$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ba40274a-c882-3f0c-85d0-5b90836de829.roa File: ba40274a-c882-3f0c-85d0-5b90836de829.roa (raw, json) Hash identifier: qzkhBOOc4Wkps2eGgx3EnHPpaUt5dlDwVkuknWv0zIY= Subject key identifier: 9A:7D:F1:7B:22:FD:D4:F0:B5:E7:6B:BD:4E:CC:AC:EE:88:9D:6A:CE Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F1F9244846D4CEE9BAAB09E00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ba40274a-c882-3f0c-85d0-5b90836de829.roa Signing time: Thu 10 Sep 2026 01:00:12 +0000 ROA not before: Thu 10 Sep 2026 01:00:12 +0000 ROA not after: Wed 09 Dec 2026 02:00:12 +0000 asID: 0 IP address blocks: 154.57.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1f:92:44:84:6d:4c:ee:9b:aa:b0:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 10 01:00:12 2026 GMT Not After : Dec 9 02:00:12 2026 GMT Subject: CN=554e0d19-ab45-412a-b546-9b9f4d4657d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:05:fe:d2:eb:2b:25:61:9e:67:67:04:99:4a: 81:53:05:15:bb:b6:82:3c:44:51:fc:c7:1b:ff:63: be:98:c6:d8:74:c7:e3:5f:7f:4c:77:9d:06:5f:aa: 44:cf:8d:93:d3:96:b1:72:33:7d:98:9f:b5:52:f7: ec:d9:8e:5d:12:06:5b:f7:dd:86:95:36:ba:f0:a7: 77:1d:83:0d:ca:6a:82:64:28:83:1d:94:8c:bf:9c: 8f:33:a2:c6:57:c3:d1:4b:59:50:6b:18:fc:0d:9f: ab:8d:2f:7f:49:d6:dd:a0:38:e5:17:01:4c:6d:90: 62:4d:e1:0c:a1:f6:10:62:b3:81:7b:7e:0d:1c:18: 79:d6:12:9e:01:47:40:da:e2:f5:38:0b:b1:f7:e6: 0d:82:bf:29:36:04:54:5f:c5:9d:9b:d5:42:f6:6b: da:81:7d:c9:91:87:f4:dd:00:ee:01:a1:0c:e8:82: ec:b7:8d:32:b6:f7:f2:71:ef:f2:da:52:45:a1:63: 5f:b0:e6:d8:84:58:d9:61:38:33:55:37:2c:8c:6d: 89:c9:8e:ca:bc:22:0d:64:ab:99:7c:c3:46:9f:b6: 6e:b1:b2:0b:00:cf:19:04:4c:63:6f:2a:8f:60:e9: 3b:17:39:a7:c7:7a:e2:73:db:7f:99:63:04:b1:8b: d5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:7D:F1:7B:22:FD:D4:F0:B5:E7:6B:BD:4E:CC:AC:EE:88:9D:6A:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ba40274a-c882-3f0c-85d0-5b90836de829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 154.57.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:ed:e3:53:0d:a2:98:69:34:76:7e:20:cb:2d:36:ba:c5:3e: f7:82:29:1d:c6:64:86:1c:18:7c:be:21:48:3f:66:00:ab:d0: 4f:f9:0c:28:25:82:f4:85:a8:ab:e4:4a:80:c0:3b:79:3d:c0: 30:aa:be:d8:a4:35:e4:75:05:c1:8d:90:6e:94:d4:f8:0b:3f: 0e:6c:ff:10:19:bf:f8:aa:9e:91:52:1f:86:86:b2:da:81:27: eb:16:ab:8a:b8:d8:a9:b4:69:2a:52:cd:77:2d:fb:ed:25:ce: a2:93:27:c5:ff:ba:a1:6a:b7:79:d3:82:3a:02:ad:df:c4:31: 36:fe:f3:1f:39:65:73:73:dd:8e:a7:d0:0a:13:6b:22:76:be: 45:0a:4a:46:fc:07:47:1b:c2:be:c6:89:33:c0:8d:33:ab:55: 8a:4b:d8:d1:15:e1:bc:20:83:06:90:89:59:7a:27:84:c9:1a: 5f:17:32:5d:df:a1:0e:16:2e:8e:33:91:c0:dc:56:8a:01:83: c2:45:c2:26:b2:00:d1:ed:4f:6c:21:99:36:08:f6:2c:f9:51: 30:6c:35:61:f0:e4:5f:fd:c5:e4:59:ad:60:43:99:6f:77:22: c7:3b:f5:9c:33:f9:b5:f4:9c:b5:24:b1:c5:4d:c8:3d:0c:2b: f2:17:e5:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8fkkSEbUzum6qwngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkxMDAxMDAxMloXDTI2MTIwOTAyMDAxMlowLzEtMCsGA1UEAxMk NTU0ZTBkMTktYWI0NS00MTJhLWI1NDYtOWI5ZjRkNDY1N2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigX+0usrJWGeZ2cEmUqBUwUVu7aCPERR/Mcb /2O+mMbYdMfjX39Md50GX6pEz42T05axcjN9mJ+1Uvfs2Y5dEgZb992GlTa68Kd3 HYMNymqCZCiDHZSMv5yPM6LGV8PRS1lQaxj8DZ+rjS9/SdbdoDjlFwFMbZBiTeEM ofYQYrOBe34NHBh51hKeAUdA2uL1OAux9+YNgr8pNgRUX8Wdm9VC9mvagX3JkYf0 3QDuAaEM6ILst40ytvfyce/y2lJFoWNfsObYhFjZYTgzVTcsjG2JyY7KvCINZKuZ fMNGn7ZusbILAM8ZBExjbyqPYOk7Fzmnx3ric9t/mWMEsYvVlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJp98Xsi/dTwtedrvU7MrO6InWrOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYmE0MDI3NGEtYzg4Mi0z ZjBjLTg1ZDAtNWI5MDgzNmRlODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmjlVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnt41MNophpNHZ+IMstNrrFPveCKR3GZIYcGHy+IUg/ZgCr0E/5DCgl gvSFqKvkSoDAO3k9wDCqvtikNeR1BcGNkG6U1PgLPw5s/xAZv/iqnpFSH4aGstqB J+sWq4q42Km0aSpSzXct++0lzqKTJ8X/uqFqt3nTgjoCrd/EMTb+8x85ZXNz3Y6n 0AoTayJ2vkUKSkb8B0cbwr7GiTPAjTOrVYpL2NEV4bwggwaQiVl6J4TJGl8XMl3f oQ4WLo4zkcDcVooBg8JFwiayANHtT2whmTYI9iz5UTBsNWHw5F/9xeRZrWBDmW93 Isc79Zwz+bX0nLUkscVNyD0MK/IX5U4= -----END CERTIFICATE-----Generated at Fri Sep 11 13:56:02 2026 by rpki-client