$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/349277bf-1117-3421-ab89-a481dd456f55.roa File: 349277bf-1117-3421-ab89-a481dd456f55.roa (raw, json) Hash identifier: lJi+ys6zLz+AH43UOYCCr0u9aLGTf/8SbdRq19jQDtw= Subject key identifier: EE:CD:21:D4:04:4A:D3:8E:28:8C:CC:AB:AE:09:5B:14:E7:06:40:31 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584DD625B61626BE55F5317BE4E0 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/349277bf-1117-3421-ab89-a481dd456f55.roa Signing time: Fri 15 May 2026 01:00:24 +0000 ROA not before: Fri 15 May 2026 01:00:24 +0000 ROA not after: Thu 13 Aug 2026 01:00:24 +0000 asID: 16417 IP address blocks: 139.138.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 16 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d6:25:b6:16:26:be:55:f5:31:7b:e4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: May 15 01:00:24 2026 GMT Not After : Aug 13 01:00:24 2026 GMT Subject: CN=e14c559d-4d85-498a-a71a-d683e5b871d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5c:3e:95:42:1f:0d:31:f2:0b:58:77:f9:24: 48:a4:49:14:66:ca:d1:4d:51:72:99:89:1f:39:ba: 1a:9f:dc:e9:c7:59:b0:46:63:f1:02:0b:91:62:c5: 82:ff:66:8a:b0:0b:c7:68:b6:f1:50:00:13:a2:3c: 29:15:7a:22:e8:54:08:51:8b:af:17:ac:12:3d:76: 1f:48:c3:15:8e:2c:da:66:3a:7d:e0:d7:74:76:2d: d1:33:b1:4c:bf:fa:b1:31:32:0e:d5:65:5c:bb:f6: da:22:d3:83:b9:8c:9b:b0:a2:b9:2c:74:f0:3e:bc: c1:da:bb:e4:ba:7c:dd:c2:b6:1d:f9:b9:7d:dd:be: 8d:81:ab:40:f7:28:1c:24:37:f2:1b:01:97:f9:4c: 60:fb:30:96:c2:bc:d7:69:56:41:8f:ab:ca:5e:1e: f0:70:1b:fe:92:96:a9:7e:c4:1b:49:58:57:92:04: e8:ad:26:f9:26:fe:90:f5:0d:41:5e:d3:f4:7f:11: 25:aa:3f:4a:3e:d4:d7:af:a1:90:fa:6b:bc:38:1f: 82:0f:64:14:f0:28:8d:55:08:dd:d2:28:9d:87:ba: 9c:1c:55:51:ee:9a:39:b1:65:54:1a:21:b3:62:29: 5d:99:a7:06:55:ad:5a:1b:67:37:88:0d:82:fb:fc: ca:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:CD:21:D4:04:4A:D3:8E:28:8C:CC:AB:AE:09:5B:14:E7:06:40:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/349277bf-1117-3421-ab89-a481dd456f55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:86:68:81:7a:be:0a:16:59:dd:f7:bb:d3:90:1e:c7:d4:a5: c8:4b:6a:74:a7:41:24:58:b5:0f:ad:c8:bf:9c:90:b7:ab:2c: 8f:8f:7a:9f:3a:f4:92:12:16:c8:fa:a4:39:3c:a0:5f:c5:08: d2:92:07:1f:32:df:e2:5c:2c:a4:cc:b3:06:47:fa:b3:ed:9a: dd:9a:30:50:3f:09:0e:a3:2f:ff:59:73:cd:5c:b4:20:46:81: 35:9c:0d:a4:f2:ca:5b:95:13:03:cd:3a:75:42:99:4f:e3:42: 72:9c:11:af:4d:e9:2c:23:af:6b:d2:51:5d:9b:77:71:fb:d3: 74:1d:e5:24:b7:72:24:3c:46:13:bb:1a:d8:b7:11:4e:8a:fb: 86:f6:d0:c9:c6:40:8d:0f:c2:95:6d:d4:7d:69:9f:49:2f:d4: 23:2b:ac:1f:b7:52:f4:a5:5c:9e:e4:c6:9f:4e:95:f2:42:ac: a7:4d:05:5f:a7:41:f5:6c:f5:0e:1d:f4:21:02:fe:31:22:a6: 32:67:eb:77:39:b5:2d:f1:be:b8:7d:e8:ba:53:c8:6c:ad:b2: e7:16:08:88:18:e6:b1:b4:46:3c:04:62:ef:98:97:9b:28:56: 63:5e:4c:52:61:23:a8:69:d4:1f:fa:79:9f:d3:7d:6e:35:7a: 80:c2:a0:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3WJbYWJr5V9TF75OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDUxNTAxMDAyNFoXDTI2MDgxMzAxMDAyNFowLzEtMCsGA1UEAxMk ZTE0YzU1OWQtNGQ4NS00OThhLWE3MWEtZDY4M2U1Yjg3MWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01w+lUIfDTHyC1h3+SRIpEkUZsrRTVFymYkf Oboan9zpx1mwRmPxAguRYsWC/2aKsAvHaLbxUAATojwpFXoi6FQIUYuvF6wSPXYf SMMVjizaZjp94Nd0di3RM7FMv/qxMTIO1WVcu/baItODuYybsKK5LHTwPrzB2rvk unzdwrYd+bl93b6NgatA9ygcJDfyGwGX+Uxg+zCWwrzXaVZBj6vKXh7wcBv+kpap fsQbSVhXkgTorSb5Jv6Q9Q1BXtP0fxElqj9KPtTXr6GQ+mu8OB+CD2QU8CiNVQjd 0iidh7qcHFVR7po5sWVUGiGzYildmacGVa1aG2c3iA2C+/zKcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7NIdQEStOOKIzMq64JWxTnBkAxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMzQ5Mjc3YmYtMTExNy0z NDIxLWFiODktYTQ4MWRkNDU2ZjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4obMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOGaIF6vgoWWd33u9OQHsfUpchLanSnQSRYtQ+tyL+ckLerLI+Pep86 9JISFsj6pDk8oF/FCNKSBx8y3+JcLKTMswZH+rPtmt2aMFA/CQ6jL/9Zc81ctCBG gTWcDaTyyluVEwPNOnVCmU/jQnKcEa9N6Swjr2vSUV2bd3H703Qd5SS3ciQ8RhO7 Gti3EU6K+4b20MnGQI0PwpVt1H1pn0kv1CMrrB+3UvSlXJ7kxp9OlfJCrKdNBV+n QfVs9Q4d9CEC/jEipjJn63c5tS3xvrh96LpTyGytsucWCIgY5rG0RjwEYu+Yl5so VmNeTFJhI6hp1B/6eZ/TfW41eoDCoBA= -----END CERTIFICATE-----Generated at Fri May 15 12:19:33 2026 by rpki-client