$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/147c0bf2-220f-3c91-9257-37befeaa7a3e.roa File: 147c0bf2-220f-3c91-9257-37befeaa7a3e.roa (raw, json) Hash identifier: 9cl2/bOmhKQZxpJMyjfB65N3AT9dvnT13GyIk2TxxcU= Subject key identifier: 87:D8:C5:BA:21:DB:0C:D8:A2:12:B1:80:EA:66:52:56:A7:B7:2E:9B Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584EC7A1D5E7D5E71730E303B500 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/147c0bf2-220f-3c91-9257-37befeaa7a3e.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 16417 IP address blocks: 139.138.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:d5:e7:d5:e7:17:30:e3:03:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=99846848-94b6-4cb0-86b5-840bd6d71db7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5a:d6:00:ca:58:12:10:3d:3c:37:b7:96:1e: 7c:86:4c:14:ba:ff:01:7c:43:c6:de:15:ff:43:d5: d1:79:f2:de:0b:60:07:99:92:6b:40:f2:7e:55:58: 0c:6f:31:69:5f:f2:dc:1b:05:d9:2b:78:e2:3c:1c: 19:f7:cb:82:c9:98:9d:61:a0:b4:93:c6:44:80:df: e8:5a:d4:8b:0a:8c:5c:f0:41:0c:58:34:fc:21:f6: d7:4f:53:dd:41:fe:d3:70:cc:c5:72:16:0a:b0:88: 56:2c:87:da:d2:b8:b5:ea:ef:c4:70:09:92:75:cf: 55:61:da:fb:04:0a:69:52:68:f1:db:57:4d:e8:0f: eb:7d:d1:58:8f:ed:43:74:7e:e6:d5:4f:ce:60:a9: 09:d7:45:f6:5f:42:c5:78:0c:fb:73:c9:f4:cc:10: be:c5:8b:d9:3f:84:c7:f3:e1:47:d9:95:a4:67:10: e9:84:29:63:51:c6:1b:5d:a9:86:eb:6c:f2:93:28: 6f:f7:cc:b5:67:27:35:dc:b8:19:62:6d:ac:f1:1b: 82:54:d8:e6:b7:b5:f8:b5:5f:74:b9:68:6a:8e:12: 3d:b4:16:94:26:a2:fb:1a:c2:cb:44:e6:80:39:a8: 20:32:95:72:95:f6:65:e3:e2:5f:c7:a0:7d:4f:85: 47:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D8:C5:BA:21:DB:0C:D8:A2:12:B1:80:EA:66:52:56:A7:B7:2E:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/147c0bf2-220f-3c91-9257-37befeaa7a3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:71:0c:d3:7c:2d:d4:31:9c:a7:00:13:fe:9b:2a:15:42:c6: ce:83:5c:28:ca:f7:e4:7e:ce:df:b0:89:69:92:c4:13:62:38: 3b:20:d1:cd:69:41:77:1a:55:47:27:2c:6f:d0:52:ee:06:2a: 61:bd:30:fa:e2:86:32:17:13:90:65:05:77:d6:d1:11:d3:54: d1:62:79:57:aa:34:70:42:54:8e:e9:3a:e7:eb:27:1f:53:80: 31:97:7c:42:f0:7e:5c:e1:b3:db:51:2e:12:8c:0c:10:e4:2c: f8:62:3b:bc:33:58:de:b3:05:8f:96:38:0e:09:72:ea:02:60: 0e:b4:65:64:0f:87:a9:47:b7:b1:6b:48:9b:0d:89:24:f8:5b: f6:25:8c:52:fc:2b:8d:07:59:1e:a6:c2:1c:30:14:27:2d:7e: ea:f1:42:c6:3b:a1:88:84:c3:bf:bd:62:d8:a5:12:bd:4e:78: 82:00:08:b0:68:91:11:0c:44:b1:70:ac:9b:d1:d8:18:30:a9: 9e:41:06:6c:b5:2f:ee:d2:93:10:f1:08:23:8d:d0:d4:b6:16: f5:b9:b9:2c:18:a9:49:3a:23:8a:07:77:ad:94:bc:64:83:a9: e8:90:b3:ff:97:c0:6d:1e:0c:20:a9:dc:aa:2c:ed:98:f7:cb: f4:d1:d0:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7HodXn1ecXMOMDtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk OTk4NDY4NDgtOTRiNi00Y2IwLTg2YjUtODQwYmQ2ZDcxZGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1rWAMpYEhA9PDe3lh58hkwUuv8BfEPG3hX/ Q9XRefLeC2AHmZJrQPJ+VVgMbzFpX/LcGwXZK3jiPBwZ98uCyZidYaC0k8ZEgN/o WtSLCoxc8EEMWDT8IfbXT1PdQf7TcMzFchYKsIhWLIfa0ri16u/EcAmSdc9VYdr7 BAppUmjx21dN6A/rfdFYj+1DdH7m1U/OYKkJ10X2X0LFeAz7c8n0zBC+xYvZP4TH 8+FH2ZWkZxDphCljUcYbXamG62zykyhv98y1Zyc13LgZYm2s8RuCVNjmt7X4tV90 uWhqjhI9tBaUJqL7GsLLROaAOaggMpVylfZl4+Jfx6B9T4VHAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfYxboh2wzYohKxgOpmUlanty6bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMTQ3YzBiZjItMjIwZi0z YzkxLTkyNTctMzdiZWZlYWE3YTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4oYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRxDNN8LdQxnKcAE/6bKhVCxs6DXCjK9+R+zt+wiWmSxBNiODsg0c1p QXcaVUcnLG/QUu4GKmG9MPrihjIXE5BlBXfW0RHTVNFieVeqNHBCVI7pOufrJx9T gDGXfELwflzhs9tRLhKMDBDkLPhiO7wzWN6zBY+WOA4JcuoCYA60ZWQPh6lHt7Fr SJsNiST4W/YljFL8K40HWR6mwhwwFCctfurxQsY7oYiEw7+9YtilEr1OeIIACLBo kREMRLFwrJvR2BgwqZ5BBmy1L+7SkxDxCCON0NS2FvW5uSwYqUk6I4oHd62UvGSD qeiQs/+XwG0eDCCp3Kos7Zj3y/TR0PM= -----END CERTIFICATE-----Generated at Sat Sep 12 14:26:20 2026 by rpki-client