$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/008d7de3-7f1e-3d45-bc4c-4a2572d24396.roa File: 008d7de3-7f1e-3d45-bc4c-4a2572d24396.roa (raw, json) Hash identifier: rRV1JfZi10j2P9O4uzxw1EYt7aYoqLwI8zeEuTSBtnw= Subject key identifier: 54:93:E6:69:49:A0:AB:31:34:6E:1C:47:6E:74:45:D6:90:7F:CD:DF Certificate issuer: /CN=ba461ed6-9748-4005-b669-8946003e1ae1 Certificate serial: 010D0C9F4328584EA788BCBC72E0EA582CAE1F80 Authority key identifier: 86:FF:2D:22:FE:C4:48:05:84:E8:92:00:D8:2D:7A:2E:A3:82:9E:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/008d7de3-7f1e-3d45-bc4c-4a2572d24396.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 4246 IP address blocks: 128.235.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 25 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:bc:bc:72:e0:ea:58:2c:ae:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba461ed6-9748-4005-b669-8946003e1ae1 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=e6fd750c-678a-4f87-8792-6c624676d3e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1d:04:46:75:4e:54:ee:68:6d:05:b7:22:fb: a5:bd:35:fa:af:75:2e:c1:39:23:e6:57:96:be:20: ce:b7:4b:c1:aa:3c:77:a5:d7:08:05:79:48:4c:bd: 2e:68:15:21:5f:0a:f0:09:e4:4c:27:8d:13:3a:d8: c0:2b:5d:03:ab:18:d0:ca:01:8d:11:b9:43:18:76: 66:f5:c0:49:a0:1e:61:1b:e9:e4:1b:77:6e:fe:8b: 66:2c:56:9b:12:c3:69:68:f9:71:d8:b1:56:e5:09: db:97:05:1b:7b:8a:bb:ce:20:b3:85:29:95:9a:4b: 19:22:1a:de:b7:3d:0e:2a:04:c2:03:65:8f:b1:5d: a7:f0:01:70:f5:d1:a4:99:b8:cf:33:68:ba:ad:d8: c3:83:c2:8c:42:7e:8c:29:ec:4b:eb:1d:a5:c8:16: e3:e9:5a:be:32:eb:38:f2:af:65:b6:4d:8b:60:bf: 36:0b:31:f3:24:bb:0c:3c:ff:49:3d:8a:e6:93:85: f2:51:0b:e5:82:90:bb:88:08:97:0a:3a:9f:38:b3: 56:34:4e:39:19:d2:62:9e:9b:ee:9a:30:a2:11:d7: bc:d8:c0:27:33:5f:3f:17:7f:18:10:17:89:98:81: e4:7a:4e:65:b7:cf:76:c7:f2:75:79:51:d2:4d:90: 08:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:93:E6:69:49:A0:AB:31:34:6E:1C:47:6E:74:45:D6:90:7F:CD:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/008d7de3-7f1e-3d45-bc4c-4a2572d24396.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.crl X509v3 Authority Key Identifier: keyid:86:FF:2D:22:FE:C4:48:05:84:E8:92:00:D8:2D:7A:2E:A3:82:9E:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer sbgp-ipAddrBlock: critical IPv4: 128.235.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:1f:62:ee:43:0c:57:94:80:2b:be:33:54:5f:b6:7d:50:75: 40:f1:18:d1:88:b6:43:9d:eb:7b:8f:c6:6d:70:d0:fe:52:07: be:1c:a3:d9:2e:37:be:83:67:2d:4e:72:40:a5:64:0e:59:9b: be:8a:2f:2d:89:08:6b:a7:cb:f9:d8:e5:f4:47:3e:bb:0d:15: 8a:85:df:68:89:47:5b:be:ac:49:d0:43:cf:da:44:76:9c:f3: 87:e9:9e:04:c6:54:c9:99:76:77:38:cb:31:2c:94:11:e6:5d: 7d:3d:08:84:d3:cb:f3:06:5b:d4:ec:5c:16:0d:71:2d:43:92: 24:a7:d2:00:e7:ea:a0:70:30:e4:59:03:52:a8:52:93:1c:6f: 0e:07:df:8b:0e:fc:05:2d:7d:0e:f0:c1:d8:01:28:1c:c8:87: 66:d1:cc:4e:da:47:2c:58:d2:81:c9:28:00:71:95:02:ad:b5: 9b:bd:3b:a7:9c:ff:a0:c5:c3:80:1c:84:f3:b5:6b:40:62:47: d5:e1:03:08:fc:c1:8c:23:e8:b9:dd:e4:4f:c5:82:0a:29:73: a1:9c:d2:2d:8c:8c:f5:1e:a6:05:26:29:de:e6:74:84:79:08: 3a:14:1a:cc:14:d7:ad:6c:5f:f8:84:ce:23:a2:6d:3c:eb:99: 10:34:1f:91 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE6niLy8cuDqWCyuH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE0NjFlZDYtOTc0OC00MDA1LWI2NjktODk0NjAwM2Ux YWUxMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZTZmZDc1MGMtNjc4YS00Zjg3LTg3OTItNmM2MjQ2NzZkM2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh0ERnVOVO5obQW3IvulvTX6r3UuwTkj5leW viDOt0vBqjx3pdcIBXlITL0uaBUhXwrwCeRMJ40TOtjAK10DqxjQygGNEblDGHZm 9cBJoB5hG+nkG3du/otmLFabEsNpaPlx2LFW5QnblwUbe4q7ziCzhSmVmksZIhre tz0OKgTCA2WPsV2n8AFw9dGkmbjPM2i6rdjDg8KMQn6MKexL6x2lyBbj6Vq+Mus4 8q9ltk2LYL82CzHzJLsMPP9JPYrmk4XyUQvlgpC7iAiXCjqfOLNWNE45GdJinpvu mjCiEde82MAnM18/F38YEBeJmIHkek5lt892x/J1eVHSTZAIrQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFST5mlJoKsxNG4cR250RdaQf83fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iYTQ2 MWVkNi05NzQ4LTQwMDUtYjY2OS04OTQ2MDAzZTFhZTEvMDA4ZDdkZTMtN2YxZS0z ZDQ1LWJjNGMtNGEyNTcyZDI0Mzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmE0NjFlZDYtOTc0OC00MDA1LWI2 NjktODk0NjAwM2UxYWUxL2JhNDYxZWQ2LTk3NDgtNDAwNS1iNjY5LTg5NDYwMDNl MWFlMS5jcmwwHwYDVR0jBBgwFoAUhv8tIv7ESAWE6JIA2C16LqOCnnUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iYTQ2MWVkNi05NzQ4LTQwMDUtYjY2OS04OTQ2 MDAzZTFhZTEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgOswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAcR9i7kMMV5SAK74zVF+2fVB1QPEY0Yi2Q53re4/GbXDQ/lIHvhyj2S43 voNnLU5yQKVkDlmbvoovLYkIa6fL+djl9Ec+uw0VioXfaIlHW76sSdBDz9pEdpzz h+meBMZUyZl2dzjLMSyUEeZdfT0IhNPL8wZb1OxcFg1xLUOSJKfSAOfqoHAw5FkD UqhSkxxvDgffiw78BS19DvDB2AEoHMiHZtHMTtpHLFjSgckoAHGVAq21m707p5z/ oMXDgByE87VrQGJH1eEDCPzBjCPoud3kT8WCCilzoZzSLYyM9R6mBSYp3uZ0hHkI OhQazBTXrWxf+ITOI6JtPOuZEDQfkQ== -----END CERTIFICATE-----Generated at Mon Aug 24 06:53:58 2026 by rpki-client