$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/8c7ba11c-12e1-3e5f-938f-147bd5c68723.roa File: 8c7ba11c-12e1-3e5f-938f-147bd5c68723.roa (raw, json) Hash identifier: 6FzmmRNyky9sgmGPziBEZLIP93GEfSZqJoRVp5/12pk= Subject key identifier: 28:7D:23:A3:F7:25:8A:26:BD:CE:98:55:A6:1F:E4:DA:28:02:1D:C5 Certificate issuer: /CN=ba584605-7948-4c75-be73-29a89eca8940 Certificate serial: 010D0C9F4328584D3DFFB51BEC46382E7CEBD8C0 Authority key identifier: EA:FF:D7:5D:D2:C1:0F:4F:09:3A:53:31:FC:8C:CF:9F:FE:4E:14:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/8c7ba11c-12e1-3e5f-938f-147bd5c68723.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 399315 IP address blocks: 139.102.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/ba584605-7948-4c75-be73-29a89eca8940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/ba584605-7948-4c75-be73-29a89eca8940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:b5:1b:ec:46:38:2e:7c:eb:d8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba584605-7948-4c75-be73-29a89eca8940 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=8608740c-f0d1-4910-9da1-64fd4147c2ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d4:d5:d5:a6:83:54:89:fb:c5:68:b7:c3:8a: 54:9f:d6:60:b0:ed:a2:70:aa:38:9e:46:3c:b3:f8: 3a:11:30:de:72:c5:90:37:ad:31:30:a7:65:d0:59: 00:26:aa:71:a2:82:d7:8c:cc:58:9c:d2:99:c7:8b: 20:cf:a5:32:ca:b5:75:92:78:87:7d:ad:f0:bd:72: 02:34:b7:11:24:2f:6d:9b:59:9e:5f:b0:f1:50:85: 21:b0:48:fc:e5:a0:97:15:7e:03:bd:57:70:2f:04: b9:84:c1:4e:ba:a8:99:36:14:e9:8b:68:67:e6:a0: 84:00:8c:e9:f7:91:81:f5:26:28:f9:55:6f:63:83: d4:0a:e2:e7:01:ef:f7:ad:7e:22:6a:9a:87:de:e2: 3c:6a:a9:8a:f6:fe:33:ad:15:9e:4a:ce:ba:31:fe: 67:26:fd:59:0e:56:de:b9:42:67:18:15:d8:dc:31: 25:c8:43:23:f5:9b:1f:d7:32:b6:5b:93:9a:2a:04: b2:15:dd:fe:93:a6:de:84:5f:47:52:d5:16:54:e7: 3c:c6:7f:74:b7:ee:37:b8:ad:57:41:f0:4b:20:bc: 0e:1f:65:60:76:b7:88:52:c9:93:1d:1f:a0:32:df: 29:c6:7c:39:7c:cd:14:8d:07:cb:16:84:3e:3f:88: 33:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:7D:23:A3:F7:25:8A:26:BD:CE:98:55:A6:1F:E4:DA:28:02:1D:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/8c7ba11c-12e1-3e5f-938f-147bd5c68723.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/ba584605-7948-4c75-be73-29a89eca8940.crl X509v3 Authority Key Identifier: keyid:EA:FF:D7:5D:D2:C1:0F:4F:09:3A:53:31:FC:8C:CF:9F:FE:4E:14:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940.cer sbgp-ipAddrBlock: critical IPv4: 139.102.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:27:6a:b4:03:9d:8d:0f:7d:1c:47:03:52:49:72:0c:19:46: 91:84:87:e1:0c:71:8f:d1:a8:5e:fc:74:0a:f8:b6:8c:c2:7a: 42:08:59:7b:fa:f0:11:fb:7e:66:ed:34:3f:68:fd:81:de:20: e6:ef:02:a3:d2:0b:38:a5:09:ad:16:66:1e:74:ad:02:32:31: 98:e8:11:59:0e:29:f6:78:e3:7e:f7:29:dc:76:6a:21:2d:bb: f9:02:69:42:00:4f:57:cb:e3:86:65:3c:65:94:7d:31:af:e8: 75:6a:ab:33:a7:83:92:55:da:06:f4:b6:f9:87:b1:39:13:3e: 4a:ec:70:d7:09:55:26:c7:2c:1c:75:8a:02:38:ab:79:69:17: 53:7d:e9:20:cb:d6:7a:0a:91:c5:c1:33:c1:20:ac:26:c0:61: b3:84:aa:b6:50:03:66:55:5d:ca:43:66:ef:1e:03:d3:ac:d8: 3b:0d:c9:45:26:58:86:93:bc:16:56:f4:63:b8:d0:73:c6:ed: b7:3f:f1:98:5c:4d:31:dc:b3:f3:3d:83:a2:eb:4b:51:45:04: 58:07:d1:ba:19:80:1e:bc:a4:2c:28:3b:f5:df:61:c5:37:b4: e8:04:44:37:06:a2:43:19:f6:46:31:68:36:3f:a1:a1:39:86: 1a:35:d2:89 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE09/7Ub7EY4Lnzr2MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE1ODQ2MDUtNzk0OC00Yzc1LWJlNzMtMjlhODllY2E4 OTQwMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ODYwODc0MGMtZjBkMS00OTEwLTlkYTEtNjRmZDQxNDdjMmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNTV1aaDVIn7xWi3w4pUn9ZgsO2icKo4nkY8 s/g6ETDecsWQN60xMKdl0FkAJqpxooLXjMxYnNKZx4sgz6UyyrV1kniHfa3wvXIC NLcRJC9tm1meX7DxUIUhsEj85aCXFX4DvVdwLwS5hMFOuqiZNhTpi2hn5qCEAIzp 95GB9SYo+VVvY4PUCuLnAe/3rX4iapqH3uI8aqmK9v4zrRWeSs66Mf5nJv1ZDlbe uUJnGBXY3DElyEMj9Zsf1zK2W5OaKgSyFd3+k6behF9HUtUWVOc8xn90t+43uK1X QfBLILwOH2VgdreIUsmTHR+gMt8pxnw5fM0UjQfLFoQ+P4gz0QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCh9I6P3JYomvc6YVaYf5NooAh3FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iYTU4 NDYwNS03OTQ4LTRjNzUtYmU3My0yOWE4OWVjYTg5NDAvOGM3YmExMWMtMTJlMS0z ZTVmLTkzOGYtMTQ3YmQ1YzY4NzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYmE1ODQ2MDUtNzk0OC00Yzc1LWJl NzMtMjlhODllY2E4OTQwL2JhNTg0NjA1LTc5NDgtNGM3NS1iZTczLTI5YTg5ZWNh ODk0MC5jcmwwHwYDVR0jBBgwFoAU6v/XXdLBD08JOlMx/IzPn/5OFCYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iYTU4NDYwNS03OTQ4LTRjNzUtYmU3My0yOWE4 OWVjYTg5NDAuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAi2YwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAJydqtAOdjQ99HEcDUklyDBlGkYSH4Qxxj9GoXvx0Cvi2jMJ6QghZe/rw Eft+Zu00P2j9gd4g5u8Co9ILOKUJrRZmHnStAjIxmOgRWQ4p9njjfvcp3HZqIS27 +QJpQgBPV8vjhmU8ZZR9Ma/odWqrM6eDklXaBvS2+YexORM+Suxw1wlVJscsHHWK AjireWkXU33pIMvWegqRxcEzwSCsJsBhs4SqtlADZlVdykNm7x4D06zYOw3JRSZY hpO8Flb0Y7jQc8bttz/xmFxNMdyz8z2DoutLUUUEWAfRuhmAHrykLCg79d9hxTe0 6ARENwaiQxn2RjFoNj+hoTmGGjXSiQ== -----END CERTIFICATE-----Generated at Fri Mar 27 05:00:42 2026 by rpki-client