$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/4d738785-e955-30d1-8b46-2d1e1b1115a7.roa File: 4d738785-e955-30d1-8b46-2d1e1b1115a7.roa (raw, json) Hash identifier: hp6evN+7oMtBI51Zy+Uu+FvJ3zAp1Y3O8qVFuwQuyuk= Subject key identifier: 51:A3:85:A4:EF:14:E6:AC:1E:C8:4C:BE:73:49:32:8F:F5:13:3D:80 Certificate issuer: /CN=ba5e814e-0ab8-4257-8c39-4091cb3be269 Certificate serial: 010D0C9F4328584F4DA28E7882905433C2226A40 Authority key identifier: 62:39:8D:CB:D2:3A:1C:06:4A:D4:6F:96:C8:CC:02:3A:93:C3:15:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/4d738785-e955-30d1-8b46-2d1e1b1115a7.roa Signing time: Sat 26 Sep 2026 13:00:12 +0000 ROA not before: Sat 26 Sep 2026 13:00:12 +0000 ROA not after: Fri 25 Dec 2026 14:00:12 +0000 asID: 40021 IP address blocks: 144.126.128.0/20 maxlen: 20 144.126.144.0/22 maxlen: 22 144.126.148.0/22 maxlen: 22 144.126.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4d:a2:8e:78:82:90:54:33:c2:22:6a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba5e814e-0ab8-4257-8c39-4091cb3be269 Validity Not Before: Sep 26 13:00:12 2026 GMT Not After : Dec 25 14:00:12 2026 GMT Subject: CN=10b86aab-bd86-4807-9b03-dae87b012ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f5:aa:75:fe:8a:af:25:ee:01:7c:0c:82:47: ee:a6:62:9e:de:d0:32:11:af:88:23:18:ae:13:04: 9f:c4:72:fa:0b:d9:ce:03:59:10:3c:10:ea:ce:a2: dd:6e:f7:e3:da:d2:bd:5b:38:1e:a2:98:24:e9:fb: af:ff:57:0f:03:ee:ba:6a:8f:29:68:3c:09:c5:0f: cc:d5:76:ab:57:ed:80:f8:96:27:2b:9d:d8:d0:2b: 93:83:7a:76:b5:2b:5e:dc:7e:6b:d6:b1:17:4a:88: 67:f6:38:95:fd:45:31:fe:04:df:9e:25:6d:09:8a: 98:f2:03:58:8c:e0:27:6a:23:b7:7f:ea:0e:8a:5c: a7:f3:b6:68:7b:6c:d0:ae:d3:0b:29:9b:01:00:ed: c8:34:6c:9f:12:1e:15:ec:d3:38:f1:2b:97:08:a2: ff:27:a6:34:ea:45:2f:bb:98:43:d7:55:d7:1d:61: 65:39:77:c2:77:cc:a6:14:00:18:02:1d:ed:96:71: 81:b9:46:91:f2:ed:50:47:23:45:f3:03:0c:fc:4f: 84:20:3c:41:c9:cd:5c:12:43:32:ee:d3:4f:cd:d5: 45:e1:18:94:66:11:ea:dc:f2:09:8a:dd:98:bd:95: 71:ec:70:0e:d0:ed:a4:a8:e0:0a:72:c2:a5:82:a4: 6f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:A3:85:A4:EF:14:E6:AC:1E:C8:4C:BE:73:49:32:8F:F5:13:3D:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/4d738785-e955-30d1-8b46-2d1e1b1115a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.crl X509v3 Authority Key Identifier: keyid:62:39:8D:CB:D2:3A:1C:06:4A:D4:6F:96:C8:CC:02:3A:93:C3:15:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer sbgp-ipAddrBlock: critical IPv4: 144.126.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:11:de:70:45:32:b9:91:4e:73:f1:ae:97:e0:aa:92:f0:8d: b0:5f:d5:46:5e:f7:91:90:ea:4b:1a:fe:5d:02:e7:1e:71:d9: 8b:fa:ea:df:85:61:aa:1c:de:cd:42:b0:e9:5a:62:a5:1d:af: 90:11:dc:04:5e:4a:d1:50:0e:c9:5a:b8:83:03:e3:26:dd:d9: d4:1b:a4:5f:e2:6d:63:e9:ec:25:1b:bd:ad:b3:74:86:c5:bc: dd:c3:3c:48:1a:c4:30:67:f1:9b:78:04:5d:2d:70:ae:17:7e: 76:f7:ed:7c:ec:75:fe:1f:f5:e5:ec:f7:df:7f:f7:e6:22:2f: 1f:78:dd:bd:4a:fd:da:18:dc:a7:ae:d2:a3:26:c0:a4:df:fd: da:df:ea:02:55:2d:5c:d0:3a:be:f0:95:c7:cc:da:df:0f:e1: 86:6a:ff:cb:9a:ee:ab:4e:35:ae:13:c3:09:b5:28:74:c8:77: a4:d2:09:f5:24:ec:ef:ff:54:62:12:54:d5:e6:e8:17:b5:66: 6f:61:1e:8e:80:cb:8e:3e:ce:60:51:af:38:28:bd:cb:3a:78: 52:b7:61:8e:f4:5a:37:e9:71:10:0a:70:51:89:ce:8a:c5:95: 3c:48:ea:07:51:e5:0d:c2:b7:83:e8:ac:24:fb:f4:dc:2e:c0: 58:01:52:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Noo54gpBUM8IiakAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE1ZTgxNGUtMGFiOC00MjU3LThjMzktNDA5MWNiM2Jl MjY5MB4XDTI2MDkyNjEzMDAxMloXDTI2MTIyNTE0MDAxMlowLzEtMCsGA1UEAxMk MTBiODZhYWItYmQ4Ni00ODA3LTliMDMtZGFlODdiMDEyZWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/Wqdf6KryXuAXwMgkfupmKe3tAyEa+IIxiu EwSfxHL6C9nOA1kQPBDqzqLdbvfj2tK9Wzgeopgk6fuv/1cPA+66ao8paDwJxQ/M 1XarV+2A+JYnK53Y0CuTg3p2tSte3H5r1rEXSohn9jiV/UUx/gTfniVtCYqY8gNY jOAnaiO3f+oOilyn87Zoe2zQrtMLKZsBAO3INGyfEh4V7NM48SuXCKL/J6Y06kUv u5hD11XXHWFlOXfCd8ymFAAYAh3tlnGBuUaR8u1QRyNF8wMM/E+EIDxByc1cEkMy 7tNPzdVF4RiUZhHq3PIJit2YvZVx7HAO0O2kqOAKcsKlgqRvhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGjhaTvFOasHshMvnNJMo/1Ez2AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iYTVl ODE0ZS0wYWI4LTQyNTctOGMzOS00MDkxY2IzYmUyNjkvNGQ3Mzg3ODUtZTk1NS0z MGQxLThiNDYtMmQxZTFiMTExNWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYmE1ZTgxNGUtMGFiOC00MjU3LThj MzktNDA5MWNiM2JlMjY5L2JhNWU4MTRlLTBhYjgtNDI1Ny04YzM5LTQwOTFjYjNi ZTI2OS5jcmwwHwYDVR0jBBgwFoAUYjmNy9I6HAZK1G+WyMwCOpPDFSYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iYTVlODE0ZS0wYWI4LTQyNTctOGMzOS00MDkx Y2IzYmUyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFkH6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUR3nBFMrmRTnPxrpfgqpLwjbBf1UZe95GQ6ksa/l0C5x5x2Yv66t+F Yaoc3s1CsOlaYqUdr5AR3AReStFQDslauIMD4ybd2dQbpF/ibWPp7CUbva2zdIbF vN3DPEgaxDBn8Zt4BF0tcK4Xfnb37Xzsdf4f9eXs999/9+YiLx943b1K/doY3Keu 0qMmwKTf/drf6gJVLVzQOr7wlcfM2t8P4YZq/8ua7qtONa4Twwm1KHTId6TSCfUk 7O//VGISVNXm6Be1Zm9hHo6Ay44+zmBRrzgovcs6eFK3YY70WjfpcRAKcFGJzorF lTxI6gdR5Q3Ct4PorCT79NwuwFgBUkY= -----END CERTIFICATE-----Generated at Fri Oct 23 06:43:40 2026 by rpki-client