$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/cb2fdef3-69d3-33f1-a276-0ebf0c220d49.roa File: cb2fdef3-69d3-33f1-a276-0ebf0c220d49.roa (raw, json) Hash identifier: OA6CSVyExQFM7rpdXHHugFJkiobvWN1FD6R3RRMGbwg= Subject key identifier: BE:D6:D0:A9:6A:10:2C:24:7B:9C:25:66:B8:5F:B7:04:F4:09:A0:6F Certificate issuer: /CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5 Certificate serial: 010D0C9F4328584EEA875B41C7E9699D0F8A7B00 Authority key identifier: 91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/cb2fdef3-69d3-33f1-a276-0ebf0c220d49.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 32762 IP address blocks: 198.96.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:5b:41:c7:e9:69:9d:0f:8a:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5 Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=c167a877-775d-4a95-b0bb-3e7b01b4a654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d5:a5:00:1f:ad:ce:21:cf:e3:23:12:b4:4a: c3:dc:22:df:02:7b:63:80:7b:15:ee:b0:4e:72:f6: 74:e4:92:15:1e:e9:db:f1:75:fe:0d:e0:5a:41:35: a1:ca:b6:76:bd:58:78:c1:37:71:33:7f:6e:2a:5f: 42:5b:d2:35:52:7b:91:ac:4d:d9:f8:0f:ac:da:2a: fe:ee:5a:97:e4:14:2c:60:64:f0:10:15:05:49:95: 27:37:b7:b8:2e:62:cc:2c:dd:b9:f8:16:54:30:98: 11:e3:00:8c:58:3a:38:c9:be:3d:57:92:d2:47:c9: 30:01:4d:d2:f3:d5:0e:ae:2a:74:bc:13:40:f1:52: 6d:31:aa:ab:17:a1:03:b4:63:8b:b5:95:85:70:ea: 8f:d9:d3:af:65:1e:ed:a7:fe:04:46:2b:18:65:4a: 5b:03:81:5b:7c:d3:03:4c:cb:18:d5:52:a1:c5:19: b3:a1:20:46:50:08:ab:ec:a0:34:76:cd:c5:b9:12: d1:1e:41:5e:2a:c6:e2:ca:9a:d0:1c:ab:8b:21:43: 4d:4b:70:e4:90:4d:19:9c:08:f1:76:71:e8:86:72: 49:e8:77:d2:ca:80:f3:26:9b:bc:1a:87:6f:18:07: c1:81:42:46:fa:ae:3f:25:00:b3:8c:8e:02:85:c5: fa:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D6:D0:A9:6A:10:2C:24:7B:9C:25:66:B8:5F:B7:04:F4:09:A0:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/cb2fdef3-69d3-33f1-a276-0ebf0c220d49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.crl X509v3 Authority Key Identifier: keyid:91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer sbgp-ipAddrBlock: critical IPv4: 198.96.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:53:39:39:d5:07:cc:95:f6:bf:88:74:71:46:ad:f2:da:b1: 88:9a:1b:49:5b:3b:af:00:fa:d0:8e:f5:b0:13:a9:ee:2d:78: bb:ab:03:f1:72:27:07:38:45:6e:ce:cd:46:39:3a:68:de:74: 53:d1:a5:0f:79:50:8d:42:f4:c8:25:33:83:af:23:b4:e6:24: b9:c0:5b:f3:87:3b:b8:73:67:a1:1a:11:ff:61:75:30:e3:91: d9:f8:86:5c:f5:c3:5c:31:8a:e0:04:0b:58:62:a8:b8:e8:fa: af:92:9a:07:15:f1:92:c4:28:42:33:31:8e:80:4c:20:0f:86: ba:d8:18:99:53:4d:a2:44:41:7f:78:1f:54:d7:bc:85:12:95: 15:62:1c:2f:28:08:75:41:de:6d:e0:d9:99:00:e4:ba:98:5f: ee:bd:5e:b0:62:02:e8:32:71:3a:93:3e:12:06:4d:52:53:c6: 84:89:20:12:43:fa:fc:4d:dc:f3:76:29:8b:47:0c:6a:76:64: 8f:36:0a:05:fd:8d:d6:13:58:64:bb:72:2c:11:80:cd:40:36: fd:68:d6:a8:af:c4:c5:b8:72:06:1c:53:cf:87:b4:36:3f:d7: 3e:36:89:5d:84:f0:80:c5:6e:06:a1:74:7a:8f:6a:eb:7b:7e: da:d2:1e:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh1tBx+lpnQ+KewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE1NzAzZmMtYjBlMi00ZGQzLWFiYmMtNzFkMDhlMWM2 N2M1MB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk YzE2N2E4NzctNzc1ZC00YTk1LWIwYmItM2U3YjAxYjRhNjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNWlAB+tziHP4yMStErD3CLfAntjgHsV7rBO cvZ05JIVHunb8XX+DeBaQTWhyrZ2vVh4wTdxM39uKl9CW9I1UnuRrE3Z+A+s2ir+ 7lqX5BQsYGTwEBUFSZUnN7e4LmLMLN25+BZUMJgR4wCMWDo4yb49V5LSR8kwAU3S 89UOrip0vBNA8VJtMaqrF6EDtGOLtZWFcOqP2dOvZR7tp/4ERisYZUpbA4FbfNMD TMsY1VKhxRmzoSBGUAir7KA0ds3FuRLRHkFeKsbiyprQHKuLIUNNS3DkkE0ZnAjx dnHohnJJ6HfSyoDzJpu8GodvGAfBgUJG+q4/JQCzjI4ChcX6mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7W0KlqECwke5wlZrhftwT0CaBvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iYTU3 MDNmYy1iMGUyLTRkZDMtYWJiYy03MWQwOGUxYzY3YzUvY2IyZmRlZjMtNjlkMy0z M2YxLWEyNzYtMGViZjBjMjIwZDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmE1NzAzZmMtYjBlMi00ZGQzLWFi YmMtNzFkMDhlMWM2N2M1L2JhNTcwM2ZjLWIwZTItNGRkMy1hYmJjLTcxZDA4ZTFj NjdjNS5jcmwwHwYDVR0jBBgwFoAUkaMiLb6LWI+0+yzNjJHeFoQNiAswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iYTU3MDNmYy1iMGUyLTRkZDMtYWJiYy03MWQw OGUxYzY3YzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBTOTnVB8yV9r+IdHFGrfLasYiaG0lbO68A+tCO9bATqe4teLurA/Fy Jwc4RW7OzUY5OmjedFPRpQ95UI1C9MglM4OvI7TmJLnAW/OHO7hzZ6EaEf9hdTDj kdn4hlz1w1wxiuAEC1hiqLjo+q+SmgcV8ZLEKEIzMY6ATCAPhrrYGJlTTaJEQX94 H1TXvIUSlRViHC8oCHVB3m3g2ZkA5LqYX+69XrBiAugycTqTPhIGTVJTxoSJIBJD +vxN3PN2KYtHDGp2ZI82CgX9jdYTWGS7ciwRgM1ANv1o1qivxMW4cgYcU8+HtDY/ 1z42iV2E8IDFbgahdHqPaut7ftrSHv4= -----END CERTIFICATE-----Generated at Thu Sep 24 06:20:21 2026 by rpki-client