$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3e5e62b8-f45b-306d-9ae2-0aae3f66163a.roa File: 3e5e62b8-f45b-306d-9ae2-0aae3f66163a.roa (raw, json) Hash identifier: EwQo6znREh/CEAoPS8xsAIXqppZvcGBl0FiV9VqtY3c= Subject key identifier: 35:6B:1B:42:E4:9F:15:78:4D:FF:CE:D8:E7:DB:28:34:BD:24:93:CA Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584E5A49FC757B941CA1EF0D2B40 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3e5e62b8-f45b-306d-9ae2-0aae3f66163a.roa Signing time: Wed 01 Jul 2026 09:00:12 +0000 ROA not before: Wed 01 Jul 2026 09:00:12 +0000 ROA not after: Tue 29 Sep 2026 09:00:12 +0000 asID: 30238 IP address blocks: 139.138.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:49:fc:75:7b:94:1c:a1:ef:0d:2b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jul 1 09:00:12 2026 GMT Not After : Sep 29 09:00:12 2026 GMT Subject: CN=da9da5b4-5e20-4384-b557-815cd7ba43a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:db:1d:00:f6:1d:e8:62:c1:f7:a5:ac:5c:ad: 32:af:6b:55:c4:91:e7:57:8c:47:2a:7f:54:91:a6: d5:a4:08:47:40:23:e2:7d:be:51:58:71:29:4c:5b: fe:c5:13:b5:c7:1c:76:39:e9:80:91:fc:f9:92:65: d9:63:d0:47:3f:a1:ef:a6:e8:6b:03:d5:f1:de:e0: 71:52:af:da:be:d4:c3:6a:03:87:d4:aa:b8:f2:29: d8:44:1e:63:61:71:62:7f:70:e4:d3:35:23:31:82: 51:02:90:ae:72:9c:41:17:51:80:18:03:e6:af:5c: 3a:00:45:3e:7d:e3:09:a8:7a:39:ac:20:a1:2e:0d: a9:32:65:82:78:b3:7c:d8:5b:f5:ee:30:d9:9b:a0: a1:29:a4:a1:73:a6:f7:22:bc:fe:c4:4b:1e:2b:4f: dc:0f:05:71:5d:ed:17:3a:d5:3f:7e:10:b7:17:0b: 31:d8:62:31:62:d5:7f:72:e4:fe:1f:7c:d4:65:d6: c0:48:9f:5d:e1:52:3c:02:a4:72:b6:17:c3:4a:9f: 8a:a5:14:15:77:de:b8:d6:06:d9:66:d3:77:f8:f5: 4e:c4:7e:24:a5:e5:47:a9:a1:3b:16:3a:bc:80:f4: a4:9b:be:f2:6e:58:8b:02:39:6f:7e:ac:90:f8:10: 7e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:6B:1B:42:E4:9F:15:78:4D:FF:CE:D8:E7:DB:28:34:BD:24:93:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3e5e62b8-f45b-306d-9ae2-0aae3f66163a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:83:36:93:fe:c8:8a:0f:9e:d7:4d:dd:3d:d2:49:39:c7:2e: a7:78:0b:9d:e6:af:59:6b:36:f9:85:87:01:52:58:30:2d:a3: 6c:55:2b:5f:85:d4:56:9c:f8:95:4e:5f:6f:71:ef:3d:72:73: 92:71:cc:c2:0b:24:d7:6c:a9:2e:fb:0a:dc:07:b8:57:1e:e1: f6:6f:79:1c:54:b2:40:72:1a:80:0a:48:3c:f4:46:8f:0d:ac: be:7c:6d:3e:08:f7:8a:ad:5b:81:4e:78:8e:30:16:20:9b:3d: 8b:f2:46:ef:0c:99:e1:c3:ad:16:12:d1:d7:4c:9f:0a:19:6f: 32:bb:e7:37:59:92:7b:65:e2:a6:6e:65:45:83:bd:1c:43:7f: 87:e3:b4:79:ff:04:e0:42:45:cc:ee:8f:23:36:e9:21:b8:43: 0e:8b:82:cc:db:1e:90:2c:d7:00:49:50:cf:b2:88:2f:36:52: 78:ac:66:b7:c7:ea:0f:52:9b:59:43:d4:00:92:d4:30:24:c0: 3e:76:f1:ed:e4:28:f9:4c:72:9c:95:c1:6c:a5:5b:c3:51:1d: de:6d:31:ff:13:a8:75:fe:85:12:71:1b:b9:87:14:0a:f1:34: 19:0c:24:cc:a4:5f:8c:c2:2a:93:c0:9d:7a:f4:ee:db:12:26: c6:8f:aa:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aSfx1e5Qcoe8NK0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk ZGE5ZGE1YjQtNWUyMC00Mzg0LWI1NTctODE1Y2Q3YmE0M2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtsdAPYd6GLB96WsXK0yr2tVxJHnV4xHKn9U kabVpAhHQCPifb5RWHEpTFv+xRO1xxx2OemAkfz5kmXZY9BHP6HvpuhrA9Xx3uBx Uq/avtTDagOH1Kq48inYRB5jYXFif3Dk0zUjMYJRApCucpxBF1GAGAPmr1w6AEU+ feMJqHo5rCChLg2pMmWCeLN82Fv17jDZm6ChKaShc6b3Irz+xEseK0/cDwVxXe0X OtU/fhC3Fwsx2GIxYtV/cuT+H3zUZdbASJ9d4VI8AqRythfDSp+KpRQVd9641gbZ ZtN3+PVOxH4kpeVHqaE7Fjq8gPSkm77ybliLAjlvfqyQ+BB+UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVrG0LknxV4Tf/O2OfbKDS9JJPKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvM2U1ZTYyYjgtZjQ1Yi0z MDZkLTlhZTItMGFhZTNmNjYxNjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4okMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMSDNpP+yIoPntdN3T3SSTnHLqd4C53mr1lrNvmFhwFSWDAto2xVK1+F 1Fac+JVOX29x7z1yc5JxzMILJNdsqS77CtwHuFce4fZveRxUskByGoAKSDz0Ro8N rL58bT4I94qtW4FOeI4wFiCbPYvyRu8MmeHDrRYS0ddMnwoZbzK75zdZkntl4qZu ZUWDvRxDf4fjtHn/BOBCRczujyM26SG4Qw6LgszbHpAs1wBJUM+yiC82UnisZrfH 6g9Sm1lD1ACS1DAkwD528e3kKPlMcpyVwWylW8NRHd5tMf8TqHX+hRJxG7mHFArx NBkMJMykX4zCKpPAnXr07tsSJsaPqhQ= -----END CERTIFICATE-----Generated at Tue Jul 14 12:01:12 2026 by rpki-client