00:05: d7:18:55:c7:35:d9:66:65:0c:91:24:e2:1c:c4:8c:2b:48:35: 62:11:77:63:a5:57:f8:b1:d9:cc:2e:3c:d8:22:55:b2:4f:9b: 88:ac:7d:68:e6:36:92:42:6e:bf:e2:74:15:d3:c6:a1:36:a1: c5:1a:2c:71:88:3f:c5:4e:34:78:7d:59:93:6a:6a:61:d4:9d: 48:17:ea:32:ed:2b:74:83:e9:a3:28:cf:bd:fd:a0:98:9d:de: 6d:cf:a1:4f:79:fc:c6:df:e6:30:41:47:5b:33:81:f8:3b:d1: 98:a0:31:84:f3:c4:e8:0c:d3:74:fe:74:c5:25:08:ae:ab:c7: dd:6b:a2:c7:33:bb:fc:fe:0e:ad:13:47:38:13:99:b3:41:ac: 4f:0b:7c:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdVF7hRthtTGSrkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGVmOTJlYjQtNjVjMy00YjQ1LWI2ZjktNmFmZGE1Mzk5NTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfJeiXiGSRHY9fVpkZdq0LTomdQVtl2hjggY RYKImyg+a8IGPzJiB2TOD+1ruYALkNtUDQISjZaWh9j342Hs2/zvREBAWMR2GIjs hdM4ycWtE7LRblEj3xXaedyP9RYMISpCtQDIumTxeK8KB30ohzUhKl7Xb9Rd+GsD kxXiYXPi2HFpIcvQ9nzvaufPBunbR0asnJXzxh1OVNOzJnJ/enItxx3UuJYxb5bk ojXxnqIWXRiTde7Q+fgT2vnHgtK2eCKFNwTVXfvwmwJXWHOdB0aZcILf7Ja+wfT1 C0WHH9h0vHPibMUG4W8Ey5F5iIyt6Ln6mEdUHT7M/sTEP/JAGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQ+FhILbjBFeqtT5nYw2q0gAvPeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMzQ5Mjc3YmYtMTExNy0z NDIxLWFiODktYTQ4MWRkNDU2ZjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4obMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnibmY0uXjs1mJI10Z9CDKASaURfsk4JWgYR6g6X86XS7VQf33aBzxE RWdgguBgs1fYa3zDUYpkYUBu4kBLngyqeHisfWioNb5kT/e7u5glZfLCvk45RwFR ruHSZma9x/npmlDuHhTsyIEABdcYVcc12WZlDJEk4hzEjCtINWIRd2OlV/ix2cwu PNgiVbJPm4isfWjmNpJCbr/idBXTxqE2ocUaLHGIP8VONHh9WZNqamHUnUgX6jLt K3SD6aMoz739oJid3m3PoU95/Mbf5jBBR1szgfg70ZigMYTzxOgM03T+dMUlCK6r x91rosczu/z+Dq0TRzgTmbNBrE8LfPg= -----END CERTIFICATE-----Generated at Mon Oct 12 04:03:39 2026 by rpki-client