$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/a973be6d-e115-33cf-9248-c6c35ab8897d.roa File: a973be6d-e115-33cf-9248-c6c35ab8897d.roa (raw, json) Hash identifier: LGoq0OcbOPHLeNiWAztGasrB2bwQxX6cRLt1yk1eb9g= Subject key identifier: 1B:75:DE:F7:5F:02:C0:C8:B7:A9:BB:5F:14:D2:AD:0B:BA:32:A5:3B Certificate issuer: /CN=ba461ed6-9748-4005-b669-8946003e1ae1 Certificate serial: 010D0C9F4328584D3DFFADF39B619F534700B898 Authority key identifier: 86:FF:2D:22:FE:C4:48:05:84:E8:92:00:D8:2D:7A:2E:A3:82:9E:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/a973be6d-e115-33cf-9248-c6c35ab8897d.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 4246 IP address blocks: 128.235.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:ad:f3:9b:61:9f:53:47:00:b8:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba461ed6-9748-4005-b669-8946003e1ae1 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=6be9ecd8-11f1-4ab1-bfc5-f3e48a2466ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fa:89:77:17:3d:ae:ef:27:6f:e4:98:80:bb: d1:1e:f1:79:80:19:28:1b:a3:c9:4f:b2:33:8c:c7: 19:db:6b:54:62:9e:36:08:29:9b:d3:e5:ed:df:4c: 87:e8:af:0a:93:da:57:21:ea:8f:06:be:37:43:d1: 78:83:3e:ea:15:03:63:e0:2d:cb:05:e6:54:6d:28: 2f:00:4f:e0:8a:5c:4c:3e:b9:5c:47:68:7d:0b:88: 17:db:9e:92:cd:50:f0:e7:9f:bb:41:be:4d:7f:f7: d9:01:a3:22:19:5a:5b:bc:75:86:2a:d0:5a:11:3d: e0:a5:9f:7e:16:25:c8:d2:9e:56:b0:18:22:00:ff: de:ed:21:85:84:87:d7:b0:e0:93:d7:c6:10:9d:03: 18:96:82:bf:94:59:6a:d9:ed:cb:ac:5c:08:46:5e: b5:78:a5:c1:49:e5:1b:e6:bb:60:6c:9a:9f:87:7f: d7:b1:18:57:46:6d:ad:53:d1:73:c1:e3:09:2e:ae: ca:65:8f:19:41:f8:04:66:2e:dc:bf:d2:22:42:c9: 91:b5:df:2b:79:63:5a:d1:90:3d:70:3b:f8:9d:c0: 0c:c3:29:b4:74:15:c6:96:d2:b0:fa:ff:be:e2:1d: 02:bf:b7:b8:76:d1:7d:f0:0f:da:d1:3f:35:95:d9: 0f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:75:DE:F7:5F:02:C0:C8:B7:A9:BB:5F:14:D2:AD:0B:BA:32:A5:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/a973be6d-e115-33cf-9248-c6c35ab8897d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.crl X509v3 Authority Key Identifier: keyid:86:FF:2D:22:FE:C4:48:05:84:E8:92:00:D8:2D:7A:2E:A3:82:9E:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer sbgp-ipAddrBlock: critical IPv4: 128.235.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:30:28:80:f8:3a:04:04:2d:d9:e1:bf:af:73:22:52:8b:bf: 5f:8b:ec:ef:1c:62:cd:8e:b1:da:4c:eb:91:8a:8f:c9:7d:07: 43:fa:38:f6:d4:9b:e5:35:d1:96:44:74:08:d3:29:6a:c5:51: 8a:b7:30:53:d6:5f:4b:87:b0:b7:0f:23:f1:d0:f5:1d:a5:44: e0:11:ef:b2:25:3c:0c:b3:24:98:06:58:0f:4d:28:67:11:09: 39:cc:d4:d4:9a:83:4d:06:ea:6c:3e:8d:14:da:8a:2c:83:2b: 99:2c:84:48:b7:34:0d:22:10:d4:3b:dd:3a:8e:52:6b:59:72: f8:11:52:37:4a:51:4e:9b:1b:f3:14:1d:bd:b2:d5:f6:4a:51: c0:4a:81:24:91:65:6d:66:63:09:ba:30:fb:a4:f7:f9:f1:91: 4c:0b:3d:9a:bd:4a:ec:e0:8f:65:e3:4f:d8:d0:d7:fe:d7:0d: 10:98:6e:d1:84:e1:54:23:aa:63:fd:f1:51:c3:51:20:ca:e6: e0:99:98:5f:90:12:3a:a7:d3:95:03:a3:4d:d3:8d:89:d3:76: d1:f5:6f:09:87:98:4e:c4:f6:76:97:35:1a:1e:3f:40:f6:2e: da:cc:7d:98:e1:7a:2f:f2:00:26:3e:63:06:1d:b3:47:c7:7b: e6:62:c9:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/63zm2GfU0cAuJgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE0NjFlZDYtOTc0OC00MDA1LWI2NjktODk0NjAwM2Ux YWUxMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NmJlOWVjZDgtMTFmMS00YWIxLWJmYzUtZjNlNDhhMjQ2NmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/qJdxc9ru8nb+SYgLvRHvF5gBkoG6PJT7Iz jMcZ22tUYp42CCmb0+Xt30yH6K8Kk9pXIeqPBr43Q9F4gz7qFQNj4C3LBeZUbSgv AE/gilxMPrlcR2h9C4gX256SzVDw55+7Qb5Nf/fZAaMiGVpbvHWGKtBaET3gpZ9+ FiXI0p5WsBgiAP/e7SGFhIfXsOCT18YQnQMYloK/lFlq2e3LrFwIRl61eKXBSeUb 5rtgbJqfh3/XsRhXRm2tU9FzweMJLq7KZY8ZQfgEZi7cv9IiQsmRtd8reWNa0ZA9 cDv4ncAMwym0dBXGltKw+v++4h0Cv7e4dtF98A/a0T81ldkPAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBt13vdfAsDIt6m7XxTSrQu6MqU7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iYTQ2 MWVkNi05NzQ4LTQwMDUtYjY2OS04OTQ2MDAzZTFhZTEvYTk3M2JlNmQtZTExNS0z M2NmLTkyNDgtYzZjMzVhYjg4OTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmE0NjFlZDYtOTc0OC00MDA1LWI2 NjktODk0NjAwM2UxYWUxL2JhNDYxZWQ2LTk3NDgtNDAwNS1iNjY5LTg5NDYwMDNl MWFlMS5jcmwwHwYDVR0jBBgwFoAUhv8tIv7ESAWE6JIA2C16LqOCnnUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iYTQ2MWVkNi05NzQ4LTQwMDUtYjY2OS04OTQ2 MDAzZTFhZTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgOvEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAowKID4OgQELdnhv69zIlKLv1+L7O8cYs2OsdpM65GKj8l9B0P6OPbU m+U10ZZEdAjTKWrFUYq3MFPWX0uHsLcPI/HQ9R2lROAR77IlPAyzJJgGWA9NKGcR CTnM1NSag00G6mw+jRTaiiyDK5kshEi3NA0iENQ73TqOUmtZcvgRUjdKUU6bG/MU Hb2y1fZKUcBKgSSRZW1mYwm6MPuk9/nxkUwLPZq9Suzgj2XjT9jQ1/7XDRCYbtGE 4VQjqmP98VHDUSDK5uCZmF+QEjqn05UDo03TjYnTdtH1bwmHmE7E9naXNRoeP0D2 LtrMfZjhei/yACY+YwYds0fHe+ZiyS8= -----END CERTIFICATE-----Generated at Thu Mar 26 03:40:53 2026 by rpki-client