$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/5aba1bae-e127-32bc-8f5b-65e90b7c66d6.roa File: 5aba1bae-e127-32bc-8f5b-65e90b7c66d6.roa (raw, json) Hash identifier: emFqODBE7qBWEuDpFy7sB+giRsBecXAS+bO2oAeIB9o= Subject key identifier: 88:B4:F2:5C:8D:5A:75:F1:14:5A:83:09:9B:0B:40:30:F9:B9:8C:BA Certificate issuer: /CN=da8ef68a-20eb-4f6e-a80e-617aa1473f09 Certificate serial: 010D0C9F4328584F5CFD5A525E08375EF7506E00 Authority key identifier: CC:52:EE:D6:CD:6F:C2:A0:F3:2B:8E:12:3B:23:87:59:02:0B:35:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/5aba1bae-e127-32bc-8f5b-65e90b7c66d6.roa Signing time: Fri 02 Oct 2026 01:00:12 +0000 ROA not before: Fri 02 Oct 2026 01:00:12 +0000 ROA not after: Thu 31 Dec 2026 02:00:12 +0000 asID: 40933 IP address blocks: 72.255.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/da8ef68a-20eb-4f6e-a80e-617aa1473f09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/da8ef68a-20eb-4f6e-a80e-617aa1473f09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5c:fd:5a:52:5e:08:37:5e:f7:50:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da8ef68a-20eb-4f6e-a80e-617aa1473f09 Validity Not Before: Oct 2 01:00:12 2026 GMT Not After : Dec 31 02:00:12 2026 GMT Subject: CN=f598c27a-ac87-4549-85f9-5c5b7d6ac9f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d6:d0:c9:22:21:c9:3b:4f:a1:d4:d0:79:33: d2:a2:72:7d:57:64:d4:0a:94:9c:cf:dd:61:d5:e5: a5:b4:77:c5:28:3e:0c:1d:c4:e3:5a:11:3d:3a:9a: f7:e4:ae:0b:10:32:b6:67:a4:b7:a7:e2:f3:3b:87: b2:13:c3:12:3e:ad:1f:c6:81:e0:62:20:93:88:d4: 2e:55:92:9a:d4:de:a5:37:74:1c:80:ab:d5:5b:4e: 8a:1c:b7:96:77:70:3f:01:4a:cc:aa:84:e0:f9:6e: b0:2d:33:4b:4d:2b:f7:6b:2c:42:74:f4:de:0e:c9: 68:9e:25:95:33:a1:a8:db:6f:74:68:c2:76:61:d4: 11:d6:e7:2c:5a:cb:ee:27:f4:d2:db:db:00:6f:45: 53:aa:5e:67:ef:4f:83:c2:44:4c:f3:95:be:a9:f8: 03:cf:83:91:7d:2f:1e:61:f6:38:cb:96:98:cc:68: 9d:53:3e:54:86:ec:96:56:63:37:d7:8b:b1:74:84: 3a:c1:63:e9:f1:9c:d7:ba:ec:80:1b:9e:62:85:d1: fd:f8:87:09:ab:13:ef:a2:93:d6:e1:ae:39:16:83: 38:f3:3e:82:e5:50:cd:37:03:d3:99:d4:01:2a:83: 7f:86:83:47:d1:82:e9:b2:a3:cb:68:4e:bf:86:12: 6f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B4:F2:5C:8D:5A:75:F1:14:5A:83:09:9B:0B:40:30:F9:B9:8C:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/5aba1bae-e127-32bc-8f5b-65e90b7c66d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/da8ef68a-20eb-4f6e-a80e-617aa1473f09.crl X509v3 Authority Key Identifier: keyid:CC:52:EE:D6:CD:6F:C2:A0:F3:2B:8E:12:3B:23:87:59:02:0B:35:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09.cer sbgp-ipAddrBlock: critical IPv4: 72.255.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:ea:c2:53:a3:70:ea:58:eb:10:2f:9a:bb:6e:5f:df:95:97: f1:eb:b0:ff:1a:5f:dc:9a:c3:fd:bb:09:dd:73:fd:ec:0d:d3: 61:30:1b:45:68:de:b2:f2:0d:b2:2c:a2:48:5d:b4:fe:48:26: e9:c5:04:74:a0:0b:a2:be:2a:b5:c2:cf:54:cb:05:85:af:db: e9:92:f1:3d:89:e2:31:a5:90:9a:d9:0d:22:aa:a8:11:22:aa: 45:4f:75:c6:b4:a7:8a:7d:fe:68:59:49:c5:d5:a3:d8:42:3e: 1c:da:ed:bb:66:ae:c6:c9:47:a0:ea:39:af:ae:b9:a1:05:8e: df:fe:2c:9b:3f:e5:1f:86:94:2e:c3:92:dc:4a:db:e9:20:5e: 77:26:0f:6d:90:d8:25:8c:3d:27:2d:d6:1d:14:e9:21:3f:b4: 15:8a:e9:86:69:70:ba:ed:b0:1d:57:c7:53:51:e3:3b:c2:37: ce:02:9a:f5:d5:1f:fd:50:cc:91:08:1d:cb:c3:d0:96:33:b1: fd:1e:e6:0e:ae:9a:e1:68:a8:cd:a5:32:6b:2c:62:e6:af:b1: 86:ce:7f:0b:5a:4e:a7:e8:42:7c:e7:83:6d:7d:ef:56:6d:7a: 49:0c:1d:28:b2:31:f4:1c:3e:e8:ca:31:69:a8:4c:d9:e1:54: fb:c3:9d:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9c/VpSXgg3XvdQbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE4ZWY2OGEtMjBlYi00ZjZlLWE4MGUtNjE3YWExNDcz ZjA5MB4XDTI2MTAwMjAxMDAxMloXDTI2MTIzMTAyMDAxMlowLzEtMCsGA1UEAxMk ZjU5OGMyN2EtYWM4Ny00NTQ5LTg1ZjktNWM1YjdkNmFjOWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dbQySIhyTtPodTQeTPSonJ9V2TUCpScz91h 1eWltHfFKD4MHcTjWhE9Opr35K4LEDK2Z6S3p+LzO4eyE8MSPq0fxoHgYiCTiNQu VZKa1N6lN3QcgKvVW06KHLeWd3A/AUrMqoTg+W6wLTNLTSv3ayxCdPTeDsloniWV M6Go2290aMJ2YdQR1ucsWsvuJ/TS29sAb0VTql5n70+DwkRM85W+qfgDz4ORfS8e YfY4y5aYzGidUz5UhuyWVmM314uxdIQ6wWPp8ZzXuuyAG55ihdH9+IcJqxPvopPW 4a45FoM48z6C5VDNNwPTmdQBKoN/hoNH0YLpsqPLaE6/hhJvpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIi08lyNWnXxFFqDCZsLQDD5uYy6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9kYThl ZjY4YS0yMGViLTRmNmUtYTgwZS02MTdhYTE0NzNmMDkvNWFiYTFiYWUtZTEyNy0z MmJjLThmNWItNjVlOTBiN2M2NmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvZGE4ZWY2OGEtMjBlYi00ZjZlLWE4 MGUtNjE3YWExNDczZjA5L2RhOGVmNjhhLTIwZWItNGY2ZS1hODBlLTYxN2FhMTQ3 M2YwOS5jcmwwHwYDVR0jBBgwFoAUzFLu1s1vwqDzK44SOyOHWQILNTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi9kYThlZjY4YS0yMGViLTRmNmUtYTgwZS02MTdh YTE0NzNmMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSP+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPqwlOjcOpY6xAvmrtuX9+Vl/HrsP8aX9yaw/27Cd1z/ewN02EwG0Vo 3rLyDbIsokhdtP5IJunFBHSgC6K+KrXCz1TLBYWv2+mS8T2J4jGlkJrZDSKqqBEi qkVPdca0p4p9/mhZScXVo9hCPhza7btmrsbJR6DqOa+uuaEFjt/+LJs/5R+GlC7D ktxK2+kgXncmD22Q2CWMPSct1h0U6SE/tBWK6YZpcLrtsB1Xx1NR4zvCN84CmvXV H/1QzJEIHcvD0JYzsf0e5g6umuFoqM2lMmssYuavsYbOfwtaTqfoQnzng21971Zt ekkMHSiyMfQcPujKMWmoTNnhVPvDnSY= -----END CERTIFICATE-----Generated at Sun Oct 11 23:27:24 2026 by rpki-client