$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/ba5b8ac8-d272-3491-a19b-241c25c75242.roa File: ba5b8ac8-d272-3491-a19b-241c25c75242.roa (raw, json) Hash identifier: TLyAgucX0ATrn0CnoaGi3i3lRaAevNbZktbdVlHZID0= Subject key identifier: 3C:A1:49:87:D6:CE:0B:41:AE:B2:FC:0F:4D:56:FE:DC:53:53:71:E9 Certificate issuer: /CN=a1bd9d43-c127-4a9e-b038-0c436c5d905d Certificate serial: 010D0C9F4328584EAC4D82509E92F3C7472E64A0 Authority key identifier: 44:56:B0:0C:C3:6F:6E:82:D5:8A:0A:1C:2A:77:45:78:E6:33:A0:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/ba5b8ac8-d272-3491-a19b-241c25c75242.roa Signing time: Thu 30 Jul 2026 18:03:43 +0000 ROA not before: Thu 30 Jul 2026 18:03:43 +0000 ROA not after: Wed 28 Oct 2026 18:03:43 +0000 asID: 13340 IP address blocks: 208.65.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ac:4d:82:50:9e:92:f3:c7:47:2e:64:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1bd9d43-c127-4a9e-b038-0c436c5d905d Validity Not Before: Jul 30 18:03:43 2026 GMT Not After : Oct 28 18:03:43 2026 GMT Subject: CN=d4d8bab3-4abc-40ae-a07d-84a97168c499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:74:be:75:1d:a9:91:65:93:89:85:dd:17:7a: db:67:91:6c:b2:fd:fa:44:97:d3:e7:f5:6e:28:9c: e2:42:0e:83:a2:b5:79:a3:11:85:5a:34:26:ba:5b: e4:96:ee:a6:a1:1b:5e:ea:89:4a:d6:25:cd:13:24: 49:23:7e:c4:54:4d:95:1b:63:3a:58:25:2c:3f:c3: e9:f5:92:5d:7e:0a:c2:5f:5f:4a:f9:00:5b:4b:08: 4d:e9:2d:d8:11:a2:a9:84:2a:bb:77:9a:f1:a0:30: 1b:20:f6:c8:08:59:c4:9c:27:3a:81:48:40:81:0c: e3:81:80:d6:84:67:d0:f2:a2:a1:a2:b6:56:74:f9: 85:06:a4:ba:82:25:b3:1f:e8:ba:ef:f1:6a:0c:dd: 6f:a8:85:fa:f8:42:99:6d:34:f8:c9:3a:fe:4a:69: d9:b6:4a:9d:ea:9a:cf:f2:9a:ae:ea:9b:29:d0:93: 92:73:a0:d6:37:fd:41:a8:b0:09:13:bb:a5:c8:bf: 46:d1:e4:93:f0:4f:8e:6d:04:52:d4:50:57:94:21: 8c:45:6a:bf:61:c8:0d:86:fa:ea:b8:6b:81:5f:e6: d2:e8:4b:7a:a4:9d:10:f2:38:38:e1:05:59:ce:85: 6c:bc:43:b1:c0:9c:f3:fb:83:74:d0:a7:70:ff:eb: 6c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A1:49:87:D6:CE:0B:41:AE:B2:FC:0F:4D:56:FE:DC:53:53:71:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/ba5b8ac8-d272-3491-a19b-241c25c75242.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl X509v3 Authority Key Identifier: keyid:44:56:B0:0C:C3:6F:6E:82:D5:8A:0A:1C:2A:77:45:78:E6:33:A0:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer sbgp-ipAddrBlock: critical IPv4: 208.65.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:47:cf:25:7c:e9:51:89:a3:10:bc:56:84:f2:d0:dc:7f:96: 52:33:4e:1c:8b:4b:47:3c:d2:4c:c6:27:3e:c5:90:9b:ed:c1: ed:5c:8e:a4:a1:c8:f5:93:01:5e:0a:f6:9b:82:3b:a5:f3:f1: bc:f4:b5:74:b9:0b:34:e0:df:1b:f5:78:01:0b:4e:7d:28:a5: 86:a6:42:f4:3f:7f:d4:33:dd:ae:31:2c:e7:b3:bf:15:1a:00: 55:d5:8a:f6:b6:76:48:bd:d9:25:17:88:cb:33:d9:d1:27:9a: b3:62:64:cb:a7:27:5e:18:b9:10:3f:ac:5e:a8:e3:54:ca:0b: 00:15:4d:a2:71:51:d6:c3:8a:3b:03:a4:ca:1c:fb:53:2d:10: 10:7f:cb:4e:45:1f:fc:c5:87:b0:68:ef:96:d5:96:bb:bf:14: e3:00:38:28:85:bf:fa:8b:16:b7:92:78:98:d4:9e:5d:e2:f4: 4f:da:e7:0a:02:b5:2c:81:66:ca:69:5c:39:d2:a3:d6:00:62: 49:a7:58:48:48:20:09:da:f7:e6:4a:e2:9a:53:92:d3:09:02: 20:f6:fc:52:9e:82:22:23:b7:42:4f:b4:a8:25:c0:73:d4:65: 73:77:64:10:b0:b1:5c:dc:b2:3d:fe:6e:bf:7a:c2:58:ef:98: 45:75:4b:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6sTYJQnpLzx0cuZKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFiZDlkNDMtYzEyNy00YTllLWIwMzgtMGM0MzZjNWQ5 MDVkMB4XDTI2MDczMDE4MDM0M1oXDTI2MTAyODE4MDM0M1owLzEtMCsGA1UEAxMk ZDRkOGJhYjMtNGFiYy00MGFlLWEwN2QtODRhOTcxNjhjNDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknS+dR2pkWWTiYXdF3rbZ5Fssv36RJfT5/Vu KJziQg6DorV5oxGFWjQmulvklu6moRte6olK1iXNEyRJI37EVE2VG2M6WCUsP8Pp 9ZJdfgrCX19K+QBbSwhN6S3YEaKphCq7d5rxoDAbIPbICFnEnCc6gUhAgQzjgYDW hGfQ8qKhorZWdPmFBqS6giWzH+i67/FqDN1vqIX6+EKZbTT4yTr+SmnZtkqd6prP 8pqu6psp0JOSc6DWN/1BqLAJE7ulyL9G0eST8E+ObQRS1FBXlCGMRWq/YcgNhvrq uGuBX+bS6Et6pJ0Q8jg44QVZzoVsvEOxwJzz+4N00Kdw/+tskwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDyhSYfWzgtBrrL8D01W/txTU3HpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMWJk OWQ0My1jMTI3LTRhOWUtYjAzOC0wYzQzNmM1ZDkwNWQvYmE1YjhhYzgtZDI3Mi0z NDkxLWExOWItMjQxYzI1Yzc1MjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTFiZDlkNDMtYzEyNy00YTllLWIw MzgtMGM0MzZjNWQ5MDVkL2ExYmQ5ZDQzLWMxMjctNGE5ZS1iMDM4LTBjNDM2YzVk OTA1ZC5jcmwwHwYDVR0jBBgwFoAURFawDMNvboLVigocKndFeOYzoPIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMWJkOWQ0My1jMTI3LTRhOWUtYjAzOC0wYzQz NmM1ZDkwNWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EFIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNHzyV86VGJoxC8VoTy0Nx/llIzThyLS0c80kzGJz7FkJvtwe1cjqSh yPWTAV4K9puCO6Xz8bz0tXS5CzTg3xv1eAELTn0opYamQvQ/f9Qz3a4xLOezvxUa AFXViva2dki92SUXiMsz2dEnmrNiZMunJ14YuRA/rF6o41TKCwAVTaJxUdbDijsD pMoc+1MtEBB/y05FH/zFh7Bo75bVlru/FOMAOCiFv/qLFreSeJjUnl3i9E/a5woC tSyBZsppXDnSo9YAYkmnWEhIIAna9+ZK4ppTktMJAiD2/FKegiIjt0JPtKglwHPU ZXN3ZBCwsVzcsj3+br96wljvmEV1S14= -----END CERTIFICATE-----Generated at Fri Aug 21 00:13:45 2026 by rpki-client