$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/7c02cb14-7ab0-38e2-86cb-f09009bc5549.roa File: 7c02cb14-7ab0-38e2-86cb-f09009bc5549.roa (raw, json) Hash identifier: dqd6JcFJPB8QLMrfIqTozFv4wcB0DgUObCnGii9ykdQ= Subject key identifier: C3:7A:A0:79:A2:0D:BB:EC:07:22:06:C9:EA:FB:0C:15:8B:87:9A:2D Certificate issuer: /CN=ba461ed6-9748-4005-b669-8946003e1ae1 Certificate serial: 010D0C9F4328584F6292E13E8CF4A70517E64080 Authority key identifier: 86:FF:2D:22:FE:C4:48:05:84:E8:92:00:D8:2D:7A:2E:A3:82:9E:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/7c02cb14-7ab0-38e2-86cb-f09009bc5549.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 4246 IP address blocks: 128.235.241.0/24 maxlen: 24 128.235.249.0/24 maxlen: 24 128.235.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:e1:3e:8c:f4:a7:05:17:e6:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba461ed6-9748-4005-b669-8946003e1ae1 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=983542a0-a5b5-4d35-9c70-946871f7298e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:82:58:cf:d9:7f:84:ab:5a:87:19:b1:59:34: fb:a6:4e:74:7c:c3:9b:3c:72:4d:b6:e9:94:5e:37: 94:e4:68:94:f0:65:6b:88:bf:98:0e:c2:ea:3e:3b: d1:be:e9:d8:c1:62:bc:5d:c3:7c:78:7f:a7:de:a9: 87:8f:87:f3:7c:82:28:87:1f:6b:f0:69:8b:d8:39: 2e:47:af:1a:f3:bf:26:20:75:25:05:0a:a5:b8:f7: 2f:af:99:20:b4:1f:c8:56:d7:5f:cd:87:a6:a0:da: de:41:9f:eb:61:7b:e1:e3:0f:9a:02:b1:fd:3a:d1: b0:5c:35:44:62:8c:20:c2:b2:0a:92:36:7d:41:94: 76:88:01:82:fb:d0:50:a9:b9:0d:95:78:85:3c:57: 0e:bd:db:42:28:7d:71:75:ab:52:31:29:70:78:87: a2:bb:1e:1c:8c:21:72:f0:77:f4:56:a9:ca:7e:69: cb:da:16:d9:08:ba:f2:bb:04:fc:23:c1:92:43:3a: 2d:eb:ee:eb:cd:63:ef:e0:f2:7b:54:70:f3:55:91: b7:24:11:c9:f5:7f:e3:91:bf:4e:6f:ef:fe:d3:f5: aa:25:27:69:bc:37:f6:48:56:43:3c:5a:73:a1:eb: 53:00:d5:cc:d4:5b:a5:76:3b:d0:18:11:78:4b:fc: ec:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:7A:A0:79:A2:0D:BB:EC:07:22:06:C9:EA:FB:0C:15:8B:87:9A:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/7c02cb14-7ab0-38e2-86cb-f09009bc5549.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.crl X509v3 Authority Key Identifier: keyid:86:FF:2D:22:FE:C4:48:05:84:E8:92:00:D8:2D:7A:2E:A3:82:9E:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer sbgp-ipAddrBlock: critical IPv4: 128.235.241.0/24 128.235.249.0/24 128.235.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:a3:97:ba:e4:33:27:35:bc:1d:d5:9d:4f:d9:bd:3f:08:73: 62:b3:6c:98:91:42:a6:08:9e:45:8a:77:5a:d7:d7:b2:8c:50: 13:c2:91:3d:35:96:5b:25:cb:16:70:8b:28:26:e3:3b:22:dc: 8b:8e:dc:3f:f2:9d:36:c0:19:76:d0:db:a9:a3:c7:74:e2:4d: 17:ad:e4:ef:6f:30:bf:18:61:45:e1:e9:db:87:48:73:90:f1: 37:2f:6a:07:9d:78:69:36:be:72:cd:f6:ce:31:d6:5d:6d:79: 4d:71:8e:a1:68:00:93:3c:eb:c7:87:21:e8:3b:aa:24:d8:f7: e0:a7:cc:fa:c6:c5:6c:d1:37:51:2f:db:df:47:3b:c6:07:bc: 7b:72:be:95:6b:8f:a0:85:87:c2:a9:2a:cd:a5:8f:7e:af:84: da:6b:9b:62:b2:22:fc:7a:6a:3b:2c:6a:e8:f4:32:92:16:7b: 82:00:d4:04:d6:6e:b9:47:f0:eb:39:07:0f:4e:c6:ad:bd:83: 79:07:68:ef:e8:ba:de:85:80:a5:aa:c7:4f:9d:34:eb:11:36: 5f:8d:01:94:f3:a3:42:1e:ee:2a:e1:18:42:7d:9f:2e:95:58: 94:f9:e4:c2:b9:0b:3c:17:4f:51:a6:84:ab:39:e7:df:e5:56: d3:9e:30:f3 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE9ikuE+jPSnBRfmQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE0NjFlZDYtOTc0OC00MDA1LWI2NjktODk0NjAwM2Ux YWUxMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk OTgzNTQyYTAtYTViNS00ZDM1LTljNzAtOTQ2ODcxZjcyOThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIJYz9l/hKtahxmxWTT7pk50fMObPHJNtumU XjeU5GiU8GVriL+YDsLqPjvRvunYwWK8XcN8eH+n3qmHj4fzfIIohx9r8GmL2Dku R68a878mIHUlBQqluPcvr5kgtB/IVtdfzYemoNreQZ/rYXvh4w+aArH9OtGwXDVE YowgwrIKkjZ9QZR2iAGC+9BQqbkNlXiFPFcOvdtCKH1xdatSMSlweIeiux4cjCFy 8Hf0VqnKfmnL2hbZCLryuwT8I8GSQzot6+7rzWPv4PJ7VHDzVZG3JBHJ9X/jkb9O b+/+0/WqJSdpvDf2SFZDPFpzoetTANXM1FuldjvQGBF4S/zsIwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFMN6oHmiDbvsByIGyer7DBWLh5otMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iYTQ2 MWVkNi05NzQ4LTQwMDUtYjY2OS04OTQ2MDAzZTFhZTEvN2MwMmNiMTQtN2FiMC0z OGUyLTg2Y2ItZjA5MDA5YmM1NTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmE0NjFlZDYtOTc0OC00MDA1LWI2 NjktODk0NjAwM2UxYWUxL2JhNDYxZWQ2LTk3NDgtNDAwNS1iNjY5LTg5NDYwMDNl MWFlMS5jcmwwHwYDVR0jBBgwFoAUhv8tIv7ESAWE6JIA2C16LqOCnnUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iYTQ2MWVkNi05NzQ4LTQwMDUtYjY2OS04OTQ2 MDAzZTFhZTEuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAgOvxAwQA gOv5AwQAgOv7MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAFujl7rkMyc1vB3VnU/ZvT8Ic2KzbJiRQqYInkWK d1rX17KMUBPCkT01llslyxZwiygm4zsi3IuO3D/ynTbAGXbQ26mjx3TiTRet5O9v ML8YYUXh6duHSHOQ8TcvagedeGk2vnLN9s4x1l1teU1xjqFoAJM868eHIeg7qiTY 9+CnzPrGxWzRN1Ev299HO8YHvHtyvpVrj6CFh8KpKs2lj36vhNprm2KyIvx6ajss auj0MpIWe4IA1ATWbrlH8Os5Bw9Oxq29g3kHaO/out6FgKWqx0+dNOsRNl+NAZTz o0Ie7irhGEJ9ny6VWJT55MK5CzwXT1GmhKs559/lVtOeMPM= -----END CERTIFICATE-----Generated at Thu Oct 8 07:49:58 2026 by rpki-client