$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/32b7191e-efa3-3c64-9c07-6b1da0f0500d.roa File: 32b7191e-efa3-3c64-9c07-6b1da0f0500d.roa (raw, json) Hash identifier: OXDynV07dSSWuEotQcdLS69pdvuNLrrORqpMv5tjdI4= Subject key identifier: 28:D6:F1:2D:81:A4:80:69:E8:95:13:B8:C7:B5:6B:B5:A2:A2:6E:76 Certificate issuer: /CN=ba5e814e-0ab8-4257-8c39-4091cb3be269 Certificate serial: 010D0C9F4328584F078E3DED5EEA0A3C2D0D0700 Authority key identifier: 62:39:8D:CB:D2:3A:1C:06:4A:D4:6F:96:C8:CC:02:3A:93:C3:15:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/32b7191e-efa3-3c64-9c07-6b1da0f0500d.roa Signing time: Tue 01 Sep 2026 10:32:42 +0000 ROA not before: Tue 01 Sep 2026 10:32:42 +0000 ROA not after: Mon 30 Nov 2026 11:32:42 +0000 asID: 40021 IP address blocks: 209.126.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:07:8e:3d:ed:5e:ea:0a:3c:2d:0d:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba5e814e-0ab8-4257-8c39-4091cb3be269 Validity Not Before: Sep 1 10:32:42 2026 GMT Not After : Nov 30 11:32:42 2026 GMT Subject: CN=310c2b02-a463-47df-bb96-5e86ababa6d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:45:66:7e:21:2d:c1:a9:ef:b2:36:6c:d5:49: 1f:5f:5a:7d:b7:d9:55:25:0d:1f:90:c7:5d:e9:ea: b8:12:b1:47:a9:f2:69:4c:da:ce:4c:4f:1a:ef:57: 5a:7d:ed:1d:b5:4d:85:48:20:95:ef:4e:44:be:4c: 2e:ce:15:8f:71:be:90:52:aa:dd:82:52:37:77:ad: c1:4d:d9:04:9c:28:3d:97:0b:84:56:05:f1:bd:9a: 87:81:44:bc:56:7a:1f:b0:59:4b:12:8e:89:18:3d: 7d:c9:91:b0:13:e0:ec:93:56:25:26:cb:20:63:a5: b6:bf:2a:47:7a:46:61:5b:27:11:8b:75:5d:b6:c7: 59:39:3b:94:23:3c:78:01:9b:16:ef:ca:fa:d6:94: 7d:b7:8c:c8:ac:3a:fb:a0:c8:b8:fe:1e:44:88:e1: 72:a9:98:c6:a4:5f:a0:4c:a8:5e:49:01:b7:cb:e2: ea:2a:d6:24:e6:7b:e5:4b:a9:32:b6:96:bb:bd:b7: a9:0d:0f:b3:bf:02:15:0e:00:09:87:c8:6b:e4:62: 0d:b1:5a:8a:4d:9e:8d:13:d9:cf:0b:68:22:e4:a4: 07:bc:06:53:18:37:77:bd:76:f7:38:06:93:63:17: c1:71:7a:0c:ba:73:09:6a:e7:ec:e4:09:14:ee:e1: bc:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D6:F1:2D:81:A4:80:69:E8:95:13:B8:C7:B5:6B:B5:A2:A2:6E:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/32b7191e-efa3-3c64-9c07-6b1da0f0500d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.crl X509v3 Authority Key Identifier: keyid:62:39:8D:CB:D2:3A:1C:06:4A:D4:6F:96:C8:CC:02:3A:93:C3:15:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer sbgp-ipAddrBlock: critical IPv4: 209.126.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:d4:55:0f:ad:b9:c0:b4:44:c2:38:e7:67:68:f8:f4:52:ac: 78:09:10:de:1e:c4:88:7f:31:2f:9a:5d:01:f6:26:c7:34:a5: 28:f8:9a:6d:8f:e1:82:99:76:a1:f1:b5:7e:83:2f:5d:fc:ba: 19:60:b7:de:c1:d4:e3:c8:f0:06:0e:7c:76:3a:af:d9:4a:48: 61:71:59:7d:bc:12:2b:33:b8:49:c1:28:2a:48:f9:86:b0:f9: e1:e1:0c:65:9c:ac:f8:ee:c1:e1:6f:99:d5:c1:9b:1c:a8:b3: b4:64:32:c2:df:24:54:2e:7b:d5:e2:52:80:fe:59:08:67:90: 39:c1:bf:1f:19:02:d3:84:0e:c3:50:8a:99:8d:3b:0d:ef:94: 53:c9:c7:2b:f4:42:49:fd:ca:e1:d0:90:ec:6b:2b:73:07:6b: 41:a4:c5:1b:fe:31:be:12:00:02:89:9f:c2:1c:54:0a:23:df: d8:93:38:f7:5e:be:9b:20:ce:84:3e:63:63:79:fd:93:46:d7: 06:ae:14:9d:f9:80:26:16:fd:57:11:5b:d2:a2:fe:19:a7:42: 65:9e:93:58:56:4a:e0:be:38:8b:44:cb:cb:3d:a5:d6:6a:72: 60:0a:62:17:30:16:fc:c8:c3:81:d3:d7:1e:7c:18:db:9f:ec: e4:da:a6:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Hjj3tXuoKPC0NBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE1ZTgxNGUtMGFiOC00MjU3LThjMzktNDA5MWNiM2Jl MjY5MB4XDTI2MDkwMTEwMzI0MloXDTI2MTEzMDExMzI0MlowLzEtMCsGA1UEAxMk MzEwYzJiMDItYTQ2My00N2RmLWJiOTYtNWU4NmFiYWJhNmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEVmfiEtwanvsjZs1UkfX1p9t9lVJQ0fkMdd 6eq4ErFHqfJpTNrOTE8a71dafe0dtU2FSCCV705EvkwuzhWPcb6QUqrdglI3d63B TdkEnCg9lwuEVgXxvZqHgUS8VnofsFlLEo6JGD19yZGwE+Dsk1YlJssgY6W2vypH ekZhWycRi3VdtsdZOTuUIzx4AZsW78r61pR9t4zIrDr7oMi4/h5EiOFyqZjGpF+g TKheSQG3y+LqKtYk5nvlS6kytpa7vbepDQ+zvwIVDgAJh8hr5GINsVqKTZ6NE9nP C2gi5KQHvAZTGDd3vXb3OAaTYxfBcXoMunMJaufs5AkU7uG85wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjW8S2BpIBp6JUTuMe1a7Wiom52MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iYTVl ODE0ZS0wYWI4LTQyNTctOGMzOS00MDkxY2IzYmUyNjkvMzJiNzE5MWUtZWZhMy0z YzY0LTljMDctNmIxZGEwZjA1MDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYmE1ZTgxNGUtMGFiOC00MjU3LThj MzktNDA5MWNiM2JlMjY5L2JhNWU4MTRlLTBhYjgtNDI1Ny04YzM5LTQwOTFjYjNi ZTI2OS5jcmwwHwYDVR0jBBgwFoAUYjmNy9I6HAZK1G+WyMwCOpPDFSYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iYTVlODE0ZS0wYWI4LTQyNTctOGMzOS00MDkx Y2IzYmUyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0X5NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfUVQ+tucC0RMI452do+PRSrHgJEN4exIh/MS+aXQH2Jsc0pSj4mm2P 4YKZdqHxtX6DL138uhlgt97B1OPI8AYOfHY6r9lKSGFxWX28EiszuEnBKCpI+Yaw +eHhDGWcrPjuweFvmdXBmxyos7RkMsLfJFQue9XiUoD+WQhnkDnBvx8ZAtOEDsNQ ipmNOw3vlFPJxyv0Qkn9yuHQkOxrK3MHa0GkxRv+Mb4SAAKJn8IcVAoj39iTOPde vpsgzoQ+Y2N5/ZNG1wauFJ35gCYW/VcRW9Ki/hmnQmWek1hWSuC+OItEy8s9pdZq cmAKYhcwFvzIw4HT1x58GNuf7OTapvg= -----END CERTIFICATE-----Generated at Fri Sep 4 20:34:50 2026 by rpki-client