$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/fca9ab2d-e317-33ae-8046-0add45109e4a.roa File: fca9ab2d-e317-33ae-8046-0add45109e4a.roa (raw, json) Hash identifier: 57D3rbbouXw+vYWwGeb4hYwJmeUQFWwRHf7oqL4B+uQ= Subject key identifier: 3A:A7:B6:AC:C2:6C:AF:16:3A:09:25:B4:CC:AC:BD:3F:B9:51:8A:20 Certificate issuer: /CN=ba5e814e-0ab8-4257-8c39-4091cb3be269 Certificate serial: 010D0C9F4328584F078EC1F339523B1DF3343800 Authority key identifier: 62:39:8D:CB:D2:3A:1C:06:4A:D4:6F:96:C8:CC:02:3A:93:C3:15:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/fca9ab2d-e317-33ae-8046-0add45109e4a.roa Signing time: Tue 01 Sep 2026 10:33:45 +0000 ROA not before: Tue 01 Sep 2026 10:33:45 +0000 ROA not after: Mon 30 Nov 2026 11:33:45 +0000 asID: 40021 IP address blocks: 209.145.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:07:8e:c1:f3:39:52:3b:1d:f3:34:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba5e814e-0ab8-4257-8c39-4091cb3be269 Validity Not Before: Sep 1 10:33:45 2026 GMT Not After : Nov 30 11:33:45 2026 GMT Subject: CN=5d2396b7-30d0-431d-86ce-ab4a23ed9c9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4f:6c:49:9e:94:98:b6:af:cf:e3:64:2c:96: 2b:a0:bc:8a:40:6f:ed:61:4a:7c:74:88:af:da:f4: 04:9f:ab:fc:12:c6:96:df:ef:3e:59:bf:b6:9d:88: 6d:a9:d1:ec:00:83:1a:45:13:78:62:75:cf:8f:a0: c1:62:c7:45:4c:78:99:75:c6:69:b8:a0:72:62:94: 6a:19:2b:81:b4:41:01:5e:06:ba:74:5e:fe:b8:87: 44:5f:52:9d:88:12:9b:2f:cb:ce:21:e5:2b:54:6d: c5:5a:11:fa:43:57:ce:98:09:63:9e:f6:5b:c0:07: cd:67:3a:2a:ff:66:d1:6c:ac:7e:bd:8c:a7:fa:ee: 23:a3:42:f1:78:d6:71:64:7e:a3:f2:ba:ad:ac:90: aa:a3:8f:ab:92:6f:91:a8:a6:11:fb:57:9c:dd:da: c2:78:d2:6f:d5:f1:5c:43:6f:37:3f:37:56:41:e2: 43:8f:3b:54:d9:0e:14:11:71:4b:3f:35:70:bf:f0: 90:06:7a:8e:74:b7:ff:a7:70:e4:01:07:7e:12:be: d8:4b:37:7e:85:4e:92:77:0e:00:8d:da:3d:74:d0: da:f1:e1:a0:11:22:ed:2c:40:03:8d:06:2c:04:63: 52:84:e8:9b:00:38:3c:6a:90:3e:d2:cb:ab:b1:b0: 6f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A7:B6:AC:C2:6C:AF:16:3A:09:25:B4:CC:AC:BD:3F:B9:51:8A:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/fca9ab2d-e317-33ae-8046-0add45109e4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.crl X509v3 Authority Key Identifier: keyid:62:39:8D:CB:D2:3A:1C:06:4A:D4:6F:96:C8:CC:02:3A:93:C3:15:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer sbgp-ipAddrBlock: critical IPv4: 209.145.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:37:c1:b6:7c:d3:2d:18:cc:33:2e:cf:7b:5f:aa:80:b1:c5: 12:b7:43:60:69:c6:bc:3d:ab:12:ed:b1:eb:7d:e6:20:15:bb: 8b:46:74:2b:a1:70:3c:67:46:6f:cf:d5:cf:77:20:4c:c5:cb: c3:e0:65:51:26:05:f0:5a:4a:b8:f6:21:c8:77:45:95:a5:60: fb:54:cc:89:18:5f:fb:06:c0:da:bc:a8:2c:9b:44:c1:1d:03: c0:cb:f7:70:63:8c:c7:18:c5:9e:ab:0f:53:50:76:11:90:c3: 52:8d:7e:ee:5a:8d:9b:55:75:25:38:bb:d1:1d:ac:ce:8f:69: fb:72:79:6d:b8:b8:7d:0e:0e:84:fa:a8:a3:71:6c:ba:7b:06: 64:4b:98:35:e5:a7:2b:b4:5b:6c:ca:ad:53:e4:0b:73:94:9b: 27:1d:78:03:d6:1e:03:eb:24:70:f4:8a:24:44:64:0e:ae:4f: 90:50:af:19:8a:f0:b7:2f:db:72:51:cb:ab:67:0e:46:5f:48: 30:05:57:0f:a2:95:f0:ae:b3:00:fa:e9:47:ab:76:54:b0:5a: 48:78:54:68:fb:02:95:02:87:d4:ef:da:60:8e:ec:74:fa:66: cd:cb:8d:b5:1f:c2:28:78:27:a4:99:55:b8:cb:2a:ee:fa:65: 17:7c:67:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8HjsHzOVI7HfM0OAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE1ZTgxNGUtMGFiOC00MjU3LThjMzktNDA5MWNiM2Jl MjY5MB4XDTI2MDkwMTEwMzM0NVoXDTI2MTEzMDExMzM0NVowLzEtMCsGA1UEAxMk NWQyMzk2YjctMzBkMC00MzFkLTg2Y2UtYWI0YTIzZWQ5YzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtU9sSZ6UmLavz+NkLJYroLyKQG/tYUp8dIiv 2vQEn6v8EsaW3+8+Wb+2nYhtqdHsAIMaRRN4YnXPj6DBYsdFTHiZdcZpuKByYpRq GSuBtEEBXga6dF7+uIdEX1KdiBKbL8vOIeUrVG3FWhH6Q1fOmAljnvZbwAfNZzoq /2bRbKx+vYyn+u4jo0LxeNZxZH6j8rqtrJCqo4+rkm+RqKYR+1ec3drCeNJv1fFc Q283PzdWQeJDjztU2Q4UEXFLPzVwv/CQBnqOdLf/p3DkAQd+Er7YSzd+hU6Sdw4A jdo9dNDa8eGgESLtLEADjQYsBGNShOibADg8apA+0sursbBv0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqntqzCbK8WOgkltMysvT+5UYogMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iYTVl ODE0ZS0wYWI4LTQyNTctOGMzOS00MDkxY2IzYmUyNjkvZmNhOWFiMmQtZTMxNy0z M2FlLTgwNDYtMGFkZDQ1MTA5ZTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYmE1ZTgxNGUtMGFiOC00MjU3LThj MzktNDA5MWNiM2JlMjY5L2JhNWU4MTRlLTBhYjgtNDI1Ny04YzM5LTQwOTFjYjNi ZTI2OS5jcmwwHwYDVR0jBBgwFoAUYjmNy9I6HAZK1G+WyMwCOpPDFSYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iYTVlODE0ZS0wYWI4LTQyNTctOGMzOS00MDkx Y2IzYmUyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0ZEwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADA3wbZ80y0YzDMuz3tfqoCxxRK3Q2Bpxrw9qxLtset95iAVu4tGdCuh cDxnRm/P1c93IEzFy8PgZVEmBfBaSrj2Ich3RZWlYPtUzIkYX/sGwNq8qCybRMEd A8DL93BjjMcYxZ6rD1NQdhGQw1KNfu5ajZtVdSU4u9EdrM6PaftyeW24uH0ODoT6 qKNxbLp7BmRLmDXlpyu0W2zKrVPkC3OUmycdeAPWHgPrJHD0iiREZA6uT5BQrxmK 8Lcv23JRy6tnDkZfSDAFVw+ilfCuswD66UerdlSwWkh4VGj7ApUCh9Tv2mCO7HT6 Zs3LjbUfwih4J6SZVbjLKu76ZRd8Zx4= -----END CERTIFICATE-----Generated at Fri Sep 4 20:34:45 2026 by rpki-client