$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ba1959ca-c556-3a0c-941b-13e8b5f9aaa4.roa File: ba1959ca-c556-3a0c-941b-13e8b5f9aaa4.roa (raw, json) Hash identifier: qwzgWQ22ShPcEbFmr267YETKDLREIwFGlbVGxRTd42k= Subject key identifier: 30:D2:22:05:8C:7C:2B:2F:D4:40:EC:92:18:09:1C:AA:BA:8F:5A:09 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584F698D873604CEB336D0FB2B70 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ba1959ca-c556-3a0c-941b-13e8b5f9aaa4.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 16417 IP address blocks: 139.138.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:87:36:04:ce:b3:36:d0:fb:2b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=8b8cee77-d129-42b3-9c58-b49d6cb59dfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:62:f5:10:c8:bb:61:ec:1e:1b:10:98:73:cd: 54:27:3d:07:14:48:f9:ca:bf:0e:fd:72:cb:30:c0: 54:c4:70:50:26:33:9a:b8:04:a9:54:08:2f:ae:cd: cd:1d:4b:c0:a3:0c:d8:10:0d:c6:3c:87:5f:c4:35: 3c:c6:5a:c4:47:ba:a4:2a:71:df:bd:42:86:dd:9b: 21:11:74:26:74:a1:39:c3:fd:d3:ce:fa:fd:94:d3: a5:5b:a5:3c:1a:37:99:66:21:8d:71:d3:5e:93:20: 9d:37:7a:6d:a0:9e:bd:6e:5d:cf:f9:94:50:81:ee: 14:5b:4c:62:ed:7a:5f:1c:eb:c6:94:de:74:aa:9e: 33:42:13:1d:4d:01:a6:3f:19:5f:e7:2d:e5:ff:89: 67:cb:b0:89:66:71:bd:22:6a:00:52:8f:f9:7e:24: 0d:6d:96:07:30:8f:f4:62:f3:50:4e:90:6b:56:1c: 3c:6b:56:43:a2:9e:05:71:fd:19:36:9a:41:1a:bc: 16:0d:a8:cf:32:b4:24:b8:a1:25:f2:3b:2c:d6:9a: e1:bb:97:6a:a2:ea:13:a1:cf:98:db:a8:ac:fa:fb: 35:c9:89:0d:2e:81:b7:b2:4c:e2:68:c8:ae:7a:91: c6:c5:0d:fe:9c:54:03:7b:d3:d3:5d:ba:d6:c8:b2: e0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D2:22:05:8C:7C:2B:2F:D4:40:EC:92:18:09:1C:AA:BA:8F:5A:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ba1959ca-c556-3a0c-941b-13e8b5f9aaa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:40:b6:39:40:f9:24:ca:2b:72:96:06:a1:02:5d:2f:95:80: 99:b5:9c:28:99:1f:f1:2e:04:b3:55:1c:d1:c7:f0:52:94:24: 7d:a3:6d:ff:ae:4f:7b:eb:0c:bf:37:a1:e6:c1:38:61:68:91: 8f:d9:66:64:24:55:07:c4:81:aa:49:32:ec:24:28:69:7c:5e: f7:47:15:e4:83:61:d6:29:b8:a4:ea:0d:4f:c4:a3:41:c3:86: 32:8a:c8:64:07:6e:22:21:5d:02:60:ad:d4:d8:37:e5:e7:4a: 91:41:8c:cc:3f:4d:fd:56:7f:47:a2:64:6e:10:ba:2d:1c:e9: 45:ee:da:5e:e1:e6:ce:6f:0f:4a:8e:61:40:7e:7e:18:30:17: 65:35:cd:53:91:65:57:51:ab:0e:f6:e2:db:0f:e3:62:68:04: 9f:bc:c6:8b:a8:ad:c8:67:fa:b1:4b:c1:2c:44:22:9f:8a:14: ed:6a:bd:9a:34:e4:61:3b:ae:f8:d2:e6:9a:98:91:10:91:39: 92:fb:62:c0:95:5f:89:cf:b1:1b:a3:44:06:c1:a1:93:c8:e6: 4b:9a:23:f2:75:34:ec:74:61:78:e1:0b:47:71:0d:7e:c8:90: 3a:43:f9:c1:05:a8:0a:4f:c9:c6:a6:41:77:27:ef:74:4e:b8: 9b:da:e5:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjYc2BM6zNtD7K3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk OGI4Y2VlNzctZDEyOS00MmIzLTljNTgtYjQ5ZDZjYjU5ZGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+2L1EMi7YeweGxCYc81UJz0HFEj5yr8O/XLL MMBUxHBQJjOauASpVAgvrs3NHUvAowzYEA3GPIdfxDU8xlrER7qkKnHfvUKG3Zsh EXQmdKE5w/3Tzvr9lNOlW6U8GjeZZiGNcdNekyCdN3ptoJ69bl3P+ZRQge4UW0xi 7XpfHOvGlN50qp4zQhMdTQGmPxlf5y3l/4lny7CJZnG9ImoAUo/5fiQNbZYHMI/0 YvNQTpBrVhw8a1ZDop4Fcf0ZNppBGrwWDajPMrQkuKEl8jss1prhu5dqouoToc+Y 26is+vs1yYkNLoG3skziaMiuepHGxQ3+nFQDe9PTXbrWyLLgHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDSIgWMfCsv1EDskhgJHKq6j1oJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYmExOTU5Y2EtYzU1Ni0z YTBjLTk0MWItMTNlOGI1ZjlhYWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4o7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNAtjlA+STKK3KWBqECXS+VgJm1nCiZH/EuBLNVHNHH8FKUJH2jbf+u T3vrDL83oebBOGFokY/ZZmQkVQfEgapJMuwkKGl8XvdHFeSDYdYpuKTqDU/Eo0HD hjKKyGQHbiIhXQJgrdTYN+XnSpFBjMw/Tf1Wf0eiZG4Qui0c6UXu2l7h5s5vD0qO YUB+fhgwF2U1zVORZVdRqw724tsP42JoBJ+8xouorchn+rFLwSxEIp+KFO1qvZo0 5GE7rvjS5pqYkRCROZL7YsCVX4nPsRujRAbBoZPI5kuaI/J1NOx0YXjhC0dxDX7I kDpD+cEFqApPycamQXcn73ROuJva5bg= -----END CERTIFICATE-----Generated at Thu Oct 8 15:41:21 2026 by rpki-client