$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/ba5b8ac8-d272-3491-a19b-241c25c75242.roa File: ba5b8ac8-d272-3491-a19b-241c25c75242.roa (raw, json) Hash identifier: KTUdAFQwGwnss/75flES7ngG17LFYRrI6+xoPM2xuBg= Subject key identifier: ED:59:8E:A1:6D:69:89:04:32:F3:9E:7C:71:4F:D5:4D:F4:A4:47:82 Certificate issuer: /CN=a1bd9d43-c127-4a9e-b038-0c436c5d905d Certificate serial: 010D0C9F4328584F4F07FDFD5557A00C96038E00 Authority key identifier: 44:56:B0:0C:C3:6F:6E:82:D5:8A:0A:1C:2A:77:45:78:E6:33:A0:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/ba5b8ac8-d272-3491-a19b-241c25c75242.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 13340 IP address blocks: 208.65.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:07:fd:fd:55:57:a0:0c:96:03:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1bd9d43-c127-4a9e-b038-0c436c5d905d Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=59516cce-49cf-46db-be8d-c1e7433f61da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a3:f9:ac:67:a1:af:0a:fc:5e:f7:2c:df:ee: ca:ea:f0:82:3d:18:8c:cb:7f:bd:2d:80:30:aa:ad: 76:f8:7d:34:a2:02:a4:a8:0b:9d:91:f5:77:df:eb: e5:ac:55:03:7a:b7:34:9b:f8:64:d0:de:7f:d1:2c: f6:86:35:f3:7d:42:3c:b0:4e:d4:dc:bc:0e:0e:6b: 63:f7:d3:ac:34:57:0e:86:58:c6:15:be:74:d4:ce: 36:d5:39:8f:04:e6:4f:7e:a2:e3:83:09:22:89:97: 31:54:60:41:85:81:3f:a6:02:63:94:53:6c:d3:f4: 6e:a8:fb:03:60:ee:ce:40:96:88:d0:45:7b:a8:7e: 11:07:be:71:43:90:da:e9:c0:7d:2a:be:b0:28:27: 7b:7e:77:ef:21:50:e2:34:2d:5e:d9:ec:12:09:ca: c6:ff:b0:b2:ea:da:34:25:ca:fa:fc:63:74:f2:8a: 33:7d:5c:ea:35:12:fd:a7:cd:4e:d3:53:02:74:53: ae:9c:43:ca:08:01:7c:43:ea:d4:7e:cf:fa:ae:89: d4:d2:f9:74:35:ac:db:23:d6:f0:e8:7d:e4:ba:cd: 51:57:df:b8:f6:62:fe:e5:83:5e:94:22:eb:33:e1: f7:91:22:b1:08:d0:73:dc:a9:62:89:e9:e3:de:1f: cd:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:59:8E:A1:6D:69:89:04:32:F3:9E:7C:71:4F:D5:4D:F4:A4:47:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/ba5b8ac8-d272-3491-a19b-241c25c75242.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl X509v3 Authority Key Identifier: keyid:44:56:B0:0C:C3:6F:6E:82:D5:8A:0A:1C:2A:77:45:78:E6:33:A0:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer sbgp-ipAddrBlock: critical IPv4: 208.65.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:10:e5:ab:29:ae:09:03:2c:a4:2a:ea:71:27:75:40:61:1d: 01:0c:4e:a8:51:a9:8e:53:2d:31:01:ed:ee:32:b9:f7:a3:08: 23:46:74:32:36:69:8b:ed:88:08:27:f1:2f:c9:05:00:57:5e: bd:e6:83:70:b4:c4:65:93:b2:71:3b:93:b1:bc:78:1c:cd:da: 0f:51:fa:a0:38:89:8f:a7:30:fc:4f:dc:b9:1c:32:61:45:20: 12:4e:a9:8c:da:62:92:33:5f:a3:6a:21:59:12:1b:e4:d5:4d: 05:56:75:47:51:53:92:10:06:b2:d1:64:4f:68:c4:4e:d9:10: 8e:34:0c:7c:f0:00:12:28:7b:8d:a4:d4:79:c5:d5:6b:57:a0: 85:11:ef:fd:30:01:3f:67:0f:a1:97:23:e1:2f:65:8a:91:2e: 01:8d:2c:db:b0:c6:b5:9f:98:f3:49:23:8f:52:6a:fe:a1:35: 48:c4:c1:9e:a4:b1:db:08:75:4d:ce:37:87:ef:50:26:c8:ce: 9e:38:d2:75:40:4a:61:7c:b6:28:49:1e:03:0d:0b:3d:e8:43: 80:9e:a9:da:21:b8:69:fd:10:5c:10:9c:8c:9f:d7:46:ef:f8: 77:f9:4b:be:5b:04:61:6b:04:31:f2:30:57:b8:2f:61:53:3b: 1d:48:e2:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PB/39VVegDJYDjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFiZDlkNDMtYzEyNy00YTllLWIwMzgtMGM0MzZjNWQ5 MDVkMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk NTk1MTZjY2UtNDljZi00NmRiLWJlOGQtYzFlNzQzM2Y2MWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KP5rGehrwr8Xvcs3+7K6vCCPRiMy3+9LYAw qq12+H00ogKkqAudkfV33+vlrFUDerc0m/hk0N5/0Sz2hjXzfUI8sE7U3LwODmtj 99OsNFcOhljGFb501M421TmPBOZPfqLjgwkiiZcxVGBBhYE/pgJjlFNs0/RuqPsD YO7OQJaI0EV7qH4RB75xQ5Da6cB9Kr6wKCd7fnfvIVDiNC1e2ewSCcrG/7Cy6to0 Jcr6/GN08oozfVzqNRL9p81O01MCdFOunEPKCAF8Q+rUfs/6ronU0vl0NazbI9bw 6H3kus1RV9+49mL+5YNelCLrM+H3kSKxCNBz3Kliienj3h/NxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO1ZjqFtaYkEMvOefHFP1U30pEeCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMWJk OWQ0My1jMTI3LTRhOWUtYjAzOC0wYzQzNmM1ZDkwNWQvYmE1YjhhYzgtZDI3Mi0z NDkxLWExOWItMjQxYzI1Yzc1MjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTFiZDlkNDMtYzEyNy00YTllLWIw MzgtMGM0MzZjNWQ5MDVkL2ExYmQ5ZDQzLWMxMjctNGE5ZS1iMDM4LTBjNDM2YzVk OTA1ZC5jcmwwHwYDVR0jBBgwFoAURFawDMNvboLVigocKndFeOYzoPIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMWJkOWQ0My1jMTI3LTRhOWUtYjAzOC0wYzQz NmM1ZDkwNWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EFIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsQ5asprgkDLKQq6nEndUBhHQEMTqhRqY5TLTEB7e4yufejCCNGdDI2 aYvtiAgn8S/JBQBXXr3mg3C0xGWTsnE7k7G8eBzN2g9R+qA4iY+nMPxP3LkcMmFF IBJOqYzaYpIzX6NqIVkSG+TVTQVWdUdRU5IQBrLRZE9oxE7ZEI40DHzwABIoe42k 1HnF1WtXoIUR7/0wAT9nD6GXI+EvZYqRLgGNLNuwxrWfmPNJI49Sav6hNUjEwZ6k sdsIdU3ON4fvUCbIzp440nVASmF8tihJHgMNCz3oQ4CeqdohuGn9EFwQnIyf10bv +Hf5S75bBGFrBDHyMFe4L2FTOx1I4tA= -----END CERTIFICATE-----Generated at Fri Oct 9 21:21:51 2026 by rpki-client