$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ba360a22-1a7f-34a1-8036-99449efef85c.roa File: ba360a22-1a7f-34a1-8036-99449efef85c.roa (raw, json) Hash identifier: QZ7UAzgFymi9vXJ12bE0H9DlNR0NEdBJUjEyJ7+Lwqs= Subject key identifier: 44:A1:C0:C8:51:56:84:14:D3:56:41:8C:A9:E4:1C:8A:82:60:EF:45 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE4233ED4AC2E29839EF39A00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ba360a22-1a7f-34a1-8036-99449efef85c.roa Signing time: Wed 19 Aug 2026 18:03:50 +0000 ROA not before: Wed 19 Aug 2026 18:03:50 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 54468 IP address blocks: 209.57.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:3e:d4:ac:2e:29:83:9e:f3:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:50 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=645e771e-3db9-4875-87de-2b86ddde7ae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:bb:74:e2:92:ad:9c:06:95:f7:c6:14:c5:8d: 31:b2:34:f6:71:3d:e5:cc:5f:01:a4:cb:68:59:1e: 7f:31:bd:ca:85:63:8a:20:e3:69:19:1a:2a:1e:30: 2d:f4:6b:29:6f:c9:0f:7b:f6:fb:a6:35:ac:ef:a9: c8:bd:06:78:12:33:b5:c8:8c:99:3d:da:bd:df:61: ba:c3:ee:fe:b5:e5:ff:a6:c5:f9:d7:96:bd:3b:a8: 99:2e:69:d5:da:0d:6f:06:0c:d7:b6:a5:75:01:2e: 47:a6:32:53:20:3a:fe:81:85:21:12:e9:aa:3c:26: b4:de:ae:c3:9d:7f:e9:01:02:19:38:4f:66:70:e9: 1e:ef:ae:66:fa:f6:70:45:29:34:87:27:6d:ce:f0: dd:bc:93:30:7c:f5:cf:9d:ec:63:14:2d:fa:13:a1: 7f:a1:a7:8b:a7:32:f4:38:29:e2:ca:4d:3a:a0:ea: fc:ec:30:4d:fa:83:a3:7c:b8:e1:ae:50:2b:44:57: 03:ef:52:f8:d5:00:db:34:c3:06:c7:de:47:d2:ce: b4:ce:87:bd:ac:91:f7:0b:d3:b9:cd:c6:ff:46:b9: 30:03:49:62:37:d4:95:b1:da:6f:95:d0:01:f8:46: 59:12:5e:22:fa:56:8b:fa:aa:af:a8:1b:15:1d:69: f9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A1:C0:C8:51:56:84:14:D3:56:41:8C:A9:E4:1C:8A:82:60:EF:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ba360a22-1a7f-34a1-8036-99449efef85c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 209.57.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:3e:69:52:42:43:fc:c1:6f:6b:f8:cf:40:f0:d5:fb:98:97: fc:f4:70:6b:45:59:7b:88:0f:c2:1d:de:12:a8:93:44:07:bc: 4a:0c:2b:8b:e3:fc:ee:2d:6d:ea:9e:52:61:5d:86:26:eb:7c: 9f:57:6e:9f:54:31:9b:fb:8e:11:53:57:1f:7b:21:78:51:2b: 2f:59:38:41:55:9a:9a:5b:7a:ef:ac:b7:86:9a:86:67:8d:c0: 51:cb:6b:9c:d9:76:81:82:9e:1e:89:88:e7:b4:4a:fb:40:2e: 8e:1a:62:90:62:62:77:e9:2a:d1:70:aa:6a:9c:c8:a3:e3:bf: 96:76:ea:4b:db:df:3a:17:b7:0c:0b:68:02:8d:83:58:59:4a: e1:27:9a:d8:d1:86:8d:39:ba:c0:6e:3e:7e:4f:88:4e:4f:8c: f5:f4:33:10:de:3f:65:d4:33:d9:63:63:0a:7f:d0:66:40:b6: 99:c4:b3:47:b4:80:92:a8:e0:76:e2:83:94:2e:b7:6c:49:c4: c8:ff:12:25:6d:4f:84:17:fb:6c:0e:79:af:a1:f6:d6:ce:03: e9:c5:84:c2:21:90:a1:9b:89:be:de:86:45:34:7a:fb:1f:c3: 10:86:e9:90:f2:1e:91:9b:3c:ea:a0:85:10:2d:60:6b:8b:1b: 54:c7:ed:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kIz7UrC4pg57zmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM1MFoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk NjQ1ZTc3MWUtM2RiOS00ODc1LTg3ZGUtMmI4NmRkZGU3YWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7t04pKtnAaV98YUxY0xsjT2cT3lzF8BpMto WR5/Mb3KhWOKIONpGRoqHjAt9Gspb8kPe/b7pjWs76nIvQZ4EjO1yIyZPdq932G6 w+7+teX/psX515a9O6iZLmnV2g1vBgzXtqV1AS5HpjJTIDr+gYUhEumqPCa03q7D nX/pAQIZOE9mcOke765m+vZwRSk0hydtzvDdvJMwfPXPnexjFC36E6F/oaeLpzL0 OCniyk06oOr87DBN+oOjfLjhrlArRFcD71L41QDbNMMGx95H0s60zoe9rJH3C9O5 zcb/RrkwA0liN9SVsdpvldAB+EZZEl4i+laL+qqvqBsVHWn5LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEShwMhRVoQU01ZBjKnkHIqCYO9FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYmEzNjBhMjItMWE3Zi0z NGExLTgwMzYtOTk0NDllZmVmODVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALI+aVJCQ/zBb2v4z0Dw1fuYl/z0cGtFWXuID8Id3hKok0QHvEoMK4vj /O4tbeqeUmFdhibrfJ9Xbp9UMZv7jhFTVx97IXhRKy9ZOEFVmppbeu+st4aahmeN wFHLa5zZdoGCnh6JiOe0SvtALo4aYpBiYnfpKtFwqmqcyKPjv5Z26kvb3zoXtwwL aAKNg1hZSuEnmtjRho05usBuPn5PiE5PjPX0MxDeP2XUM9ljYwp/0GZAtpnEs0e0 gJKo4Hbig5Qut2xJxMj/EiVtT4QX+2wOea+h9tbOA+nFhMIhkKGbib7ehkU0evsf wxCG6ZDyHpGbPOqghRAtYGuLG1TH7X8= -----END CERTIFICATE-----Generated at Thu Sep 17 16:04:36 2026 by rpki-client