$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/008d7de3-7f1e-3d45-bc4c-4a2572d24396.roa File: 008d7de3-7f1e-3d45-bc4c-4a2572d24396.roa (raw, json) Hash identifier: PCne2S00sGLRQ6rja/ayq5OZHo5bhSz6uUUKPLdL3g4= Subject key identifier: 59:A8:84:D9:B1:2F:B1:78:E0:D4:1A:0F:1B:D5:3F:08:4C:1D:03:64 Certificate issuer: /CN=ba461ed6-9748-4005-b669-8946003e1ae1 Certificate serial: 010D0C9F4328584DDD2079473230B2F3C1916AE0 Authority key identifier: 86:FF:2D:22:FE:C4:48:05:84:E8:92:00:D8:2D:7A:2E:A3:82:9E:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/008d7de3-7f1e-3d45-bc4c-4a2572d24396.roa Signing time: Sun 17 May 2026 13:00:32 +0000 ROA not before: Sun 17 May 2026 13:00:32 +0000 ROA not after: Sat 15 Aug 2026 13:00:32 +0000 asID: 4246 IP address blocks: 128.235.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 01 Jun 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:dd:20:79:47:32:30:b2:f3:c1:91:6a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba461ed6-9748-4005-b669-8946003e1ae1 Validity Not Before: May 17 13:00:32 2026 GMT Not After : Aug 15 13:00:32 2026 GMT Subject: CN=2f9402cd-efe9-4a55-95e3-f3b57937f33e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:88:59:58:77:5d:4e:13:a6:8b:14:8c:9e:d8: 97:ef:f8:50:bf:ca:cc:53:93:4b:30:96:cc:39:25: bb:39:6c:75:33:a2:53:7f:1d:82:9b:6f:77:50:b5: a7:c3:df:31:cd:14:83:5a:64:bb:8c:c0:7d:2a:95: a3:d8:5d:ab:48:1c:d3:10:79:ce:2e:f7:53:8d:1b: 94:ab:62:77:2b:e4:ff:da:e1:b5:97:7b:1f:64:e5: 20:88:25:b5:aa:9e:47:36:a0:c2:26:d6:44:89:8b: 4c:01:2b:5b:11:9f:ec:b2:ac:6e:bd:51:b8:b9:0b: b2:01:43:6e:83:b4:d7:33:28:8c:25:b4:2c:6c:2b: 9b:5f:48:97:99:7f:86:af:71:4b:de:44:b4:88:97: 86:9f:eb:2f:12:43:dd:07:98:16:ac:7f:1b:63:cb: f8:00:b0:1e:ce:58:68:8b:51:4e:f0:74:57:3d:d0: 08:67:ed:5d:61:39:db:4e:e4:62:41:f9:e7:b3:8f: 42:4c:2f:1a:69:11:6b:9a:9c:44:db:ab:9d:1d:8d: e8:80:dd:50:20:6a:8f:5b:64:9c:bc:3e:b4:85:77: 1d:ec:55:23:6d:9a:b8:17:f6:db:e2:01:db:4e:3b: 3c:23:07:01:96:2e:28:d7:5c:f8:86:f7:cd:0b:33: 22:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A8:84:D9:B1:2F:B1:78:E0:D4:1A:0F:1B:D5:3F:08:4C:1D:03:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/008d7de3-7f1e-3d45-bc4c-4a2572d24396.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.crl X509v3 Authority Key Identifier: keyid:86:FF:2D:22:FE:C4:48:05:84:E8:92:00:D8:2D:7A:2E:A3:82:9E:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer sbgp-ipAddrBlock: critical IPv4: 128.235.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:69:a6:56:79:1a:99:ba:e6:ba:16:e7:e9:d6:48:ff:97:d6: d0:b4:ad:76:39:22:a0:41:5f:6d:f4:74:7a:24:7f:5c:7a:61: d8:54:36:c6:f5:cd:d4:0c:85:5e:7a:a3:b0:5f:e9:58:80:be: bd:1e:6e:0e:d0:54:88:97:95:f3:e1:87:57:b2:32:be:91:72: 29:f7:32:25:6f:da:fb:42:42:19:4c:68:db:7d:df:dd:0b:5e: 7f:60:73:ee:36:3f:8a:1a:ce:ee:d0:cf:b6:f7:74:e4:dc:e3: 93:43:82:b5:6d:d0:26:0d:95:7c:85:54:44:43:3f:4b:5c:93: 44:0a:b4:77:f6:f0:7c:90:cc:06:48:ec:25:aa:54:1a:d2:73: 8c:4d:65:04:b5:ec:b0:d1:56:f5:63:6e:03:79:67:39:ee:80: 79:95:5b:51:7f:5d:43:f9:a4:54:49:54:7e:17:bd:06:c0:e9: f3:b2:cd:7d:68:4e:9f:9f:24:64:57:22:45:e8:87:bc:b4:c7: 0c:3e:e4:e9:cb:66:07:ca:39:78:8a:8c:87:22:f9:5f:e5:f5: c9:79:73:8a:22:90:5e:76:28:d9:1d:a5:0f:46:04:7c:5d:a7: 03:04:78:b9:b3:6b:b6:46:4f:ee:b1:c4:66:af:11:80:bb:fb: 0f:29:3b:df -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE3dIHlHMjCy88GRauAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE0NjFlZDYtOTc0OC00MDA1LWI2NjktODk0NjAwM2Ux YWUxMB4XDTI2MDUxNzEzMDAzMloXDTI2MDgxNTEzMDAzMlowLzEtMCsGA1UEAxMk MmY5NDAyY2QtZWZlOS00YTU1LTk1ZTMtZjNiNTc5MzdmMzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIhZWHddThOmixSMntiX7/hQv8rMU5NLMJbM OSW7OWx1M6JTfx2Cm293ULWnw98xzRSDWmS7jMB9KpWj2F2rSBzTEHnOLvdTjRuU q2J3K+T/2uG1l3sfZOUgiCW1qp5HNqDCJtZEiYtMAStbEZ/ssqxuvVG4uQuyAUNu g7TXMyiMJbQsbCubX0iXmX+Gr3FL3kS0iJeGn+svEkPdB5gWrH8bY8v4ALAezlho i1FO8HRXPdAIZ+1dYTnbTuRiQfnns49CTC8aaRFrmpxE26udHY3ogN1QIGqPW2Sc vD60hXcd7FUjbZq4F/bb4gHbTjs8IwcBli4o11z4hvfNCzMi1QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFmohNmxL7F44NQaDxvVPwhMHQNkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iYTQ2 MWVkNi05NzQ4LTQwMDUtYjY2OS04OTQ2MDAzZTFhZTEvMDA4ZDdkZTMtN2YxZS0z ZDQ1LWJjNGMtNGEyNTcyZDI0Mzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmE0NjFlZDYtOTc0OC00MDA1LWI2 NjktODk0NjAwM2UxYWUxL2JhNDYxZWQ2LTk3NDgtNDAwNS1iNjY5LTg5NDYwMDNl MWFlMS5jcmwwHwYDVR0jBBgwFoAUhv8tIv7ESAWE6JIA2C16LqOCnnUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iYTQ2MWVkNi05NzQ4LTQwMDUtYjY2OS04OTQ2 MDAzZTFhZTEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgOswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAMGmmVnkambrmuhbn6dZI/5fW0LStdjkioEFfbfR0eiR/XHph2FQ2xvXN 1AyFXnqjsF/pWIC+vR5uDtBUiJeV8+GHV7IyvpFyKfcyJW/a+0JCGUxo233f3Qte f2Bz7jY/ihrO7tDPtvd05Nzjk0OCtW3QJg2VfIVUREM/S1yTRAq0d/bwfJDMBkjs JapUGtJzjE1lBLXssNFW9WNuA3lnOe6AeZVbUX9dQ/mkVElUfhe9BsDp87LNfWhO n58kZFciReiHvLTHDD7k6ctmB8o5eIqMhyL5X+X1yXlziiKQXnYo2R2lD0YEfF2n AwR4ubNrtkZP7rHEZq8RgLv7Dyk73w== -----END CERTIFICATE-----Generated at Sat May 30 19:15:06 2026 by rpki-client