$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/a973be6d-e115-33cf-9248-c6c35ab8897d.roa File: a973be6d-e115-33cf-9248-c6c35ab8897d.roa (raw, json) Hash identifier: oQx7ahtPvy33QN0c68hr7ZskhgpUY3ikhhli2B9u8u8= Subject key identifier: CB:E0:C4:97:68:03:37:16:78:52:6A:94:D9:7A:C7:C5:1B:4E:26:BE Certificate issuer: /CN=ba461ed6-9748-4005-b669-8946003e1ae1 Certificate serial: 010D0C9F4328584F6292DB70A8C9A50033653F80 Authority key identifier: 86:FF:2D:22:FE:C4:48:05:84:E8:92:00:D8:2D:7A:2E:A3:82:9E:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/a973be6d-e115-33cf-9248-c6c35ab8897d.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 4246 IP address blocks: 128.235.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:db:70:a8:c9:a5:00:33:65:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba461ed6-9748-4005-b669-8946003e1ae1 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=8a9c80f6-18b1-4623-b1d5-2242e6dbe2a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:6c:46:d2:6c:68:8e:88:fb:7e:51:30:fd:3a: cd:b0:78:4a:30:27:d2:cb:93:7c:e4:1e:19:d6:02: a3:03:84:bc:c3:e0:6c:5d:88:d4:31:bf:d4:38:85: 19:cb:cd:1b:2a:81:df:6e:61:d4:f6:c2:29:cd:c8: 77:14:ee:73:aa:4f:48:e3:5d:28:7e:7b:53:c0:46: f4:40:c0:4e:15:e1:08:02:bd:71:b1:5f:5f:e9:eb: 25:16:df:2b:18:50:35:a8:40:76:bf:a5:2a:14:cb: 18:a2:3f:aa:c5:b4:e3:50:11:13:4f:a9:9d:4e:2d: ac:c6:ba:73:70:8f:e3:26:69:05:0f:ea:25:d1:22: 53:68:f0:88:36:47:be:9c:9e:47:c9:79:c1:0b:70: a1:ab:18:a6:4b:3c:d9:aa:b7:0f:51:b1:c7:16:eb: f3:57:12:f6:f7:75:71:53:53:bd:cc:a7:72:50:f6: 16:e4:ca:9f:e6:39:52:cb:cd:68:1e:27:f5:c4:60: 09:2b:a7:3d:84:19:4b:ae:6f:5b:cc:ae:da:18:8d: df:48:c3:f6:aa:0e:bb:52:99:6a:c3:f2:73:c5:eb: fb:62:13:09:43:a8:66:b1:7c:83:91:f4:55:2d:af: 3f:f1:25:10:ef:0a:6a:0a:ed:bb:48:99:84:b5:c0: 03:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E0:C4:97:68:03:37:16:78:52:6A:94:D9:7A:C7:C5:1B:4E:26:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/a973be6d-e115-33cf-9248-c6c35ab8897d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.crl X509v3 Authority Key Identifier: keyid:86:FF:2D:22:FE:C4:48:05:84:E8:92:00:D8:2D:7A:2E:A3:82:9E:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer sbgp-ipAddrBlock: critical IPv4: 128.235.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:e7:f3:2a:e2:82:55:f2:d7:bc:16:52:87:72:37:cd:cd:9c: c6:2d:0a:23:a9:ea:5b:c4:8f:ad:b2:c8:51:18:42:18:2e:9d: 24:1c:0b:89:41:da:d9:fd:38:c7:5c:e0:be:e9:c0:0d:32:69: da:6e:c4:a1:40:bc:34:ae:35:74:be:3d:81:b8:d3:c8:db:16: a4:1d:8c:67:e3:ce:ab:50:ed:af:70:d2:ef:4f:51:d7:5e:7d: a6:93:b0:d2:3e:da:c2:98:a0:e4:59:2b:ef:80:57:2e:12:c8: 45:09:97:c0:1d:f8:b1:f6:c6:df:c5:45:cf:7d:85:d6:b8:03: 42:e3:ab:3e:02:05:a7:f0:00:e8:9d:26:23:65:8f:8f:dd:5f: 44:9e:e4:0d:6d:af:0d:09:ce:49:9b:ad:51:a0:34:12:05:cc: d9:b7:8f:db:e2:b0:9b:8c:4c:2b:e9:89:1b:a2:96:e9:10:24: c7:53:6d:4a:e4:e2:40:99:4d:7c:50:cf:64:ef:f7:a3:07:ff: 9e:ee:d2:77:9b:81:08:10:12:ba:c4:e5:9a:ca:99:cf:ab:0c: e6:00:bb:d4:a2:bc:ed:84:ec:54:6e:07:84:60:fe:ac:cd:21: 88:64:62:cf:e3:86:7e:2d:40:53:9d:be:80:1a:93:4d:e1:d8: f7:95:53:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikttwqMmlADNlP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE0NjFlZDYtOTc0OC00MDA1LWI2NjktODk0NjAwM2Ux YWUxMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk OGE5YzgwZjYtMThiMS00NjIzLWIxZDUtMjI0MmU2ZGJlMmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimxG0mxojoj7flEw/TrNsHhKMCfSy5N85B4Z 1gKjA4S8w+BsXYjUMb/UOIUZy80bKoHfbmHU9sIpzch3FO5zqk9I410ofntTwEb0 QMBOFeEIAr1xsV9f6eslFt8rGFA1qEB2v6UqFMsYoj+qxbTjUBETT6mdTi2sxrpz cI/jJmkFD+ol0SJTaPCINke+nJ5HyXnBC3ChqximSzzZqrcPUbHHFuvzVxL293Vx U1O9zKdyUPYW5Mqf5jlSy81oHif1xGAJK6c9hBlLrm9bzK7aGI3fSMP2qg67Uplq w/Jzxev7YhMJQ6hmsXyDkfRVLa8/8SUQ7wpqCu27SJmEtcAD7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvgxJdoAzcWeFJqlNl6x8UbTia+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iYTQ2 MWVkNi05NzQ4LTQwMDUtYjY2OS04OTQ2MDAzZTFhZTEvYTk3M2JlNmQtZTExNS0z M2NmLTkyNDgtYzZjMzVhYjg4OTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmE0NjFlZDYtOTc0OC00MDA1LWI2 NjktODk0NjAwM2UxYWUxL2JhNDYxZWQ2LTk3NDgtNDAwNS1iNjY5LTg5NDYwMDNl MWFlMS5jcmwwHwYDVR0jBBgwFoAUhv8tIv7ESAWE6JIA2C16LqOCnnUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iYTQ2MWVkNi05NzQ4LTQwMDUtYjY2OS04OTQ2 MDAzZTFhZTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgOvEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTn8yriglXy17wWUodyN83NnMYtCiOp6lvEj62yyFEYQhgunSQcC4lB 2tn9OMdc4L7pwA0yadpuxKFAvDSuNXS+PYG408jbFqQdjGfjzqtQ7a9w0u9PUdde faaTsNI+2sKYoORZK++AVy4SyEUJl8Ad+LH2xt/FRc99hda4A0Ljqz4CBafwAOid JiNlj4/dX0Se5A1trw0JzkmbrVGgNBIFzNm3j9visJuMTCvpiRuilukQJMdTbUrk 4kCZTXxQz2Tv96MH/57u0nebgQgQErrE5ZrKmc+rDOYAu9SivO2E7FRuB4Rg/qzN IYhkYs/jhn4tQFOdvoAak03h2PeVUwo= -----END CERTIFICATE-----Generated at Thu Oct 8 23:34:18 2026 by rpki-client