$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/28195898-3fff-3e7e-8cc9-3aec6de0de9e.roa File: 28195898-3fff-3e7e-8cc9-3aec6de0de9e.roa (raw, json) Hash identifier: EB+W5ON+8x8pVVs5+H0LVERpYZlIXgle4Lmuc0x/MQg= Subject key identifier: 99:11:D5:6A:97:B1:95:5F:56:5B:87:E4:76:54:DC:37:70:84:DD:6F Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584EC7A1D5D11414FFFFDE434E00 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/28195898-3fff-3e7e-8cc9-3aec6de0de9e.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 16417 IP address blocks: 139.138.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:d5:d1:14:14:ff:ff:de:43:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=8fa7a74f-67fa-4871-b6dd-65b7ef3cb12d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:44:46:d1:8b:13:02:54:2e:03:c3:4d:48:2e: eb:ad:d3:a2:5f:20:a8:cb:31:ff:1a:91:7e:fa:a7: 26:b7:7a:0d:ec:22:25:2d:e3:ea:1e:7e:4e:78:f0: c9:c9:27:4f:e5:ce:c3:87:09:6e:82:de:9d:9f:79: 20:f4:a4:78:1f:f4:dc:e5:31:c4:04:15:d2:36:dd: 71:2d:21:02:a5:42:c8:20:20:98:dc:b8:02:8f:3b: 10:98:c3:c3:47:d2:71:27:0a:7f:d4:0e:6b:a8:44: 4c:e9:d6:3d:69:e8:54:7a:26:61:69:34:c4:18:5d: 1f:21:cf:f1:7f:25:2b:83:3f:74:99:09:23:06:da: 0d:a6:bd:c5:bf:c6:a7:0e:4e:f3:22:b9:ae:68:89: 94:7e:e0:1a:71:8b:4f:15:c6:9f:54:79:3b:22:04: f3:92:2c:5b:9b:cb:4b:28:c4:fa:26:01:03:6e:af: 66:3f:e9:1e:09:1d:ca:c1:9a:ec:83:bc:95:87:7c: 7d:2e:65:3b:c7:89:43:64:ab:79:d6:e6:ca:7e:8f: 12:c8:3a:9a:96:c7:1f:8f:2d:34:d5:53:75:67:eb: c8:7e:c1:7e:be:7c:24:8f:43:d8:ec:03:a3:b8:0e: 1b:67:0c:b8:04:4d:17:8b:77:5c:07:6e:ce:9d:60: d0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:11:D5:6A:97:B1:95:5F:56:5B:87:E4:76:54:DC:37:70:84:DD:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/28195898-3fff-3e7e-8cc9-3aec6de0de9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:d9:ba:7f:ce:55:b5:ad:50:5d:c0:c7:52:c3:6b:57:18:c4: 05:64:46:c5:31:44:d6:4a:2e:f2:ac:c6:1b:99:bd:bc:fc:6f: ca:4a:7f:95:b0:bc:81:8b:40:ed:9d:1f:21:b1:0e:7d:6d:7f: 27:89:37:1f:11:df:f5:a2:17:3e:b9:cd:fd:20:f1:fc:c9:0b: 15:58:9f:fe:92:da:c8:7e:4d:f3:5d:35:09:50:ea:60:85:12: e9:08:1d:f5:cd:c4:40:e6:72:cb:28:15:26:a3:95:02:0f:dd: a8:66:01:d5:e5:74:03:ff:dd:47:fe:eb:36:06:77:e1:89:16: bb:b4:3e:c6:7d:af:cc:8e:78:44:8d:a4:22:cd:79:98:aa:3c: fe:04:93:9d:88:21:6e:85:a7:0b:65:6a:42:e1:69:5a:59:c3: de:e0:b3:15:6b:e5:b0:63:34:38:41:14:3a:a2:1d:65:63:98: ac:85:50:02:23:0b:c7:c7:23:21:39:eb:f2:9f:34:9c:e7:f6: ce:84:3d:96:10:9c:7a:26:c3:45:b5:cb:41:fc:88:40:b2:f9: b5:25:1f:d5:c9:81:58:9b:b3:dd:89:12:b3:4d:7b:2d:42:f9: 40:79:9f:e2:09:8b:ab:14:67:fc:bb:f1:d3:11:8c:5c:87:a0: a9:8d:99:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7HodXRFBT//95DTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk OGZhN2E3NGYtNjdmYS00ODcxLWI2ZGQtNjViN2VmM2NiMTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgURG0YsTAlQuA8NNSC7rrdOiXyCoyzH/GpF+ +qcmt3oN7CIlLePqHn5OePDJySdP5c7Dhwlugt6dn3kg9KR4H/Tc5THEBBXSNt1x LSECpULIICCY3LgCjzsQmMPDR9JxJwp/1A5rqERM6dY9aehUeiZhaTTEGF0fIc/x fyUrgz90mQkjBtoNpr3Fv8anDk7zIrmuaImUfuAacYtPFcafVHk7IgTzkixbm8tL KMT6JgEDbq9mP+keCR3KwZrsg7yVh3x9LmU7x4lDZKt51ubKfo8SyDqalscfjy00 1VN1Z+vIfsF+vnwkj0PY7AOjuA4bZwy4BE0Xi3dcB27OnWDQKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkR1WqXsZVfVluH5HZU3DdwhN1vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMjgxOTU4OTgtM2ZmZi0z ZTdlLThjYzktM2FlYzZkZTBkZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4o6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbZun/OVbWtUF3Ax1LDa1cYxAVkRsUxRNZKLvKsxhuZvbz8b8pKf5Ww vIGLQO2dHyGxDn1tfyeJNx8R3/WiFz65zf0g8fzJCxVYn/6S2sh+TfNdNQlQ6mCF EukIHfXNxEDmcssoFSajlQIP3ahmAdXldAP/3Uf+6zYGd+GJFru0PsZ9r8yOeESN pCLNeZiqPP4Ek52IIW6FpwtlakLhaVpZw97gsxVr5bBjNDhBFDqiHWVjmKyFUAIj C8fHIyE56/KfNJzn9s6EPZYQnHomw0W1y0H8iECy+bUlH9XJgVibs92JErNNey1C +UB5n+IJi6sUZ/y78dMRjFyHoKmNmdI= -----END CERTIFICATE-----Generated at Sat Sep 12 14:26:01 2026 by rpki-client