$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ab43cf20-b0da-39b7-92a9-9b5821633c2c.roa File: ab43cf20-b0da-39b7-92a9-9b5821633c2c.roa (raw, json) Hash identifier: KcVVEb/mqnPkYzUDjPtxw19kA/tg2497hPx3KA1w5EE= Subject key identifier: 29:C1:5D:4C:6D:A6:0A:AA:40:C6:1D:DD:CE:02:7B:DD:67:41:B8:76 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584EC7A1D5BA52EAB4A8940D6C80 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ab43cf20-b0da-39b7-92a9-9b5821633c2c.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 16417 IP address blocks: 139.138.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:d5:ba:52:ea:b4:a8:94:0d:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=8b600199-2007-430f-ad9e-cf679277949f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f0:b9:01:2c:f2:71:77:9a:33:68:e5:a6:13: 1b:cc:00:c5:92:1d:56:43:41:4e:d1:79:dd:95:33: d3:83:7d:89:24:26:cc:a3:06:1e:db:91:ef:ac:44: 18:7b:63:c6:82:42:df:d9:9c:9f:f8:fe:67:85:6d: 48:68:74:bb:8a:28:59:59:5a:89:03:1c:7e:a1:4c: 9d:3e:1d:81:9a:cf:d8:af:f6:0c:19:09:8b:70:27: c9:17:c2:fa:fa:ba:3c:7f:0b:f5:02:4b:31:84:2a: 2b:3a:14:35:c0:4b:f1:06:e7:8f:c4:33:5b:2c:f4: a2:a7:b2:ce:70:7a:d0:63:bb:50:93:81:fe:03:02: 1e:a1:6e:69:b6:37:bb:e6:c6:1a:cb:0e:4f:76:df: 47:ed:19:33:b5:aa:d2:e0:78:e9:99:53:91:02:52: 90:a5:c6:f8:7e:1d:c6:d0:b1:39:1c:4e:9c:25:68: 92:08:15:ee:b5:4b:f2:23:47:ba:49:37:3c:8b:78: aa:9b:ce:56:f0:57:0c:a8:30:96:58:f3:29:2b:97: ec:0e:55:e6:53:62:13:95:14:af:3f:74:fc:3d:8f: 95:2f:71:80:ab:5c:2c:08:15:d0:3c:50:c0:74:c2: e2:2f:aa:e3:8a:6b:a5:ad:ad:58:68:c9:f7:e5:80: b6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C1:5D:4C:6D:A6:0A:AA:40:C6:1D:DD:CE:02:7B:DD:67:41:B8:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ab43cf20-b0da-39b7-92a9-9b5821633c2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:b4:92:c4:d0:df:cd:b5:0c:66:7d:fe:a8:6d:e5:e0:9e:04: 18:92:93:a1:f2:80:04:3c:16:36:8a:d4:a4:ac:97:34:41:30: 5d:87:2b:1d:f4:da:61:8b:e8:a7:e0:ef:ab:ce:e2:bb:6f:2d: 87:30:00:81:2c:5a:01:02:c7:72:dd:c7:21:0e:28:50:be:37: c5:60:3b:5e:65:f3:10:01:c8:57:23:b5:99:2a:a5:fb:05:93: 61:ea:07:2d:7d:f5:a1:76:1f:c9:6e:d8:af:0c:25:f8:58:03: 6d:23:72:8a:0f:43:f1:2a:0e:94:88:ca:c5:18:4d:80:24:2a: 76:55:c3:9a:34:83:ea:f1:b6:bf:ab:56:66:3f:79:64:63:19: f9:35:78:42:2b:19:b8:0a:67:e9:ed:95:9a:e8:25:c5:4b:49: b0:25:e0:4c:e7:85:60:2c:a1:b2:af:9b:73:d5:1f:03:76:87: 07:95:61:b6:27:e1:fd:bb:40:1d:b9:6e:a4:31:2e:e1:f1:d1: e2:6d:5b:76:75:3d:27:66:f9:fa:78:06:99:a9:1c:d1:f7:61: ed:d5:80:47:44:d2:0e:03:08:eb:c7:24:df:38:ff:dc:93:a0: a7:0e:58:e4:14:f0:42:c3:cb:fc:18:46:7d:31:4c:ee:e3:ab: 81:29:8f:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7HodW6Uuq0qJQNbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk OGI2MDAxOTktMjAwNy00MzBmLWFkOWUtY2Y2NzkyNzc5NDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfC5ASzycXeaM2jlphMbzADFkh1WQ0FO0Xnd lTPTg32JJCbMowYe25HvrEQYe2PGgkLf2Zyf+P5nhW1IaHS7iihZWVqJAxx+oUyd Ph2Bms/Yr/YMGQmLcCfJF8L6+ro8fwv1AksxhCorOhQ1wEvxBuePxDNbLPSip7LO cHrQY7tQk4H+AwIeoW5ptje75sYayw5Pdt9H7RkztarS4HjpmVORAlKQpcb4fh3G 0LE5HE6cJWiSCBXutUvyI0e6STc8i3iqm85W8FcMqDCWWPMpK5fsDlXmU2ITlRSv P3T8PY+VL3GAq1wsCBXQPFDAdMLiL6rjimulra1YaMn35YC2EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCnBXUxtpgqqQMYd3c4Ce91nQbh2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYWI0M2NmMjAtYjBkYS0z OWI3LTkyYTktOWI1ODIxNjMzYzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4o4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK+0ksTQ3821DGZ9/qht5eCeBBiSk6HygAQ8FjaK1KSslzRBMF2HKx30 2mGL6Kfg76vO4rtvLYcwAIEsWgECx3LdxyEOKFC+N8VgO15l8xAByFcjtZkqpfsF k2HqBy199aF2H8lu2K8MJfhYA20jcooPQ/EqDpSIysUYTYAkKnZVw5o0g+rxtr+r VmY/eWRjGfk1eEIrGbgKZ+ntlZroJcVLSbAl4EznhWAsobKvm3PVHwN2hweVYbYn 4f27QB25bqQxLuHx0eJtW3Z1PSdm+fp4BpmpHNH3Ye3VgEdE0g4DCOvHJN84/9yT oKcOWOQU8ELDy/wYRn0xTO7jq4Epjz8= -----END CERTIFICATE-----Generated at Sat Sep 12 14:26:34 2026 by rpki-client