$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/2121c5fd-7dae-3463-8bf4-b0288306ddb5.roa File: 2121c5fd-7dae-3463-8bf4-b0288306ddb5.roa (raw, json) Hash identifier: lYMrkweiMXEv7YCEYpHU5f1B4qkpb0WeNXEd02zh2i0= Subject key identifier: A7:9C:2A:C2:91:58:C5:86:77:37:2E:EC:5F:AC:1F:2E:DD:A6:34:F2 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584EA7884D58431A4CBD4A39FD54 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/2121c5fd-7dae-3463-8bf4-b0288306ddb5.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16417 IP address blocks: 139.138.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:4d:58:43:1a:4c:bd:4a:39:fd:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=31258d42-d4a9-4338-87c0-c19132939502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1e:48:3e:d0:8e:cf:68:28:46:3a:2b:3a:5d: 74:fd:56:cd:fb:a4:27:df:f5:29:2e:d2:4d:54:2d: d3:67:7a:1a:9b:35:0c:22:d4:83:52:52:b9:e3:fc: 46:77:a6:c5:cf:6a:b2:0d:57:05:84:7e:71:a9:0d: 67:8d:42:d1:ea:3d:7e:c1:c4:2b:80:6d:78:db:a0: a4:7d:40:6b:20:70:2d:04:d7:ee:0d:b7:2d:b1:db: c8:30:78:84:62:77:e8:bf:46:ca:ff:c9:d9:59:0c: 2d:f9:e9:e0:83:97:24:8e:b8:e9:13:43:5e:25:1c: 45:90:5d:c3:07:28:a3:12:b4:29:d7:4e:8b:d3:2c: c4:b8:86:f8:2f:6d:d2:9d:62:c9:19:f5:3c:12:98: 9d:aa:4f:79:22:3c:74:0a:ea:21:3b:56:1d:27:e1: e2:0e:6b:9f:9d:60:b2:96:bf:b5:1a:9a:9c:99:1a: 94:b0:a0:5b:c6:1e:f9:5e:c6:d6:12:6d:f1:66:41: 20:8b:05:6d:b2:b2:13:5c:54:9d:21:10:95:c8:74: b9:9e:43:b7:c1:85:ed:a1:1d:56:b9:c9:c4:9a:9d: ec:13:f1:a6:08:a0:56:96:85:a9:bb:41:6e:bc:cf: be:52:55:c8:e4:2b:3e:ca:78:00:ae:20:9e:bd:d0: 81:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:9C:2A:C2:91:58:C5:86:77:37:2E:EC:5F:AC:1F:2E:DD:A6:34:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/2121c5fd-7dae-3463-8bf4-b0288306ddb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:a7:dd:77:4d:61:6b:1e:d6:05:30:75:81:8d:77:46:ae:78: 7d:76:c5:a6:ca:ab:0d:98:6a:f7:27:a6:22:f1:7d:3c:55:f4: ad:88:4e:9f:22:10:85:cb:33:14:14:bd:0c:a1:9e:1b:20:c9: 5b:4f:69:0c:30:b4:75:05:d7:2d:11:58:fe:fe:a0:78:de:72: 1e:1d:fa:3a:b4:67:5d:8c:73:f5:00:d4:c8:a7:ae:0c:66:48: 64:af:72:93:5a:12:5a:34:95:0d:1a:f1:8a:3d:50:81:69:45: 1a:c3:f6:dc:39:99:a6:ca:d4:bc:7e:d4:f0:2d:9c:ee:e9:46: 2c:4e:4b:cd:af:2f:67:a0:ad:2d:48:b2:96:3d:34:a1:68:a6: af:80:9e:a9:fe:18:b2:2a:d6:7c:f0:b0:7a:67:35:37:c5:55: 71:49:9e:c6:eb:c3:c8:15:28:28:4c:e5:be:f8:3c:c3:06:f0: b6:f6:f7:94:43:d2:76:8f:91:89:22:40:c7:e1:d9:d0:64:6e: 7e:9a:22:c9:d2:c1:24:f2:67:74:e8:49:81:7a:09:7f:69:fd: 3c:b4:96:71:df:3c:fe:c2:e0:e8:02:8a:eb:8e:04:f8:f9:fc: 06:8d:7b:67:af:c3:ab:ea:64:95:6c:88:aa:b8:dc:49:26:76: 08:44:9e:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niE1YQxpMvUo5/VQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MzEyNThkNDItZDRhOS00MzM4LTg3YzAtYzE5MTMyOTM5NTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmB5IPtCOz2goRjorOl10/VbN+6Qn3/UpLtJN VC3TZ3oamzUMItSDUlK54/xGd6bFz2qyDVcFhH5xqQ1njULR6j1+wcQrgG1426Ck fUBrIHAtBNfuDbctsdvIMHiEYnfov0bK/8nZWQwt+engg5ckjrjpE0NeJRxFkF3D ByijErQp106L0yzEuIb4L23SnWLJGfU8Epidqk95Ijx0CuohO1YdJ+HiDmufnWCy lr+1GpqcmRqUsKBbxh75XsbWEm3xZkEgiwVtsrITXFSdIRCVyHS5nkO3wYXtoR1W ucnEmp3sE/GmCKBWloWpu0FuvM++UlXI5Cs+yngAriCevdCBwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKecKsKRWMWGdzcu7F+sHy7dpjTyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMjEyMWM1ZmQtN2RhZS0z NDYzLThiZjQtYjAyODgzMDZkZGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4oiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADen3XdNYWse1gUwdYGNd0aueH12xabKqw2YavcnpiLxfTxV9K2ITp8i EIXLMxQUvQyhnhsgyVtPaQwwtHUF1y0RWP7+oHjech4d+jq0Z12Mc/UA1Minrgxm SGSvcpNaElo0lQ0a8Yo9UIFpRRrD9tw5mabK1Lx+1PAtnO7pRixOS82vL2egrS1I spY9NKFopq+Anqn+GLIq1nzwsHpnNTfFVXFJnsbrw8gVKChM5b74PMMG8Lb295RD 0naPkYkiQMfh2dBkbn6aIsnSwSTyZ3ToSYF6CX9p/Ty0lnHfPP7C4OgCiuuOBPj5 /AaNe2evw6vqZJVsiKq43EkmdghEnnY= -----END CERTIFICATE-----Generated at Sat Sep 12 14:26:36 2026 by rpki-client