$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/840eebe7-dd14-3e7e-b8f3-fb4c5cdbcd3c.roa File: 840eebe7-dd14-3e7e-b8f3-fb4c5cdbcd3c.roa (raw, json) Hash identifier: 62afJSni+e9ggvE7vML7/Zi3jzAKoU04yQ6NDM6XoCs= Subject key identifier: 2B:23:CB:2F:63:D7:05:15:66:DF:58:91:F6:83:D1:AB:C2:BF:90:4F Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584DD625B5FA8ABE96D3069F4A00 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/840eebe7-dd14-3e7e-b8f3-fb4c5cdbcd3c.roa Signing time: Fri 15 May 2026 01:00:24 +0000 ROA not before: Fri 15 May 2026 01:00:24 +0000 ROA not after: Thu 13 Aug 2026 01:00:24 +0000 asID: 16417 IP address blocks: 139.138.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 16 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d6:25:b5:fa:8a:be:96:d3:06:9f:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: May 15 01:00:24 2026 GMT Not After : Aug 13 01:00:24 2026 GMT Subject: CN=ff2e2fe2-e671-4b6a-b02e-76634b89b224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:5a:e6:2e:92:9f:ba:49:7a:d7:cc:ef:2c:33: 36:cb:d7:ca:b1:32:43:83:56:13:06:49:d6:95:95: 84:c0:59:0b:a9:11:75:f3:b1:66:90:74:25:9a:fc: 3a:74:9e:24:22:82:05:66:10:c4:55:68:cd:d2:04: 59:bd:0e:b2:b4:04:08:2e:d6:19:0e:da:6d:84:b6: 28:ad:61:28:88:7d:d9:36:69:fc:4b:5c:a8:d5:54: 0a:1a:1c:1c:b3:b6:04:b0:90:3d:a6:40:35:4a:14: f4:65:1a:20:75:98:ba:c3:1c:c3:a8:54:5d:00:8e: 17:4c:d6:24:23:ff:fb:cf:91:d6:ae:01:60:93:9c: a3:9f:37:c4:4e:e0:4d:88:92:33:6f:01:4c:dd:52: de:54:06:f9:26:81:23:ff:31:79:64:29:bb:ed:a0: 58:2c:dd:98:2d:af:02:0d:04:a2:64:13:f4:10:75: 0d:04:02:60:80:c0:48:8b:66:46:76:c6:49:cb:ba: ad:e9:e5:cf:c9:82:b8:90:c8:b9:d1:ad:8f:64:d6: 57:dd:88:3d:56:0e:f6:e9:93:7e:a4:5f:51:5e:74: 2f:de:5b:a9:11:52:b3:a5:2e:43:7a:9d:2f:45:21: c7:0c:40:b5:b5:15:e3:15:a3:cc:6e:61:c0:8d:b1: 93:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:23:CB:2F:63:D7:05:15:66:DF:58:91:F6:83:D1:AB:C2:BF:90:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/840eebe7-dd14-3e7e-b8f3-fb4c5cdbcd3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:35:ab:48:ee:b9:69:72:ba:ee:26:b6:47:e1:23:ae:cb:f0: 1f:62:0b:3b:10:e5:09:3f:90:44:9e:21:58:cd:ea:0d:33:cc: ec:a8:96:f2:b0:c8:25:c3:f1:77:8c:2b:74:78:54:4f:be:98: 0c:39:d5:ca:3d:4c:e0:78:cf:39:a4:df:5f:a5:d9:38:d0:54: 2a:59:c3:f9:a8:1f:3b:1f:2d:d8:5d:04:b7:ac:89:ec:44:ed: fa:22:9c:2d:29:7a:de:f8:87:69:81:be:24:92:c0:30:50:44: fe:e3:79:fa:35:8a:6a:bf:60:2b:24:8c:d1:71:9c:05:c1:65: b9:bc:74:20:cc:8d:2c:67:5f:2a:38:27:94:3b:f5:21:51:e0: 70:aa:bb:b3:68:c8:8a:53:bd:8c:b5:c8:78:49:6a:27:7c:47: e1:14:c8:2b:78:a8:14:de:a2:11:de:f9:60:09:5c:19:0c:87: 2e:ff:6c:12:fc:6b:bb:e6:be:81:ab:8d:45:e4:6c:3b:0e:64: 5a:3b:40:85:58:61:eb:b5:69:91:c9:6a:ad:fd:47:01:ac:20: 9b:b6:01:1c:87:f8:d5:2e:60:e9:fa:69:40:8b:00:f0:b7:76: 67:52:ed:ad:92:c4:46:0d:89:b0:59:3e:ce:60:14:c1:f8:d4: 3b:9e:48:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3WJbX6ir6W0wafSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDUxNTAxMDAyNFoXDTI2MDgxMzAxMDAyNFowLzEtMCsGA1UEAxMk ZmYyZTJmZTItZTY3MS00YjZhLWIwMmUtNzY2MzRiODliMjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1rmLpKfukl618zvLDM2y9fKsTJDg1YTBknW lZWEwFkLqRF187FmkHQlmvw6dJ4kIoIFZhDEVWjN0gRZvQ6ytAQILtYZDtpthLYo rWEoiH3ZNmn8S1yo1VQKGhwcs7YEsJA9pkA1ShT0ZRogdZi6wxzDqFRdAI4XTNYk I//7z5HWrgFgk5yjnzfETuBNiJIzbwFM3VLeVAb5JoEj/zF5ZCm77aBYLN2YLa8C DQSiZBP0EHUNBAJggMBIi2ZGdsZJy7qt6eXPyYK4kMi50a2PZNZX3Yg9Vg726ZN+ pF9RXnQv3lupEVKzpS5Dep0vRSHHDEC1tRXjFaPMbmHAjbGThwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCsjyy9j1wUVZt9YkfaD0avCv5BPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvODQwZWViZTctZGQxNC0z ZTdlLWI4ZjMtZmI0YzVjZGJjZDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4oZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL41q0juuWlyuu4mtkfhI67L8B9iCzsQ5Qk/kESeIVjN6g0zzOyolvKw yCXD8XeMK3R4VE++mAw51co9TOB4zzmk31+l2TjQVCpZw/moHzsfLdhdBLesiexE 7foinC0pet74h2mBviSSwDBQRP7jefo1imq/YCskjNFxnAXBZbm8dCDMjSxnXyo4 J5Q79SFR4HCqu7NoyIpTvYy1yHhJaid8R+EUyCt4qBTeohHe+WAJXBkMhy7/bBL8 a7vmvoGrjUXkbDsOZFo7QIVYYeu1aZHJaq39RwGsIJu2ARyH+NUuYOn6aUCLAPC3 dmdS7a2SxEYNibBZPs5gFMH41DueSDc= -----END CERTIFICATE-----Generated at Fri May 15 12:14:43 2026 by rpki-client