$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/8c7ba11c-12e1-3e5f-938f-147bd5c68723.roa File: 8c7ba11c-12e1-3e5f-938f-147bd5c68723.roa (raw, json) Hash identifier: A/BZ1Bv9x6MhN8HkDWD6LFgqcNNvLNEkUSclhobKxXA= Subject key identifier: D7:17:01:34:BE:F9:1F:34:72:79:BF:D6:88:88:F2:BD:96:8D:5D:DB Certificate issuer: /CN=ba584605-7948-4c75-be73-29a89eca8940 Certificate serial: 010D0C9F4328584B7F5214B7F10244E91E1843A0 Authority key identifier: EA:FF:D7:5D:D2:C1:0F:4F:09:3A:53:31:FC:8C:CF:9F:FE:4E:14:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/8c7ba11c-12e1-3e5f-938f-147bd5c68723.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 399315 IP address blocks: 139.102.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/ba584605-7948-4c75-be73-29a89eca8940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/ba584605-7948-4c75-be73-29a89eca8940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:14:b7:f1:02:44:e9:1e:18:43:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba584605-7948-4c75-be73-29a89eca8940 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=761e41d6-b650-4406-b03e-8b0e201a63ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:da:ea:35:68:a0:fc:a9:20:15:9f:cb:b8:0d: 3b:9a:2c:e4:61:e6:59:34:eb:88:66:0f:f4:f2:60: e2:70:c2:0f:db:70:a5:1f:ed:f3:f8:ff:08:01:42: b7:cc:f1:23:8a:e5:8e:02:1a:4e:ac:be:4a:79:5c: f5:ba:07:a1:5d:d1:bc:05:c9:c0:7a:29:28:cd:6a: 79:98:b2:05:57:a5:db:d1:40:70:20:1b:53:9a:b0: 9c:e0:52:ce:90:53:bb:99:28:4c:eb:0a:09:37:c4: ab:d5:06:13:e7:26:70:a2:3f:41:bd:75:b3:48:bd: 99:85:18:54:0a:f9:44:dd:19:56:62:84:ed:b4:4f: 23:48:01:ef:58:4b:81:84:28:9b:42:d4:3d:93:77: 6a:f1:ea:d8:68:b3:59:72:fc:a5:c2:82:67:37:e6: c7:de:ad:90:72:11:55:c8:47:2e:e5:ba:a5:82:4b: f7:5f:22:c6:91:6c:5d:84:00:25:42:45:f7:43:d3: 32:68:c6:e3:46:7f:32:1a:89:eb:d4:5e:35:5f:48: ef:a5:90:83:1b:7b:0d:05:0d:32:08:a0:43:48:10: ce:76:a4:57:8a:2f:8f:8b:15:aa:76:06:f8:c2:a9: 8d:0e:79:04:1b:01:d7:ad:c8:07:8c:f0:c6:81:b6: 6b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:17:01:34:BE:F9:1F:34:72:79:BF:D6:88:88:F2:BD:96:8D:5D:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/8c7ba11c-12e1-3e5f-938f-147bd5c68723.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/ba584605-7948-4c75-be73-29a89eca8940.crl X509v3 Authority Key Identifier: keyid:EA:FF:D7:5D:D2:C1:0F:4F:09:3A:53:31:FC:8C:CF:9F:FE:4E:14:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940.cer sbgp-ipAddrBlock: critical IPv4: 139.102.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:3e:48:fb:f8:26:89:7e:c7:c9:d1:6c:98:0c:0f:d3:4e:c4: 87:05:29:f4:15:86:bc:47:17:a2:6d:50:8a:55:c4:d9:98:c9: df:46:3e:0b:e8:84:1b:2a:7a:79:b9:16:57:6f:cb:80:4b:d9: 30:70:46:56:a0:d0:5a:0a:13:d4:db:9d:c7:4c:fe:f3:a3:ae: 86:b3:25:32:21:64:0c:a3:6f:ac:04:04:b3:b4:cb:20:22:52: a4:b3:53:ab:80:38:24:0f:6c:49:da:39:a4:1d:36:cc:8c:b5: f4:72:85:de:5a:13:31:98:b5:38:4d:33:6a:4c:9f:b9:5b:77: fa:86:4b:fb:e3:cc:01:f7:97:07:a1:ce:26:a7:da:d3:dd:63: 78:a7:8a:b7:b2:83:62:f5:1e:3e:35:34:b2:80:e7:12:f1:8a: d2:91:a6:fe:f8:0b:bb:66:31:b9:ef:9e:80:30:5c:29:d4:98: 21:50:28:41:69:21:2a:0b:5e:46:05:43:9c:3c:23:12:55:5d: ff:75:7a:39:78:83:0e:29:d3:52:52:ea:ab:fb:20:fb:6c:65: 54:8d:bc:f2:2a:4a:8e:59:41:02:07:63:13:f4:23:79:79:d5: 7c:ba:40:8c:7b:e4:d5:b2:66:ff:80:e9:ea:1d:6e:0b:fb:5e: ee:ab:ed:12 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEt/UhS38QJE6R4YQ6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE1ODQ2MDUtNzk0OC00Yzc1LWJlNzMtMjlhODllY2E4 OTQwMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NzYxZTQxZDYtYjY1MC00NDA2LWIwM2UtOGIwZTIwMWE2M2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9rqNWig/KkgFZ/LuA07mizkYeZZNOuIZg/0 8mDicMIP23ClH+3z+P8IAUK3zPEjiuWOAhpOrL5KeVz1ugehXdG8BcnAeikozWp5 mLIFV6Xb0UBwIBtTmrCc4FLOkFO7mShM6woJN8Sr1QYT5yZwoj9BvXWzSL2ZhRhU CvlE3RlWYoTttE8jSAHvWEuBhCibQtQ9k3dq8erYaLNZcvylwoJnN+bH3q2QchFV yEcu5bqlgkv3XyLGkWxdhAAlQkX3Q9MyaMbjRn8yGonr1F41X0jvpZCDG3sNBQ0y CKBDSBDOdqRXii+PixWqdgb4wqmNDnkEGwHXrcgHjPDGgbZrTQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNcXATS++R80cnm/1oiI8r2WjV3bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iYTU4 NDYwNS03OTQ4LTRjNzUtYmU3My0yOWE4OWVjYTg5NDAvOGM3YmExMWMtMTJlMS0z ZTVmLTkzOGYtMTQ3YmQ1YzY4NzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYmE1ODQ2MDUtNzk0OC00Yzc1LWJl NzMtMjlhODllY2E4OTQwL2JhNTg0NjA1LTc5NDgtNGM3NS1iZTczLTI5YTg5ZWNh ODk0MC5jcmwwHwYDVR0jBBgwFoAU6v/XXdLBD08JOlMx/IzPn/5OFCYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iYTU4NDYwNS03OTQ4LTRjNzUtYmU3My0yOWE4 OWVjYTg5NDAuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAi2YwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAOT5I+/gmiX7HydFsmAwP007EhwUp9BWGvEcXom1QilXE2ZjJ30Y+C+iE Gyp6ebkWV2/LgEvZMHBGVqDQWgoT1Nudx0z+86OuhrMlMiFkDKNvrAQEs7TLICJS pLNTq4A4JA9sSdo5pB02zIy19HKF3loTMZi1OE0zakyfuVt3+oZL++PMAfeXB6HO Jqfa091jeKeKt7KDYvUePjU0soDnEvGK0pGm/vgLu2Yxue+egDBcKdSYIVAoQWkh KgteRgVDnDwjElVd/3V6OXiDDinTUlLqq/sg+2xlVI288ipKjllBAgdjE/QjeXnV fLpAjHvk1bJm/4Dp6h1uC/te7qvtEg== -----END CERTIFICATE-----Generated at Mon Oct 20 03:23:53 2025 by rpki-client