$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/a8a5e5d0-1203-30a1-9c88-3fd3fd06c358.roa File: a8a5e5d0-1203-30a1-9c88-3fd3fd06c358.roa (raw, json) Hash identifier: UFPCLQEmMdGgQVtbnwD81LtypZ8j67P1x11mxxPWpZ4= Subject key identifier: FE:A4:D0:B2:C0:52:47:26:4C:F4:D4:B1:2B:49:53:A8:3A:1E:84:C0 Certificate issuer: /CN=ba461ed6-9748-4005-b669-8946003e1ae1 Certificate serial: 010D0C9F4328584EC0A72D6A28F06A5F8E9E5E00 Authority key identifier: 86:FF:2D:22:FE:C4:48:05:84:E8:92:00:D8:2D:7A:2E:A3:82:9E:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/a8a5e5d0-1203-30a1-9c88-3fd3fd06c358.roa Signing time: Fri 07 Aug 2026 01:00:12 +0000 ROA not before: Fri 07 Aug 2026 01:00:12 +0000 ROA not after: Thu 05 Nov 2026 02:00:12 +0000 asID: 4246 IP address blocks: 128.235.0.0/17 maxlen: 17 128.235.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 25 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c0:a7:2d:6a:28:f0:6a:5f:8e:9e:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba461ed6-9748-4005-b669-8946003e1ae1 Validity Not Before: Aug 7 01:00:12 2026 GMT Not After : Nov 5 02:00:12 2026 GMT Subject: CN=ba858560-a9eb-48d0-8021-67adb7e13738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:80:4e:46:9a:bc:8c:4f:6c:b1:01:bf:24:c0: 6a:65:d3:19:ed:42:38:fa:ba:0f:14:4a:67:6b:f6: 82:de:9c:47:2b:3d:2a:0a:9e:d0:df:23:b7:17:31: 8c:59:b1:99:5a:63:9e:97:27:f6:03:02:a9:90:ae: 20:f7:ce:2e:f8:eb:8b:e2:a9:7d:12:4b:5b:3d:54: 40:b9:bd:48:df:c1:5b:fd:88:f1:92:e2:bd:e2:4a: 2c:d1:28:30:bc:51:76:c4:6e:11:ba:38:52:b8:ce: ed:3e:52:ca:4a:60:db:c4:ce:26:22:a7:a3:fe:9f: 24:73:3b:29:5f:08:e8:46:c4:e2:98:cf:13:a6:aa: 45:00:da:0c:b0:07:d6:90:f5:8c:82:3e:97:d7:9d: c7:13:26:a1:fc:5f:a3:e5:64:e1:56:94:71:fe:27: 5a:3c:0a:c2:6d:3f:ee:59:99:3a:8c:8d:3f:68:29: 36:b6:00:b7:dd:ad:58:96:ea:bc:4f:db:0f:ed:d8: a9:49:ab:c2:a7:79:fd:6b:34:23:d4:ec:af:1a:8e: 60:25:31:23:b9:c0:2e:93:03:8a:bd:cc:9c:76:b3: bc:c7:26:d3:37:43:01:12:19:4c:cc:d9:73:d1:38: 06:31:82:b3:64:c7:b7:02:46:18:a6:b5:c9:4c:46: 73:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:A4:D0:B2:C0:52:47:26:4C:F4:D4:B1:2B:49:53:A8:3A:1E:84:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/a8a5e5d0-1203-30a1-9c88-3fd3fd06c358.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.crl X509v3 Authority Key Identifier: keyid:86:FF:2D:22:FE:C4:48:05:84:E8:92:00:D8:2D:7A:2E:A3:82:9E:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer sbgp-ipAddrBlock: critical IPv4: 128.235.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:d2:67:33:34:3b:09:da:21:d3:cd:b4:6b:5b:88:35:e2:25: f8:16:7e:41:3a:dd:63:f7:f3:10:aa:11:10:a6:09:15:9b:7a: b2:4d:3c:d7:f5:61:1e:34:c7:2e:6b:ad:10:4f:d6:22:5b:ad: 73:d3:4e:e0:68:c6:ed:39:15:af:4b:3c:3b:44:d0:b3:d0:d0: 49:f8:44:e1:e1:b1:9e:bf:8f:e8:b5:02:06:33:c4:a4:03:79: b9:16:cf:7e:b4:e1:fe:b3:3d:1b:46:62:fe:6b:b1:a1:19:d2: ac:94:0f:0d:af:13:d1:b8:59:f0:91:88:72:8d:8a:87:7c:58: ef:c7:c8:a2:31:e1:2c:d1:47:b0:86:50:6a:0a:65:f2:60:d1: 6f:78:9c:8c:df:b0:2f:83:a6:78:fa:33:ac:7e:9c:88:d4:48: d2:af:c7:23:68:35:c1:ef:ad:fc:3a:16:4c:fe:ff:46:09:ca: e8:7c:bc:68:e3:16:ab:ba:e5:7b:c2:44:86:5f:18:23:22:d2: 5a:a4:07:e5:a4:3e:24:a4:bf:ad:3a:1d:51:34:c9:79:28:3e: b9:65:ea:ee:4a:a6:d4:2c:e8:9d:b7:98:a7:3f:33:f6:e3:9a: 8d:e6:8a:43:60:e0:95:92:9f:c9:08:4f:e7:05:96:34:65:ce: fb:ac:c0:a2 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7Apy1qKPBqX46eXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE0NjFlZDYtOTc0OC00MDA1LWI2NjktODk0NjAwM2Ux YWUxMB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk YmE4NTg1NjAtYTllYi00OGQwLTgwMjEtNjdhZGI3ZTEzNzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIBORpq8jE9ssQG/JMBqZdMZ7UI4+roPFEpn a/aC3pxHKz0qCp7Q3yO3FzGMWbGZWmOelyf2AwKpkK4g984u+OuL4ql9EktbPVRA ub1I38Fb/YjxkuK94kos0SgwvFF2xG4RujhSuM7tPlLKSmDbxM4mIqej/p8kczsp XwjoRsTimM8TpqpFANoMsAfWkPWMgj6X153HEyah/F+j5WThVpRx/idaPArCbT/u WZk6jI0/aCk2tgC33a1Yluq8T9sP7dipSavCp3n9azQj1OyvGo5gJTEjucAukwOK vcycdrO8xybTN0MBEhlMzNlz0TgGMYKzZMe3AkYYprXJTEZzxQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFP6k0LLAUkcmTPTUsStJU6g6HoTAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iYTQ2 MWVkNi05NzQ4LTQwMDUtYjY2OS04OTQ2MDAzZTFhZTEvYThhNWU1ZDAtMTIwMy0z MGExLTljODgtM2ZkM2ZkMDZjMzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmE0NjFlZDYtOTc0OC00MDA1LWI2 NjktODk0NjAwM2UxYWUxL2JhNDYxZWQ2LTk3NDgtNDAwNS1iNjY5LTg5NDYwMDNl MWFlMS5jcmwwHwYDVR0jBBgwFoAUhv8tIv7ESAWE6JIA2C16LqOCnnUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iYTQ2MWVkNi05NzQ4LTQwMDUtYjY2OS04OTQ2 MDAzZTFhZTEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgOswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAiNJnMzQ7Cdoh0820a1uINeIl+BZ+QTrdY/fzEKoREKYJFZt6sk081/Vh HjTHLmutEE/WIlutc9NO4GjG7TkVr0s8O0TQs9DQSfhE4eGxnr+P6LUCBjPEpAN5 uRbPfrTh/rM9G0Zi/muxoRnSrJQPDa8T0bhZ8JGIco2Kh3xY78fIojHhLNFHsIZQ agpl8mDRb3icjN+wL4OmePozrH6ciNRI0q/HI2g1we+t/DoWTP7/RgnK6Hy8aOMW q7rle8JEhl8YIyLSWqQH5aQ+JKS/rTodUTTJeSg+uWXq7kqm1CzonbeYpz8z9uOa jeaKQ2DglZKfyQhP5wWWNGXO+6zAog== -----END CERTIFICATE-----Generated at Mon Aug 24 05:36:31 2026 by rpki-client