$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/ba4c9292-c0ab-34be-aa20-dbabce3fd4bc.roa File: ba4c9292-c0ab-34be-aa20-dbabce3fd4bc.roa (raw, json) Hash identifier: L3Gc/ZuBJyMfsGf3J9SZ73lIgxJXLQEhuhJuPloYQo4= Subject key identifier: 33:FF:A5:6C:1F:DE:E8:AB:FB:E4:41:62:9A:68:88:65:6D:12:B0:30 Certificate issuer: /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Certificate serial: 010D0C9F4328584EA793AD78BF680DD5E23F7740 Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/ba4c9292-c0ab-34be-aa20-dbabce3fd4bc.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 53959 IP address blocks: 207.171.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:93:ad:78:bf:68:0d:d5:e2:3f:77:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=31f47454-39b1-4002-8159-fb1dc2a12de5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:81:ca:ee:bf:36:98:ea:31:62:fa:c1:82:90: 46:ec:02:1a:8a:06:8f:e5:f3:85:5e:43:c2:60:97: 86:b6:84:73:6d:ed:af:59:e9:5c:96:99:5b:6d:ba: 0b:7e:56:26:2d:f2:1b:17:e2:2f:74:e1:02:d8:1d: f6:9c:32:58:c0:be:21:1b:8c:56:09:fa:a4:86:2d: 6e:57:46:98:07:33:ce:90:f3:5f:3d:aa:8e:5c:40: 55:95:23:64:fd:48:c5:0a:79:7d:55:a6:a0:db:1a: d5:72:5c:8d:4d:dd:a8:4a:64:67:10:3f:57:24:25: 7a:66:84:19:ec:96:8d:4b:d9:65:94:cf:da:92:18: f3:88:1c:fd:a5:c0:c9:ed:ca:01:4c:78:4f:dc:8a: c1:4c:73:66:c6:5b:a3:45:97:92:d9:f2:ef:0b:4f: c9:62:95:ed:e7:23:ee:95:19:31:cf:f2:9c:3e:3a: ac:a0:33:79:b7:18:04:db:44:4a:cd:ef:21:07:d1: 37:cd:e9:a4:62:8b:78:9b:dc:e9:40:b8:32:bf:e0: 40:23:6b:11:a9:db:29:4f:c3:0c:f3:43:00:59:d5: 85:d2:cb:4b:20:33:90:e4:07:31:cc:f4:d1:ba:25: 8c:1e:a4:a0:19:db:b7:e0:fb:8e:50:b4:f4:72:e7: 68:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FF:A5:6C:1F:DE:E8:AB:FB:E4:41:62:9A:68:88:65:6D:12:B0:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/ba4c9292-c0ab-34be-aa20-dbabce3fd4bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl X509v3 Authority Key Identifier: keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer sbgp-ipAddrBlock: critical IPv4: 207.171.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:cf:02:8c:d2:ff:ae:c7:f3:de:ea:4b:21:8c:48:d6:89:fd: 29:24:56:b5:5c:e0:50:56:4c:ca:b3:69:58:dc:1e:a2:7a:60: 24:16:f0:65:ef:0b:6c:a7:7b:8a:81:f0:e6:8f:af:e9:ad:09: 8a:98:87:35:cb:5b:bf:e4:24:86:5d:bf:5a:18:a9:7f:8b:25: f3:b0:0d:11:37:33:1e:c5:2b:83:4c:0f:e7:f7:6e:87:d8:83: 9d:c6:d7:b9:27:e2:0e:b0:88:c8:99:35:5e:77:c0:3c:47:4f: 66:77:64:69:66:22:a1:10:87:a4:1e:20:42:21:8f:79:2a:06: 60:f3:8c:01:6e:7d:2a:b4:7e:19:d1:19:ab:32:0f:ad:2d:bb: c0:b3:7c:42:79:3d:df:03:55:51:4c:4f:2e:98:f7:27:19:9e: b7:77:1a:93:38:b6:d5:52:5e:e0:62:c6:91:87:11:41:40:69: 2a:59:6f:bc:f8:6b:c4:ef:39:ac:fb:62:95:ea:f2:a8:7c:9e: d0:ca:56:99:b7:0b:2b:08:b0:63:5b:ae:68:23:72:78:cf:e2: 97:da:c0:a9:70:e5:29:fb:d6:b3:60:06:13:05:4b:b5:4c:cf: 62:1b:e0:b8:93:77:2e:ae:41:cc:af:71:98:ea:dd:bb:05:d4: 11:81:49:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nk614v2gN1eI/d0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm YTExMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MzFmNDc0NTQtMzliMS00MDAyLTgxNTktZmIxZGMyYTEyZGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYHK7r82mOoxYvrBgpBG7AIaigaP5fOFXkPC YJeGtoRzbe2vWelclplbbboLflYmLfIbF+IvdOEC2B32nDJYwL4hG4xWCfqkhi1u V0aYBzPOkPNfPaqOXEBVlSNk/UjFCnl9Vaag2xrVclyNTd2oSmRnED9XJCV6ZoQZ 7JaNS9lllM/akhjziBz9pcDJ7coBTHhP3IrBTHNmxlujRZeS2fLvC0/JYpXt5yPu lRkxz/KcPjqsoDN5txgE20RKze8hB9E3zemkYot4m9zpQLgyv+BAI2sRqdspT8MM 80MAWdWF0stLIDOQ5AcxzPTRuiWMHqSgGdu34PuOULT0cudoEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDP/pWwf3uir++RBYppoiGVtErAwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvYmE0YzkyOTItYzBhYi0z NGJlLWFhMjAtZGJhYmNlM2ZkNGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1 YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5 NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6vxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnPAozS/67H897qSyGMSNaJ/SkkVrVc4FBWTMqzaVjcHqJ6YCQW8GXv C2yne4qB8OaPr+mtCYqYhzXLW7/kJIZdv1oYqX+LJfOwDRE3Mx7FK4NMD+f3bofY g53G17kn4g6wiMiZNV53wDxHT2Z3ZGlmIqEQh6QeIEIhj3kqBmDzjAFufSq0fhnR GasyD60tu8CzfEJ5Pd8DVVFMTy6Y9ycZnrd3GpM4ttVSXuBixpGHEUFAaSpZb7z4 a8TvOaz7YpXq8qh8ntDKVpm3CysIsGNbrmgjcnjP4pfawKlw5Sn71rNgBhMFS7VM z2Ib4LiTdy6uQcyvcZjq3bsF1BGBSeg= -----END CERTIFICATE-----Generated at Fri Sep 11 14:27:08 2026 by rpki-client