$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/f247899a-91a8-3624-8aa3-559164c48b7a.roa File: f247899a-91a8-3624-8aa3-559164c48b7a.roa (raw, json) Hash identifier: L+/7MpBgz+eG66/CqtJtdgh59a0z2T/ayu2p6zWvXuo= Subject key identifier: 05:20:48:2A:8D:37:4D:E6:26:C3:F2:E9:58:3C:9A:DE:CA:9F:27:A9 Certificate issuer: /CN=ba5e814e-0ab8-4257-8c39-4091cb3be269 Certificate serial: 010D0C9F4328584F078DBAF60E0F12EDDB693100 Authority key identifier: 62:39:8D:CB:D2:3A:1C:06:4A:D4:6F:96:C8:CC:02:3A:93:C3:15:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/f247899a-91a8-3624-8aa3-559164c48b7a.roa Signing time: Tue 01 Sep 2026 10:31:41 +0000 ROA not before: Tue 01 Sep 2026 10:31:41 +0000 ROA not after: Mon 30 Nov 2026 11:31:41 +0000 asID: 40021 IP address blocks: 209.126.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:07:8d:ba:f6:0e:0f:12:ed:db:69:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba5e814e-0ab8-4257-8c39-4091cb3be269 Validity Not Before: Sep 1 10:31:41 2026 GMT Not After : Nov 30 11:31:41 2026 GMT Subject: CN=fc36d2ae-cf67-4408-a793-3866cc7dd03d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:0f:89:1c:bf:af:21:fb:f6:eb:23:cc:b5:07: 68:e4:cf:9d:6c:ec:12:84:e8:4d:3b:bc:52:ce:73: 39:52:ca:2d:4f:8c:6a:9e:60:b2:34:e3:53:67:2f: ff:2a:17:8b:0c:61:de:d7:9e:e4:5e:72:d6:47:17: 1e:97:d7:19:b2:07:0d:a9:94:62:9f:cb:f0:0d:95: 07:05:15:b7:69:16:44:38:86:14:d9:a9:7e:dc:b0: 48:c2:93:b5:37:75:cb:5f:8a:af:20:5e:ad:5c:a7: 9b:bf:6a:85:9d:db:cc:87:3a:c2:24:66:ec:f2:d4: f3:58:65:4e:01:1a:84:e6:df:3c:07:4d:4d:c0:98: 5d:4e:d4:a5:94:29:87:5f:c8:b9:9e:c1:f7:c0:66: 4c:2f:5a:02:f3:83:b4:a6:9b:44:46:d7:eb:2c:51: 03:b9:99:91:92:cb:aa:af:40:6a:5e:58:41:73:1e: 4e:43:72:1c:6a:15:63:1c:cc:48:a8:2f:75:6e:4a: 7f:a5:b4:c4:9c:20:73:9f:9a:58:dc:9d:c4:50:94: 2c:ab:68:1b:e2:50:fe:b2:3c:6a:25:a5:53:39:4f: 36:51:46:12:f5:07:6d:63:c8:d4:2a:2c:ba:4c:26: 9c:37:e6:f4:42:5c:ec:b6:df:c0:39:eb:e9:86:08: f9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:20:48:2A:8D:37:4D:E6:26:C3:F2:E9:58:3C:9A:DE:CA:9F:27:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/f247899a-91a8-3624-8aa3-559164c48b7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.crl X509v3 Authority Key Identifier: keyid:62:39:8D:CB:D2:3A:1C:06:4A:D4:6F:96:C8:CC:02:3A:93:C3:15:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer sbgp-ipAddrBlock: critical IPv4: 209.126.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:ce:b9:66:c0:9c:a1:dd:5d:a4:0c:ce:68:c4:db:51:98:59: 43:e0:c8:40:07:3a:5a:a3:0d:46:a9:41:bf:8e:aa:a8:99:e6: a3:8a:bb:b6:7c:5d:b4:27:02:38:e2:35:56:94:40:a0:98:82: aa:12:36:54:36:3d:ff:39:f5:32:05:7d:f1:87:9e:75:2e:3d: f3:77:f5:15:97:28:1d:05:a6:4a:e1:27:e9:2d:17:ac:61:39: 7a:f1:ec:20:72:5d:9d:3f:26:d9:82:f5:7e:ca:7d:a4:95:1e: 0c:6d:18:2f:b7:f1:25:c1:62:83:59:22:21:e3:b7:30:a0:54: c2:8a:5a:18:28:df:09:f0:18:af:d0:c0:d9:c3:53:d2:54:12: fa:29:e9:34:0b:85:08:41:3f:8e:b6:bb:ef:cb:6d:30:30:c3: 92:9c:89:95:ef:e7:21:f6:2a:f4:82:0a:6d:42:76:33:e4:24: ac:e2:08:c6:36:26:2a:dd:fc:a5:7c:2b:af:ea:80:ba:a1:90: eb:b2:37:a8:71:4a:94:f5:2e:3f:56:0d:66:fc:a5:7f:03:90: 4a:fc:13:eb:7d:90:e8:70:89:6e:07:69:2d:eb:c6:5f:0c:59: bf:ea:17:1d:ce:52:94:c1:7b:51:68:72:28:be:7d:8e:95:0d: 9f:79:f1:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Hjbr2Dg8S7dtpMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE1ZTgxNGUtMGFiOC00MjU3LThjMzktNDA5MWNiM2Jl MjY5MB4XDTI2MDkwMTEwMzE0MVoXDTI2MTEzMDExMzE0MVowLzEtMCsGA1UEAxMk ZmMzNmQyYWUtY2Y2Ny00NDA4LWE3OTMtMzg2NmNjN2RkMDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjA+JHL+vIfv26yPMtQdo5M+dbOwShOhNO7xS znM5UsotT4xqnmCyNONTZy//KheLDGHe157kXnLWRxcel9cZsgcNqZRin8vwDZUH BRW3aRZEOIYU2al+3LBIwpO1N3XLX4qvIF6tXKebv2qFndvMhzrCJGbs8tTzWGVO ARqE5t88B01NwJhdTtSllCmHX8i5nsH3wGZML1oC84O0pptERtfrLFEDuZmRksuq r0BqXlhBcx5OQ3IcahVjHMxIqC91bkp/pbTEnCBzn5pY3J3EUJQsq2gb4lD+sjxq JaVTOU82UUYS9QdtY8jUKiy6TCacN+b0Qlzstt/AOevphgj5tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUgSCqNN03mJsPy6Vg8mt7KnyepMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iYTVl ODE0ZS0wYWI4LTQyNTctOGMzOS00MDkxY2IzYmUyNjkvZjI0Nzg5OWEtOTFhOC0z NjI0LThhYTMtNTU5MTY0YzQ4YjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYmE1ZTgxNGUtMGFiOC00MjU3LThj MzktNDA5MWNiM2JlMjY5L2JhNWU4MTRlLTBhYjgtNDI1Ny04YzM5LTQwOTFjYjNi ZTI2OS5jcmwwHwYDVR0jBBgwFoAUYjmNy9I6HAZK1G+WyMwCOpPDFSYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iYTVlODE0ZS0wYWI4LTQyNTctOGMzOS00MDkx Y2IzYmUyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0X4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALfOuWbAnKHdXaQMzmjE21GYWUPgyEAHOlqjDUapQb+OqqiZ5qOKu7Z8 XbQnAjjiNVaUQKCYgqoSNlQ2Pf859TIFffGHnnUuPfN39RWXKB0FpkrhJ+ktF6xh OXrx7CByXZ0/JtmC9X7KfaSVHgxtGC+38SXBYoNZIiHjtzCgVMKKWhgo3wnwGK/Q wNnDU9JUEvop6TQLhQhBP462u+/LbTAww5KciZXv5yH2KvSCCm1CdjPkJKziCMY2 Jird/KV8K6/qgLqhkOuyN6hxSpT1Lj9WDWb8pX8DkEr8E+t9kOhwiW4HaS3rxl8M Wb/qFx3OUpTBe1Focii+fY6VDZ958XQ= -----END CERTIFICATE-----Generated at Fri Sep 4 20:34:55 2026 by rpki-client