$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/dbbca12b-29d9-35de-b289-6aa7a360a9b5.roa File: dbbca12b-29d9-35de-b289-6aa7a360a9b5.roa (raw, json) Hash identifier: QrSpdygeU5MOVzKaPh/N6ntV2uH/7KflpGXhRihVdc8= Subject key identifier: C6:39:03:BC:6F:81:CC:55:54:A8:92:49:17:53:91:C4:1C:D5:90:3D Certificate issuer: /CN=ba5e814e-0ab8-4257-8c39-4091cb3be269 Certificate serial: 010D0C9F4328584F078E88C81C4EA7383161BA80 Authority key identifier: 62:39:8D:CB:D2:3A:1C:06:4A:D4:6F:96:C8:CC:02:3A:93:C3:15:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/dbbca12b-29d9-35de-b289-6aa7a360a9b5.roa Signing time: Tue 01 Sep 2026 10:33:18 +0000 ROA not before: Tue 01 Sep 2026 10:33:18 +0000 ROA not after: Mon 30 Nov 2026 11:33:18 +0000 asID: 40021 IP address blocks: 209.126.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:07:8e:88:c8:1c:4e:a7:38:31:61:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba5e814e-0ab8-4257-8c39-4091cb3be269 Validity Not Before: Sep 1 10:33:18 2026 GMT Not After : Nov 30 11:33:18 2026 GMT Subject: CN=4abf20d7-c0d0-4be1-8027-f31636b88ca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e5:b9:43:2d:88:f1:6f:5a:fb:14:6f:90:e8: 5a:62:bd:85:b8:55:f6:49:93:a6:b8:c8:96:95:47: 30:e8:6c:46:37:4c:aa:67:a7:33:95:bd:44:1a:e1: 7e:ff:2b:3a:ad:8c:ea:f5:b9:e4:97:0c:22:8b:58: 79:bb:d8:38:5b:1a:33:22:cb:a8:64:1c:c6:67:c9: 9c:bc:ee:f1:74:8e:5f:0e:1e:2f:71:86:5e:af:0e: de:3b:12:f8:a3:72:aa:1e:91:13:d3:70:c6:c4:38: b2:8d:02:d2:6d:60:21:fb:79:39:10:a6:9b:65:98: bf:a2:8f:11:01:31:27:9e:ff:3f:c6:39:a1:f2:eb: af:7a:54:f2:05:11:f3:d7:d6:0b:76:ab:86:0f:ef: 8b:2f:2f:f1:a8:b8:b4:0f:c1:21:31:33:1a:19:81: de:d9:3f:2a:08:dc:e1:d3:15:72:ab:1e:69:33:82: fc:c2:e7:a4:90:e8:08:8d:a0:40:f3:d6:73:cd:b6: 13:d5:a4:e6:b9:ba:cd:30:8d:e2:d0:23:a1:52:1e: 91:95:9a:3b:50:81:d4:94:14:60:95:2f:7e:96:14: 0e:bb:df:26:5e:b6:bc:ae:73:50:13:b2:03:be:42: aa:c9:8c:5a:60:64:9b:83:37:4c:4d:29:c7:98:bf: 24:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:39:03:BC:6F:81:CC:55:54:A8:92:49:17:53:91:C4:1C:D5:90:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/dbbca12b-29d9-35de-b289-6aa7a360a9b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.crl X509v3 Authority Key Identifier: keyid:62:39:8D:CB:D2:3A:1C:06:4A:D4:6F:96:C8:CC:02:3A:93:C3:15:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer sbgp-ipAddrBlock: critical IPv4: 209.126.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:f2:29:56:70:e7:3d:07:93:b1:b7:35:97:2d:5e:99:79:49: aa:c5:aa:c4:59:c1:22:1f:55:19:e1:64:fe:91:31:bc:e9:16: 0d:02:87:fc:04:4c:a5:ae:00:ae:7b:b8:3a:14:3b:82:13:61: ce:14:b9:b1:4e:35:a3:dd:0a:86:f8:f9:75:f3:5a:a2:dd:38: ae:e6:e3:16:45:5a:44:3c:f3:1f:34:96:8e:34:45:e3:09:f9: 15:9a:ca:1a:f9:0a:05:9b:ef:82:bb:e6:8d:7f:6c:d3:4b:48: 71:fb:c1:65:5d:bb:9c:99:fa:f4:c5:f3:ea:ca:e9:7c:7e:46: ae:9f:f7:e1:2e:67:d6:ee:78:b8:e1:37:18:71:1b:32:00:1f: 0e:f4:19:b9:05:11:59:b0:a7:27:64:d5:21:e9:e5:81:7e:c3: 43:9b:84:74:8c:b1:e8:51:f8:0c:87:d9:00:2a:32:f5:18:4d: 78:0c:c6:ac:10:b7:a6:c3:d0:b0:45:7b:4c:03:42:06:31:50: d6:a5:24:58:ac:d0:e3:be:d4:43:a1:b7:7d:34:d4:73:a6:34: d5:26:6b:26:bc:40:2b:5b:fd:a4:0a:5d:14:9e:11:5d:10:a6: 4e:3a:6f:15:07:0e:fb:3e:d8:c8:a6:1f:c1:2f:03:4b:6f:7f: 4f:77:ab:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8HjojIHE6nODFhuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE1ZTgxNGUtMGFiOC00MjU3LThjMzktNDA5MWNiM2Jl MjY5MB4XDTI2MDkwMTEwMzMxOFoXDTI2MTEzMDExMzMxOFowLzEtMCsGA1UEAxMk NGFiZjIwZDctYzBkMC00YmUxLTgwMjctZjMxNjM2Yjg4Y2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+W5Qy2I8W9a+xRvkOhaYr2FuFX2SZOmuMiW lUcw6GxGN0yqZ6czlb1EGuF+/ys6rYzq9bnklwwii1h5u9g4WxozIsuoZBzGZ8mc vO7xdI5fDh4vcYZerw7eOxL4o3KqHpET03DGxDiyjQLSbWAh+3k5EKabZZi/oo8R ATEnnv8/xjmh8uuvelTyBRHz19YLdquGD++LLy/xqLi0D8EhMTMaGYHe2T8qCNzh 0xVyqx5pM4L8wuekkOgIjaBA89ZzzbYT1aTmubrNMI3i0COhUh6RlZo7UIHUlBRg lS9+lhQOu98mXra8rnNQE7IDvkKqyYxaYGSbgzdMTSnHmL8keQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMY5A7xvgcxVVKiSSRdTkcQc1ZA9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iYTVl ODE0ZS0wYWI4LTQyNTctOGMzOS00MDkxY2IzYmUyNjkvZGJiY2ExMmItMjlkOS0z NWRlLWIyODktNmFhN2EzNjBhOWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYmE1ZTgxNGUtMGFiOC00MjU3LThj MzktNDA5MWNiM2JlMjY5L2JhNWU4MTRlLTBhYjgtNDI1Ny04YzM5LTQwOTFjYjNi ZTI2OS5jcmwwHwYDVR0jBBgwFoAUYjmNy9I6HAZK1G+WyMwCOpPDFSYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iYTVlODE0ZS0wYWI4LTQyNTctOGMzOS00MDkx Y2IzYmUyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0X5QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLyKVZw5z0Hk7G3NZctXpl5SarFqsRZwSIfVRnhZP6RMbzpFg0Ch/wE TKWuAK57uDoUO4ITYc4UubFONaPdCob4+XXzWqLdOK7m4xZFWkQ88x80lo40ReMJ +RWayhr5CgWb74K75o1/bNNLSHH7wWVdu5yZ+vTF8+rK6Xx+Rq6f9+EuZ9bueLjh NxhxGzIAHw70GbkFEVmwpydk1SHp5YF+w0ObhHSMsehR+AyH2QAqMvUYTXgMxqwQ t6bD0LBFe0wDQgYxUNalJFis0OO+1EOht3001HOmNNUmaya8QCtb/aQKXRSeEV0Q pk46bxUHDvs+2MimH8EvA0tvf093q/8= -----END CERTIFICATE-----Generated at Fri Sep 4 20:34:51 2026 by rpki-client