$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/008d7de3-7f1e-3d45-bc4c-4a2572d24396.roa File: 008d7de3-7f1e-3d45-bc4c-4a2572d24396.roa (raw, json) Hash identifier: n+qxY5fjerURBaisCN+S/VjKaXUxnq1KoUvUylCjHfA= Subject key identifier: E5:3A:3E:21:6E:C1:DD:F3:14:CE:00:6E:C8:65:33:CE:33:29:EA:C8 Certificate issuer: /CN=ba461ed6-9748-4005-b669-8946003e1ae1 Certificate serial: 010D0C9F4328584CFC823150688D0728EBE41140 Authority key identifier: 86:FF:2D:22:FE:C4:48:05:84:E8:92:00:D8:2D:7A:2E:A3:82:9E:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/008d7de3-7f1e-3d45-bc4c-4a2572d24396.roa Signing time: Thu 26 Feb 2026 02:00:32 +0000 ROA not before: Thu 26 Feb 2026 02:00:32 +0000 ROA not after: Wed 27 May 2026 01:00:32 +0000 asID: 4246 IP address blocks: 128.235.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fc:82:31:50:68:8d:07:28:eb:e4:11:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba461ed6-9748-4005-b669-8946003e1ae1 Validity Not Before: Feb 26 02:00:32 2026 GMT Not After : May 27 01:00:32 2026 GMT Subject: CN=7dd8e1b1-3f7c-4f46-9d8b-d8438f2ec89f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4e:40:c6:92:11:b6:77:3c:f0:73:06:47:e8: 6b:b1:4e:ab:bf:12:28:66:eb:49:d9:de:d8:0e:20: 53:84:c6:3b:cc:70:c0:bf:3c:8b:c8:83:52:da:b8: be:d0:b7:f2:31:67:98:47:9e:8c:56:c6:8e:f8:2c: b8:07:57:b1:38:d2:e8:e0:34:8b:25:76:6c:3f:43: dd:e3:db:06:42:0d:36:8d:75:3a:88:65:b2:10:d9: ba:ab:6d:0f:d2:13:62:5f:04:e6:3d:94:88:b2:c9: f2:8c:07:a6:27:1a:17:d6:a1:76:92:dc:7e:30:0e: c1:a2:7c:1a:a9:17:21:f8:60:e5:1e:ee:3c:89:f0: 7b:f6:39:2b:14:48:15:cc:32:a0:32:2f:f9:bf:8c: 7b:62:6f:43:2e:45:43:7a:ec:85:59:3e:44:6a:81: 81:ef:f0:05:c0:1c:a1:e0:35:5c:ca:c7:64:21:7e: 23:ce:49:1f:53:b9:96:2f:a8:9e:85:4e:37:e8:ee: 1e:59:05:9d:87:ab:1f:d5:d9:07:6b:a8:50:f2:7d: 57:2a:cb:5c:17:b3:69:f9:05:7b:3d:a5:de:9c:fd: 5d:8d:44:c2:6e:be:dc:c1:5a:a0:59:bb:59:3d:10: 9f:a0:a0:00:e3:82:96:b1:dd:6f:26:31:ad:74:f5: c4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:3A:3E:21:6E:C1:DD:F3:14:CE:00:6E:C8:65:33:CE:33:29:EA:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/008d7de3-7f1e-3d45-bc4c-4a2572d24396.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.crl X509v3 Authority Key Identifier: keyid:86:FF:2D:22:FE:C4:48:05:84:E8:92:00:D8:2D:7A:2E:A3:82:9E:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer sbgp-ipAddrBlock: critical IPv4: 128.235.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:7d:12:a8:ee:f9:e4:d3:29:9d:91:54:de:b9:14:cb:ed:d0: 3f:03:70:a1:10:1e:dd:a6:8a:2f:ba:bd:02:9f:7e:f7:ad:93: d7:49:25:c0:34:ad:15:66:2d:ea:d5:27:42:7d:79:0f:58:fc: 72:0a:27:45:d5:2d:9a:41:31:59:4a:45:c6:5f:7c:57:03:a7: a8:c2:3f:94:75:69:7e:8d:82:1b:cd:39:e9:a8:49:07:d1:ed: fa:6c:7e:8b:a6:b2:d3:53:56:85:31:e4:37:6d:92:72:98:1b: df:2f:fc:95:32:fa:e2:1c:86:12:0e:90:88:ac:10:55:57:f3: 8e:9f:94:91:66:35:51:49:74:28:e3:63:48:e8:a2:4f:ef:67: ca:1a:0e:7d:67:29:3a:ae:07:5b:23:81:94:76:23:36:ce:60: 3d:44:ef:a5:75:35:ed:9b:81:51:0c:c0:c2:07:6a:a8:89:49: 64:91:52:dd:fe:92:de:c0:d7:fa:60:5e:5f:84:ea:42:37:68: 6d:03:4f:ea:0f:ad:5d:3f:40:d5:9f:ce:3a:71:7a:67:17:63: b0:c9:d1:82:7e:5e:15:7a:88:33:c1:b1:1c:4d:61:f7:0d:04: 36:d8:29:41:a1:16:f8:aa:db:8a:e0:12:9b:26:e3:37:98:2b: 99:2e:8b:bb -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEz8gjFQaI0HKOvkEUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE0NjFlZDYtOTc0OC00MDA1LWI2NjktODk0NjAwM2Ux YWUxMB4XDTI2MDIyNjAyMDAzMloXDTI2MDUyNzAxMDAzMlowLzEtMCsGA1UEAxMk N2RkOGUxYjEtM2Y3Yy00ZjQ2LTlkOGItZDg0MzhmMmVjODlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnU5AxpIRtnc88HMGR+hrsU6rvxIoZutJ2d7Y DiBThMY7zHDAvzyLyINS2ri+0LfyMWeYR56MVsaO+Cy4B1exONLo4DSLJXZsP0Pd 49sGQg02jXU6iGWyENm6q20P0hNiXwTmPZSIssnyjAemJxoX1qF2ktx+MA7Bonwa qRch+GDlHu48ifB79jkrFEgVzDKgMi/5v4x7Ym9DLkVDeuyFWT5EaoGB7/AFwByh 4DVcysdkIX4jzkkfU7mWL6iehU436O4eWQWdh6sf1dkHa6hQ8n1XKstcF7Np+QV7 PaXenP1djUTCbr7cwVqgWbtZPRCfoKAA44KWsd1vJjGtdPXEXQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFOU6PiFuwd3zFM4AbshlM84zKerIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iYTQ2 MWVkNi05NzQ4LTQwMDUtYjY2OS04OTQ2MDAzZTFhZTEvMDA4ZDdkZTMtN2YxZS0z ZDQ1LWJjNGMtNGEyNTcyZDI0Mzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmE0NjFlZDYtOTc0OC00MDA1LWI2 NjktODk0NjAwM2UxYWUxL2JhNDYxZWQ2LTk3NDgtNDAwNS1iNjY5LTg5NDYwMDNl MWFlMS5jcmwwHwYDVR0jBBgwFoAUhv8tIv7ESAWE6JIA2C16LqOCnnUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iYTQ2MWVkNi05NzQ4LTQwMDUtYjY2OS04OTQ2 MDAzZTFhZTEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgOswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAlH0SqO755NMpnZFU3rkUy+3QPwNwoRAe3aaKL7q9Ap9+962T10klwDSt FWYt6tUnQn15D1j8cgonRdUtmkExWUpFxl98VwOnqMI/lHVpfo2CG8056ahJB9Ht +mx+i6ay01NWhTHkN22Scpgb3y/8lTL64hyGEg6QiKwQVVfzjp+UkWY1UUl0KONj SOiiT+9nyhoOfWcpOq4HWyOBlHYjNs5gPUTvpXU17ZuBUQzAwgdqqIlJZJFS3f6S 3sDX+mBeX4TqQjdobQNP6g+tXT9A1Z/OOnF6ZxdjsMnRgn5eFXqIM8GxHE1h9w0E NtgpQaEW+KrbiuASmybjN5grmS6Luw== -----END CERTIFICATE-----Generated at Sun Mar 1 08:26:41 2026 by rpki-client