$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3bc8e55d-5cea-35d1-8cd5-61a874040a37.roa File: 3bc8e55d-5cea-35d1-8cd5-61a874040a37.roa (raw, json) Hash identifier: i58wRVx7upXDZlgsTbU+i8znPEXgabqNP/ea+2Jn9SA= Subject key identifier: 48:3C:7B:4F:F0:8A:EE:97:D5:41:24:BB:46:AF:A5:E0:AE:ED:D8:67 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584EFCACC76CBD021BF73A41A800 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3bc8e55d-5cea-35d1-8cd5-61a874040a37.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 30238 IP address blocks: 139.138.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:c7:6c:bd:02:1b:f7:3a:41:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=58ea4aa1-fb2c-4366-b98a-90e11cf3a15f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a4:c2:c2:ea:ba:d6:37:11:5a:1c:aa:df:e5: af:98:3f:bd:a6:fe:5d:aa:1a:de:99:12:63:ab:19: 05:0b:00:d3:fa:2b:e7:b5:13:49:e5:91:6a:a3:41: 3d:15:4a:10:59:15:db:03:dc:22:c3:2c:2f:31:59: 90:1d:94:87:83:6a:de:95:89:03:13:2b:2c:64:d1: be:23:96:7b:fc:e2:53:e1:bb:53:8a:8a:b9:81:fc: 18:6e:90:fe:b7:3f:c8:20:f0:b7:f8:5b:ac:b6:30: 9c:f6:34:a3:44:b0:88:79:3a:37:a7:39:2c:8c:67: 9d:4f:73:6a:e5:d6:8c:18:b3:01:f4:12:15:db:49: a8:af:13:20:e7:2b:3e:d7:3d:52:8d:a6:0f:e9:3c: 70:95:0a:20:95:3a:cf:c8:b9:26:c8:d9:47:90:84: 48:28:40:bc:a1:0d:68:8b:fa:cb:53:3e:3b:a6:8a: 16:ca:bf:14:33:b1:21:d9:f7:b7:75:2a:11:64:25: 5d:83:84:2d:88:e0:a0:ae:1a:2b:28:b5:98:74:c4: 95:d0:08:0d:f0:66:4b:e1:cd:5b:fb:56:e7:1a:8e: 1c:af:ee:9f:91:f4:3d:49:07:e7:f0:8c:fe:9f:ea: 6c:46:c8:24:b1:50:ae:8a:d1:41:35:1a:f6:a0:9b: 4b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:3C:7B:4F:F0:8A:EE:97:D5:41:24:BB:46:AF:A5:E0:AE:ED:D8:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3bc8e55d-5cea-35d1-8cd5-61a874040a37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:79:b4:8b:14:3e:5b:dd:70:07:65:fe:80:4c:c8:c6:4e:5d: 20:b2:a5:16:df:22:e1:4d:6a:bc:e3:34:d2:65:9c:a3:b7:65: 6e:a7:ce:a6:8f:c6:43:91:1b:f8:19:8d:ce:b3:67:4d:78:4c: ac:b5:41:56:c9:07:e7:ed:13:ae:4e:03:ee:74:28:16:2a:b0: 75:ed:59:7b:ea:42:45:fb:7a:03:c1:5b:85:ab:e6:7b:ce:65: c8:9e:9f:fa:b5:11:7b:d0:46:be:3a:71:54:b8:01:1b:9d:c7: b2:2f:82:62:7d:0c:83:83:ea:24:66:7c:8a:cd:d1:be:47:39: 32:2c:ee:4d:4f:8d:74:af:c1:6b:2d:79:62:d9:ee:c3:45:e7: 54:a3:0f:7d:a5:b4:22:40:dc:5c:21:ab:c6:c4:c3:0e:30:d1: 59:3f:be:aa:fd:65:52:7b:8c:e6:6c:a3:e7:69:cf:1b:aa:59: 06:98:2a:38:80:94:72:01:e6:4c:fd:00:e9:87:78:7d:cb:47: 95:5c:6f:ef:49:41:8e:8f:30:b0:dc:a7:96:c2:80:db:36:df: 53:8a:94:0b:df:72:6b:76:f0:e1:f7:70:43:63:73:bf:1b:0c: f9:e2:ee:ad:8e:d7:db:9b:4f:93:f7:2f:85:40:aa:d9:01:ba: d7:9e:42:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rMdsvQIb9zpBqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk NThlYTRhYTEtZmIyYy00MzY2LWI5OGEtOTBlMTFjZjNhMTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KTCwuq61jcRWhyq3+WvmD+9pv5dqhremRJj qxkFCwDT+ivntRNJ5ZFqo0E9FUoQWRXbA9wiwywvMVmQHZSHg2relYkDEyssZNG+ I5Z7/OJT4btTioq5gfwYbpD+tz/IIPC3+FustjCc9jSjRLCIeTo3pzksjGedT3Nq 5daMGLMB9BIV20morxMg5ys+1z1SjaYP6TxwlQoglTrPyLkmyNlHkIRIKEC8oQ1o i/rLUz47pooWyr8UM7Eh2fe3dSoRZCVdg4QtiOCgrhorKLWYdMSV0AgN8GZL4c1b +1bnGo4cr+6fkfQ9SQfn8Iz+n+psRsgksVCuitFBNRr2oJtLkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEg8e0/wiu6X1UEku0avpeCu7dhnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvM2JjOGU1NWQtNWNlYS0z NWQxLThjZDUtNjFhODc0MDQwYTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4olMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJ5tIsUPlvdcAdl/oBMyMZOXSCypRbfIuFNarzjNNJlnKO3ZW6nzqaP xkORG/gZjc6zZ014TKy1QVbJB+ftE65OA+50KBYqsHXtWXvqQkX7egPBW4Wr5nvO Zcien/q1EXvQRr46cVS4ARudx7IvgmJ9DIOD6iRmfIrN0b5HOTIs7k1PjXSvwWst eWLZ7sNF51SjD32ltCJA3Fwhq8bEww4w0Vk/vqr9ZVJ7jOZso+dpzxuqWQaYKjiA lHIB5kz9AOmHeH3LR5Vcb+9JQY6PMLDcp5bCgNs231OKlAvfcmt28OH3cENjc78b DPni7q2O19ubT5P3L4VAqtkButeeQoo= -----END CERTIFICATE-----Generated at Sat Sep 12 14:25:59 2026 by rpki-client