$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ba1959ca-c556-3a0c-941b-13e8b5f9aaa4.roa File: ba1959ca-c556-3a0c-941b-13e8b5f9aaa4.roa (raw, json) Hash identifier: gfkPMiwDBvA72Z76YcOAG6SbVIsplkq6ov9ysekzR/0= Subject key identifier: E5:42:3B:42:B4:A2:76:D9:B0:9D:CA:E0:E9:18:32:3D:62:3F:35:7F Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584D44FA4823F760E560B95C2E40 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ba1959ca-c556-3a0c-941b-13e8b5f9aaa4.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 16417 IP address blocks: 139.138.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:48:23:f7:60:e5:60:b9:5c:2e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=4d466bb6-a4e0-49b8-84d6-17eb8d56e531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:b5:a8:ca:78:b9:e8:d6:24:ce:f5:17:0b:c5: 6b:dc:b6:8d:53:62:9b:53:a3:69:bc:55:ee:5d:7c: 6a:49:45:be:01:df:5e:c1:7c:5f:9d:64:98:42:33: 89:68:48:5a:62:e2:1a:23:f7:35:0a:23:c9:1b:e7: 69:a4:b4:6a:bb:69:dc:65:d4:bf:3f:9a:4a:71:25: b8:b2:95:23:5a:ca:93:3b:2d:fb:c4:18:f1:ae:ed: ed:b5:46:ae:ee:f0:3f:f4:26:ca:57:a3:fc:92:59: c2:12:af:cc:f0:90:f4:33:72:ca:a7:87:0c:05:d0: df:7a:7b:7c:7e:6e:16:41:60:11:76:2a:c1:e8:ab: 9e:d2:31:05:cb:c3:da:77:33:3c:3f:76:f5:e9:e7: 22:36:b9:ab:b3:c0:fd:5c:a9:61:7f:44:7d:96:dd: e3:a8:0b:f5:3b:1a:9e:22:8a:b7:c6:90:dd:66:61: 16:b8:7d:25:25:d6:16:d8:2b:c4:fb:8a:94:27:ff: d3:0b:56:18:5a:24:25:76:af:e3:f7:43:a2:e2:04: f4:68:5a:eb:83:6b:cf:ac:dc:df:f7:85:a0:7f:7a: be:6e:c6:64:2b:cf:2c:20:6f:22:ab:d1:73:3d:17: d7:43:9a:88:29:77:02:1e:21:b4:19:f9:b3:ec:88: 25:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:42:3B:42:B4:A2:76:D9:B0:9D:CA:E0:E9:18:32:3D:62:3F:35:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ba1959ca-c556-3a0c-941b-13e8b5f9aaa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:15:67:02:9d:d0:e4:31:17:5a:ee:16:ae:42:d2:ba:43:5a: 67:a5:5e:e8:53:8f:40:c4:51:6d:fe:e5:c8:87:3a:d7:03:78: fe:67:6f:fc:7e:42:04:6b:d4:bf:70:23:27:d0:b3:25:3b:25: bc:84:bd:b3:8a:01:8a:e2:26:36:62:24:e1:30:06:44:1f:36: 13:04:ca:26:db:ef:6c:e9:fe:c6:ed:19:2e:2c:ec:43:51:3b: 01:91:82:53:62:df:86:4f:81:77:23:c3:94:2e:68:6d:a0:3f: ac:8f:c5:86:71:55:6a:93:51:5b:ea:e2:fb:72:04:d2:8b:ce: f2:3e:25:44:75:23:4f:32:07:bb:e4:e1:4d:49:8f:6a:4c:8b: 89:4b:4d:ac:e3:66:f3:51:8c:da:7c:7f:a9:e4:aa:63:fe:d8: c3:c7:4b:b1:07:a1:6a:bb:ec:32:57:48:e1:96:19:b4:93:f0: bd:9d:c3:dd:45:a1:6a:ab:61:19:d7:73:06:51:f4:59:b3:09: 84:ba:dd:c0:fc:cc:77:02:37:11:a9:95:19:30:85:ed:d1:18: 1c:6f:d5:b7:fc:ab:62:ad:04:e5:7a:ad:f9:35:2e:39:35:b7: 5f:0a:0c:fe:0d:08:38:eb:ae:80:93:b1:04:fa:72:be:52:83: 37:8e:e6:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+kgj92DlYLlcLkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk NGQ0NjZiYjYtYTRlMC00OWI4LTg0ZDYtMTdlYjhkNTZlNTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA77Woyni56NYkzvUXC8Vr3LaNU2KbU6NpvFXu XXxqSUW+Ad9ewXxfnWSYQjOJaEhaYuIaI/c1CiPJG+dppLRqu2ncZdS/P5pKcSW4 spUjWsqTOy37xBjxru3ttUau7vA/9CbKV6P8klnCEq/M8JD0M3LKp4cMBdDfent8 fm4WQWARdirB6Kue0jEFy8PadzM8P3b16eciNrmrs8D9XKlhf0R9lt3jqAv1Oxqe Ioq3xpDdZmEWuH0lJdYW2CvE+4qUJ//TC1YYWiQldq/j90Oi4gT0aFrrg2vPrNzf 94Wgf3q+bsZkK88sIG8iq9FzPRfXQ5qIKXcCHiG0Gfmz7IglDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVCO0K0onbZsJ3K4OkYMj1iPzV/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYmExOTU5Y2EtYzU1Ni0z YTBjLTk0MWItMTNlOGI1ZjlhYWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4o7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0VZwKd0OQxF1ruFq5C0rpDWmelXuhTj0DEUW3+5ciHOtcDeP5nb/x+ QgRr1L9wIyfQsyU7JbyEvbOKAYriJjZiJOEwBkQfNhMEyibb72zp/sbtGS4s7ENR OwGRglNi34ZPgXcjw5QuaG2gP6yPxYZxVWqTUVvq4vtyBNKLzvI+JUR1I08yB7vk 4U1Jj2pMi4lLTazjZvNRjNp8f6nkqmP+2MPHS7EHoWq77DJXSOGWGbST8L2dw91F oWqrYRnXcwZR9FmzCYS63cD8zHcCNxGplRkwhe3RGBxv1bf8q2KtBOV6rfk1Ljk1 t18KDP4NCDjrroCTsQT6cr5SgzeO5tE= -----END CERTIFICATE-----Generated at Thu Mar 26 23:51:00 2026 by rpki-client