$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/0b1c3364-e87a-3b7d-af93-e0c89841b720.roa File: 0b1c3364-e87a-3b7d-af93-e0c89841b720.roa (raw, json) Hash identifier: odn8Bn1BbjU2+JvHggnQNvsF5UQscUEy1JfY6ZQH3o0= Subject key identifier: D6:F9:5F:D1:36:17:F0:1E:0D:A6:02:6A:DA:63:2C:46:E7:6D:F7:40 Certificate issuer: /CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5 Certificate serial: 010D0C9F4328584EEA875B3552C662DD2DBA9800 Authority key identifier: 91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/0b1c3364-e87a-3b7d-af93-e0c89841b720.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 32762 IP address blocks: 198.96.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:5b:35:52:c6:62:dd:2d:ba:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5 Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=5d79b669-3135-4ac7-ab57-c054095a88ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:98:8a:3b:df:0e:35:f5:25:78:ad:32:f0:32: 28:23:60:99:09:25:c0:4a:5f:8e:23:b3:a0:90:b1: ad:f6:6f:dc:32:6e:31:2b:6e:2a:fd:a7:dd:43:5f: 18:a4:68:17:4e:40:d3:b4:05:21:b4:76:87:ea:6b: 7e:b2:be:7e:45:e6:a9:76:76:bd:47:04:ac:b7:4b: 0c:ec:8e:f3:6d:1d:95:1a:65:d6:1f:43:84:d2:bb: 4d:de:9c:c2:df:ff:b0:92:35:cc:80:1d:96:c4:05: e4:31:51:60:58:a2:1d:50:26:c2:a0:28:e8:da:ca: f4:53:4f:3b:c0:60:83:ae:4a:7b:de:c0:df:0d:56: 50:fc:11:a1:11:c1:8f:a3:b0:e9:8a:85:09:0c:d4: 54:e2:6c:66:54:3d:d0:49:d6:d0:a4:7d:a3:a0:ba: 19:a9:23:2d:d9:aa:00:d1:80:14:d7:d4:fa:d2:84: 8e:7a:4a:54:a1:14:77:70:ce:61:49:d6:c8:74:da: 4b:18:32:62:0a:29:64:d5:3b:f7:fd:e8:0a:8e:92: 17:f8:7d:fb:c0:7f:d9:ac:ad:61:43:9b:e2:9d:77: 02:76:1e:14:7e:db:47:5a:0a:1d:05:32:a2:53:c9: ef:91:fa:9a:2d:40:18:db:b2:b8:7e:25:29:e0:f2: e7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F9:5F:D1:36:17:F0:1E:0D:A6:02:6A:DA:63:2C:46:E7:6D:F7:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/0b1c3364-e87a-3b7d-af93-e0c89841b720.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.crl X509v3 Authority Key Identifier: keyid:91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer sbgp-ipAddrBlock: critical IPv4: 198.96.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:55:e2:f7:6b:5d:84:0f:22:04:dd:a6:a8:f6:b1:95:fc:e2: f7:bd:02:de:f3:a8:1b:ad:4e:7f:ba:1b:9a:06:2f:90:ff:88: fa:b3:4f:d6:59:4d:c7:c4:24:2b:f4:b0:6d:f9:4c:32:74:88: 99:06:64:66:87:7a:72:ec:46:6d:20:24:0c:0c:dd:dc:b6:de: cb:2f:d8:03:26:4c:93:e4:cf:e4:7a:8d:8b:d7:70:f0:9f:cf: 80:89:1e:36:43:59:f7:8e:41:4e:11:9b:5a:de:db:c4:65:14: e8:7d:ad:04:01:23:70:22:3c:be:22:ad:2b:3a:bf:00:b1:c4: bf:b9:33:51:45:ff:5b:4f:ca:94:a5:db:b3:64:f8:fd:68:6f: 76:3e:d7:bf:2c:ef:3c:93:db:4f:da:27:b3:de:0d:11:97:82: dd:d5:ec:b8:70:2d:83:74:2d:4c:b5:2b:a5:18:d5:0d:4b:93: 09:21:6d:55:4b:54:a5:cf:ed:b1:6b:3f:bf:0c:05:04:e5:fc: 4f:07:26:15:ec:86:ec:60:cf:16:5d:e7:2a:fa:a1:69:13:c2: 55:97:f3:44:99:0b:31:ea:3f:3c:4c:64:5e:e4:b6:da:d2:f3: 08:56:24:9a:e6:81:bf:49:f8:b2:ef:81:2b:c2:20:74:80:b7: 88:d9:a9:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh1s1UsZi3S26mAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE1NzAzZmMtYjBlMi00ZGQzLWFiYmMtNzFkMDhlMWM2 N2M1MB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk NWQ3OWI2NjktMzEzNS00YWM3LWFiNTctYzA1NDA5NWE4OGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJiKO98ONfUleK0y8DIoI2CZCSXASl+OI7Og kLGt9m/cMm4xK24q/afdQ18YpGgXTkDTtAUhtHaH6mt+sr5+Reapdna9RwSst0sM 7I7zbR2VGmXWH0OE0rtN3pzC3/+wkjXMgB2WxAXkMVFgWKIdUCbCoCjo2sr0U087 wGCDrkp73sDfDVZQ/BGhEcGPo7DpioUJDNRU4mxmVD3QSdbQpH2joLoZqSMt2aoA 0YAU19T60oSOekpUoRR3cM5hSdbIdNpLGDJiCilk1Tv3/egKjpIX+H37wH/ZrK1h Q5vinXcCdh4UfttHWgodBTKiU8nvkfqaLUAY27K4fiUp4PLnHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNb5X9E2F/AeDaYCatpjLEbnbfdAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iYTU3 MDNmYy1iMGUyLTRkZDMtYWJiYy03MWQwOGUxYzY3YzUvMGIxYzMzNjQtZTg3YS0z YjdkLWFmOTMtZTBjODk4NDFiNzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmE1NzAzZmMtYjBlMi00ZGQzLWFi YmMtNzFkMDhlMWM2N2M1L2JhNTcwM2ZjLWIwZTItNGRkMy1hYmJjLTcxZDA4ZTFj NjdjNS5jcmwwHwYDVR0jBBgwFoAUkaMiLb6LWI+0+yzNjJHeFoQNiAswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iYTU3MDNmYy1iMGUyLTRkZDMtYWJiYy03MWQw OGUxYzY3YzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmAGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhV4vdrXYQPIgTdpqj2sZX84ve9At7zqButTn+6G5oGL5D/iPqzT9ZZ TcfEJCv0sG35TDJ0iJkGZGaHenLsRm0gJAwM3dy23ssv2AMmTJPkz+R6jYvXcPCf z4CJHjZDWfeOQU4Rm1re28RlFOh9rQQBI3AiPL4irSs6vwCxxL+5M1FF/1tPypSl 27Nk+P1ob3Y+178s7zyT20/aJ7PeDRGXgt3V7LhwLYN0LUy1K6UY1Q1LkwkhbVVL VKXP7bFrP78MBQTl/E8HJhXshuxgzxZd5yr6oWkTwlWX80SZCzHqPzxMZF7kttrS 8whWJJrmgb9J+LLvgSvCIHSAt4jZqQc= -----END CERTIFICATE-----Generated at Wed Sep 23 21:02:43 2026 by rpki-client