$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/a5aae8bc-a6ed-382f-af18-c5e191e02393.roa File: a5aae8bc-a6ed-382f-af18-c5e191e02393.roa (raw, json) Hash identifier: 2iTulFduvNYgoqPXDT2GE11Exyju7pujBqmsn1ifcLY= Subject key identifier: 0D:18:7A:80:A8:44:17:1F:04:3F:41:5A:99:D4:4A:82:04:9D:C2:E6 Certificate issuer: /CN=ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7 Certificate serial: 010D0C9F4328584F331D1B977E6DBA38F725DF80 Authority key identifier: E8:1E:15:0B:75:76:40:58:B6:9A:14:2D:A7:91:10:D7:B8:85:D2:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/a5aae8bc-a6ed-382f-af18-c5e191e02393.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 398091 IP address blocks: 64.140.172.0/22 maxlen: 24 64.185.238.0/24 maxlen: 24 64.185.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:1b:97:7e:6d:ba:38:f7:25:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7 Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=dd78b344-591e-4d5b-af07-aca36f3141c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fe:67:6c:a4:b4:77:d5:d2:46:39:e2:eb:ec: ab:5b:67:3c:6a:44:3a:b9:66:c2:ee:64:2f:aa:d2: cd:ef:73:cb:4c:4a:f9:56:27:e4:d0:c1:c9:87:47: a8:39:25:7e:d0:3b:a8:ea:e9:29:d3:53:09:4c:cc: b0:d0:72:08:99:a2:62:eb:36:e7:90:64:7d:4d:8a: 43:49:fc:9b:c3:fb:7c:59:90:c6:78:93:eb:04:37: 27:8e:e5:c2:0f:0a:7c:c7:b8:04:f0:44:9e:9e:20: 5b:02:1a:26:3e:1b:0d:48:e6:64:7d:51:11:36:dd: da:dc:8d:da:93:c0:e3:f8:33:5b:2e:ca:ae:1f:0e: 9d:3a:bf:9c:e0:09:fd:b6:5e:3e:5a:c5:e9:a0:6c: 7b:c8:e1:d3:82:a0:43:44:fb:51:dd:ed:45:ec:09: b0:19:16:8a:6f:80:1c:ad:e7:24:17:96:14:63:93: df:e7:98:00:cb:3a:3a:14:d8:51:7f:66:6d:13:b6: 16:1d:c4:2f:d2:88:ea:cb:a6:b4:2a:f5:3b:a8:a2: 4d:cd:67:4f:99:9b:2f:a9:7f:6b:de:a8:a3:e1:b1: f0:3e:e8:d8:08:38:a5:96:6c:83:22:42:bd:76:5d: ce:d9:09:c8:6d:dc:70:b5:6d:31:6f:20:38:4f:9e: 87:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:18:7A:80:A8:44:17:1F:04:3F:41:5A:99:D4:4A:82:04:9D:C2:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/a5aae8bc-a6ed-382f-af18-c5e191e02393.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.crl X509v3 Authority Key Identifier: keyid:E8:1E:15:0B:75:76:40:58:B6:9A:14:2D:A7:91:10:D7:B8:85:D2:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.cer sbgp-ipAddrBlock: critical IPv4: 64.140.172.0/22 64.185.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:e8:da:94:a3:ed:30:b6:6f:52:60:87:39:0b:d4:13:b1:b9: d2:50:2a:bb:cd:ba:0c:69:02:d1:6d:2c:77:ff:dd:b5:3e:26: ab:6e:3b:e1:80:2c:56:08:e3:18:ec:54:85:92:a3:ab:12:63: 86:59:6a:ce:15:dd:71:0f:b2:8c:8d:81:96:01:e3:94:45:c9: 16:5f:4d:30:cc:f7:b2:a0:27:57:22:7d:e6:54:b6:e1:ba:28: 6a:cc:6e:b5:e6:ee:18:29:55:b8:f5:0f:c4:77:3b:e4:a1:8a: 9f:5b:61:3c:90:52:fc:bb:ad:81:55:4a:fd:8c:48:fd:89:b4: 64:5b:35:0f:dd:c7:7d:b2:e0:88:d5:41:1e:c5:7b:fb:2b:4b: a5:18:d5:c0:96:99:43:b3:8b:98:da:64:71:d9:8c:a8:a5:a4: 6a:e4:08:a4:dc:b4:7d:f6:e2:26:1a:0e:5e:a4:05:d3:f1:e1: 1d:2b:d4:43:c8:a2:06:37:f3:d6:8d:93:ed:e2:e5:24:ad:34: 67:27:a4:c7:9d:e9:cc:aa:88:fe:b5:ba:a8:67:26:84:51:97: d5:d7:dd:40:e3:8d:59:5a:f9:4e:f3:cb:a9:ae:19:e5:66:6e: 34:8a:cc:c4:33:20:2e:4c:74:53:91:bd:47:e8:69:8c:b2:2c: 5c:fd:bd:2e -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8zHRuXfm26OPcl34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEzNjhkYzItZGQ4YS00MGQyLWJjNTMtMGZlODdlOWQ5 ZGQ3MB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk ZGQ3OGIzNDQtNTkxZS00ZDViLWFmMDctYWNhMzZmMzE0MWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuf5nbKS0d9XSRjni6+yrW2c8akQ6uWbC7mQv qtLN73PLTEr5Vifk0MHJh0eoOSV+0Duo6ukp01MJTMyw0HIImaJi6zbnkGR9TYpD Sfybw/t8WZDGeJPrBDcnjuXCDwp8x7gE8ESeniBbAhomPhsNSOZkfVERNt3a3I3a k8Dj+DNbLsquHw6dOr+c4An9tl4+WsXpoGx7yOHTgqBDRPtR3e1F7AmwGRaKb4Ac reckF5YUY5Pf55gAyzo6FNhRf2ZtE7YWHcQv0ojqy6a0KvU7qKJNzWdPmZsvqX9r 3qij4bHwPujYCDillmyDIkK9dl3O2QnIbdxwtW0xbyA4T56HswIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFA0YeoCoRBcfBD9BWpnUSoIEncLmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iYTM2 OGRjMi1kZDhhLTQwZDItYmM1My0wZmU4N2U5ZDlkZDcvYTVhYWU4YmMtYTZlZC0z ODJmLWFmMTgtYzVlMTkxZTAyMzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYmEzNjhkYzItZGQ4YS00MGQyLWJj NTMtMGZlODdlOWQ5ZGQ3L2JhMzY4ZGMyLWRkOGEtNDBkMi1iYzUzLTBmZTg3ZTlk OWRkNy5jcmwwHwYDVR0jBBgwFoAU6B4VC3V2QFi2mhQtp5EQ17iF0t0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iYTM2OGRjMi1kZDhhLTQwZDItYmM1My0wZmU4 N2U5ZDlkZDcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCQIysAwQB QLnuMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJno2pSj7TC2b1JghzkL1BOxudJQKrvNugxpAtFtLHf/3bU+ JqtuO+GALFYI4xjsVIWSo6sSY4ZZas4V3XEPsoyNgZYB45RFyRZfTTDM97KgJ1ci feZUtuG6KGrMbrXm7hgpVbj1D8R3O+Ship9bYTyQUvy7rYFVSv2MSP2JtGRbNQ/d x32y4IjVQR7Fe/srS6UY1cCWmUOzi5jaZHHZjKilpGrkCKTctH324iYaDl6kBdPx 4R0r1EPIogY389aNk+3i5SStNGcnpMed6cyqiP61uqhnJoRRl9XX3UDjjVla+U7z y6muGeVmbjSKzMQzIC5MdFORvUfoaYyyLFz9vS4= -----END CERTIFICATE-----Generated at Sat Sep 19 02:10:50 2026 by rpki-client