$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/ba8f26f9-324a-37ae-86d6-34a5fdf55b34.roa File: ba8f26f9-324a-37ae-86d6-34a5fdf55b34.roa (raw, json) Hash identifier: IdHJci19FkgXXOCpPhluqP4WWGedyh63JwD+Z+vD8qM= Subject key identifier: 11:4A:F5:09:7D:0B:40:6D:87:7A:EE:45:B4:4A:D9:83:68:FA:1E:BC Certificate issuer: /CN=0e002701-2485-4643-ba40-3ea23fa41085 Certificate serial: 010D0C9F4328584F9E9884503467633A01B4B480 Authority key identifier: 89:24:57:81:82:9B:18:63:45:EE:40:AE:69:58:AB:9A:35:E5:62:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/ba8f26f9-324a-37ae-86d6-34a5fdf55b34.roa Signing time: Sun 25 Oct 2026 13:00:13 +0000 ROA not before: Sun 25 Oct 2026 13:00:13 +0000 ROA not after: Sat 23 Jan 2027 14:00:13 +0000 asID: 394997 IP address blocks: 208.86.98.0/23 maxlen: 23 208.86.98.0/24 maxlen: 24 208.86.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/0e002701-2485-4643-ba40-3ea23fa41085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/0e002701-2485-4643-ba40-3ea23fa41085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9e:98:84:50:34:67:63:3a:01:b4:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e002701-2485-4643-ba40-3ea23fa41085 Validity Not Before: Oct 25 13:00:13 2026 GMT Not After : Jan 23 14:00:13 2027 GMT Subject: CN=528e6490-73ad-4d29-ad0d-61eda5f18488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c0:c1:cb:26:3c:a9:48:69:0a:ac:e9:47:ac: ef:63:ed:aa:19:1f:46:9e:ce:aa:48:18:4c:bf:ca: e6:6a:60:c5:82:84:06:64:aa:88:df:55:f9:6e:76: 08:96:23:9d:89:be:b3:a1:8a:d8:03:d1:c2:c8:60: e2:c3:de:ee:9e:d8:87:0f:23:63:63:ba:e2:33:02: cf:15:d9:3b:fb:18:21:b0:6d:24:d9:48:5e:da:e9: 50:36:1f:0d:17:7a:3f:73:d0:52:91:b0:7c:70:59: 82:2d:25:cc:9f:26:36:ff:c5:17:4c:8b:f4:df:6c: 34:63:80:b9:01:93:64:f3:8e:52:f9:e1:a2:60:ac: 14:e8:07:a7:40:c5:ad:d7:23:67:66:8d:56:c8:0b: 6a:f6:4c:e0:65:97:b6:bb:fb:52:17:9d:04:20:9e: f4:9f:e6:9a:31:82:26:fa:51:42:1d:ff:cd:eb:4d: 63:02:72:36:df:e3:2e:d4:d7:48:f9:4f:8f:a0:a7: b2:ee:c5:5a:c9:7e:f4:79:d5:81:5e:51:02:f7:f7: 2f:66:06:0b:00:65:d3:f8:35:46:dd:98:3f:19:63: 05:7a:be:41:05:7f:17:85:73:b7:e5:18:8b:b5:ba: 24:38:00:52:fa:5a:5f:10:8b:09:14:e8:6f:c2:b8: c5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:4A:F5:09:7D:0B:40:6D:87:7A:EE:45:B4:4A:D9:83:68:FA:1E:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/ba8f26f9-324a-37ae-86d6-34a5fdf55b34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/0e002701-2485-4643-ba40-3ea23fa41085.crl X509v3 Authority Key Identifier: keyid:89:24:57:81:82:9B:18:63:45:EE:40:AE:69:58:AB:9A:35:E5:62:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085.cer sbgp-ipAddrBlock: critical IPv4: 208.86.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:f7:cd:d9:3b:e0:a1:79:b4:bf:72:84:e7:ff:fa:92:67:0d: 95:4c:0b:34:81:33:44:c0:41:68:58:35:de:2e:23:15:06:a0: d2:aa:f6:52:13:11:87:09:28:d3:00:ae:59:0c:12:36:1e:0c: 27:86:f1:27:6d:d3:58:81:54:27:15:86:fa:27:21:1e:0f:45: c0:f4:6a:8b:8e:f5:c9:c1:90:6a:fe:da:1d:4a:2b:89:6a:3d: e2:2f:d6:09:93:f4:4e:1c:74:e7:bd:7e:2e:99:34:fb:8f:a1: 73:6c:67:76:f8:47:e4:87:89:98:f5:dd:6a:11:ff:ca:68:1c: 51:1f:c1:f1:06:3c:bf:38:d5:53:3f:64:d1:4e:a0:68:cb:19: 6f:2b:e9:02:44:3a:91:ef:5c:50:21:29:d6:84:68:18:82:2c: 14:3c:c7:72:ba:8f:fe:e2:a6:e4:cd:33:39:4c:1f:02:60:c6: 55:55:b2:e6:4c:51:ea:ef:c0:68:f6:af:1b:73:65:8b:fb:77: 4f:45:8a:29:25:f4:24:70:1b:02:57:93:c1:8d:1b:91:31:76: 0c:8d:a0:c0:e6:97:1b:be:61:dd:b8:55:ba:7f:ea:3f:35:15: 1d:80:d4:f0:e2:1a:97:ca:d5:6d:bd:f2:59:ee:a9:0d:68:f0: 01:71:e0:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+emIRQNGdjOgG0tIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGUwMDI3MDEtMjQ4NS00NjQzLWJhNDAtM2VhMjNmYTQx MDg1MB4XDTI2MTAyNTEzMDAxM1oXDTI3MDEyMzE0MDAxM1owLzEtMCsGA1UEAxMk NTI4ZTY0OTAtNzNhZC00ZDI5LWFkMGQtNjFlZGE1ZjE4NDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8DByyY8qUhpCqzpR6zvY+2qGR9Gns6qSBhM v8rmamDFgoQGZKqI31X5bnYIliOdib6zoYrYA9HCyGDiw97untiHDyNjY7riMwLP Fdk7+xghsG0k2Uhe2ulQNh8NF3o/c9BSkbB8cFmCLSXMnyY2/8UXTIv032w0Y4C5 AZNk845S+eGiYKwU6AenQMWt1yNnZo1WyAtq9kzgZZe2u/tSF50EIJ70n+aaMYIm +lFCHf/N601jAnI23+Mu1NdI+U+PoKey7sVayX70edWBXlEC9/cvZgYLAGXT+DVG 3Zg/GWMFer5BBX8XhXO35RiLtbokOABS+lpfEIsJFOhvwrjFLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFK9Ql9C0Bth3ruRbRK2YNo+h68MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wZTAw MjcwMS0yNDg1LTQ2NDMtYmE0MC0zZWEyM2ZhNDEwODUvYmE4ZjI2ZjktMzI0YS0z N2FlLTg2ZDYtMzRhNWZkZjU1YjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMGUwMDI3MDEtMjQ4NS00NjQzLWJh NDAtM2VhMjNmYTQxMDg1LzBlMDAyNzAxLTI0ODUtNDY0My1iYTQwLTNlYTIzZmE0 MTA4NS5jcmwwHwYDVR0jBBgwFoAUiSRXgYKbGGNF7kCuaVirmjXlYqIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8wZTAwMjcwMS0yNDg1LTQ2NDMtYmE0MC0zZWEy M2ZhNDEwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0FZiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACz3zdk74KF5tL9yhOf/+pJnDZVMCzSBM0TAQWhYNd4uIxUGoNKq9lIT EYcJKNMArlkMEjYeDCeG8Sdt01iBVCcVhvonIR4PRcD0aouO9cnBkGr+2h1KK4lq PeIv1gmT9E4cdOe9fi6ZNPuPoXNsZ3b4R+SHiZj13WoR/8poHFEfwfEGPL841VM/ ZNFOoGjLGW8r6QJEOpHvXFAhKdaEaBiCLBQ8x3K6j/7ipuTNMzlMHwJgxlVVsuZM UervwGj2rxtzZYv7d09Fiikl9CRwGwJXk8GNG5ExdgyNoMDmlxu+Yd24Vbp/6j81 FR2A1PDiGpfK1W298lnuqQ1o8AFx4FY= -----END CERTIFICATE-----Generated at Mon Nov 2 06:59:44 2026 by rpki-client