$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/a8a5e5d0-1203-30a1-9c88-3fd3fd06c358.roa File: a8a5e5d0-1203-30a1-9c88-3fd3fd06c358.roa (raw, json) Hash identifier: STyVGi+aNcc6ADUnaM5YFbOYcKEDIVOQPdDPsDEBlhA= Subject key identifier: BD:07:45:6E:28:4A:A1:C6:E6:49:9D:F9:B6:DC:04:DE:D4:35:F6:5B Certificate issuer: /CN=ba461ed6-9748-4005-b669-8946003e1ae1 Certificate serial: 010D0C9F4328584D3DFFB5A5104B53837F303FB0 Authority key identifier: 86:FF:2D:22:FE:C4:48:05:84:E8:92:00:D8:2D:7A:2E:A3:82:9E:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/a8a5e5d0-1203-30a1-9c88-3fd3fd06c358.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 4246 IP address blocks: 128.235.0.0/17 maxlen: 17 128.235.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:b5:a5:10:4b:53:83:7f:30:3f:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba461ed6-9748-4005-b669-8946003e1ae1 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=6b8af6b4-88f0-42f5-a061-54802bc1c160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:75:72:1c:66:64:fc:61:1e:68:52:47:37:d7: 21:ef:90:bf:6e:b0:b0:6c:04:04:fe:de:28:ba:24: 30:50:d9:ae:bd:a0:35:92:52:3a:f0:c7:7a:e6:d7: b1:bf:16:7c:b7:fb:a4:84:db:4d:e9:3b:8a:60:7e: 68:49:51:14:4e:fd:c5:86:e9:7b:96:7e:bf:82:b0: 13:fe:ff:0a:97:6c:c4:4f:c1:a7:27:df:f4:6e:38: fc:0a:b0:96:02:69:99:2d:e9:69:5a:b2:7b:e3:c1: 2a:f0:7b:78:e1:9d:21:e3:75:78:a6:64:ea:39:4e: 41:02:2b:5b:bb:6d:40:ca:14:ea:76:93:25:0d:67: 08:03:98:4a:10:2a:b2:a7:50:6d:b9:d7:e6:b2:7e: ec:02:c8:60:6d:20:ca:09:d7:90:3b:d3:5c:46:e1: 10:26:22:ea:83:8c:c2:14:03:4b:36:7e:3c:b1:f3: 4b:2f:a1:58:6d:05:ce:0d:ec:e3:51:62:82:f6:62: 76:08:72:c1:ff:ac:c7:3c:b8:c2:8e:9b:d1:5f:e8: 9a:81:35:a2:48:97:dd:ab:78:52:e5:8b:0f:62:9d: 3a:68:e5:c1:d4:68:fa:74:8e:c5:f9:dc:d1:77:5c: a9:86:13:c6:c9:e7:15:a5:09:6c:ee:bf:78:08:1c: 68:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:07:45:6E:28:4A:A1:C6:E6:49:9D:F9:B6:DC:04:DE:D4:35:F6:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/a8a5e5d0-1203-30a1-9c88-3fd3fd06c358.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.crl X509v3 Authority Key Identifier: keyid:86:FF:2D:22:FE:C4:48:05:84:E8:92:00:D8:2D:7A:2E:A3:82:9E:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer sbgp-ipAddrBlock: critical IPv4: 128.235.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:97:05:c4:14:8b:77:21:8d:7a:d8:1c:d0:29:98:ba:32:00: c2:af:27:0b:90:0b:00:6a:d6:e2:36:ea:65:73:2d:09:aa:17: 8b:9f:29:5c:83:5b:b8:e9:ad:86:7e:02:99:06:5d:5d:30:1b: 78:c5:a3:7e:28:1d:0a:e5:89:16:55:3c:88:0b:0e:04:de:61: fe:56:eb:55:b3:9a:58:49:3a:d3:e9:ef:3c:6a:39:92:47:3f: db:89:01:10:46:79:9f:32:67:27:de:0a:e4:5b:cf:54:b3:87: 8b:14:b2:dd:ef:c6:49:c7:0f:ab:c0:76:fa:ec:f2:bf:8c:78: f1:c1:7f:10:70:f9:9e:98:16:10:20:6f:fe:9f:53:53:b3:a7: 9f:26:f8:88:bf:12:b6:2f:28:30:d9:cd:3f:83:8b:66:bf:16: 9c:a8:78:e4:3f:92:95:40:6f:7d:2b:71:a6:90:95:25:7a:cf: 01:e3:98:8b:37:2f:4d:71:a0:e4:85:43:82:84:b7:8e:e2:15: 45:4f:6b:37:1b:60:17:ef:4a:d0:0b:28:aa:a7:bd:b0:3a:b6: 58:a6:d0:2a:23:fd:6a:06:b6:61:df:31:54:61:65:28:22:89: 39:9f:ca:91:bf:6d:f1:aa:0f:f0:33:51:31:0f:e3:b8:7c:f9: 4b:b0:ac:0e -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE09/7WlEEtTg38wP7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE0NjFlZDYtOTc0OC00MDA1LWI2NjktODk0NjAwM2Ux YWUxMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NmI4YWY2YjQtODhmMC00MmY1LWEwNjEtNTQ4MDJiYzFjMTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3VyHGZk/GEeaFJHN9ch75C/brCwbAQE/t4o uiQwUNmuvaA1klI68Md65texvxZ8t/ukhNtN6TuKYH5oSVEUTv3Fhul7ln6/grAT /v8Kl2zET8GnJ9/0bjj8CrCWAmmZLelpWrJ748Eq8Ht44Z0h43V4pmTqOU5BAitb u21AyhTqdpMlDWcIA5hKECqyp1Btudfmsn7sAshgbSDKCdeQO9NcRuEQJiLqg4zC FANLNn48sfNLL6FYbQXODezjUWKC9mJ2CHLB/6zHPLjCjpvRX+iagTWiSJfdq3hS 5YsPYp06aOXB1Gj6dI7F+dzRd1yphhPGyecVpQls7r94CBxorwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFL0HRW4oSqHG5kmd+bbcBN7UNfZbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iYTQ2 MWVkNi05NzQ4LTQwMDUtYjY2OS04OTQ2MDAzZTFhZTEvYThhNWU1ZDAtMTIwMy0z MGExLTljODgtM2ZkM2ZkMDZjMzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmE0NjFlZDYtOTc0OC00MDA1LWI2 NjktODk0NjAwM2UxYWUxL2JhNDYxZWQ2LTk3NDgtNDAwNS1iNjY5LTg5NDYwMDNl MWFlMS5jcmwwHwYDVR0jBBgwFoAUhv8tIv7ESAWE6JIA2C16LqOCnnUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iYTQ2MWVkNi05NzQ4LTQwMDUtYjY2OS04OTQ2 MDAzZTFhZTEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgOswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAXJcFxBSLdyGNetgc0CmYujIAwq8nC5ALAGrW4jbqZXMtCaoXi58pXINb uOmthn4CmQZdXTAbeMWjfigdCuWJFlU8iAsOBN5h/lbrVbOaWEk60+nvPGo5kkc/ 24kBEEZ5nzJnJ94K5FvPVLOHixSy3e/GSccPq8B2+uzyv4x48cF/EHD5npgWECBv /p9TU7Onnyb4iL8Sti8oMNnNP4OLZr8WnKh45D+SlUBvfStxppCVJXrPAeOYizcv TXGg5IVDgoS3juIVRU9rNxtgF+9K0Asoqqe9sDq2WKbQKiP9aga2Yd8xVGFlKCKJ OZ/Kkb9t8aoP8DNRMQ/juHz5S7CsDg== -----END CERTIFICATE-----Generated at Thu Mar 26 07:38:01 2026 by rpki-client