$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ba7363a2-8649-3b98-93b5-6f704982a180.roa File: ba7363a2-8649-3b98-93b5-6f704982a180.roa (raw, json) Hash identifier: hO3tf75x/sdPTSEApPrjofmLY06cQ7ObSQXGgJJY+1c= Subject key identifier: 23:C7:FE:FF:42:87:D5:FB:B6:3E:5A:D5:03:65:75:20:22:4F:F9:6C Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584CF587997BF89BF5869B2A6A00 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ba7363a2-8649-3b98-93b5-6f704982a180.roa Signing time: Mon 23 Feb 2026 14:00:41 +0000 ROA not before: Mon 23 Feb 2026 14:00:41 +0000 ROA not after: Sun 24 May 2026 13:00:41 +0000 asID: 16417 IP address blocks: 139.138.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f5:87:99:7b:f8:9b:f5:86:9b:2a:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Feb 23 14:00:41 2026 GMT Not After : May 24 13:00:41 2026 GMT Subject: CN=26dd968a-48d9-4e1c-9e4d-84e51e228560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:59:f3:f0:81:81:3a:ee:b3:6e:77:66:b5:df: a1:0e:77:62:eb:cc:28:bd:54:ca:d4:ef:7b:5c:22: ea:dd:78:ff:03:f6:79:50:54:43:1c:8e:ce:9e:ef: 59:3b:9d:59:67:1c:e7:b1:d3:5a:61:41:88:42:1f: 44:e1:f7:4e:8f:e4:e9:f4:08:4e:2b:31:cc:eb:93: e7:85:a8:09:69:dd:29:d0:b8:25:f1:72:f6:0f:fe: 55:15:b0:a6:46:ff:b7:e4:72:14:36:a2:87:4c:f3: 28:1b:2f:e1:cc:87:ee:1e:ca:c4:58:63:e6:eb:63: f2:59:df:1a:2a:88:ed:d6:6e:d7:27:fe:28:3e:10: 68:e1:80:82:d5:48:78:19:78:82:cf:35:c9:47:fa: 3b:f0:39:b4:b3:76:aa:86:07:0c:f5:8f:f6:b9:2b: d4:79:8c:8c:32:ee:7e:5e:1e:1c:c2:f2:a0:33:d3: d4:63:d7:0e:d4:3b:93:ad:fa:1b:d2:28:2b:6a:ad: 72:f1:d1:96:c0:6c:4c:a1:96:86:0e:f9:3c:6d:cb: 28:fc:48:58:1d:dd:87:52:16:e0:f7:32:30:4a:9e: 2e:48:7a:94:24:fd:2c:cd:fc:47:b9:af:1c:c5:9f: 22:75:65:d4:18:f2:75:2b:98:d4:fc:ce:a9:dd:90: d7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C7:FE:FF:42:87:D5:FB:B6:3E:5A:D5:03:65:75:20:22:4F:F9:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ba7363a2-8649-3b98-93b5-6f704982a180.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:4f:92:30:c8:3f:d5:7b:8b:72:45:dd:78:d1:aa:85:19:46: 48:4e:d7:e3:15:7f:7b:64:b7:7c:0b:25:38:eb:d5:54:c7:a3: 22:8a:3e:e8:46:cd:27:78:78:e5:a0:2a:d7:f7:cd:f5:5f:89: c4:a3:9a:d2:93:4d:5b:41:0d:0a:4a:1d:85:93:17:d4:ce:4f: 1c:ed:97:4f:61:f8:6c:b0:fe:0c:94:43:92:58:66:78:1c:0d: 9b:7c:f8:0e:b3:01:9e:92:4b:65:1c:d7:24:c8:76:86:6d:6a: cb:d3:cd:30:02:7c:4d:0d:e4:41:6a:ab:4c:c6:07:5d:70:d3: e9:77:e5:8b:8b:92:fd:1e:94:1c:a4:e8:dd:5f:e4:02:6c:24: ef:5a:fe:fd:a2:43:0c:df:26:f4:bf:9a:39:54:5c:f7:79:bc: a4:72:44:5e:ea:ae:e6:45:6a:59:30:e3:ce:4c:62:b1:6d:cc: a1:9c:88:2a:83:5d:cf:11:be:67:ab:8a:da:db:e0:3f:43:92: 35:9d:9a:8b:bc:91:e2:4f:90:ab:62:77:fe:1c:76:cb:8e:c3: a9:45:d7:25:9f:28:bb:99:60:23:ce:e0:23:0f:33:f8:c9:08: 8f:b5:c2:45:6a:ca:bf:ce:6c:03:17:86:65:ef:d6:7a:87:23: 81:0b:a8:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz1h5l7+Jv1hpsqagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDIyMzE0MDA0MVoXDTI2MDUyNDEzMDA0MVowLzEtMCsGA1UEAxMk MjZkZDk2OGEtNDhkOS00ZTFjLTllNGQtODRlNTFlMjI4NTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVnz8IGBOu6zbndmtd+hDndi68wovVTK1O97 XCLq3Xj/A/Z5UFRDHI7Onu9ZO51ZZxznsdNaYUGIQh9E4fdOj+Tp9AhOKzHM65Pn hagJad0p0Lgl8XL2D/5VFbCmRv+35HIUNqKHTPMoGy/hzIfuHsrEWGPm62PyWd8a Kojt1m7XJ/4oPhBo4YCC1Uh4GXiCzzXJR/o78Dm0s3aqhgcM9Y/2uSvUeYyMMu5+ Xh4cwvKgM9PUY9cO1DuTrfob0igraq1y8dGWwGxMoZaGDvk8bcso/EhYHd2HUhbg 9zIwSp4uSHqUJP0szfxHua8cxZ8idWXUGPJ1K5jU/M6p3ZDX0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPH/v9Ch9X7tj5a1QNldSAiT/lsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYmE3MzYzYTItODY0OS0z Yjk4LTkzYjUtNmY3MDQ5ODJhMTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4ojMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtPkjDIP9V7i3JF3XjRqoUZRkhO1+MVf3tkt3wLJTjr1VTHoyKKPuhG zSd4eOWgKtf3zfVficSjmtKTTVtBDQpKHYWTF9TOTxztl09h+Gyw/gyUQ5JYZngc DZt8+A6zAZ6SS2Uc1yTIdoZtasvTzTACfE0N5EFqq0zGB11w0+l35YuLkv0elByk 6N1f5AJsJO9a/v2iQwzfJvS/mjlUXPd5vKRyRF7qruZFalkw485MYrFtzKGciCqD Xc8Rvmeritrb4D9DkjWdmou8keJPkKtid/4cdsuOw6lF1yWfKLuZYCPO4CMPM/jJ CI+1wkVqyr/ObAMXhmXv1nqHI4ELqF4= -----END CERTIFICATE-----Generated at Mon Mar 2 13:36:01 2026 by rpki-client