$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/098b3dfb-a69b-3853-a0ba-0e83b07b8baa.roa File: 098b3dfb-a69b-3853-a0ba-0e83b07b8baa.roa (raw, json) Hash identifier: X1QchWPqh4RakzWRncBcobK/QtccEM0Plw73KRi5tQw= Subject key identifier: E3:5B:9B:E0:F1:4C:35:ED:52:71:C6:E0:A2:8D:7F:22:0C:EF:AA:4A Certificate issuer: /CN=ba584605-7948-4c75-be73-29a89eca8940 Certificate serial: 010D0C9F4328584B7F5214A4FA5418A89180C6C0 Authority key identifier: EA:FF:D7:5D:D2:C1:0F:4F:09:3A:53:31:FC:8C:CF:9F:FE:4E:14:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/098b3dfb-a69b-3853-a0ba-0e83b07b8baa.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 399315 IP address blocks: 139.102.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/ba584605-7948-4c75-be73-29a89eca8940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/ba584605-7948-4c75-be73-29a89eca8940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:14:a4:fa:54:18:a8:91:80:c6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba584605-7948-4c75-be73-29a89eca8940 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=f0cccb5d-c246-4697-ae47-c6a81cc0439d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f4:83:30:06:86:1b:d6:be:68:4d:8d:f4:03: 0a:12:dd:2c:42:2e:22:96:cd:90:70:b4:ef:8b:2e: 01:86:8a:5a:fc:54:bb:65:9f:9a:03:a5:92:f3:1b: 24:5c:17:0a:a7:48:ba:0f:30:95:a1:e1:f6:51:f0: 5c:39:6f:2d:63:d8:79:d7:74:cc:67:55:7b:4e:70: 3d:6e:5f:8b:a2:b6:ca:7b:a4:6c:64:98:b7:96:b0: 3a:87:ae:c7:8e:1e:52:28:34:e9:2e:89:44:52:e4: d2:5a:0a:a0:c5:30:68:f9:c3:ce:92:da:a7:84:3d: 2d:8c:5f:fa:49:89:61:75:60:70:52:7c:60:d2:2b: d3:76:8b:aa:7b:d1:79:66:32:c9:4c:44:1e:92:a6: 94:a4:c2:34:64:7d:e5:07:c9:2f:d0:e3:b8:d4:28: d2:2b:45:73:a0:a7:80:d8:3c:55:86:be:2c:7f:db: 89:26:c9:6d:8b:d6:be:37:81:c1:df:ba:4f:9d:f7: 11:54:1f:44:41:d4:42:23:a6:fd:37:03:76:e1:d9: e5:ff:5c:c0:f5:73:e3:70:d4:6f:43:f2:35:83:d4: ff:fe:62:4c:78:6e:14:6e:a1:3e:22:dc:9f:99:2f: f3:17:f6:52:fd:58:d6:b9:55:b1:51:ae:1c:c5:9a: 4a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:5B:9B:E0:F1:4C:35:ED:52:71:C6:E0:A2:8D:7F:22:0C:EF:AA:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/098b3dfb-a69b-3853-a0ba-0e83b07b8baa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/ba584605-7948-4c75-be73-29a89eca8940.crl X509v3 Authority Key Identifier: keyid:EA:FF:D7:5D:D2:C1:0F:4F:09:3A:53:31:FC:8C:CF:9F:FE:4E:14:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940.cer sbgp-ipAddrBlock: critical IPv4: 139.102.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:2a:35:7d:2c:91:e2:be:d8:1a:e8:99:26:9c:17:95:40:06: ae:ea:ac:bf:2f:3e:d3:0a:29:f4:98:ec:d8:2c:3e:de:6a:01: 40:e9:07:a7:b7:c8:42:a7:00:9a:6b:9e:d0:ac:d3:1e:fa:d9: b7:19:67:45:eb:3a:48:ab:14:b5:1f:64:db:2d:f3:5e:c5:b3: 93:77:de:51:46:18:e9:33:b0:e5:87:c9:97:6d:b0:7d:c4:52: 0c:c7:5d:89:5d:ac:72:8e:2b:00:2b:b0:62:e2:b4:ba:28:3a: 06:84:63:d2:cf:06:9d:bd:67:3b:0d:a5:40:49:68:be:35:8e: 9a:ca:fc:ca:34:a7:45:9c:a6:67:57:98:5d:52:18:c9:11:1e: 4b:66:15:dc:e3:66:5f:e4:b9:ca:78:cf:81:6e:2f:0d:94:b6: e7:39:f3:16:cf:b0:28:91:5e:9a:a9:21:eb:65:a6:61:cb:a6: f0:e7:af:82:64:74:04:a8:8e:39:8a:9c:81:5d:3c:90:af:75: cb:7f:a3:e7:6a:80:ff:b7:05:b4:24:ad:be:ba:6c:23:a5:0d: c0:38:13:ad:e7:11:95:5d:af:ed:c9:7b:3c:e5:75:49:7d:b0: 1a:ee:b4:5e:6c:d0:e7:e4:d0:08:1d:06:a8:08:15:c4:10:d4: 1a:8f:72:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UhSk+lQYqJGAxsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE1ODQ2MDUtNzk0OC00Yzc1LWJlNzMtMjlhODllY2E4 OTQwMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk ZjBjY2NiNWQtYzI0Ni00Njk3LWFlNDctYzZhODFjYzA0MzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/SDMAaGG9a+aE2N9AMKEt0sQi4ils2QcLTv iy4Bhopa/FS7ZZ+aA6WS8xskXBcKp0i6DzCVoeH2UfBcOW8tY9h513TMZ1V7TnA9 bl+LorbKe6RsZJi3lrA6h67Hjh5SKDTpLolEUuTSWgqgxTBo+cPOktqnhD0tjF/6 SYlhdWBwUnxg0ivTdouqe9F5ZjLJTEQekqaUpMI0ZH3lB8kv0OO41CjSK0VzoKeA 2DxVhr4sf9uJJslti9a+N4HB37pPnfcRVB9EQdRCI6b9NwN24dnl/1zA9XPjcNRv Q/I1g9T//mJMeG4UbqE+ItyfmS/zF/ZS/VjWuVWxUa4cxZpKvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONbm+DxTDXtUnHG4KKNfyIM76pKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iYTU4 NDYwNS03OTQ4LTRjNzUtYmU3My0yOWE4OWVjYTg5NDAvMDk4YjNkZmItYTY5Yi0z ODUzLWEwYmEtMGU4M2IwN2I4YmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYmE1ODQ2MDUtNzk0OC00Yzc1LWJl NzMtMjlhODllY2E4OTQwL2JhNTg0NjA1LTc5NDgtNGM3NS1iZTczLTI5YTg5ZWNh ODk0MC5jcmwwHwYDVR0jBBgwFoAU6v/XXdLBD08JOlMx/IzPn/5OFCYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iYTU4NDYwNS03OTQ4LTRjNzUtYmU3My0yOWE4 OWVjYTg5NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi2ZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUqNX0skeK+2BromSacF5VABq7qrL8vPtMKKfSY7NgsPt5qAUDpB6e3 yEKnAJprntCs0x762bcZZ0XrOkirFLUfZNst817Fs5N33lFGGOkzsOWHyZdtsH3E UgzHXYldrHKOKwArsGLitLooOgaEY9LPBp29ZzsNpUBJaL41jprK/Mo0p0WcpmdX mF1SGMkRHktmFdzjZl/kucp4z4FuLw2Utuc58xbPsCiRXpqpIetlpmHLpvDnr4Jk dASojjmKnIFdPJCvdct/o+dqgP+3BbQkrb66bCOlDcA4E63nEZVdr+3JezzldUl9 sBrutF5s0Ofk0AgdBqgIFcQQ1BqPcuQ= -----END CERTIFICATE-----Generated at Mon Oct 20 14:40:03 2025 by rpki-client