$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/426fe59f-41f8-3a5b-a799-ac686dd0fec3.roa File: 426fe59f-41f8-3a5b-a799-ac686dd0fec3.roa (raw, json) Hash identifier: 4ZeVONzHprG3cV0cEvmSYDJ5oHwaBkiE5rjnUW6YjW4= Subject key identifier: 64:60:79:50:35:25:95:01:AF:30:65:B5:08:73:F1:F6:DE:DE:41:14 Certificate issuer: /CN=ba461ed6-9748-4005-b669-8946003e1ae1 Certificate serial: 010D0C9F4328584F6292E11806E91E543C4450A0 Authority key identifier: 86:FF:2D:22:FE:C4:48:05:84:E8:92:00:D8:2D:7A:2E:A3:82:9E:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/426fe59f-41f8-3a5b-a799-ac686dd0fec3.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 4246 IP address blocks: 128.235.12.0/24 maxlen: 24 128.235.13.0/24 maxlen: 24 128.235.85.0/24 maxlen: 24 128.235.159.0/24 maxlen: 24 128.235.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:e1:18:06:e9:1e:54:3c:44:50:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba461ed6-9748-4005-b669-8946003e1ae1 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=c67d500e-7802-4645-a649-0d1668f58bf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:90:cf:0d:e7:ad:a1:ac:1b:00:63:f2:3d:8a: fe:f0:b2:f4:f0:62:ed:14:9c:c8:32:f2:3c:d5:2f: 9a:26:9f:b7:94:d8:e7:bb:49:a8:b9:6a:63:b7:a9: 51:1a:46:07:fb:ec:80:97:0e:64:0b:f0:4d:77:42: 72:16:f3:a4:b1:97:4f:2d:bb:0b:06:a8:7c:18:76: 26:16:5a:21:0a:9d:7a:ef:d9:ba:ce:bf:cd:48:80: 80:80:c8:2c:10:8c:f6:30:8d:be:50:c4:07:c9:0d: 64:a4:9b:2d:b9:5d:21:bf:37:eb:a1:d2:d6:6f:4c: 7a:ab:75:c6:e0:ab:80:b3:e9:a4:e6:9b:dc:ee:fe: 44:94:89:a0:49:57:31:0a:3d:8d:13:1b:1d:40:9d: 67:b6:01:64:c0:90:e1:b6:a6:ab:43:02:9a:98:9f: 70:7d:ce:f0:f8:b4:d4:59:57:1d:6a:db:46:b4:4d: ac:77:5b:f8:24:3f:42:fa:21:28:be:0f:dd:82:5c: 61:62:3e:39:b4:df:66:1b:14:e2:53:1b:87:e8:bd: fe:9b:dd:e7:3c:00:e3:85:50:c8:f4:ba:80:b5:7b: a2:fd:3f:21:9e:fe:da:0f:50:f9:5d:03:5b:31:24: df:9e:e2:7a:6f:c5:79:86:1e:2e:ed:89:a9:65:ac: 10:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:60:79:50:35:25:95:01:AF:30:65:B5:08:73:F1:F6:DE:DE:41:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/426fe59f-41f8-3a5b-a799-ac686dd0fec3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.crl X509v3 Authority Key Identifier: keyid:86:FF:2D:22:FE:C4:48:05:84:E8:92:00:D8:2D:7A:2E:A3:82:9E:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer sbgp-ipAddrBlock: critical IPv4: 128.235.12.0/23 128.235.85.0/24 128.235.159.0/24 128.235.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:9d:2b:a9:85:46:ad:d0:7d:66:fb:fd:8f:f1:7d:31:bc:57: ca:25:19:54:e6:b3:99:a2:18:b6:91:1f:7a:b7:68:83:6e:6d: 86:99:8b:17:e3:44:fd:12:b9:f6:07:c3:39:cf:4a:12:ca:2a: 9e:af:ea:cd:77:da:ed:28:c1:de:d2:50:f3:d4:0d:91:43:25: d1:56:64:7a:f6:6e:af:50:1b:cb:84:c0:2c:35:6c:d4:8c:2f: 26:01:5d:29:3e:cd:5e:6f:ea:7b:52:b4:07:31:71:d3:dc:f8: 81:90:fd:e6:ff:12:1d:4d:15:b1:87:42:39:ab:5e:24:d3:8d: 93:7b:a5:e3:25:c9:9e:5e:52:7d:d9:8a:48:88:bc:34:aa:dc: 99:3a:7f:14:f5:e6:a1:6f:a6:fc:41:32:de:7f:bf:88:b1:a1: f0:b5:1e:ab:46:7c:a7:f8:2a:a4:50:6d:46:f7:5f:05:7d:66: b8:4e:b0:49:6f:5b:d4:3d:d4:f2:3f:77:37:42:1e:25:01:7f: 13:4c:db:64:72:6f:9b:50:fa:f0:bf:75:35:60:09:01:78:f3: 06:4b:50:89:aa:b2:3d:9e:af:77:3f:a3:6f:31:4e:36:76:7f: 8d:60:fb:72:46:87:98:5c:d3:4e:2a:22:cb:aa:7e:60:41:f7: 92:18:a8:03 -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWE9ikuEYBukeVDxEUKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE0NjFlZDYtOTc0OC00MDA1LWI2NjktODk0NjAwM2Ux YWUxMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk YzY3ZDUwMGUtNzgwMi00NjQ1LWE2NDktMGQxNjY4ZjU4YmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5DPDeetoawbAGPyPYr+8LL08GLtFJzIMvI8 1S+aJp+3lNjnu0mouWpjt6lRGkYH++yAlw5kC/BNd0JyFvOksZdPLbsLBqh8GHYm FlohCp1679m6zr/NSICAgMgsEIz2MI2+UMQHyQ1kpJstuV0hvzfrodLWb0x6q3XG 4KuAs+mk5pvc7v5ElImgSVcxCj2NExsdQJ1ntgFkwJDhtqarQwKamJ9wfc7w+LTU WVcdattGtE2sd1v4JD9C+iEovg/dglxhYj45tN9mGxTiUxuH6L3+m93nPADjhVDI 9LqAtXui/T8hnv7aD1D5XQNbMSTfnuJ6b8V5hh4u7YmpZawQiwIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFGRgeVA1JZUBrzBltQhz8fbe3kEUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iYTQ2 MWVkNi05NzQ4LTQwMDUtYjY2OS04OTQ2MDAzZTFhZTEvNDI2ZmU1OWYtNDFmOC0z YTViLWE3OTktYWM2ODZkZDBmZWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmE0NjFlZDYtOTc0OC00MDA1LWI2 NjktODk0NjAwM2UxYWUxL2JhNDYxZWQ2LTk3NDgtNDAwNS1iNjY5LTg5NDYwMDNl MWFlMS5jcmwwHwYDVR0jBBgwFoAUhv8tIv7ESAWE6JIA2C16LqOCnnUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iYTQ2MWVkNi05NzQ4LTQwMDUtYjY2OS04OTQ2 MDAzZTFhZTEuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBgOsMAwQA gOtVAwQAgOufAwQAgOv6MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBADedK6mFRq3QfWb7/Y/xfTG8V8olGVTm s5miGLaRH3q3aINubYaZixfjRP0SufYHwznPShLKKp6v6s132u0owd7SUPPUDZFD JdFWZHr2bq9QG8uEwCw1bNSMLyYBXSk+zV5v6ntStAcxcdPc+IGQ/eb/Eh1NFbGH QjmrXiTTjZN7peMlyZ5eUn3ZikiIvDSq3Jk6fxT15qFvpvxBMt5/v4ixofC1HqtG fKf4KqRQbUb3XwV9ZrhOsElvW9Q91PI/dzdCHiUBfxNM22Ryb5tQ+vC/dTVgCQF4 8wZLUImqsj2er3c/o28xTjZ2f41g+3JGh5hc004qIsuqfmBB95IYqAM= -----END CERTIFICATE-----Generated at Thu Oct 8 12:19:05 2026 by rpki-client