$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/ba3ff8df-1c2d-3cdb-9aa6-c021fdff5a26.roa File: ba3ff8df-1c2d-3cdb-9aa6-c021fdff5a26.roa (raw, json) Hash identifier: cLEcdRTnHU3rvzMUK5Rxhembp4o0LIk/agPOiEXaHWA= Subject key identifier: AD:09:BC:BD:DC:F4:0F:57:DD:09:9D:41:BB:4F:F9:41:E4:73:F5:80 Certificate issuer: /CN=6511a5cc-df0b-4c6e-a228-2902fbea4263 Certificate serial: 010D0C9F4328584E3E5F40078B6F361D757F6800 Authority key identifier: ED:B2:04:0A:65:F6:8A:00:34:25:EC:FC:AB:A5:2B:F8:26:99:1B:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/ba3ff8df-1c2d-3cdb-9aa6-c021fdff5a26.roa Signing time: Sun 21 Jun 2026 09:00:12 +0000 ROA not before: Sun 21 Jun 2026 09:00:12 +0000 ROA not after: Sat 19 Sep 2026 09:00:12 +0000 asID: 16509 IP address blocks: 140.98.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3e:5f:40:07:8b:6f:36:1d:75:7f:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6511a5cc-df0b-4c6e-a228-2902fbea4263 Validity Not Before: Jun 21 09:00:12 2026 GMT Not After : Sep 19 09:00:12 2026 GMT Subject: CN=5cac46b7-6f51-47df-be52-d1676d871ea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4b:6e:5a:e1:07:77:90:7b:e9:4c:05:97:06: c5:93:6d:25:2c:a0:dd:ab:b8:73:9a:00:cd:b2:af: 43:8a:1d:88:7f:77:a6:33:a9:bc:09:9d:e2:5c:67: df:25:55:6f:a8:c9:c0:d3:b1:7a:dc:1f:76:50:b2: 30:44:9b:48:4c:0a:2c:cb:04:a3:41:8c:0f:bd:be: e2:de:79:25:61:66:9c:82:70:53:a9:95:c5:1a:bd: 45:d6:74:57:45:1e:9b:94:c1:a2:bc:4d:d4:b9:12: 77:6f:8f:54:e4:d4:7d:f1:ea:43:f5:6c:69:f9:ba: 7a:6d:b8:8a:2b:f9:0b:6f:32:96:e9:ec:c7:6a:9a: b0:69:78:e0:90:2b:6f:38:63:f2:23:e7:f8:0d:b2: f1:9e:a3:f7:0a:9c:0e:b9:68:b9:6e:29:93:fe:78: ea:05:6f:17:96:dc:c1:0a:d7:90:19:11:65:8b:57: 92:b9:6f:b7:39:be:8c:c5:7c:a9:fa:4e:d9:0b:a8: fe:8f:26:11:89:54:9c:73:8d:a7:c8:d2:ce:b8:2d: d3:ce:c2:64:62:f9:9d:64:f7:e4:66:cb:76:f0:e4: 69:30:1e:10:51:70:53:ce:34:55:a6:28:cd:2a:bc: 8e:b1:45:c8:56:0e:71:a5:c9:35:4d:85:e4:0f:26: 25:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:09:BC:BD:DC:F4:0F:57:DD:09:9D:41:BB:4F:F9:41:E4:73:F5:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/ba3ff8df-1c2d-3cdb-9aa6-c021fdff5a26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.crl X509v3 Authority Key Identifier: keyid:ED:B2:04:0A:65:F6:8A:00:34:25:EC:FC:AB:A5:2B:F8:26:99:1B:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer sbgp-ipAddrBlock: critical IPv4: 140.98.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:0b:8c:04:46:3d:8f:9a:91:7f:23:76:54:13:f2:25:be:03: d2:07:fc:a6:4d:90:2a:7a:bb:88:79:79:2a:02:2b:2a:89:6b: 88:7a:b0:bd:d8:70:cb:36:da:4b:d0:e1:40:89:2e:60:b5:90: 7a:3b:a6:00:e9:b0:87:13:a9:6f:58:3a:86:17:e9:84:64:05: c2:3d:a5:4d:18:c5:ee:97:d8:39:e0:11:a7:30:9b:f1:a4:21: 70:47:a6:35:94:50:07:a6:d3:07:a9:f0:32:32:97:f6:bc:bf: 3c:5b:cd:23:fb:c1:60:aa:90:80:38:a0:83:fd:f5:c7:ce:26: c7:21:26:de:b8:fd:10:bd:78:84:d0:45:00:b4:d1:c4:15:6e: cf:57:b1:75:3e:8c:99:7a:68:37:37:43:cd:51:2c:bb:86:0c: 89:1a:2f:1c:3c:8e:3c:32:80:23:a8:68:63:f1:34:35:f7:9b: 4d:5c:ed:df:ae:c3:e8:ce:c0:e0:5f:9b:64:14:a6:3d:83:49: f7:81:5b:7e:80:e4:68:73:44:3f:e7:1b:ed:60:9b:39:22:b8: 5f:0a:4c:1f:3e:66:00:38:f7:04:1b:d9:7a:45:32:e1:6a:b0: d8:9a:e5:6a:8d:93:2b:7a:f3:75:07:7a:80:ad:41:d4:18:0b: 06:32:22:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4+X0AHi282HXV/aAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjUxMWE1Y2MtZGYwYi00YzZlLWEyMjgtMjkwMmZiZWE0 MjYzMB4XDTI2MDYyMTA5MDAxMloXDTI2MDkxOTA5MDAxMlowLzEtMCsGA1UEAxMk NWNhYzQ2YjctNmY1MS00N2RmLWJlNTItZDE2NzZkODcxZWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEtuWuEHd5B76UwFlwbFk20lLKDdq7hzmgDN sq9Dih2If3emM6m8CZ3iXGffJVVvqMnA07F63B92ULIwRJtITAosywSjQYwPvb7i 3nklYWacgnBTqZXFGr1F1nRXRR6blMGivE3UuRJ3b49U5NR98epD9Wxp+bp6bbiK K/kLbzKW6ezHapqwaXjgkCtvOGPyI+f4DbLxnqP3CpwOuWi5bimT/njqBW8XltzB CteQGRFli1eSuW+3Ob6MxXyp+k7ZC6j+jyYRiVScc42nyNLOuC3TzsJkYvmdZPfk Zst28ORpMB4QUXBTzjRVpijNKryOsUXIVg5xpck1TYXkDyYlywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0JvL3c9A9X3QmdQbtP+UHkc/WAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NTEx YTVjYy1kZjBiLTRjNmUtYTIyOC0yOTAyZmJlYTQyNjMvYmEzZmY4ZGYtMWMyZC0z Y2RiLTlhYTYtYzAyMWZkZmY1YTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjUxMWE1Y2MtZGYwYi00YzZlLWEy MjgtMjkwMmZiZWE0MjYzLzY1MTFhNWNjLWRmMGItNGM2ZS1hMjI4LTI5MDJmYmVh NDI2My5jcmwwHwYDVR0jBBgwFoAU7bIECmX2igA0Jez8q6Ur+CaZGxQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NTExYTVjYy1kZjBiLTRjNmUtYTIyOC0yOTAy ZmJlYTQyNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjGIcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALwLjARGPY+akX8jdlQT8iW+A9IH/KZNkCp6u4h5eSoCKyqJa4h6sL3Y cMs22kvQ4UCJLmC1kHo7pgDpsIcTqW9YOoYX6YRkBcI9pU0Yxe6X2DngEacwm/Gk IXBHpjWUUAem0wep8DIyl/a8vzxbzSP7wWCqkIA4oIP99cfOJschJt64/RC9eITQ RQC00cQVbs9XsXU+jJl6aDc3Q81RLLuGDIkaLxw8jjwygCOoaGPxNDX3m01c7d+u w+jOwOBfm2QUpj2DSfeBW36A5GhzRD/nG+1gmzkiuF8KTB8+ZgA49wQb2XpFMuFq sNia5WqNkyt683UHeoCtQdQYCwYyIpo= -----END CERTIFICATE-----Generated at Mon Jul 6 20:32:05 2026 by rpki-client