$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/494c424d-8179-3920-b06f-fa2c03ddedf1.roa File: 494c424d-8179-3920-b06f-fa2c03ddedf1.roa (raw, json) Hash identifier: +YlYrKzVInai6gkvCM/9uqHX2ew8UczNyr9iW92zRhM= Subject key identifier: E8:A7:18:5D:EA:DE:D8:E4:9C:91:A0:0F:53:A7:ED:1B:CC:82:34:24 Certificate issuer: /CN=ba5e814e-0ab8-4257-8c39-4091cb3be269 Certificate serial: 010D0C9F4328584F078E23B146DB2D6ACF76E7C0 Authority key identifier: 62:39:8D:CB:D2:3A:1C:06:4A:D4:6F:96:C8:CC:02:3A:93:C3:15:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/494c424d-8179-3920-b06f-fa2c03ddedf1.roa Signing time: Tue 01 Sep 2026 10:32:30 +0000 ROA not before: Tue 01 Sep 2026 10:32:30 +0000 ROA not after: Mon 30 Nov 2026 11:32:30 +0000 asID: 40021 IP address blocks: 209.126.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:07:8e:23:b1:46:db:2d:6a:cf:76:e7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba5e814e-0ab8-4257-8c39-4091cb3be269 Validity Not Before: Sep 1 10:32:30 2026 GMT Not After : Nov 30 11:32:30 2026 GMT Subject: CN=51f0c5fe-73f9-4c5b-8e99-75b2f2690843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:09:b3:4b:dc:b4:3f:ed:df:f6:8c:00:24:c8: 7d:c1:a1:56:13:8d:ed:9d:36:6e:7b:90:0a:66:67: 50:95:fd:0f:1f:33:f5:a2:de:26:8e:e7:c7:76:00: e0:da:f2:d5:7a:8e:c2:f3:7f:95:30:60:21:05:a2: 71:a3:74:52:61:9f:65:5e:ae:da:dc:8c:4b:87:20: dc:e7:8f:3b:10:78:6b:01:37:0d:be:c4:b1:a2:50: 92:37:85:72:6d:a9:57:ea:ae:d0:79:f9:fd:72:3c: 55:a5:d1:94:5a:55:26:0f:57:90:dd:f1:bb:40:59: d0:ea:a3:79:33:f5:64:da:34:98:23:84:46:62:db: 1c:25:f9:1c:0e:43:6f:22:c5:4a:c7:31:61:33:68: db:68:e4:4d:27:64:f4:ee:f7:55:96:d9:55:85:ec: 6d:26:40:8c:ff:1d:5e:75:bc:74:44:68:9c:1b:25: 4c:05:5b:3a:08:a3:49:b8:89:4b:bb:b1:55:63:81: a1:44:60:80:4f:b1:65:6a:eb:78:3d:61:85:33:6e: 35:f8:d9:98:96:cc:4e:fd:4e:76:fc:e6:b4:b7:9f: 83:f7:b3:80:3f:37:9f:60:b9:fc:64:52:a1:7c:e6: 8e:77:3b:0e:87:ff:99:02:5c:af:bd:97:5d:09:15: ec:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A7:18:5D:EA:DE:D8:E4:9C:91:A0:0F:53:A7:ED:1B:CC:82:34:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/494c424d-8179-3920-b06f-fa2c03ddedf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.crl X509v3 Authority Key Identifier: keyid:62:39:8D:CB:D2:3A:1C:06:4A:D4:6F:96:C8:CC:02:3A:93:C3:15:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer sbgp-ipAddrBlock: critical IPv4: 209.126.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption db:0c:e0:93:0c:80:41:f7:53:92:10:9e:cd:78:f4:1a:aa:33: 6e:3c:ca:73:84:c3:a2:d7:a4:cb:ec:fb:ff:fc:77:8d:f0:c7: c6:e8:e0:2b:fd:da:29:ae:96:ef:a8:f5:39:0f:49:b7:a1:b2: df:d4:5a:22:ec:64:2d:d3:3e:ea:7c:d0:5f:bd:53:dd:4a:77: 2f:d7:c7:e7:90:3c:55:a1:c3:09:3d:73:c3:f1:96:e0:2e:0a: 05:61:f7:16:c1:bf:a2:7b:11:b2:6a:62:54:ce:14:b9:51:bf: 5c:85:60:dc:4c:85:f9:48:d5:70:ad:c4:cf:31:8e:6e:ce:45: 3b:f5:5d:de:de:ea:d4:e6:f3:e5:d8:67:94:86:61:f7:17:8c: 98:b9:16:c0:94:b0:ff:88:4c:33:b0:f0:68:50:d5:3f:06:26: c7:38:34:29:f9:a8:4c:f9:a7:ca:6a:43:28:da:ee:23:fb:8b: a6:b0:93:82:82:05:5b:36:97:e1:95:40:f6:31:77:82:5a:9b: c4:a6:a1:6d:c1:55:2e:22:a8:c1:ef:13:47:47:cb:d1:86:d4: ad:ea:f6:bc:c7:93:6d:c3:df:10:79:b5:13:07:a5:e6:4a:79: 8d:99:fc:cc:65:52:30:aa:5e:31:a5:2c:63:88:b0:6b:87:a7: db:b4:ce:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8HjiOxRtstas9258AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE1ZTgxNGUtMGFiOC00MjU3LThjMzktNDA5MWNiM2Jl MjY5MB4XDTI2MDkwMTEwMzIzMFoXDTI2MTEzMDExMzIzMFowLzEtMCsGA1UEAxMk NTFmMGM1ZmUtNzNmOS00YzViLThlOTktNzViMmYyNjkwODQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwmzS9y0P+3f9owAJMh9waFWE43tnTZue5AK ZmdQlf0PHzP1ot4mjufHdgDg2vLVeo7C83+VMGAhBaJxo3RSYZ9lXq7a3IxLhyDc 5487EHhrATcNvsSxolCSN4VybalX6q7Qefn9cjxVpdGUWlUmD1eQ3fG7QFnQ6qN5 M/Vk2jSYI4RGYtscJfkcDkNvIsVKxzFhM2jbaORNJ2T07vdVltlVhextJkCM/x1e dbx0RGicGyVMBVs6CKNJuIlLu7FVY4GhRGCAT7Flaut4PWGFM241+NmYlsxO/U52 /Oa0t5+D97OAPzefYLn8ZFKhfOaOdzsOh/+ZAlyvvZddCRXsRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOinGF3q3tjknJGgD1On7RvMgjQkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iYTVl ODE0ZS0wYWI4LTQyNTctOGMzOS00MDkxY2IzYmUyNjkvNDk0YzQyNGQtODE3OS0z OTIwLWIwNmYtZmEyYzAzZGRlZGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYmE1ZTgxNGUtMGFiOC00MjU3LThj MzktNDA5MWNiM2JlMjY5L2JhNWU4MTRlLTBhYjgtNDI1Ny04YzM5LTQwOTFjYjNi ZTI2OS5jcmwwHwYDVR0jBBgwFoAUYjmNy9I6HAZK1G+WyMwCOpPDFSYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iYTVlODE0ZS0wYWI4LTQyNTctOGMzOS00MDkx Y2IzYmUyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0X5GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANsM4JMMgEH3U5IQns149BqqM248ynOEw6LXpMvs+//8d43wx8bo4Cv9 2imulu+o9TkPSbehst/UWiLsZC3TPup80F+9U91Kdy/Xx+eQPFWhwwk9c8PxluAu CgVh9xbBv6J7EbJqYlTOFLlRv1yFYNxMhflI1XCtxM8xjm7ORTv1Xd7e6tTm8+XY Z5SGYfcXjJi5FsCUsP+ITDOw8GhQ1T8GJsc4NCn5qEz5p8pqQyja7iP7i6awk4KC BVs2l+GVQPYxd4Jam8SmoW3BVS4iqMHvE0dHy9GG1K3q9rzHk23D3xB5tRMHpeZK eY2Z/MxlUjCqXjGlLGOIsGuHp9u0zoE= -----END CERTIFICATE-----Generated at Fri Sep 4 20:34:52 2026 by rpki-client