$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/ba9c5d06-13d1-3ff7-9d30-951a9b14cd98.roa File: ba9c5d06-13d1-3ff7-9d30-951a9b14cd98.roa (raw, json) Hash identifier: qHlptO+H+a/bAc98/ettOv+N6bCAhtk+Wis4jPvzZzw= Subject key identifier: E0:A4:6C:E4:32:78:38:72:4C:20:97:51:63:BE:17:F9:F2:9A:78:7B Certificate issuer: /CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f Certificate serial: 010D0C9F4328584F698D7B1B5F845567048DF5A0 Authority key identifier: E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/ba9c5d06-13d1-3ff7-9d30-951a9b14cd98.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 395437 IP address blocks: 138.43.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:7b:1b:5f:84:55:67:04:8d:f5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=aa3942d1-bd9a-422f-9c54-83d18447757e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5f:fb:e5:40:62:ef:bd:c4:64:81:5f:8b:36: 4e:26:47:3c:fd:ff:cc:c5:fd:0e:f4:f8:e9:5f:7a: ce:c1:e0:4f:95:e5:40:8c:62:b6:0c:a1:2c:99:a4: 83:ed:b0:5d:a7:74:1f:0b:05:51:32:dd:f9:0d:7f: f8:a3:97:f9:52:db:a1:97:ab:69:5b:d5:a3:c0:2c: 05:1d:1b:66:b7:0a:ee:46:28:f7:51:bd:9b:94:da: 02:38:70:72:25:6c:93:d0:83:2b:d5:4c:d6:e2:1a: fa:f3:60:d2:b2:e1:98:7c:d9:e6:b1:f5:71:97:7a: 43:f0:da:87:9f:70:9e:29:e4:29:bc:14:0e:03:00: 0c:62:4f:b4:ae:a0:4a:3a:e5:27:70:2a:ec:68:77: 79:ce:b9:26:06:e8:3c:92:33:1b:3b:51:ae:cf:8c: 92:81:1d:bf:97:9d:01:5e:e1:57:75:ff:bb:38:ce: 50:19:46:0f:29:76:e4:de:86:68:3f:3c:35:ad:ae: 6f:ce:41:cc:b8:9e:e1:73:57:b0:6c:da:f5:19:cb: e8:09:5a:9a:44:b0:81:12:97:70:9c:22:e8:56:ab: d9:6e:f6:63:ad:f8:f5:9e:e0:88:9a:3f:58:13:35: 72:11:25:01:11:c9:b0:fd:af:dc:3b:1c:2f:7d:67: 35:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A4:6C:E4:32:78:38:72:4C:20:97:51:63:BE:17:F9:F2:9A:78:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/ba9c5d06-13d1-3ff7-9d30-951a9b14cd98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl X509v3 Authority Key Identifier: keyid:E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer sbgp-ipAddrBlock: critical IPv4: 138.43.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:28:4a:cc:f2:97:c7:c5:60:9e:73:db:5a:41:46:8a:ff:1c: 9c:94:c8:e4:a7:c4:a1:ad:75:f6:25:51:9b:39:90:c9:00:83: d8:04:a7:54:bb:f0:c4:30:c6:c5:07:3d:7e:22:fc:70:5f:06: 80:21:4b:12:37:8e:e8:fb:63:ef:42:a1:09:04:1a:5a:1b:dd: e0:99:da:d3:dd:09:13:20:31:f8:63:0f:7d:7a:66:f7:96:55: df:88:eb:87:42:4c:59:50:c1:94:d9:54:d2:a5:cb:23:af:88: 7a:82:36:e3:5b:90:a7:93:a7:17:91:08:d7:e0:9d:33:89:3a: e9:3d:49:d9:48:e3:fc:01:c2:22:2d:39:22:b1:fd:59:25:bd: bb:a0:4d:db:c5:cc:9d:bb:75:b5:66:9b:1c:90:2f:04:38:c4: bb:88:15:d1:e9:0f:da:26:48:4c:22:00:a6:3b:ec:98:d5:7a: 45:87:cf:ec:c7:73:28:c3:58:ff:98:1a:31:31:ec:8f:63:4a: 90:7d:ed:43:bf:e0:a3:25:6a:f5:57:4a:bb:f1:36:9b:53:4e: 26:b9:47:4c:37:c7:e6:89:0b:76:c3:ca:38:39:17:34:c8:81: 0d:41:bd:56:20:a2:6d:ba:cc:b7:b0:20:6f:2f:aa:08:e9:cb: 8a:7f:73:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjXsbX4RVZwSN9aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBkMDMyMjUtYzViNi00N2M0LTlmNGUtN2RlMWQxNmQ1 NTRmMB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk YWEzOTQyZDEtYmQ5YS00MjJmLTljNTQtODNkMTg0NDc3NTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkV/75UBi773EZIFfizZOJkc8/f/Mxf0O9Pjp X3rOweBPleVAjGK2DKEsmaSD7bBdp3QfCwVRMt35DX/4o5f5Utuhl6tpW9WjwCwF HRtmtwruRij3Ub2blNoCOHByJWyT0IMr1UzW4hr682DSsuGYfNnmsfVxl3pD8NqH n3CeKeQpvBQOAwAMYk+0rqBKOuUncCrsaHd5zrkmBug8kjMbO1Guz4ySgR2/l50B XuFXdf+7OM5QGUYPKXbk3oZoPzw1ra5vzkHMuJ7hc1ewbNr1GcvoCVqaRLCBEpdw nCLoVqvZbvZjrfj1nuCImj9YEzVyESUBEcmw/a/cOxwvfWc1XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOCkbOQyeDhyTCCXUWO+F/nymnh7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQw MzIyNS1jNWI2LTQ3YzQtOWY0ZS03ZGUxZDE2ZDU1NGYvYmE5YzVkMDYtMTNkMS0z ZmY3LTlkMzAtOTUxYTliMTRjZDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDBkMDMyMjUtYzViNi00N2M0LTlm NGUtN2RlMWQxNmQ1NTRmLzQwZDAzMjI1LWM1YjYtNDdjNC05ZjRlLTdkZTFkMTZk NTU0Zi5jcmwwHwYDVR0jBBgwFoAU6DRhhWrT1VHbhGXdoM02Pj/ijxMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQwMzIyNS1jNWI2LTQ3YzQtOWY0ZS03ZGUx ZDE2ZDU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGiiuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwoSszyl8fFYJ5z21pBRor/HJyUyOSnxKGtdfYlUZs5kMkAg9gEp1S7 8MQwxsUHPX4i/HBfBoAhSxI3juj7Y+9CoQkEGlob3eCZ2tPdCRMgMfhjD316ZveW Vd+I64dCTFlQwZTZVNKlyyOviHqCNuNbkKeTpxeRCNfgnTOJOuk9SdlI4/wBwiIt OSKx/VklvbugTdvFzJ27dbVmmxyQLwQ4xLuIFdHpD9omSEwiAKY77JjVekWHz+zH cyjDWP+YGjEx7I9jSpB97UO/4KMlavVXSrvxNptTTia5R0w3x+aJC3bDyjg5FzTI gQ1BvVYgom26zLewIG8vqgjpy4p/c7c= -----END CERTIFICATE-----Generated at Wed Oct 14 10:08:43 2026 by rpki-client