$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b49cf79f-fe08-3d79-9c00-d9d96f4fdf1c.roa File: b49cf79f-fe08-3d79-9c00-d9d96f4fdf1c.roa (raw, json) Hash identifier: atCegMR9qCNbajxR1txcykVBtmkUG3UAriwBRRr7Ht4= Subject key identifier: 23:34:D7:85:18:5F:C2:EF:A0:B7:AC:25:97:F2:82:31:9E:11:E2:08 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584D8EF5719FD78BC85A1ED2C700 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b49cf79f-fe08-3d79-9c00-d9d96f4fdf1c.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 30238 IP address blocks: 139.138.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:71:9f:d7:8b:c8:5a:1e:d2:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=0cf4e935-cf23-44a6-bc3b-af0684920219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0f:ab:50:74:22:d4:56:b9:06:32:aa:3f:cd: 04:89:d1:ba:17:aa:91:88:58:a3:13:d8:dd:03:e9: fe:43:1e:0b:f4:e6:72:68:04:7a:ac:4e:39:73:fa: a8:48:59:fa:42:2e:74:e4:55:02:f2:57:67:bb:5a: 6e:97:da:e0:2d:8b:2c:60:79:55:4f:4a:b3:20:39: dd:03:6c:ff:23:27:1a:91:c5:ed:62:3f:95:aa:9d: e6:f3:e8:0b:df:99:e7:f8:77:c8:d5:5b:b8:6f:b0: 4c:94:8b:ae:1f:4b:50:4d:32:33:b7:f9:ac:1c:25: 25:be:59:4f:5c:37:00:c2:d2:7c:54:15:ed:0d:1d: 4c:5e:b8:95:2f:52:46:18:fb:97:09:58:de:70:51: b0:d6:55:f7:60:f7:07:cf:4e:d4:09:83:2e:b1:52: e1:94:50:42:78:71:a3:87:1c:b7:e3:87:ac:69:ef: 51:e8:43:6d:ee:1c:2c:fb:34:6d:ca:4f:48:db:6e: 38:4c:47:92:a7:07:3e:61:35:fe:b2:89:f8:9b:d1: c6:7f:69:23:62:d3:b4:86:07:8d:d1:87:d5:2c:a3: a6:22:41:a7:60:fc:46:09:8d:5a:2a:84:d7:a7:8a: 6e:91:ca:6e:2f:00:69:4f:99:33:24:3c:ac:f8:1f: 0d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:34:D7:85:18:5F:C2:EF:A0:B7:AC:25:97:F2:82:31:9E:11:E2:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b49cf79f-fe08-3d79-9c00-d9d96f4fdf1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:de:3b:6b:51:99:03:bc:af:7d:73:6a:0a:4f:4a:58:70:69: 2e:ed:9d:bf:40:11:5e:54:97:fd:4f:f5:68:ee:2e:42:05:f1: f9:2f:20:20:af:10:f0:14:9a:2a:86:91:c3:55:ce:67:d4:cf: 2e:b8:e0:fe:b9:82:7f:4b:e8:ab:90:1b:31:b4:b7:68:ea:c6: fd:44:f5:6a:c4:44:cb:86:2e:17:ce:86:f6:d5:8a:16:dd:62: 0e:c1:3b:f7:f2:8b:34:55:d2:0a:6d:f0:a6:50:89:82:da:55: 70:85:7f:2b:9a:f1:33:de:1c:e7:07:0a:78:dd:97:55:e6:c7: 96:df:60:d2:17:ff:69:fe:88:c0:cb:4f:44:01:fe:d7:a2:14: ed:d0:f9:fe:64:4e:b3:c4:cb:26:9d:c5:5b:80:4a:ff:c5:66: d1:88:c5:51:27:3a:63:cc:82:d5:ab:95:37:be:bc:f8:4f:4a: 5e:2e:22:ea:93:a7:b1:14:c7:64:72:93:67:0c:68:a8:69:ad: fd:11:1d:14:36:d1:99:5a:5a:3c:fd:27:d4:c2:17:45:b6:59: bb:96:17:5f:44:85:60:f2:b5:f1:eb:36:7d:10:6b:3d:d5:f1: 6d:21:e4:89:37:ef:ad:4d:d6:d7:07:b2:1a:8e:a1:e2:ac:b7: eb:1a:83:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9XGf14vIWh7SxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MGNmNGU5MzUtY2YyMy00NGE2LWJjM2ItYWYwNjg0OTIwMjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg+rUHQi1Fa5BjKqP80EidG6F6qRiFijE9jd A+n+Qx4L9OZyaAR6rE45c/qoSFn6Qi505FUC8ldnu1pul9rgLYssYHlVT0qzIDnd A2z/IycakcXtYj+Vqp3m8+gL35nn+HfI1Vu4b7BMlIuuH0tQTTIzt/msHCUlvllP XDcAwtJ8VBXtDR1MXriVL1JGGPuXCVjecFGw1lX3YPcHz07UCYMusVLhlFBCeHGj hxy344esae9R6ENt7hws+zRtyk9I2244TEeSpwc+YTX+son4m9HGf2kjYtO0hgeN 0YfVLKOmIkGnYPxGCY1aKoTXp4pukcpuLwBpT5kzJDys+B8NHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCM014UYX8LvoLesJZfygjGeEeIIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYjQ5Y2Y3OWYtZmUwOC0z ZDc5LTljMDAtZDlkOTZmNGZkZjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4o9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfeO2tRmQO8r31zagpPSlhwaS7tnb9AEV5Ul/1P9WjuLkIF8fkvICCv EPAUmiqGkcNVzmfUzy644P65gn9L6KuQGzG0t2jqxv1E9WrERMuGLhfOhvbVihbd Yg7BO/fyizRV0gpt8KZQiYLaVXCFfyua8TPeHOcHCnjdl1Xmx5bfYNIX/2n+iMDL T0QB/teiFO3Q+f5kTrPEyyadxVuASv/FZtGIxVEnOmPMgtWrlTe+vPhPSl4uIuqT p7EUx2Ryk2cMaKhprf0RHRQ20ZlaWjz9J9TCF0W2WbuWF19EhWDytfHrNn0Qaz3V 8W0h5Ik3761N1tcHshqOoeKst+sag/A= -----END CERTIFICATE-----Generated at Wed May 13 09:19:44 2026 by rpki-client