$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a359d9aa-5083-325a-87e4-6b285a87ef43.roa File: a359d9aa-5083-325a-87e4-6b285a87ef43.roa (raw, json) Hash identifier: qWNg71CZKdKxbaxBgIojdN9Aq10qTKspHEdKlqFKyf0= Subject key identifier: C5:88:02:8E:D2:81:73:52:73:DD:CF:7D:20:26:7D:DF:22:C7:46:44 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584DAF101F7A9C5FAE2F1D835280 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a359d9aa-5083-325a-87e4-6b285a87ef43.roa Signing time: Fri 01 May 2026 01:00:24 +0000 ROA not before: Fri 01 May 2026 01:00:24 +0000 ROA not after: Thu 30 Jul 2026 01:00:24 +0000 asID: 30215 IP address blocks: 139.138.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:af:10:1f:7a:9c:5f:ae:2f:1d:83:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: May 1 01:00:24 2026 GMT Not After : Jul 30 01:00:24 2026 GMT Subject: CN=3ec5ca7f-f937-4395-b0ff-12843e8b5eab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:32:7b:c7:2f:45:92:ff:19:64:f1:95:1d:0c: 2e:e9:ed:bf:2b:b6:5e:d7:89:18:14:67:48:5f:f1: de:58:a1:ba:e6:c4:a2:d3:99:3f:d3:ea:9b:29:b9: ac:1d:d1:cb:cb:62:63:ec:c6:c3:28:5e:5f:6f:c6: e3:ab:c4:bd:7b:94:ba:0d:d7:17:3c:73:b1:36:59: b7:72:3b:6d:51:28:dc:2a:f6:2a:75:68:6b:77:3f: 06:cb:31:93:da:d1:1c:c9:63:28:84:91:ab:9e:15: 80:00:ca:c9:78:dc:04:60:80:3d:c8:d8:5e:47:25: 2c:d8:ed:3f:10:e4:e5:18:8b:ab:5c:c3:b4:83:53: 42:d4:0d:da:9a:87:c2:7e:ee:7c:d4:0c:f5:92:36: 42:a4:72:2f:25:45:a6:5e:84:25:82:36:f7:18:f5: 8c:47:a4:2e:15:45:d8:20:2f:1d:9b:3b:43:6b:57: fe:76:cf:a1:d9:fb:6a:1f:75:94:6b:f0:a6:8d:6e: f6:7d:fb:a2:c5:fd:ab:1c:d9:51:4b:0b:69:4b:d8: 1d:71:5f:43:90:14:aa:4c:50:e8:03:32:9e:54:ca: 36:7e:19:f4:af:fa:be:12:49:1d:b7:e7:4f:6c:f8: 49:a0:ba:a9:8d:1b:b7:be:21:2f:1a:f3:02:9c:eb: ac:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:88:02:8E:D2:81:73:52:73:DD:CF:7D:20:26:7D:DF:22:C7:46:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a359d9aa-5083-325a-87e4-6b285a87ef43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:5e:4e:82:f6:d7:89:6a:1c:01:73:ac:9a:9d:f7:57:14:06: 5b:0d:db:97:51:e7:dc:1c:e1:2f:be:61:b0:eb:de:53:a3:17: 28:8f:aa:3b:cb:0b:09:0a:cd:31:68:9b:94:a9:75:33:91:46: 9d:60:9e:8c:a4:fe:52:3b:75:0f:4d:8e:45:58:78:73:49:fb: da:ce:d0:d2:78:4a:05:72:b1:9b:62:45:0e:61:50:47:dd:e2: 0d:7b:74:4a:69:1f:e5:0e:db:cc:58:7a:59:db:86:8b:59:c8: 99:4c:0c:08:4f:6c:33:c8:c5:62:42:be:04:99:61:82:9a:e4: 10:5a:9b:5a:1b:53:dd:56:34:a6:58:c5:81:88:ff:2d:6c:59: d6:01:24:01:51:69:97:2e:df:c2:ee:48:55:d8:95:ea:62:6b: 33:08:17:0b:17:71:64:54:e4:69:3e:31:57:cf:2a:ab:14:11: d7:c8:a3:d7:b7:23:28:3f:4e:11:c4:ef:2f:e4:5e:62:b3:bf: 03:c9:e2:2b:bc:3a:3e:ad:fe:1c:21:e6:cc:61:6d:99:a5:99: 4f:b5:67:cc:c4:7b:24:26:7e:fe:b6:55:a7:d0:b2:c1:31:29: ab:9b:3c:69:d8:55:f8:64:bd:0d:f9:1d:91:1c:04:37:07:d9: 31:4a:58:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2vEB96nF+uLx2DUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDUwMTAxMDAyNFoXDTI2MDczMDAxMDAyNFowLzEtMCsGA1UEAxMk M2VjNWNhN2YtZjkzNy00Mzk1LWIwZmYtMTI4NDNlOGI1ZWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijJ7xy9Fkv8ZZPGVHQwu6e2/K7Ze14kYFGdI X/HeWKG65sSi05k/0+qbKbmsHdHLy2Jj7MbDKF5fb8bjq8S9e5S6DdcXPHOxNlm3 cjttUSjcKvYqdWhrdz8GyzGT2tEcyWMohJGrnhWAAMrJeNwEYIA9yNheRyUs2O0/ EOTlGIurXMO0g1NC1A3amofCfu581Az1kjZCpHIvJUWmXoQlgjb3GPWMR6QuFUXY IC8dmztDa1f+ds+h2ftqH3WUa/CmjW72ffuixf2rHNlRSwtpS9gdcV9DkBSqTFDo AzKeVMo2fhn0r/q+Ekkdt+dPbPhJoLqpjRu3viEvGvMCnOus+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWIAo7SgXNSc93PfSAmfd8ix0ZEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYTM1OWQ5YWEtNTA4My0z MjVhLTg3ZTQtNmIyODVhODdlZjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4odMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEteToL214lqHAFzrJqd91cUBlsN25dR59wc4S++YbDr3lOjFyiPqjvL CwkKzTFom5SpdTORRp1gnoyk/lI7dQ9NjkVYeHNJ+9rO0NJ4SgVysZtiRQ5hUEfd 4g17dEppH+UO28xYelnbhotZyJlMDAhPbDPIxWJCvgSZYYKa5BBam1obU91WNKZY xYGI/y1sWdYBJAFRaZcu38LuSFXYlepiazMIFwsXcWRU5Gk+MVfPKqsUEdfIo9e3 Iyg/ThHE7y/kXmKzvwPJ4iu8Oj6t/hwh5sxhbZmlmU+1Z8zEeyQmfv62VafQssEx KaubPGnYVfhkvQ35HZEcBDcH2TFKWAQ= -----END CERTIFICATE-----Generated at Wed May 13 14:18:55 2026 by rpki-client