$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ab43cf20-b0da-39b7-92a9-9b5821633c2c.roa File: ab43cf20-b0da-39b7-92a9-9b5821633c2c.roa (raw, json) Hash identifier: m0PhC0qeRsZ9hMShGVdQZe7J8v5u2X8+zqHJQp8oDYQ= Subject key identifier: 3D:BA:42:52:E8:F4:00:D7:96:9A:B2:00:64:4D:F3:7E:5A:25:F7:E0 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584D44FA47E51DB4BDCFE4484C00 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ab43cf20-b0da-39b7-92a9-9b5821633c2c.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 16417 IP address blocks: 139.138.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:47:e5:1d:b4:bd:cf:e4:48:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=4feebe99-3bce-40e8-bde9-21243056bf8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c9:07:eb:6f:d9:40:d1:83:bb:b2:c3:4c:23: bb:42:8b:b9:ac:96:a1:4f:1b:eb:42:ad:73:6b:3b: 5a:88:0b:9e:88:3d:08:c4:00:31:35:6e:87:92:20: d8:ef:25:97:b9:7b:1a:6a:cb:63:5e:34:d4:e1:48: 1f:99:2e:da:25:da:0d:01:8d:44:a3:20:fb:f3:c9: 23:c4:b4:07:6d:47:29:15:64:4b:2d:d8:9c:14:1c: 9f:d7:d9:42:08:57:40:42:dc:01:aa:2d:2a:f9:81: e5:f7:de:1f:7c:46:3a:30:92:0d:93:01:8c:cc:16: 40:21:62:e7:b4:b5:83:61:20:de:9e:c0:e5:50:d1: 77:b7:4a:df:93:9a:38:a4:09:1f:9d:89:ec:9d:7a: 18:08:b8:a6:4c:f0:a0:99:69:01:19:9f:27:2b:51: 2a:23:25:94:63:2c:c8:93:28:30:92:9f:52:c6:6a: 41:2c:a5:fc:c7:8a:41:91:18:ad:58:fc:0b:64:f7: 79:2c:f6:f0:db:af:cf:f4:88:ae:c2:72:64:80:db: c2:89:4c:b8:25:9e:6d:64:b7:ca:03:e1:1c:5d:ee: 5e:1c:17:da:1f:24:e9:64:cb:3b:95:74:87:a3:fa: 02:6a:d6:37:f6:a5:9f:97:48:b8:bb:10:34:7d:d6: 05:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:BA:42:52:E8:F4:00:D7:96:9A:B2:00:64:4D:F3:7E:5A:25:F7:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ab43cf20-b0da-39b7-92a9-9b5821633c2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:ef:7c:21:a7:87:22:18:e0:39:aa:5c:95:fa:de:81:79:db: 20:c4:ab:15:a4:eb:05:fe:16:43:d6:ef:5c:9d:e7:20:3e:7e: 2d:e3:b0:e3:53:51:fe:fd:da:58:52:73:e3:ce:bb:52:9e:37: df:9c:12:fa:a8:d0:ed:0c:34:1f:37:59:d8:3f:e9:45:65:d8: 93:71:45:96:4a:20:c7:28:6f:96:3e:76:f2:34:d5:80:45:e6: d8:9c:fe:39:fb:a7:ba:20:d5:08:00:15:d3:d1:ce:7c:fe:52: 69:94:60:6e:48:03:de:64:b1:3f:80:f9:70:33:ae:8d:cb:2f: 33:07:e5:8b:73:22:6f:4f:62:9b:85:e0:b2:7e:c6:07:ce:0b: 20:16:dc:07:69:f3:e4:f5:31:99:ea:91:e1:ca:87:4a:d9:6a: 00:d9:50:cd:c4:af:c4:8b:63:c3:66:65:c2:bd:44:c4:24:0d: dd:67:12:0e:1c:ac:cf:10:79:54:aa:d1:76:df:cc:76:66:3a: 4a:75:fe:3e:09:1e:2a:08:c2:61:8b:fc:0e:62:8d:28:11:8a: 5f:7c:f6:e4:94:8f:0f:90:21:0c:15:03:d8:3f:08:1d:0d:a3: e2:49:0d:3c:c5:da:04:b4:ad:3f:54:e7:93:a6:e1:72:f2:fa: e2:a2:e0:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+kflHbS9z+RITAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk NGZlZWJlOTktM2JjZS00MGU4LWJkZTktMjEyNDMwNTZiZjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqskH62/ZQNGDu7LDTCO7Qou5rJahTxvrQq1z aztaiAueiD0IxAAxNW6HkiDY7yWXuXsaastjXjTU4UgfmS7aJdoNAY1EoyD788kj xLQHbUcpFWRLLdicFByf19lCCFdAQtwBqi0q+YHl994ffEY6MJINkwGMzBZAIWLn tLWDYSDensDlUNF3t0rfk5o4pAkfnYnsnXoYCLimTPCgmWkBGZ8nK1EqIyWUYyzI kygwkp9SxmpBLKX8x4pBkRitWPwLZPd5LPbw26/P9IiuwnJkgNvCiUy4JZ5tZLfK A+EcXe5eHBfaHyTpZMs7lXSHo/oCatY39qWfl0i4uxA0fdYFlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD26QlLo9ADXlpqyAGRN835aJffgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYWI0M2NmMjAtYjBkYS0z OWI3LTkyYTktOWI1ODIxNjMzYzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4o4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHvfCGnhyIY4DmqXJX63oF52yDEqxWk6wX+FkPW71yd5yA+fi3jsONT Uf792lhSc+POu1KeN9+cEvqo0O0MNB83Wdg/6UVl2JNxRZZKIMcob5Y+dvI01YBF 5tic/jn7p7og1QgAFdPRznz+UmmUYG5IA95ksT+A+XAzro3LLzMH5YtzIm9PYpuF 4LJ+xgfOCyAW3Adp8+T1MZnqkeHKh0rZagDZUM3Er8SLY8NmZcK9RMQkDd1nEg4c rM8QeVSq0XbfzHZmOkp1/j4JHioIwmGL/A5ijSgRil989uSUjw+QIQwVA9g/CB0N o+JJDTzF2gS0rT9U55Om4XLy+uKi4J4= -----END CERTIFICATE-----Generated at Thu Mar 26 23:52:13 2026 by rpki-client