$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ba601bf4-733a-32c6-8978-4561e48688a5.roa File: ba601bf4-733a-32c6-8978-4561e48688a5.roa (raw, json) Hash identifier: OSj9xeWRdtLyUnvn2G+pFQ4g1ehFnAsxEztE5bSiulM= Subject key identifier: EE:5D:0F:CE:1C:87:8A:39:39:14:7C:0F:35:02:24:79:30:99:55:FC Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584E9A7FCCB3DC9747593F453AE0 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ba601bf4-733a-32c6-8978-4561e48688a5.roa Signing time: Fri 24 Jul 2026 09:00:12 +0000 ROA not before: Fri 24 Jul 2026 09:00:12 +0000 ROA not after: Thu 22 Oct 2026 09:00:12 +0000 asID: 22516 IP address blocks: 208.89.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9a:7f:cc:b3:dc:97:47:59:3f:45:3a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Jul 24 09:00:12 2026 GMT Not After : Oct 22 09:00:12 2026 GMT Subject: CN=875dcb34-6f90-4ccb-a4d1-602e0f1d3deb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c4:62:6c:5f:c4:98:54:d7:e4:68:8b:3e:27: e7:b4:c9:59:c8:a2:6d:02:85:6c:7d:6f:83:71:20: 6b:42:77:0b:dc:15:02:01:6f:e0:5c:19:6c:6f:b4: 01:66:c1:76:e8:cb:03:24:45:bd:18:76:3c:0f:b6: 3e:f2:d5:fa:b7:4a:31:6d:e8:43:03:87:a7:c8:50: 0f:65:1e:2e:c6:38:5c:90:6b:f1:f9:20:3b:2b:85: 07:aa:4c:24:55:32:e0:9d:ae:37:47:ba:68:eb:cf: 3d:8d:f7:ea:b0:e4:3d:f4:8d:e5:09:41:55:83:40: e0:cd:44:a6:45:fc:db:b2:26:c8:e4:68:96:4e:bb: 9b:83:48:e8:d5:1e:b8:a2:95:5e:fe:d1:a5:ae:cd: 83:6f:6e:95:43:db:fe:52:dd:51:f5:b3:4b:d4:65: f6:35:4f:7f:bd:a1:31:8c:af:fe:4c:a0:a0:3f:55: 7e:79:e0:c0:d8:22:89:bf:c8:ea:8e:58:9d:64:51: ba:cc:79:fd:e6:a7:4d:d8:75:8c:ab:72:43:56:6e: 3d:db:2f:c7:c8:f9:32:de:d7:5d:ec:1f:5c:45:17: b6:00:a9:ae:4e:42:ce:62:53:b6:b4:4d:a7:8f:a6: 4b:29:5e:be:7f:07:c0:85:d4:2d:ab:e1:bc:63:f3: 72:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:5D:0F:CE:1C:87:8A:39:39:14:7C:0F:35:02:24:79:30:99:55:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ba601bf4-733a-32c6-8978-4561e48688a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 208.89.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:2e:87:93:dc:4e:64:00:1d:82:d7:ee:00:43:f2:a8:e2:94: da:7f:7d:67:e1:56:42:ed:e0:44:8a:81:6c:ba:c3:ce:10:6a: cb:9e:56:17:94:3c:2f:b0:c2:67:07:1a:a1:a1:67:d8:67:ff: 11:af:76:4e:fb:5d:d8:96:d9:96:a2:c9:32:ef:fa:75:48:7b: a5:77:66:41:3f:55:56:bb:07:f4:19:6d:04:fb:8c:2b:46:26: ba:fa:af:48:a8:e9:6c:f1:20:28:a9:aa:fd:55:a1:70:cc:b5: bb:d3:55:42:7a:f2:b1:8b:21:62:43:46:ee:d3:f4:c6:37:d4: e9:cf:9f:de:20:b5:62:a7:e1:48:53:db:03:1d:81:76:99:67: 50:ea:6b:bc:73:7a:94:08:53:28:d1:f1:e3:33:39:a4:a2:8c: 0f:44:5d:5b:49:22:d2:7a:56:63:ab:d3:e1:06:d2:d1:67:16: 64:52:e5:44:fe:9d:1b:74:4d:00:cf:f4:70:c1:df:6e:90:bd: a5:b4:e4:1e:55:3e:39:47:22:96:46:2f:e7:8d:52:e2:0e:67: 5a:1b:70:10:e3:a4:b3:c2:e5:02:cd:ac:4a:97:96:f4:dc:da: 48:4c:c4:6b:bc:75:7a:b4:82:a0:aa:f8:1f:d7:1f:92:23:72: 62:fe:b2:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6af8yz3JdHWT9FOuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk ODc1ZGNiMzQtNmY5MC00Y2NiLWE0ZDEtNjAyZTBmMWQzZGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMRibF/EmFTX5GiLPifntMlZyKJtAoVsfW+D cSBrQncL3BUCAW/gXBlsb7QBZsF26MsDJEW9GHY8D7Y+8tX6t0oxbehDA4enyFAP ZR4uxjhckGvx+SA7K4UHqkwkVTLgna43R7po6889jffqsOQ99I3lCUFVg0DgzUSm RfzbsibI5GiWTrubg0jo1R64opVe/tGlrs2Db26VQ9v+Ut1R9bNL1GX2NU9/vaEx jK/+TKCgP1V+eeDA2CKJv8jqjlidZFG6zHn95qdN2HWMq3JDVm492y/HyPky3tdd 7B9cRRe2AKmuTkLOYlO2tE2nj6ZLKV6+fwfAhdQtq+G8Y/NyiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5dD84ch4o5ORR8DzUCJHkwmVX8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYmE2MDFiZjQtNzMzYS0z MmM2LTg5NzgtNDU2MWU0ODY4OGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL8uh5PcTmQAHYLX7gBD8qjilNp/fWfhVkLt4ESKgWy6w84QasueVheU PC+wwmcHGqGhZ9hn/xGvdk77XdiW2ZaiyTLv+nVIe6V3ZkE/VVa7B/QZbQT7jCtG Jrr6r0io6WzxICipqv1VoXDMtbvTVUJ68rGLIWJDRu7T9MY31OnPn94gtWKn4UhT 2wMdgXaZZ1Dqa7xzepQIUyjR8eMzOaSijA9EXVtJItJ6VmOr0+EG0tFnFmRS5UT+ nRt0TQDP9HDB326QvaW05B5VPjlHIpZGL+eNUuIOZ1obcBDjpLPC5QLNrEqXlvTc 2khMxGu8dXq0gqCq+B/XH5IjcmL+slk= -----END CERTIFICATE-----Generated at Fri Jul 24 15:58:13 2026 by rpki-client