$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ba4a432d-c3a7-4774-a834-bd2fcfc3a24c/a2fc9342-29f7-3ccc-b527-225d6d6ff734.roa File: a2fc9342-29f7-3ccc-b527-225d6d6ff734.roa (raw, json) Hash identifier: X3TzshF0WmcwPRny7JXB0Zcp5PVGltqbeUVJ3kY3Ovo= Subject key identifier: 01:B0:88:7B:9F:6F:B5:83:D7:FA:8E:7F:BD:74:26:68:5D:11:52:DD Certificate issuer: /CN=ba4a432d-c3a7-4774-a834-bd2fcfc3a24c Certificate serial: 010D0C9F4328584F9157BACD566251D14B697000 Authority key identifier: 58:CB:29:74:E4:85:D1:37:55:98:7E:7A:52:6D:2C:83:AB:74:1E:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ba4a432d-c3a7-4774-a834-bd2fcfc3a24c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ba4a432d-c3a7-4774-a834-bd2fcfc3a24c/a2fc9342-29f7-3ccc-b527-225d6d6ff734.roa Signing time: Tue 20 Oct 2026 19:04:25 +0000 ROA not before: Tue 20 Oct 2026 19:04:25 +0000 ROA not after: Mon 18 Jan 2027 20:04:25 +0000 asID: 396982 IP address blocks: 206.126.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ba4a432d-c3a7-4774-a834-bd2fcfc3a24c/ba4a432d-c3a7-4774-a834-bd2fcfc3a24c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ba4a432d-c3a7-4774-a834-bd2fcfc3a24c/ba4a432d-c3a7-4774-a834-bd2fcfc3a24c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ba4a432d-c3a7-4774-a834-bd2fcfc3a24c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:91:57:ba:cd:56:62:51:d1:4b:69:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba4a432d-c3a7-4774-a834-bd2fcfc3a24c Validity Not Before: Oct 20 19:04:25 2026 GMT Not After : Jan 18 20:04:25 2027 GMT Subject: CN=493a76ea-e1ae-4f17-831c-31f90c0a6e81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b1:27:b9:44:ff:ea:16:0b:89:08:16:db:c4: 24:80:2a:60:88:ae:8e:91:0b:9d:11:11:b5:c4:73: 28:68:70:25:2c:f6:8e:c5:66:ac:e5:5a:59:ab:e8: 51:36:ef:f0:60:1e:5d:df:9b:ec:af:37:a4:79:f4: c7:32:db:7c:87:0e:d0:cd:0d:92:8b:97:d8:f1:a7: af:d7:b8:ed:a2:ff:50:f7:2b:f4:c7:80:be:27:c7: 4b:ce:67:f4:63:1e:eb:e4:9b:e5:b7:24:14:e4:88: 51:20:70:6b:03:17:ba:93:90:31:5f:4e:de:98:8d: 73:f8:6b:c9:69:1e:13:48:ce:c0:f3:d1:c1:1f:67: dc:57:1c:b6:c9:73:77:28:cd:01:d0:23:cc:7d:5c: b3:51:48:d4:3e:81:ef:2e:e5:c2:e8:b7:f2:33:c6: cc:57:c7:7e:1b:48:39:31:6f:e4:d8:0b:ef:38:22: 2a:49:c7:78:f8:1d:ec:71:c6:a8:4b:c9:a4:70:54: dc:95:e1:42:be:1c:18:9a:9f:63:0b:e8:14:5f:ec: 60:2f:6e:f0:0a:35:63:3e:87:4c:a0:96:f9:fd:bd: ff:77:d3:31:1d:b7:05:10:60:d5:a6:2c:76:6b:fe: ea:d6:5b:f7:c9:d5:78:fd:87:d6:c1:2a:3b:c6:6f: e0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B0:88:7B:9F:6F:B5:83:D7:FA:8E:7F:BD:74:26:68:5D:11:52:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ba4a432d-c3a7-4774-a834-bd2fcfc3a24c/a2fc9342-29f7-3ccc-b527-225d6d6ff734.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ba4a432d-c3a7-4774-a834-bd2fcfc3a24c/ba4a432d-c3a7-4774-a834-bd2fcfc3a24c.crl X509v3 Authority Key Identifier: keyid:58:CB:29:74:E4:85:D1:37:55:98:7E:7A:52:6D:2C:83:AB:74:1E:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ba4a432d-c3a7-4774-a834-bd2fcfc3a24c.cer sbgp-ipAddrBlock: critical IPv4: 206.126.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:6f:1b:d8:ab:ba:f9:f9:4a:3c:fe:8c:c1:af:b6:5d:2a:ff: 88:a5:30:10:27:de:ab:6c:f9:52:c4:b5:00:76:3e:03:ef:31: 25:e6:1b:8f:83:e1:98:ec:0e:f9:f4:f3:dd:e8:7b:eb:74:43: c6:09:b2:43:19:c7:e1:fa:f6:e6:6f:df:c6:24:97:1f:7b:ff: c6:3f:36:cf:ff:dd:63:90:31:fb:68:85:01:f3:66:46:1e:9f: 3d:c7:d1:06:55:2b:d8:96:81:dc:8d:30:b3:3f:08:79:bd:b8: 85:91:0e:94:ce:be:68:f8:c0:4b:0d:b9:05:2a:b3:4a:25:a2: c1:74:c6:7a:09:c3:2f:a5:21:f5:4b:6f:bf:74:f0:58:67:74: e8:f1:80:f6:16:fc:ce:56:3d:6c:08:67:de:83:3f:86:96:6a: 68:c1:7a:69:af:5b:3b:cd:e6:c8:09:42:2a:c1:05:13:ce:46: 60:46:94:6b:03:c8:02:4f:55:5d:d6:96:6c:41:d7:11:22:8c: 0a:c3:12:85:93:db:59:1c:d5:47:22:31:6e:7b:55:b2:ff:9f: 61:ab:01:40:8a:d3:1d:b6:00:ca:58:38:8b:0b:a3:1d:5f:e1: a8:88:b2:8d:44:93:61:51:79:da:7a:5f:59:b1:b8:b7:f8:e4: 06:dc:82:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+RV7rNVmJR0UtpcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE0YTQzMmQtYzNhNy00Nzc0LWE4MzQtYmQyZmNmYzNh MjRjMB4XDTI2MTAyMDE5MDQyNVoXDTI3MDExODIwMDQyNVowLzEtMCsGA1UEAxMk NDkzYTc2ZWEtZTFhZS00ZjE3LTgzMWMtMzFmOTBjMGE2ZTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7EnuUT/6hYLiQgW28QkgCpgiK6OkQudERG1 xHMoaHAlLPaOxWas5VpZq+hRNu/wYB5d35vsrzekefTHMtt8hw7QzQ2Si5fY8aev 17jtov9Q9yv0x4C+J8dLzmf0Yx7r5JvltyQU5IhRIHBrAxe6k5AxX07emI1z+GvJ aR4TSM7A89HBH2fcVxy2yXN3KM0B0CPMfVyzUUjUPoHvLuXC6LfyM8bMV8d+G0g5 MW/k2AvvOCIqScd4+B3sccaoS8mkcFTcleFCvhwYmp9jC+gUX+xgL27wCjVjPodM oJb5/b3/d9MxHbcFEGDVpix2a/7q1lv3ydV4/YfWwSo7xm/gEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGwiHufb7WD1/qOf710JmhdEVLdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9iYTRh NDMyZC1jM2E3LTQ3NzQtYTgzNC1iZDJmY2ZjM2EyNGMvYTJmYzkzNDItMjlmNy0z Y2NjLWI1MjctMjI1ZDZkNmZmNzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvYmE0YTQzMmQtYzNhNy00Nzc0LWE4 MzQtYmQyZmNmYzNhMjRjL2JhNGE0MzJkLWMzYTctNDc3NC1hODM0LWJkMmZjZmMz YTI0Yy5jcmwwHwYDVR0jBBgwFoAUWMspdOSF0TdVmH56Um0sg6t0Hs8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9iYTRhNDMyZC1jM2E3LTQ3NzQtYTgzNC1iZDJm Y2ZjM2EyNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzn5mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVvG9iruvn5Sjz+jMGvtl0q/4ilMBAn3qts+VLEtQB2PgPvMSXmG4+D 4ZjsDvn0893oe+t0Q8YJskMZx+H69uZv38Yklx97/8Y/Ns//3WOQMftohQHzZkYe nz3H0QZVK9iWgdyNMLM/CHm9uIWRDpTOvmj4wEsNuQUqs0olosF0xnoJwy+lIfVL b7908FhndOjxgPYW/M5WPWwIZ96DP4aWamjBemmvWzvN5sgJQirBBRPORmBGlGsD yAJPVV3WlmxB1xEijArDEoWT21kc1UciMW57VbL/n2GrAUCK0x22AMpYOIsLox1f 4aiIso1Ek2FRedp6X1mxuLf45Abcgp8= -----END CERTIFICATE-----Generated at Wed Nov 4 16:42:49 2026 by rpki-client