$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/baee71ad-3baa-3dab-8533-57d28b98781b.roa File: baee71ad-3baa-3dab-8533-57d28b98781b.roa (raw, json) Hash identifier: PQugV1hfjeNPsMVx2E2Wz6dXsgnhgnteLfrkC/A8Tx0= Subject key identifier: 6A:36:A7:FE:74:93:02:F4:4E:10:09:AD:F7:7E:86:1D:C6:4C:C2:CD Certificate issuer: /CN=39b2626e-a40d-46fc-b3c3-ff5a12195939 Certificate serial: 010D0C9F4328584F0ED231869C1E6313DCD9B780 Authority key identifier: 16:59:36:2C:AA:41:38:1C:63:4E:EE:05:52:47:C0:80:DC:C0:D9:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/baee71ad-3baa-3dab-8533-57d28b98781b.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 401707 IP address blocks: 104.232.11.0/24 maxlen: 24 2602:f899:fe::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/39b2626e-a40d-46fc-b3c3-ff5a12195939.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/39b2626e-a40d-46fc-b3c3-ff5a12195939.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:31:86:9c:1e:63:13:dc:d9:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39b2626e-a40d-46fc-b3c3-ff5a12195939 Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=07782dfb-db29-41f2-b9b9-17197224f03d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f9:b7:1b:25:d5:2c:ef:74:88:23:cd:37:4b: 10:29:75:2b:9f:14:8f:53:bd:b5:61:70:0e:09:2e: 39:9d:52:61:07:52:7c:db:89:68:a9:fa:25:73:6d: 59:35:49:52:7c:1f:95:9d:5b:0a:11:b4:cd:28:95: dd:4d:85:44:d5:a5:dc:31:42:d0:53:48:9d:75:f0: e6:5d:6a:de:4f:c1:c7:48:a3:bb:9d:2b:26:7e:77: 32:fa:64:1b:8a:74:f1:df:b2:76:5d:97:53:d1:c0: 2f:8d:4e:24:39:81:30:0d:5f:ee:b0:6b:05:21:9c: 0b:cf:1f:ec:af:9c:44:8a:a5:b2:2e:c5:61:7c:51: a7:30:8c:b5:e6:f8:4a:3d:84:fb:b4:07:03:ad:44: bf:cd:02:56:2f:ae:e5:45:cd:27:b3:12:34:88:a9: 3d:1b:81:f6:16:75:37:35:22:d3:6b:6c:77:f3:03: 28:9e:21:db:18:70:c7:01:47:d1:f2:db:68:54:0b: 44:3d:45:37:07:e6:ed:76:c3:5e:65:54:69:21:68: 4f:48:d8:c6:65:1e:c7:db:16:23:e3:39:ff:81:29: 9d:67:76:e3:94:c1:51:08:61:ae:d2:c0:7d:94:1d: 9a:be:06:e0:d9:51:60:dd:1a:b7:ce:9d:d0:20:81: fa:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:36:A7:FE:74:93:02:F4:4E:10:09:AD:F7:7E:86:1D:C6:4C:C2:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/baee71ad-3baa-3dab-8533-57d28b98781b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/39b2626e-a40d-46fc-b3c3-ff5a12195939.crl X509v3 Authority Key Identifier: keyid:16:59:36:2C:AA:41:38:1C:63:4E:EE:05:52:47:C0:80:DC:C0:D9:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939.cer sbgp-ipAddrBlock: critical IPv4: 104.232.11.0/24 IPv6: 2602:f899:fe::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ea:65:a6:5f:d4:77:67:f0:2b:6c:43:06:27:36:86:47:9e:32: 7b:4b:7f:b0:2b:6d:08:28:76:46:86:c1:aa:5e:f2:11:a2:15: 86:65:b1:d9:7f:c7:36:9a:00:ac:87:23:8f:85:f6:b4:69:b6: 72:73:30:b0:37:59:92:1e:66:e4:36:b0:bd:86:01:69:a6:1a: fd:8a:84:87:9f:22:1f:bd:05:81:02:d9:13:90:be:f9:d9:3d: 85:3d:c5:9c:12:eb:98:41:1b:85:ec:a8:de:b6:14:87:f6:4d: d8:a4:a9:22:97:4a:3f:30:ab:b1:30:b7:dd:00:e7:dd:d2:a7: 73:b7:96:48:71:04:66:12:98:d6:d0:2b:27:7b:53:af:04:a5: 20:44:a3:53:2f:0c:8a:74:05:30:d9:a9:38:55:a0:31:e8:95: 86:14:34:d5:f7:b7:23:fe:fd:c4:f7:30:4a:4a:e6:d5:0b:b0: c1:b4:6e:fd:c8:03:43:6b:c9:38:44:be:e9:9c:f9:a1:71:25: c4:b3:fb:fd:0f:20:9f:c0:15:d1:d1:d9:14:1e:ad:cd:11:5d: 09:43:2f:fc:2f:82:45:45:12:34:31:ce:59:8f:d9:28:c9:f0: 01:a7:06:e2:af:1b:14:ec:97:00:11:f4:d5:c9:cd:75:52:82: 26:c6:e2:4f -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE8O0jGGnB5jE9zZt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzliMjYyNmUtYTQwZC00NmZjLWIzYzMtZmY1YTEyMTk1 OTM5MB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk MDc3ODJkZmItZGIyOS00MWYyLWI5YjktMTcxOTcyMjRmMDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPm3GyXVLO90iCPNN0sQKXUrnxSPU721YXAO CS45nVJhB1J824loqfolc21ZNUlSfB+VnVsKEbTNKJXdTYVE1aXcMULQU0iddfDm XWreT8HHSKO7nSsmfncy+mQbinTx37J2XZdT0cAvjU4kOYEwDV/usGsFIZwLzx/s r5xEiqWyLsVhfFGnMIy15vhKPYT7tAcDrUS/zQJWL67lRc0nsxI0iKk9G4H2FnU3 NSLTa2x38wMoniHbGHDHAUfR8ttoVAtEPUU3B+btdsNeZVRpIWhPSNjGZR7H2xYj 4zn/gSmdZ3bjlMFRCGGu0sB9lB2avgbg2VFg3Rq3zp3QIIH6hQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFGo2p/50kwL0ThAJrfd+hh3GTMLNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOWIy NjI2ZS1hNDBkLTQ2ZmMtYjNjMy1mZjVhMTIxOTU5MzkvYmFlZTcxYWQtM2JhYS0z ZGFiLTg1MzMtNTdkMjhiOTg3ODFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzliMjYyNmUtYTQwZC00NmZjLWIz YzMtZmY1YTEyMTk1OTM5LzM5YjI2MjZlLWE0MGQtNDZmYy1iM2MzLWZmNWExMjE5 NTkzOS5jcmwwHwYDVR0jBBgwFoAUFlk2LKpBOBxjTu4FUkfAgNzA2YAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zOWIyNjI2ZS1hNDBkLTQ2ZmMtYjNjMy1mZjVh MTIxOTU5MzkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAaOgLMA8E AgACMAkDBwEmAviZAP4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA6mWmX9R3Z/ArbEMGJzaGR54ye0t/sCtt CCh2RobBql7yEaIVhmWx2X/HNpoArIcjj4X2tGm2cnMwsDdZkh5m5DawvYYBaaYa /YqEh58iH70FgQLZE5C++dk9hT3FnBLrmEEbheyo3rYUh/ZN2KSpIpdKPzCrsTC3 3QDn3dKnc7eWSHEEZhKY1tArJ3tTrwSlIESjUy8MinQFMNmpOFWgMeiVhhQ01fe3 I/79xPcwSkrm1QuwwbRu/cgDQ2vJOES+6Zz5oXElxLP7/Q8gn8AV0dHZFB6tzRFd CUMv/C+CRUUSNDHOWY/ZKMnwAacG4q8bFOyXABH01cnNdVKCJsbiTw== -----END CERTIFICATE-----Generated at Fri Sep 11 13:28:28 2026 by rpki-client