$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a359d9aa-5083-325a-87e4-6b285a87ef43.roa File: a359d9aa-5083-325a-87e4-6b285a87ef43.roa (raw, json) Hash identifier: 8UqJhp26w4L6Ut099sAMFCpgwSJwU6N+jJoUGBiUiU8= Subject key identifier: 2C:14:FC:F5:EE:0F:81:0C:13:71:2B:89:B2:4C:F6:B3:BA:25:AE:D4 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584E8F54F63FD456FDF673B8A600 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a359d9aa-5083-325a-87e4-6b285a87ef43.roa Signing time: Mon 20 Jul 2026 09:00:11 +0000 ROA not before: Mon 20 Jul 2026 09:00:11 +0000 ROA not after: Sun 18 Oct 2026 09:00:11 +0000 asID: 30215 IP address blocks: 139.138.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8f:54:f6:3f:d4:56:fd:f6:73:b8:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jul 20 09:00:11 2026 GMT Not After : Oct 18 09:00:11 2026 GMT Subject: CN=3b2b248d-5626-4b7d-ad37-98960229e74d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:20:29:53:c0:b1:4b:8a:0f:a1:b0:bc:16:37: 77:cd:bf:04:78:e2:7f:f1:f2:bf:e7:ee:6f:e5:20: 8b:49:3e:c3:4a:d4:70:69:91:76:60:01:d1:a8:70: 33:a9:3b:59:c3:fd:d5:dd:3a:44:ae:00:ea:bd:9d: 56:64:1c:9b:32:a5:5d:b0:dc:0e:38:a8:d7:04:cc: ac:cf:53:74:93:05:34:d5:de:4f:7f:e4:f5:d2:92: dc:5a:df:b5:a6:55:ba:35:fd:66:61:6e:4a:0e:5d: 97:13:3a:61:3b:2a:ea:6b:8c:87:68:72:c8:2b:4a: 1b:15:7f:a4:9d:94:d7:db:68:90:6e:f7:9f:bf:f6: 2d:a2:78:59:a4:34:c2:3f:72:b5:0b:6e:e7:6e:0d: 7b:0d:8c:3c:ea:7c:a3:6c:c5:9f:19:b3:35:68:26: c6:96:64:a2:32:d4:32:5a:2e:c0:a7:c7:c9:27:cc: 5c:e1:5c:2e:8d:59:b4:cb:b9:ca:a9:9e:b6:32:7e: 8f:ee:7a:e9:a5:e0:3f:61:7f:72:99:e7:c6:db:65: bd:68:76:37:24:61:0c:83:07:61:63:11:ad:38:c7: b6:dc:4e:3d:0e:c3:9a:9e:a7:75:3d:0f:b8:c1:d8: 13:07:2c:76:12:d6:4e:22:76:0c:48:ff:f6:f5:8e: b7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:14:FC:F5:EE:0F:81:0C:13:71:2B:89:B2:4C:F6:B3:BA:25:AE:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a359d9aa-5083-325a-87e4-6b285a87ef43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:d6:f2:56:47:66:31:31:3c:8d:7f:db:91:62:c0:bd:98:80: 15:fe:9b:14:89:d6:9f:54:b2:db:3e:e4:90:76:84:71:c1:13: ef:56:eb:11:83:cb:39:2b:d4:bf:2f:ce:47:18:52:30:20:59: 45:02:91:4c:df:23:35:1e:4a:19:6c:bc:40:47:3d:e5:d8:c3: 9b:c9:da:38:13:f1:8e:33:d7:37:05:97:cd:c5:a0:62:e8:94: 33:d1:7d:ab:f1:89:64:30:c1:49:12:aa:b3:15:24:cc:8d:eb: 7e:ea:8f:20:a8:56:de:41:54:40:40:f4:42:fd:86:fa:36:7b: 71:11:9f:7d:1c:cb:7f:56:40:ff:83:7d:54:e3:9b:80:1b:87: fc:d7:54:ed:1c:9e:db:e2:36:30:19:dc:13:5d:f2:0d:fc:c0: 77:fb:2c:f0:77:91:fc:04:8b:db:00:e4:b2:50:bd:27:e2:f2: e0:7c:ec:f3:75:51:32:f0:82:e7:b3:25:0f:0f:b5:a3:d8:2b: 3d:dd:4f:ac:00:b2:17:7a:75:bb:c7:38:3b:c2:bc:60:69:c8: 83:1b:f0:f7:28:e6:60:1c:24:c7:ef:83:fa:71:e7:cc:04:33: 16:29:55:55:40:37:31:10:b7:b9:f8:8a:22:a8:ab:93:7f:88: 36:b8:ed:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6PVPY/1Fb99nO4pgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDcyMDA5MDAxMVoXDTI2MTAxODA5MDAxMVowLzEtMCsGA1UEAxMk M2IyYjI0OGQtNTYyNi00YjdkLWFkMzctOTg5NjAyMjllNzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiApU8CxS4oPobC8Fjd3zb8EeOJ/8fK/5+5v 5SCLST7DStRwaZF2YAHRqHAzqTtZw/3V3TpErgDqvZ1WZBybMqVdsNwOOKjXBMys z1N0kwU01d5Pf+T10pLcWt+1plW6Nf1mYW5KDl2XEzphOyrqa4yHaHLIK0obFX+k nZTX22iQbvefv/YtonhZpDTCP3K1C27nbg17DYw86nyjbMWfGbM1aCbGlmSiMtQy Wi7Ap8fJJ8xc4VwujVm0y7nKqZ62Mn6P7nrppeA/YX9ymefG22W9aHY3JGEMgwdh YxGtOMe23E49DsOanqd1PQ+4wdgTByx2EtZOInYMSP/29Y63hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwU/PXuD4EME3EribJM9rO6Ja7UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYTM1OWQ5YWEtNTA4My0z MjVhLTg3ZTQtNmIyODVhODdlZjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4odMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjW8lZHZjExPI1/25FiwL2YgBX+mxSJ1p9Usts+5JB2hHHBE+9W6xGD yzkr1L8vzkcYUjAgWUUCkUzfIzUeShlsvEBHPeXYw5vJ2jgT8Y4z1zcFl83FoGLo lDPRfavxiWQwwUkSqrMVJMyN637qjyCoVt5BVEBA9EL9hvo2e3ERn30cy39WQP+D fVTjm4Abh/zXVO0cntviNjAZ3BNd8g38wHf7LPB3kfwEi9sA5LJQvSfi8uB87PN1 UTLwguezJQ8PtaPYKz3dT6wAshd6dbvHODvCvGBpyIMb8Pco5mAcJMfvg/px58wE MxYpVVVANzEQt7n4iiKoq5N/iDa47WA= -----END CERTIFICATE-----Generated at Fri Jul 24 21:06:42 2026 by rpki-client