$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea/a59b07bd-087c-3bd2-b8c2-4ce5bbd233f4.roa File: a59b07bd-087c-3bd2-b8c2-4ce5bbd233f4.roa (raw, json) Hash identifier: xAtzHEIAodZvEAlTRn71EMK+Nvg8iQVhVc7Owb4WmwU= Subject key identifier: 47:8D:06:CA:01:81:B7:CA:65:F9:A4:F0:BD:7A:16:52:E9:2C:48:A2 Certificate issuer: /CN=ba34350e-8a32-444e-a9c3-3267735f96ea Certificate serial: 010D0C9F4328584EE7BCB84B08CF47D0028E1E80 Authority key identifier: 95:CE:E8:CF:4D:E9:4C:D0:B3:22:3D:3C:68:D2:DD:A5:A0:52:B2:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea/a59b07bd-087c-3bd2-b8c2-4ce5bbd233f4.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 46179 IP address blocks: 199.91.152.0/21 maxlen: 21 205.196.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea/ba34350e-8a32-444e-a9c3-3267735f96ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea/ba34350e-8a32-444e-a9c3-3267735f96ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:b8:4b:08:cf:47:d0:02:8e:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba34350e-8a32-444e-a9c3-3267735f96ea Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=e235e2fc-7787-42c2-8847-766b640a1898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9f:71:14:ee:f5:c4:07:84:1c:01:c7:dd:af: ab:c0:d9:ab:11:bf:7b:64:7f:17:11:92:79:6a:d6: 42:2a:13:7e:b1:dd:f8:43:14:d7:97:9f:9d:6c:ad: 8b:1e:5b:7a:5e:d7:79:2f:42:84:0e:e2:79:1c:e9: fc:a1:fc:91:dc:4c:a9:ce:09:3e:fc:98:ff:dc:ac: 1c:3e:db:48:76:43:9d:60:41:1a:bd:a2:7a:c9:69: 12:37:53:18:ab:f0:17:f6:4b:80:29:fa:8c:ff:91: 53:af:1f:f5:2d:0e:6b:97:ee:b4:0a:78:cd:31:65: 7d:a3:8e:62:05:3a:f5:9f:3a:d4:89:7f:b5:59:a1: 03:fc:80:a2:b4:20:f4:26:b8:8c:2c:34:51:5d:ee: 48:41:ac:49:e5:f8:25:79:81:67:60:7a:be:e0:cf: 09:57:ed:0f:c4:27:94:60:02:40:06:85:1f:c0:83: c8:e1:70:a5:14:3e:d0:2c:74:94:67:c3:79:ec:8b: 83:36:fc:6e:90:e6:9c:74:d2:f3:63:74:8e:1c:9b: 25:7d:dc:b3:e5:62:cb:ac:85:df:24:14:dd:fa:46: 1e:59:c4:22:8a:8b:d8:1a:bf:25:2f:43:5c:9f:47: bb:5c:f8:e9:46:24:35:16:17:79:da:ae:e3:77:a0: 17:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:8D:06:CA:01:81:B7:CA:65:F9:A4:F0:BD:7A:16:52:E9:2C:48:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea/a59b07bd-087c-3bd2-b8c2-4ce5bbd233f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea/ba34350e-8a32-444e-a9c3-3267735f96ea.crl X509v3 Authority Key Identifier: keyid:95:CE:E8:CF:4D:E9:4C:D0:B3:22:3D:3C:68:D2:DD:A5:A0:52:B2:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea.cer sbgp-ipAddrBlock: critical IPv4: 199.91.152.0/21 205.196.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:be:05:97:9b:0c:e3:49:48:fe:67:f1:50:fb:9e:cf:73:33: a5:56:11:ba:8b:c5:43:c4:1d:21:e9:01:cc:be:34:21:8e:0e: 25:91:f1:08:8c:fc:15:f7:7b:ed:61:e7:a4:91:65:d6:d1:03: 60:e3:e9:0a:59:4e:4f:b8:76:05:98:78:79:a9:1f:15:2d:61: db:da:e0:41:3c:1b:9b:64:27:ae:ba:f0:c9:57:6d:45:83:39: cb:5a:5b:7c:48:f1:fd:35:58:1b:2d:49:b3:40:b0:35:4c:1b: 80:4c:88:ab:de:78:d6:fb:54:b9:ca:eb:d0:4e:d5:28:d5:94: 15:7e:be:dd:29:82:5b:67:96:a5:b7:08:36:eb:35:51:db:e6: d3:18:7a:02:48:af:c5:15:6c:40:71:f1:15:15:f3:62:e2:f6: 44:61:eb:34:13:d5:3b:4a:d1:1a:69:ea:0b:32:d3:dd:4a:ca: ee:6b:fb:7b:2b:fe:f5:00:b7:40:74:85:7b:d2:27:6a:87:0e: 02:b9:29:3c:7a:76:1b:40:77:76:3b:64:b1:4c:99:2f:c9:2a: 4d:82:84:7c:11:82:d3:75:69:53:68:96:88:84:19:25:41:91: 7f:d9:2e:8c:ea:d0:a6:d3:cd:b3:ed:3b:61:9d:95:ef:19:35: fe:2f:a0:07 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE7nvLhLCM9H0AKOHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEzNDM1MGUtOGEzMi00NDRlLWE5YzMtMzI2NzczNWY5 NmVhMB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk ZTIzNWUyZmMtNzc4Ny00MmMyLTg4NDctNzY2YjY0MGExODk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvp9xFO71xAeEHAHH3a+rwNmrEb97ZH8XEZJ5 atZCKhN+sd34QxTXl5+dbK2LHlt6Xtd5L0KEDuJ5HOn8ofyR3Eypzgk+/Jj/3Kwc PttIdkOdYEEavaJ6yWkSN1MYq/AX9kuAKfqM/5FTrx/1LQ5rl+60CnjNMWV9o45i BTr1nzrUiX+1WaED/ICitCD0JriMLDRRXe5IQaxJ5fgleYFnYHq+4M8JV+0PxCeU YAJABoUfwIPI4XClFD7QLHSUZ8N57IuDNvxukOacdNLzY3SOHJslfdyz5WLLrIXf JBTd+kYeWcQiiovYGr8lL0Ncn0e7XPjpRiQ1Fhd52q7jd6AXOQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFEeNBsoBgbfKZfmk8L16FlLpLEiiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iYTM0 MzUwZS04YTMyLTQ0NGUtYTljMy0zMjY3NzM1Zjk2ZWEvYTU5YjA3YmQtMDg3Yy0z YmQyLWI4YzItNGNlNWJiZDIzM2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmEzNDM1MGUtOGEzMi00NDRlLWE5 YzMtMzI2NzczNWY5NmVhL2JhMzQzNTBlLThhMzItNDQ0ZS1hOWMzLTMyNjc3MzVm OTZlYS5jcmwwHwYDVR0jBBgwFoAUlc7oz03pTNCzIj08aNLdpaBSst8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iYTM0MzUwZS04YTMyLTQ0NGUtYTljMy0zMjY3 NzM1Zjk2ZWEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDx1uYAwQC zcR4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJ6+BZebDONJSP5n8VD7ns9zM6VWEbqLxUPEHSHpAcy+NCGO DiWR8QiM/BX3e+1h56SRZdbRA2Dj6QpZTk+4dgWYeHmpHxUtYdva4EE8G5tkJ666 8MlXbUWDOctaW3xI8f01WBstSbNAsDVMG4BMiKveeNb7VLnK69BO1SjVlBV+vt0p gltnlqW3CDbrNVHb5tMYegJIr8UVbEBx8RUV82Li9kRh6zQT1TtK0Rpp6gsy091K yu5r+3sr/vUAt0B0hXvSJ2qHDgK5KTx6dhtAd3Y7ZLFMmS/JKk2ChHwRgtN1aVNo loiEGSVBkX/ZLozq0KbTzbPtO2Gdle8ZNf4voAc= -----END CERTIFICATE-----Generated at Wed Sep 23 22:22:03 2026 by rpki-client