$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba705f72-9339-3a24-857f-8fa90b253fef.roa File: ba705f72-9339-3a24-857f-8fa90b253fef.roa (raw, json) Hash identifier: hSXMbeNAbpesXUwpHMnbE3dKJeyz5Hxjwjbnc1QmM2Q= Subject key identifier: C3:92:A9:C4:4A:E6:AC:16:A8:AD:0B:6E:FC:34:C2:F4:0C:DE:6B:CE Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F539DA715EEEA8261FFB3EF00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba705f72-9339-3a24-857f-8fa90b253fef.roa Signing time: Mon 28 Sep 2026 16:25:12 +0000 ROA not before: Mon 28 Sep 2026 16:25:12 +0000 ROA not after: Sun 27 Dec 2026 17:25:12 +0000 asID: 18709 IP address blocks: 209.34.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:9d:a7:15:ee:ea:82:61:ff:b3:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:25:12 2026 GMT Not After : Dec 27 17:25:12 2026 GMT Subject: CN=0a7abc39-d387-4077-8d4b-2d5bc40fc23a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a8:c5:43:da:5e:13:a0:1c:db:b5:b8:ad:ad: eb:f5:5c:5f:59:43:ea:ba:b0:5c:0c:bf:1d:e6:93: 31:cf:11:c3:f8:94:d4:10:91:f6:46:60:cf:6f:3d: c8:19:96:83:03:3d:df:33:ae:82:e2:f8:05:d2:df: e7:c7:95:0d:60:84:7a:6c:15:c2:8e:26:bb:89:3a: 98:7f:9c:e4:32:6c:33:69:96:f9:66:c1:8b:64:c3: 64:3e:7e:27:2c:21:f4:b5:0f:df:d7:23:ad:56:78: fa:5b:4f:2e:87:ae:bc:2c:aa:36:2c:4d:ac:7e:43: 62:da:35:e1:ed:24:bd:b6:c7:17:5b:be:fe:b0:e2: d4:54:1a:37:98:5f:83:c8:e8:38:9c:86:ad:f7:c5: a1:47:85:57:72:9d:b5:4d:ae:82:52:f2:40:34:e5: d1:ab:e1:a7:63:77:ce:d2:c2:5d:d8:de:42:69:a2: 2c:3b:28:80:1d:e9:e6:02:96:75:e6:40:01:af:f8: 09:70:20:fc:d4:cb:f3:d1:fb:12:e0:f5:01:33:b5: bd:13:21:f8:ea:9c:0e:88:25:d4:94:10:e5:f6:a3: 46:81:1a:57:9a:a7:70:80:e4:35:03:45:9e:3d:e0: 29:29:aa:9a:23:8f:ac:cb:9b:1f:46:41:3f:a0:45: b0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:92:A9:C4:4A:E6:AC:16:A8:AD:0B:6E:FC:34:C2:F4:0C:DE:6B:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba705f72-9339-3a24-857f-8fa90b253fef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 209.34.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:1b:f0:50:74:36:b5:b9:f5:da:92:38:11:06:99:d4:cb:5e: 67:26:2b:d3:7b:11:bd:1a:73:27:59:23:2c:27:ac:33:4d:d4: 07:31:2f:e7:ad:a6:a1:e6:fd:f6:ed:3a:ec:7a:a7:86:43:d7: 44:32:e7:d7:b2:fe:f5:52:35:d4:58:46:b4:47:d5:c8:23:d2: 48:96:c9:23:1c:4c:9f:4e:73:4f:f9:eb:fe:b1:f1:d6:7f:d5: 24:c8:48:cf:d2:a0:f2:bd:9d:4b:43:20:8d:94:e1:14:12:12: 1e:aa:f6:22:63:cb:76:48:08:6b:8e:70:d4:82:48:b7:71:d6: 44:0b:3e:9d:d7:8d:fb:9b:26:9a:1a:4c:45:2e:89:65:a8:af: 8a:1d:94:0e:42:d5:2e:cd:db:4b:ef:dc:b4:ee:0b:1e:90:6f: ab:8b:a7:dd:04:62:0e:cd:9d:de:3a:0e:ef:0b:a0:e8:77:8d: e7:42:02:da:1d:d9:7d:8a:bf:93:e0:f5:c8:f1:7c:4a:3f:c1: 3a:fe:31:5b:87:3d:8e:10:e2:6c:1d:f9:ac:92:77:72:e1:8f: 6a:3b:c4:dc:42:44:9d:b5:f2:1f:9f:56:3b:4d:f8:ab:f5:3b: a2:4f:7e:8f:f2:a8:bc:98:de:3e:65:a6:16:c1:10:f2:ae:f7: 25:37:a2:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9TnacV7uqCYf+z7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2MjUxMloXDTI2MTIyNzE3MjUxMlowLzEtMCsGA1UEAxMk MGE3YWJjMzktZDM4Ny00MDc3LThkNGItMmQ1YmM0MGZjMjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqjFQ9peE6Ac27W4ra3r9VxfWUPqurBcDL8d 5pMxzxHD+JTUEJH2RmDPbz3IGZaDAz3fM66C4vgF0t/nx5UNYIR6bBXCjia7iTqY f5zkMmwzaZb5ZsGLZMNkPn4nLCH0tQ/f1yOtVnj6W08uh668LKo2LE2sfkNi2jXh 7SS9tscXW77+sOLUVBo3mF+DyOg4nIat98WhR4VXcp21Ta6CUvJANOXRq+GnY3fO 0sJd2N5CaaIsOyiAHenmApZ15kABr/gJcCD81Mvz0fsS4PUBM7W9EyH46pwOiCXU lBDl9qNGgRpXmqdwgOQ1A0WePeApKaqaI4+sy5sfRkE/oEWwlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMOSqcRK5qwWqK0Lbvw0wvQM3mvOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmE3MDVmNzItOTMzOS0z YTI0LTg1N2YtOGZhOTBiMjUzZmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SLPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgb8FB0NrW59dqSOBEGmdTLXmcmK9N7Eb0acydZIywnrDNN1AcxL+et pqHm/fbtOux6p4ZD10Qy59ey/vVSNdRYRrRH1cgj0kiWySMcTJ9Oc0/56/6x8dZ/ 1STISM/SoPK9nUtDII2U4RQSEh6q9iJjy3ZICGuOcNSCSLdx1kQLPp3XjfubJpoa TEUuiWWor4odlA5C1S7N20vv3LTuCx6Qb6uLp90EYg7Nnd46Du8LoOh3jedCAtod 2X2Kv5Pg9cjxfEo/wTr+MVuHPY4Q4mwd+aySd3Lhj2o7xNxCRJ218h+fVjtN+Kv1 O6JPfo/yqLyY3j5lphbBEPKu9yU3ot4= -----END CERTIFICATE-----Generated at Thu Nov 5 13:00:53 2026 by rpki-client