$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2ed28303-84f8-4ea0-8252-f7ee1f420652/ba85f8b4-11c0-3585-aba6-16731539d07b.roa File: ba85f8b4-11c0-3585-aba6-16731539d07b.roa (raw, json) Hash identifier: vuuPd5cafHdQb1jkX6qNO2wZVxlPqVfskZE04nI4h60= Subject key identifier: 10:3A:82:C8:62:CD:69:83:58:7B:97:61:B9:9F:E6:EC:5A:DF:E0:AA Certificate issuer: /CN=2ed28303-84f8-4ea0-8252-f7ee1f420652 Certificate serial: 010D0C9F4328584F35E7C797EA2A25F7379616C0 Authority key identifier: FB:71:88:7B:CE:A1:D0:B1:66:33:C2:E0:26:DC:9F:B7:15:B1:10:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2ed28303-84f8-4ea0-8252-f7ee1f420652.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2ed28303-84f8-4ea0-8252-f7ee1f420652/ba85f8b4-11c0-3585-aba6-16731539d07b.roa Signing time: Fri 18 Sep 2026 01:00:12 +0000 ROA not before: Fri 18 Sep 2026 01:00:12 +0000 ROA not after: Thu 17 Dec 2026 02:00:12 +0000 asID: 20406 IP address blocks: 204.16.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2ed28303-84f8-4ea0-8252-f7ee1f420652/2ed28303-84f8-4ea0-8252-f7ee1f420652.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2ed28303-84f8-4ea0-8252-f7ee1f420652/2ed28303-84f8-4ea0-8252-f7ee1f420652.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2ed28303-84f8-4ea0-8252-f7ee1f420652.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:35:e7:c7:97:ea:2a:25:f7:37:96:16:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ed28303-84f8-4ea0-8252-f7ee1f420652 Validity Not Before: Sep 18 01:00:12 2026 GMT Not After : Dec 17 02:00:12 2026 GMT Subject: CN=414cb158-91fa-4ddf-9dad-3223d4638cf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:cc:e0:b3:b4:fe:e1:ae:19:60:4e:0f:1b:c5: 28:62:29:e4:b8:80:55:ca:d7:e7:a8:a9:4b:f8:92: 8d:de:4b:26:16:26:c6:2e:81:03:6b:b4:ec:37:c9: cc:1a:ed:ef:3f:3c:29:23:7d:41:62:2b:61:6c:06: f1:c1:58:91:b0:72:d8:3b:9c:f8:8d:13:67:1d:cc: c9:45:b6:84:f4:5c:7f:42:ff:52:04:4f:04:2e:b9: 6b:21:fb:17:2b:3d:93:0a:be:37:78:2f:b0:a3:b6: 0d:01:92:02:a5:d8:5e:81:5e:e3:8b:31:f8:4f:55: 77:a7:23:7f:f1:3b:6c:eb:28:b5:51:b3:4b:a4:96: 7d:c8:9c:ca:a4:55:21:ee:b7:ec:fc:6a:bf:08:d5: c0:5d:16:31:64:ed:18:6d:ef:f5:b7:06:5c:f8:84: 45:c0:e3:7e:52:d4:96:6a:4d:0f:b7:96:a3:08:52: 0b:18:55:fa:a0:f5:1a:fd:22:dd:8f:03:8b:1f:d9: ad:10:e3:4c:60:02:e3:d2:8a:84:ee:e0:15:b2:12: 23:1a:e9:0d:d8:c2:2a:bf:55:0f:f9:6e:17:b9:74: c7:54:02:ba:5a:5f:26:9b:5f:e6:6b:52:7c:eb:53: 9c:6c:81:69:a8:c6:3b:b8:8d:39:4b:ba:cf:35:8c: ad:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3A:82:C8:62:CD:69:83:58:7B:97:61:B9:9F:E6:EC:5A:DF:E0:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2ed28303-84f8-4ea0-8252-f7ee1f420652/ba85f8b4-11c0-3585-aba6-16731539d07b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2ed28303-84f8-4ea0-8252-f7ee1f420652/2ed28303-84f8-4ea0-8252-f7ee1f420652.crl X509v3 Authority Key Identifier: keyid:FB:71:88:7B:CE:A1:D0:B1:66:33:C2:E0:26:DC:9F:B7:15:B1:10:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2ed28303-84f8-4ea0-8252-f7ee1f420652.cer sbgp-ipAddrBlock: critical IPv4: 204.16.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:cb:6a:b3:af:4b:91:8a:a6:3a:70:be:fe:06:de:30:d1:2e: 29:17:e6:bf:51:46:44:32:5b:6f:33:4f:24:c1:c8:74:18:f8: e0:1a:a8:17:f9:35:be:f1:53:a3:d3:b3:e6:03:7e:4d:75:5e: 62:c4:88:c5:bd:18:3d:e0:94:89:ce:29:d2:3d:ad:c7:6b:90: 69:5b:28:21:dc:a7:b6:c8:34:30:e5:64:8b:df:b7:16:66:e9: e9:b5:0e:0b:ca:65:ae:2a:8e:f0:bb:cf:35:80:f8:57:9a:e7: 06:d6:e8:74:a7:2b:56:54:5a:44:d0:92:d5:74:6a:c8:d5:1f: 45:a0:15:24:a4:b7:74:a6:4b:df:93:56:74:b3:16:c2:73:82: ae:fa:82:1d:af:82:ab:06:e9:c2:8a:5b:9b:ab:46:55:8d:45: 1b:e0:5e:d9:a6:98:da:61:7b:80:92:ec:51:43:b7:91:f3:fc: b4:d1:8d:45:00:c2:da:55:95:d8:7a:d1:10:75:aa:0f:a3:ec: 53:19:9c:3e:94:fc:b5:25:ab:81:21:b5:1a:cd:df:ba:7d:b8: 6f:33:cd:90:14:49:5d:ff:ce:5a:ff:25:6f:53:c9:68:9f:8b: 3a:f3:cc:d3:c5:55:7e:9d:1e:80:e9:73:62:f8:77:df:b5:3c: 6a:81:32:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8158eX6iol9zeWFsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmVkMjgzMDMtODRmOC00ZWEwLTgyNTItZjdlZTFmNDIw NjUyMB4XDTI2MDkxODAxMDAxMloXDTI2MTIxNzAyMDAxMlowLzEtMCsGA1UEAxMk NDE0Y2IxNTgtOTFmYS00ZGRmLTlkYWQtMzIyM2Q0NjM4Y2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5szgs7T+4a4ZYE4PG8UoYinkuIBVytfnqKlL +JKN3ksmFibGLoEDa7TsN8nMGu3vPzwpI31BYithbAbxwViRsHLYO5z4jRNnHczJ RbaE9Fx/Qv9SBE8ELrlrIfsXKz2TCr43eC+wo7YNAZICpdhegV7jizH4T1V3pyN/ 8Tts6yi1UbNLpJZ9yJzKpFUh7rfs/Gq/CNXAXRYxZO0Ybe/1twZc+IRFwON+UtSW ak0Pt5ajCFILGFX6oPUa/SLdjwOLH9mtEONMYALj0oqE7uAVshIjGukN2MIqv1UP +W4XuXTHVAK6Wl8mm1/ma1J861OcbIFpqMY7uI05S7rPNYytiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBA6gshizWmDWHuXYbmf5uxa3+CqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yZWQy ODMwMy04NGY4LTRlYTAtODI1Mi1mN2VlMWY0MjA2NTIvYmE4NWY4YjQtMTFjMC0z NTg1LWFiYTYtMTY3MzE1MzlkMDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMmVkMjgzMDMtODRmOC00ZWEwLTgy NTItZjdlZTFmNDIwNjUyLzJlZDI4MzAzLTg0ZjgtNGVhMC04MjUyLWY3ZWUxZjQy MDY1Mi5jcmwwHwYDVR0jBBgwFoAU+3GIe86h0LFmM8LgJtyftxWxEDgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yZWQyODMwMy04NGY4LTRlYTAtODI1Mi1mN2Vl MWY0MjA2NTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzBAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJnLarOvS5GKpjpwvv4G3jDRLikX5r9RRkQyW28zTyTByHQY+OAaqBf5 Nb7xU6PTs+YDfk11XmLEiMW9GD3glInOKdI9rcdrkGlbKCHcp7bINDDlZIvftxZm 6em1DgvKZa4qjvC7zzWA+Fea5wbW6HSnK1ZUWkTQktV0asjVH0WgFSSkt3SmS9+T VnSzFsJzgq76gh2vgqsG6cKKW5urRlWNRRvgXtmmmNphe4CS7FFDt5Hz/LTRjUUA wtpVldh60RB1qg+j7FMZnD6U/LUlq4EhtRrN37p9uG8zzZAUSV3/zlr/JW9TyWif izrzzNPFVX6dHoDpc2L4d9+1PGqBMhQ= -----END CERTIFICATE-----Generated at Wed Oct 14 03:52:37 2026 by rpki-client