$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/2121c5fd-7dae-3463-8bf4-b0288306ddb5.roa File: 2121c5fd-7dae-3463-8bf4-b0288306ddb5.roa (raw, json) Hash identifier: c8Cd1mIgh4bUdJAMS6BFzIMpqvSrtJhCtYa3N6oYKLE= Subject key identifier: EA:8A:B2:21:FB:32:A6:72:AA:36:C9:97:2E:C1:5C:02:46:6C:59:74 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584DD625B643AEACD1F2D5B37F08 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/2121c5fd-7dae-3463-8bf4-b0288306ddb5.roa Signing time: Fri 15 May 2026 01:00:24 +0000 ROA not before: Fri 15 May 2026 01:00:24 +0000 ROA not after: Thu 13 Aug 2026 01:00:24 +0000 asID: 16417 IP address blocks: 139.138.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 16 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d6:25:b6:43:ae:ac:d1:f2:d5:b3:7f:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: May 15 01:00:24 2026 GMT Not After : Aug 13 01:00:24 2026 GMT Subject: CN=dd013d48-5ada-4890-b4a7-ba620e071043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e6:37:c3:d0:9d:93:9d:cb:2f:de:ff:35:d8: 95:94:63:eb:89:4f:b6:8d:14:7c:bb:b7:3a:85:f3: 18:b2:31:ae:6d:16:6e:c9:f0:45:68:b8:60:c6:b5: 0b:c8:6a:0c:73:73:c7:d7:85:4c:47:ba:89:b7:87: 7c:57:69:9b:76:db:2e:84:07:bf:b2:4a:87:f6:45: 5b:37:0f:95:6b:da:cf:37:da:aa:2f:fa:91:60:8e: 53:05:02:b1:32:e7:b3:53:6b:bc:30:12:63:a4:b1: 0d:ff:7f:b7:ed:e0:02:cc:3b:ac:7f:12:31:51:ad: dd:bb:6a:af:d7:a2:e5:49:16:6b:09:d5:a3:2c:9d: 9c:37:19:4c:a1:76:5e:ef:38:59:f4:d7:0d:92:95: 45:57:06:37:fa:4d:6c:36:86:c3:c1:cd:6e:02:64: f7:52:a8:34:a7:df:48:99:7a:24:35:95:43:5c:07: 56:1f:2a:20:a6:60:2a:47:40:f0:e8:ea:7f:e1:e2: 1d:25:55:79:dd:10:30:c3:86:01:b9:61:2a:19:2a: 94:9f:1e:d5:64:0d:f3:15:bd:51:bf:54:63:b1:3d: 85:3c:13:74:c5:ff:0f:17:32:bb:ee:74:4b:8f:55: 86:bc:98:d8:59:ca:a6:f2:44:da:10:7c:bd:7c:2b: 56:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:8A:B2:21:FB:32:A6:72:AA:36:C9:97:2E:C1:5C:02:46:6C:59:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/2121c5fd-7dae-3463-8bf4-b0288306ddb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:84:75:32:84:32:37:77:cc:9e:b4:5b:24:af:6a:c4:38:b0: 59:f0:3c:1c:16:f7:b2:03:b7:45:f4:2c:3e:66:42:43:d4:92: 41:0f:56:97:7e:4f:cf:f1:7e:1e:22:1c:ba:89:1c:56:b8:66: 33:ae:1c:78:19:d2:4e:07:63:71:db:69:19:04:a8:b2:d5:3e: 41:77:70:7b:01:4d:c5:3c:09:5f:e6:12:d2:1a:1c:24:a0:f7: 52:c5:f1:ea:91:e1:4a:ca:cd:97:fd:03:9b:bc:f1:3f:c0:19: d9:6c:e1:18:42:e8:cb:9c:40:70:f2:d6:21:ce:20:f7:82:df: b2:a9:d2:26:45:c6:0f:d0:55:22:f8:ab:9d:0b:72:6b:cd:27: d0:cf:93:2e:ff:87:54:7e:3d:bb:91:f9:3e:8a:65:c0:57:1b: e9:f2:7a:52:c0:6e:e9:f6:95:d4:4c:0e:ff:51:8f:e3:7e:4b: 67:1a:a4:6d:71:aa:90:c7:19:59:bb:43:29:17:bc:ef:48:19: fa:5e:8b:2d:44:0e:78:be:f7:a3:96:41:47:1d:0b:c7:a6:5b: 76:7c:2b:48:0e:d0:b8:64:6d:87:bb:a5:96:8b:18:59:7c:f4: 7f:6c:fc:61:84:22:4d:cf:05:f4:56:49:d8:f6:c4:f1:db:94: f6:73:9d:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3WJbZDrqzR8tWzfwgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDUxNTAxMDAyNFoXDTI2MDgxMzAxMDAyNFowLzEtMCsGA1UEAxMk ZGQwMTNkNDgtNWFkYS00ODkwLWI0YTctYmE2MjBlMDcxMDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOY3w9Cdk53LL97/NdiVlGPriU+2jRR8u7c6 hfMYsjGubRZuyfBFaLhgxrULyGoMc3PH14VMR7qJt4d8V2mbdtsuhAe/skqH9kVb Nw+Va9rPN9qqL/qRYI5TBQKxMuezU2u8MBJjpLEN/3+37eACzDusfxIxUa3du2qv 16LlSRZrCdWjLJ2cNxlMoXZe7zhZ9NcNkpVFVwY3+k1sNobDwc1uAmT3Uqg0p99I mXokNZVDXAdWHyogpmAqR0Dw6Op/4eIdJVV53RAww4YBuWEqGSqUnx7VZA3zFb1R v1RjsT2FPBN0xf8PFzK77nRLj1WGvJjYWcqm8kTaEHy9fCtWBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOqKsiH7MqZyqjbJly7BXAJGbFl0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMjEyMWM1ZmQtN2RhZS0z NDYzLThiZjQtYjAyODgzMDZkZGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4oiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaEdTKEMjd3zJ60WySvasQ4sFnwPBwW97IDt0X0LD5mQkPUkkEPVpd+ T8/xfh4iHLqJHFa4ZjOuHHgZ0k4HY3HbaRkEqLLVPkF3cHsBTcU8CV/mEtIaHCSg 91LF8eqR4UrKzZf9A5u88T/AGdls4RhC6MucQHDy1iHOIPeC37Kp0iZFxg/QVSL4 q50LcmvNJ9DPky7/h1R+PbuR+T6KZcBXG+nyelLAbun2ldRMDv9Rj+N+S2capG1x qpDHGVm7QykXvO9IGfpeiy1EDni+96OWQUcdC8emW3Z8K0gO0LhkbYe7pZaLGFl8 9H9s/GGEIk3PBfRWSdj2xPHblPZznQc= -----END CERTIFICATE-----Generated at Fri May 15 12:15:03 2026 by rpki-client