$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3002eb1b-37d6-3480-85a8-73539969148e.roa File: 3002eb1b-37d6-3480-85a8-73539969148e.roa (raw, json) Hash identifier: HSRHTByQwaSzSCdVzIPhbDvJmP2yT5VB+JSXe8c+5D0= Subject key identifier: B8:AC:50:79:E4:30:C7:E0:10:A1:72:3F:AE:91:50:FE:88:95:9E:14 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584EFCACC7544E0637DA6F175388 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3002eb1b-37d6-3480-85a8-73539969148e.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 30238 IP address blocks: 139.138.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:c7:54:4e:06:37:da:6f:17:53:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=c20fa8b2-586d-4ec8-bff5-32081240d297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ba:0d:71:80:8b:49:23:96:5c:f7:70:63:66: 0b:6e:ba:37:54:7c:d2:2f:93:ee:ad:3a:60:3b:e9: 8a:11:80:a2:2e:90:a0:0d:cf:00:7c:a5:ef:0f:d8: 93:45:3c:ff:47:64:9f:7d:f4:3e:33:11:60:fa:21: fb:23:c7:3a:58:8d:f7:90:45:d0:b4:21:e1:99:5b: 0e:f8:e6:ca:1e:6b:ab:79:22:a0:5d:fb:bf:6f:11: ab:00:81:d8:f6:ec:6f:31:90:25:70:a4:3e:20:79: 40:74:b6:06:38:1a:d3:81:5c:d5:62:dc:c2:1e:ac: f9:d6:f8:93:85:5a:4c:9f:e5:a7:ac:2d:25:81:fc: c8:cd:ac:28:69:bc:be:4a:54:92:98:de:5b:70:e6: f7:3b:d3:6e:6a:aa:71:f5:47:39:a6:36:a0:db:aa: 30:dd:13:68:e2:30:7a:91:dd:1d:eb:53:33:21:c7: 79:ac:bb:85:57:ee:aa:11:43:3e:d6:f3:d8:7c:c9: 7f:b8:08:09:32:25:9a:07:1c:4b:98:41:60:b1:eb: 3f:3c:58:7f:b8:e5:4e:bb:99:77:86:92:38:f9:05: b0:24:72:57:91:4a:99:b7:b6:78:e9:24:cc:a9:12: 99:44:5a:15:f1:68:54:65:57:b8:ad:06:a9:10:ed: 3e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:AC:50:79:E4:30:C7:E0:10:A1:72:3F:AE:91:50:FE:88:95:9E:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3002eb1b-37d6-3480-85a8-73539969148e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:72:6f:2a:f5:62:62:b2:89:a4:f1:31:64:f5:ba:68:ab:86: 5c:e0:7e:b3:ac:fe:ad:15:ba:87:07:c0:a4:2c:2e:4b:5f:a9: e0:73:28:89:bf:28:81:c1:08:86:00:bb:7c:46:d9:2c:f8:31: 00:f1:26:68:f4:d5:b0:bf:6c:2f:ed:91:f1:2b:c1:7a:1e:42: c9:8c:f1:98:f3:d6:92:0e:12:a8:fd:cd:05:f0:fd:09:02:80: 99:59:40:03:bf:59:bb:e8:0b:f9:3e:63:7c:d0:2a:f8:36:83: 9a:f4:38:2d:78:79:ae:34:39:64:39:ab:13:7e:6e:b7:83:3d: dc:1b:86:0f:6f:d9:56:e5:94:7d:e5:4e:cf:d8:b2:88:4e:03: 9b:56:b6:71:89:a7:32:69:84:2c:7a:15:8d:66:4b:23:0f:14: b5:ca:a6:8a:80:78:56:ed:bf:82:2d:3d:61:2c:c8:a4:71:72: 4d:11:62:f9:9f:1a:eb:79:7e:d5:68:6a:26:08:84:82:d1:d8: e2:eb:50:4a:83:21:74:a8:2d:b6:8c:61:30:62:45:5a:27:4f: 60:b0:47:13:d1:45:c4:aa:3e:7f:56:45:73:2d:79:b7:f3:17: 9c:0d:59:34:cc:ac:b9:17:2c:65:05:08:94:da:73:1b:32:99: 41:85:9c:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rMdUTgY32m8XU4gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk YzIwZmE4YjItNTg2ZC00ZWM4LWJmZjUtMzIwODEyNDBkMjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7oNcYCLSSOWXPdwY2YLbro3VHzSL5PurTpg O+mKEYCiLpCgDc8AfKXvD9iTRTz/R2SfffQ+MxFg+iH7I8c6WI33kEXQtCHhmVsO +ObKHmureSKgXfu/bxGrAIHY9uxvMZAlcKQ+IHlAdLYGOBrTgVzVYtzCHqz51viT hVpMn+WnrC0lgfzIzawoaby+SlSSmN5bcOb3O9Nuaqpx9Uc5pjag26ow3RNo4jB6 kd0d61MzIcd5rLuFV+6qEUM+1vPYfMl/uAgJMiWaBxxLmEFgses/PFh/uOVOu5l3 hpI4+QWwJHJXkUqZt7Z46STMqRKZRFoV8WhUZVe4rQapEO0+0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLisUHnkMMfgEKFyP66RUP6IlZ4UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMzAwMmViMWItMzdkNi0z NDgwLTg1YTgtNzM1Mzk5NjkxNDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4o8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBybyr1YmKyiaTxMWT1umirhlzgfrOs/q0VuocHwKQsLktfqeBzKIm/ KIHBCIYAu3xG2Sz4MQDxJmj01bC/bC/tkfErwXoeQsmM8Zjz1pIOEqj9zQXw/QkC gJlZQAO/WbvoC/k+Y3zQKvg2g5r0OC14ea40OWQ5qxN+breDPdwbhg9v2VbllH3l Ts/YsohOA5tWtnGJpzJphCx6FY1mSyMPFLXKpoqAeFbtv4ItPWEsyKRxck0RYvmf Gut5ftVoaiYIhILR2OLrUEqDIXSoLbaMYTBiRVonT2CwRxPRRcSqPn9WRXMtebfz F5wNWTTMrLkXLGUFCJTacxsymUGFnEQ= -----END CERTIFICATE-----Generated at Sat Sep 12 14:27:29 2026 by rpki-client