$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/098b3dfb-a69b-3853-a0ba-0e83b07b8baa.roa File: 098b3dfb-a69b-3853-a0ba-0e83b07b8baa.roa (raw, json) Hash identifier: IybQtkoMjr700Pa5N5J5tHvHuJE/b6P/ZOTj6RfhNJA= Subject key identifier: AA:E3:D2:07:E6:C3:19:8E:11:19:1D:AF:38:8D:2D:33:10:25:09:D3 Certificate issuer: /CN=ba584605-7948-4c75-be73-29a89eca8940 Certificate serial: 010D0C9F4328584D3DFFB50F7520C9484B500700 Authority key identifier: EA:FF:D7:5D:D2:C1:0F:4F:09:3A:53:31:FC:8C:CF:9F:FE:4E:14:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/098b3dfb-a69b-3853-a0ba-0e83b07b8baa.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 399315 IP address blocks: 139.102.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/ba584605-7948-4c75-be73-29a89eca8940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/ba584605-7948-4c75-be73-29a89eca8940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:b5:0f:75:20:c9:48:4b:50:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba584605-7948-4c75-be73-29a89eca8940 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=a74559d4-0009-472a-a7a3-fb9d8e366421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d1:44:5c:44:84:9f:87:af:fa:84:9e:d2:d5: 4f:8b:65:ef:8f:2c:c3:05:0d:eb:2f:bd:49:b7:d8: 5b:4b:dd:a9:4b:0b:55:e9:c6:30:62:2c:97:77:5d: ba:fb:fd:6b:00:01:93:5e:15:f6:8e:a1:6f:db:2f: 83:ff:9b:e2:67:65:a9:29:32:89:07:e6:db:5a:13: d3:c8:69:80:46:5f:e1:21:7b:5b:56:ae:e6:31:d6: e5:a2:bf:ac:56:0b:47:f6:91:b5:b5:34:74:82:46: 6b:f5:fe:1a:2e:5a:41:b4:6f:f4:fb:27:52:c2:33: 4f:1f:c7:55:83:a3:6e:b8:0a:d8:2a:d1:59:f0:b9: 2c:48:c6:ba:0f:35:71:88:1c:6d:12:f2:e7:f3:9d: 31:c3:37:97:1d:cd:13:37:2b:90:ca:7b:70:5a:b3: 2e:6c:e1:0c:44:6c:43:d2:2d:f4:b4:6c:f7:e6:14: 5a:f8:14:16:eb:84:3e:a4:d2:10:ea:24:fc:0a:c2: 63:59:ad:75:f9:38:11:69:76:1f:ec:b7:39:e3:ed: b5:a8:3b:bc:79:82:1d:70:ac:83:61:c7:ad:59:a1: 07:8a:aa:6f:0f:f1:b0:46:66:0e:57:41:ff:fd:cb: b1:82:04:fa:71:16:9f:c1:2e:c6:63:e8:96:90:ff: e1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E3:D2:07:E6:C3:19:8E:11:19:1D:AF:38:8D:2D:33:10:25:09:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/098b3dfb-a69b-3853-a0ba-0e83b07b8baa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/ba584605-7948-4c75-be73-29a89eca8940.crl X509v3 Authority Key Identifier: keyid:EA:FF:D7:5D:D2:C1:0F:4F:09:3A:53:31:FC:8C:CF:9F:FE:4E:14:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940.cer sbgp-ipAddrBlock: critical IPv4: 139.102.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:1c:54:a5:df:57:06:46:1e:85:52:12:42:c6:3f:78:32:61: 20:41:20:14:9a:ae:e4:d9:67:39:a1:88:55:24:b6:b8:f8:3a: 11:75:8b:9a:be:c7:de:fe:57:c9:7b:20:22:9c:11:50:4e:1b: e4:30:16:b0:16:1d:c0:72:0d:ef:f0:21:88:7c:70:7b:1a:f0: dc:c9:67:b3:85:2e:ee:5d:71:df:82:a5:89:fb:82:09:af:bf: e1:e5:a9:ca:c4:1c:7e:43:64:2b:1c:27:17:50:97:a2:dc:28: 7e:38:9a:93:08:1d:c3:85:85:74:96:5e:10:79:8b:cf:8e:8b: 1f:42:20:3b:6b:02:52:58:b1:ec:cc:21:d8:bc:e3:6b:8d:7e: 0d:84:a3:be:4f:e0:df:ae:f4:19:b4:40:0b:a1:18:b9:a8:e6: de:27:72:89:51:2c:dd:ae:29:3a:25:00:69:e7:a6:14:99:20: c7:4f:46:89:6e:eb:3d:f6:e8:bf:d5:6c:3e:64:18:87:95:6f: de:66:a9:fb:1a:8c:d2:56:74:c0:27:12:ac:d4:b6:55:1e:0f: 43:ae:ec:40:c6:04:4d:bf:a9:f8:38:d9:a8:41:7f:3e:a4:37: 0d:32:ad:83:f8:57:1d:a3:7d:74:27:0c:c2:a3:21:2e:ac:68: 46:aa:40:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/7UPdSDJSEtQBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE1ODQ2MDUtNzk0OC00Yzc1LWJlNzMtMjlhODllY2E4 OTQwMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk YTc0NTU5ZDQtMDAwOS00NzJhLWE3YTMtZmI5ZDhlMzY2NDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtFEXESEn4ev+oSe0tVPi2XvjyzDBQ3rL71J t9hbS92pSwtV6cYwYiyXd126+/1rAAGTXhX2jqFv2y+D/5viZ2WpKTKJB+bbWhPT yGmARl/hIXtbVq7mMdblor+sVgtH9pG1tTR0gkZr9f4aLlpBtG/0+ydSwjNPH8dV g6NuuArYKtFZ8LksSMa6DzVxiBxtEvLn850xwzeXHc0TNyuQyntwWrMubOEMRGxD 0i30tGz35hRa+BQW64Q+pNIQ6iT8CsJjWa11+TgRaXYf7Lc54+21qDu8eYIdcKyD YcetWaEHiqpvD/GwRmYOV0H//cuxggT6cRafwS7GY+iWkP/hpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrj0gfmwxmOERkdrziNLTMQJQnTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iYTU4 NDYwNS03OTQ4LTRjNzUtYmU3My0yOWE4OWVjYTg5NDAvMDk4YjNkZmItYTY5Yi0z ODUzLWEwYmEtMGU4M2IwN2I4YmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYmE1ODQ2MDUtNzk0OC00Yzc1LWJl NzMtMjlhODllY2E4OTQwL2JhNTg0NjA1LTc5NDgtNGM3NS1iZTczLTI5YTg5ZWNh ODk0MC5jcmwwHwYDVR0jBBgwFoAU6v/XXdLBD08JOlMx/IzPn/5OFCYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iYTU4NDYwNS03OTQ4LTRjNzUtYmU3My0yOWE4 OWVjYTg5NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi2ZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkcVKXfVwZGHoVSEkLGP3gyYSBBIBSaruTZZzmhiFUktrj4OhF1i5q+ x97+V8l7ICKcEVBOG+QwFrAWHcByDe/wIYh8cHsa8NzJZ7OFLu5dcd+CpYn7ggmv v+HlqcrEHH5DZCscJxdQl6LcKH44mpMIHcOFhXSWXhB5i8+Oix9CIDtrAlJYsezM Idi842uNfg2Eo75P4N+u9Bm0QAuhGLmo5t4ncolRLN2uKTolAGnnphSZIMdPRolu 6z326L/VbD5kGIeVb95mqfsajNJWdMAnEqzUtlUeD0Ou7EDGBE2/qfg42ahBfz6k Nw0yrYP4Vx2jfXQnDMKjIS6saEaqQAA= -----END CERTIFICATE-----Generated at Thu Mar 26 16:02:14 2026 by rpki-client