$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0ba53b62-4123-4f79-8a0b-0f01b35e5b8a/b8456ac7-b2e2-3ed2-bda6-d9318e9e2537.roa File: b8456ac7-b2e2-3ed2-bda6-d9318e9e2537.roa (raw, json) Hash identifier: VAn33YYjpPNH2gFDKsxyA16hMnMK9J74y4fqIBCLkEU= Subject key identifier: 47:D5:8E:1F:48:93:ED:0A:8A:6E:65:B1:CD:D3:2D:12:BF:FC:08:2E Certificate issuer: /CN=0ba53b62-4123-4f79-8a0b-0f01b35e5b8a Certificate serial: 010D0C9F4328584F4972B2511DE88AB24C890460 Authority key identifier: 27:01:2F:2F:C2:0D:BA:E4:FB:5E:3D:00:15:44:FA:95:C4:51:4E:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0ba53b62-4123-4f79-8a0b-0f01b35e5b8a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0ba53b62-4123-4f79-8a0b-0f01b35e5b8a/b8456ac7-b2e2-3ed2-bda6-d9318e9e2537.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 62043 IP address blocks: 205.173.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0ba53b62-4123-4f79-8a0b-0f01b35e5b8a/0ba53b62-4123-4f79-8a0b-0f01b35e5b8a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0ba53b62-4123-4f79-8a0b-0f01b35e5b8a/0ba53b62-4123-4f79-8a0b-0f01b35e5b8a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0ba53b62-4123-4f79-8a0b-0f01b35e5b8a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:b2:51:1d:e8:8a:b2:4c:89:04:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ba53b62-4123-4f79-8a0b-0f01b35e5b8a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4c1f0042-346f-45d1-8079-041cc41267a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f7:79:a9:e7:fa:61:a3:59:b8:2a:b4:83:56: 93:fa:fb:8e:85:f5:e6:66:a8:ca:a9:b6:b3:0b:4e: eb:3d:c5:0c:af:b2:0e:27:aa:23:83:dd:21:ba:7a: fb:d9:20:07:7e:40:fd:e3:8b:a8:89:22:fb:46:b1: 65:16:01:63:8b:24:03:e4:6e:e4:e8:0f:a8:68:cd: f8:c0:36:8a:3f:25:14:34:eb:15:68:f0:b1:13:e6: 21:df:a5:aa:51:9d:ac:63:2d:85:6c:e1:97:ce:26: 30:8a:ab:26:ea:83:e6:1b:81:68:61:6e:ca:91:ac: 5f:1c:1b:fc:0c:db:56:94:53:3e:42:59:c5:78:bc: f8:f3:61:29:f2:e0:4c:54:d6:76:57:f5:32:7a:ce: 80:7f:ac:b1:ff:6a:67:ae:fd:5a:98:e4:2d:2e:a8: 62:0b:35:55:69:12:df:68:f1:52:5c:a6:40:f1:e8: 49:d5:de:dd:3b:b1:14:26:4e:96:39:95:fa:e7:a9: 25:4c:43:94:6b:18:4a:40:63:75:f2:67:ac:c9:16: 57:36:da:62:4e:d6:58:6a:5a:20:d7:ad:f3:98:c7: c4:2a:19:17:8c:8b:a8:44:0e:1c:ad:e7:f1:05:fe: 82:c7:3c:e8:08:1d:a8:82:2f:3e:9e:92:7d:23:95: 81:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D5:8E:1F:48:93:ED:0A:8A:6E:65:B1:CD:D3:2D:12:BF:FC:08:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0ba53b62-4123-4f79-8a0b-0f01b35e5b8a/b8456ac7-b2e2-3ed2-bda6-d9318e9e2537.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0ba53b62-4123-4f79-8a0b-0f01b35e5b8a/0ba53b62-4123-4f79-8a0b-0f01b35e5b8a.crl X509v3 Authority Key Identifier: keyid:27:01:2F:2F:C2:0D:BA:E4:FB:5E:3D:00:15:44:FA:95:C4:51:4E:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0ba53b62-4123-4f79-8a0b-0f01b35e5b8a.cer sbgp-ipAddrBlock: critical IPv4: 205.173.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:56:0e:ab:07:77:b3:e7:d4:ed:2a:df:2e:a5:24:14:4e:41: c8:95:f9:f1:4c:34:40:7a:fd:0c:28:9b:d2:9f:f8:db:6c:91: 5f:3b:7c:a1:6a:cd:24:69:1a:10:86:da:3b:be:00:1c:eb:79: 9a:a7:67:69:ff:94:0a:fc:cc:69:8b:6a:79:fe:93:19:70:20: 76:dc:b0:56:b1:cf:09:8a:ad:da:5f:14:ba:da:06:59:2d:27: 53:58:0b:5d:9b:55:a1:c0:45:69:55:66:97:ba:f3:01:51:dd: 32:d2:e0:ad:61:44:52:e4:76:1f:ca:e5:c2:6a:d7:5f:89:8a: 8d:cf:ec:6f:bc:f5:31:c1:f2:8f:d0:64:7e:4e:22:2a:a4:02: 35:ff:e3:e8:cc:a9:b7:b1:70:64:14:d7:cf:37:5d:29:4f:3b: 28:4a:f1:28:0c:ff:fa:d3:a6:7d:f9:22:22:09:3c:ae:f5:e3: 23:f9:7e:87:8d:d7:ab:ff:20:23:9c:56:dc:02:ad:3a:19:b9: 86:14:e4:28:16:3c:a2:6b:7b:7e:08:01:3e:61:0c:4c:04:80: 9d:4a:bc:f1:ab:ac:1d:bb:f0:63:b1:b5:75:54:f1:50:eb:bf: e2:af:89:ab:bb:ba:b8:2f:97:9c:ef:7d:80:a4:d0:d6:50:77: f1:0c:2a:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcrJRHeiKskyJBGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGJhNTNiNjItNDEyMy00Zjc5LThhMGItMGYwMWIzNWU1 YjhhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGMxZjAwNDItMzQ2Zi00NWQxLTgwNzktMDQxY2M0MTI2N2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fd5qef6YaNZuCq0g1aT+vuOhfXmZqjKqbaz C07rPcUMr7IOJ6ojg90hunr72SAHfkD944uoiSL7RrFlFgFjiyQD5G7k6A+oaM34 wDaKPyUUNOsVaPCxE+Yh36WqUZ2sYy2FbOGXziYwiqsm6oPmG4FoYW7KkaxfHBv8 DNtWlFM+QlnFeLz482Ep8uBMVNZ2V/Uyes6Af6yx/2pnrv1amOQtLqhiCzVVaRLf aPFSXKZA8ehJ1d7dO7EUJk6WOZX656klTEOUaxhKQGN18mesyRZXNtpiTtZYalog 163zmMfEKhkXjIuoRA4crefxBf6CxzzoCB2ogi8+npJ9I5WBBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfVjh9Ik+0Kim5lsc3TLRK//AguMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8wYmE1 M2I2Mi00MTIzLTRmNzktOGEwYi0wZjAxYjM1ZTViOGEvYjg0NTZhYzctYjJlMi0z ZWQyLWJkYTYtZDkzMThlOWUyNTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMGJhNTNiNjItNDEyMy00Zjc5LThh MGItMGYwMWIzNWU1YjhhLzBiYTUzYjYyLTQxMjMtNGY3OS04YTBiLTBmMDFiMzVl NWI4YS5jcmwwHwYDVR0jBBgwFoAUJwEvL8INuuT7Xj0AFUT6lcRRTrUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8wYmE1M2I2Mi00MTIzLTRmNzktOGEwYi0wZjAx YjM1ZTViOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAza1HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdWDqsHd7Pn1O0q3y6lJBROQciV+fFMNEB6/Qwom9Kf+NtskV87fKFq zSRpGhCG2ju+ABzreZqnZ2n/lAr8zGmLann+kxlwIHbcsFaxzwmKrdpfFLraBlkt J1NYC12bVaHARWlVZpe68wFR3TLS4K1hRFLkdh/K5cJq11+Jio3P7G+89THB8o/Q ZH5OIiqkAjX/4+jMqbexcGQU1883XSlPOyhK8SgM//rTpn35IiIJPK714yP5foeN 16v/ICOcVtwCrToZuYYU5CgWPKJre34IAT5hDEwEgJ1KvPGrrB278GOxtXVU8VDr v+Kviau7urgvl5zvfYCk0NZQd/EMKh0= -----END CERTIFICATE-----Generated at Tue Sep 29 11:15:59 2026 by rpki-client