$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/89432b97-f93e-31f3-9ea4-c1fbc2aa2b26.roa File: 89432b97-f93e-31f3-9ea4-c1fbc2aa2b26.roa (raw, json) Hash identifier: Ge5XbnG9ZRJFRxNNCR4X1ie9JetU2sk5R0sJGbXtlcg= Subject key identifier: 74:D5:E0:8A:00:ED:38:F9:B0:99:C4:48:04:F2:D7:36:66:40:01:27 Certificate issuer: /CN=ba5e814e-0ab8-4257-8c39-4091cb3be269 Certificate serial: 010D0C9F4328584F078E577D0C5730702FDFC744 Authority key identifier: 62:39:8D:CB:D2:3A:1C:06:4A:D4:6F:96:C8:CC:02:3A:93:C3:15:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/89432b97-f93e-31f3-9ea4-c1fbc2aa2b26.roa Signing time: Tue 01 Sep 2026 10:32:55 +0000 ROA not before: Tue 01 Sep 2026 10:32:55 +0000 ROA not after: Mon 30 Nov 2026 11:32:55 +0000 asID: 40021 IP address blocks: 209.126.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:07:8e:57:7d:0c:57:30:70:2f:df:c7:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba5e814e-0ab8-4257-8c39-4091cb3be269 Validity Not Before: Sep 1 10:32:55 2026 GMT Not After : Nov 30 11:32:55 2026 GMT Subject: CN=1cc99739-d8ac-4ff1-b18d-f534ff958d6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a6:69:19:e9:e8:b8:62:58:a0:bf:0f:bd:be: 1a:ff:b6:f0:4e:1a:a3:2d:c1:e8:f6:8c:8d:4a:71: cd:46:a3:d4:3d:e5:ac:c2:41:fd:ef:e6:c7:b1:bd: cd:1e:2d:5e:6a:8f:11:4e:1e:c7:77:c2:fb:c3:ce: 50:c4:ba:22:76:a6:e3:d6:86:c6:d1:f0:9a:6c:f6: ed:b2:fd:e3:fc:26:4f:fc:a7:6d:c9:32:2e:14:c9: 01:bd:8b:6e:a6:cf:d4:7f:70:5a:0c:b7:c1:c7:cc: 7b:95:00:ba:7f:74:29:49:0a:e1:cd:3b:d9:24:f9: 8e:9f:e4:ac:0c:be:16:18:22:0f:77:4d:89:86:ae: 64:c9:f5:e4:04:27:28:f2:55:bb:fd:6f:04:37:19: 36:43:f2:b6:77:7a:2f:27:d0:fb:01:0c:0d:9b:e8: ca:c0:6a:4d:b9:35:cf:f7:77:5a:79:4d:fc:e0:e7: ea:55:6e:75:34:f1:9e:18:e2:2e:cd:f9:10:8e:af: 16:cd:7d:0d:ad:39:7f:ed:5c:5f:92:e1:ae:43:f0: b3:ef:80:88:92:2c:ff:98:7d:9d:51:78:1c:9b:b0: db:9b:12:07:8a:77:00:d2:0f:d8:d6:ee:41:af:97: 05:68:66:f4:80:84:3c:ed:4b:10:b4:e5:fb:80:dc: 98:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D5:E0:8A:00:ED:38:F9:B0:99:C4:48:04:F2:D7:36:66:40:01:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/89432b97-f93e-31f3-9ea4-c1fbc2aa2b26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.crl X509v3 Authority Key Identifier: keyid:62:39:8D:CB:D2:3A:1C:06:4A:D4:6F:96:C8:CC:02:3A:93:C3:15:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer sbgp-ipAddrBlock: critical IPv4: 209.126.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:3e:4d:db:13:e8:b0:d5:4b:91:ba:d0:22:0a:7c:c6:5b:2a: 5b:f1:39:70:ff:fa:9f:93:71:0e:c1:29:70:f3:9e:1d:d4:fa: 98:4d:76:c8:fc:52:fb:b9:9d:f0:09:6f:e7:63:4a:f5:d7:0b: bf:c0:38:66:37:61:ea:95:1f:36:e6:d1:79:d6:5e:b0:f9:77: e6:d9:a8:d9:3a:fb:00:53:c2:19:3e:57:26:16:32:c3:04:eb: ed:97:2a:ec:a2:05:60:51:c8:d5:1a:cc:e2:15:f1:60:32:a2: 22:c9:61:6b:fd:e5:f7:da:e7:3d:13:5e:a6:54:08:7b:c0:08: 1e:ba:e6:3f:59:14:09:33:50:01:3d:af:ce:fc:54:e9:12:0a: eb:28:13:44:e2:0f:20:2c:6a:c3:5b:04:05:45:91:2a:1c:e7: a7:8f:56:8a:60:57:60:61:d0:4f:73:71:0f:09:98:c5:34:3b: d5:eb:73:88:89:83:12:83:a9:08:c1:a7:90:79:21:1b:b3:e7: 76:49:3b:01:b8:20:50:e2:db:da:5a:44:cb:28:ab:11:07:ce: 9c:a3:3f:0e:23:19:98:72:f8:a4:2b:2a:81:b1:5b:74:07:6a: 2f:70:5e:bf:65:71:43:00:7e:c3:24:ad:9e:15:80:4b:f0:ca: 3d:28:8a:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Hjld9DFcwcC/fx0QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE1ZTgxNGUtMGFiOC00MjU3LThjMzktNDA5MWNiM2Jl MjY5MB4XDTI2MDkwMTEwMzI1NVoXDTI2MTEzMDExMzI1NVowLzEtMCsGA1UEAxMk MWNjOTk3MzktZDhhYy00ZmYxLWIxOGQtZjUzNGZmOTU4ZDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6ZpGenouGJYoL8Pvb4a/7bwThqjLcHo9oyN SnHNRqPUPeWswkH97+bHsb3NHi1eao8RTh7Hd8L7w85QxLoidqbj1obG0fCabPbt sv3j/CZP/KdtyTIuFMkBvYtups/Uf3BaDLfBx8x7lQC6f3QpSQrhzTvZJPmOn+Ss DL4WGCIPd02Jhq5kyfXkBCco8lW7/W8ENxk2Q/K2d3ovJ9D7AQwNm+jKwGpNuTXP 93daeU384OfqVW51NPGeGOIuzfkQjq8WzX0NrTl/7VxfkuGuQ/Cz74CIkiz/mH2d UXgcm7DbmxIHincA0g/Y1u5Br5cFaGb0gIQ87UsQtOX7gNyYlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTV4IoA7Tj5sJnESATy1zZmQAEnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iYTVl ODE0ZS0wYWI4LTQyNTctOGMzOS00MDkxY2IzYmUyNjkvODk0MzJiOTctZjkzZS0z MWYzLTllYTQtYzFmYmMyYWEyYjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYmE1ZTgxNGUtMGFiOC00MjU3LThj MzktNDA5MWNiM2JlMjY5L2JhNWU4MTRlLTBhYjgtNDI1Ny04YzM5LTQwOTFjYjNi ZTI2OS5jcmwwHwYDVR0jBBgwFoAUYjmNy9I6HAZK1G+WyMwCOpPDFSYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iYTVlODE0ZS0wYWI4LTQyNTctOGMzOS00MDkx Y2IzYmUyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0X5PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMs+TdsT6LDVS5G60CIKfMZbKlvxOXD/+p+TcQ7BKXDznh3U+phNdsj8 Uvu5nfAJb+djSvXXC7/AOGY3YeqVHzbm0XnWXrD5d+bZqNk6+wBTwhk+VyYWMsME 6+2XKuyiBWBRyNUazOIV8WAyoiLJYWv95ffa5z0TXqZUCHvACB665j9ZFAkzUAE9 r878VOkSCusoE0TiDyAsasNbBAVFkSoc56ePVopgV2Bh0E9zcQ8JmMU0O9Xrc4iJ gxKDqQjBp5B5IRuz53ZJOwG4IFDi29paRMsoqxEHzpyjPw4jGZhy+KQrKoGxW3QH ai9wXr9lcUMAfsMkrZ4VgEvwyj0oimQ= -----END CERTIFICATE-----Generated at Fri Sep 4 20:34:53 2026 by rpki-client