$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3d0ba77b-204c-4fa1-bbc0-5c0d7b6b2a68/ba0f22cc-bd0d-3988-b4d1-9249a8574452.roa File: ba0f22cc-bd0d-3988-b4d1-9249a8574452.roa (raw, json) Hash identifier: fPLO6vO27Z2WCag85F8fGr9oI5ipAUlWHEVZlg9ZCkg= Subject key identifier: 08:41:78:EC:8E:BA:87:CB:C3:6F:29:E4:8E:9D:7F:F4:70:AE:08:D8 Certificate issuer: /CN=3d0ba77b-204c-4fa1-bbc0-5c0d7b6b2a68 Certificate serial: 010D0C9F4328584DBBA07083F58AE19E0097F980 Authority key identifier: 04:2F:FA:3A:38:E1:BD:DC:7F:3A:F0:45:6B:B2:3B:1A:7D:82:DC:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3d0ba77b-204c-4fa1-bbc0-5c0d7b6b2a68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3d0ba77b-204c-4fa1-bbc0-5c0d7b6b2a68/ba0f22cc-bd0d-3988-b4d1-9249a8574452.roa Signing time: Tue 05 May 2026 13:00:31 +0000 ROA not before: Tue 05 May 2026 13:00:31 +0000 ROA not after: Mon 03 Aug 2026 13:00:31 +0000 asID: 21646 IP address blocks: 172.87.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3d0ba77b-204c-4fa1-bbc0-5c0d7b6b2a68/3d0ba77b-204c-4fa1-bbc0-5c0d7b6b2a68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3d0ba77b-204c-4fa1-bbc0-5c0d7b6b2a68/3d0ba77b-204c-4fa1-bbc0-5c0d7b6b2a68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3d0ba77b-204c-4fa1-bbc0-5c0d7b6b2a68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bb:a0:70:83:f5:8a:e1:9e:00:97:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d0ba77b-204c-4fa1-bbc0-5c0d7b6b2a68 Validity Not Before: May 5 13:00:31 2026 GMT Not After : Aug 3 13:00:31 2026 GMT Subject: CN=bd2875af-157c-4097-8c31-f19ffa68cd70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d5:1c:7e:68:c5:6c:0b:c6:eb:79:62:20:93: a8:03:3d:ba:db:1f:65:6c:2b:b0:ba:7f:0a:36:a8: 76:c8:ac:43:de:14:79:49:11:d5:1f:68:48:f2:4e: e5:12:4b:a3:b3:da:6e:ad:5a:93:52:17:6d:30:dd: 37:f3:41:e9:02:92:ae:6a:c4:4f:c9:1b:7c:aa:d7: 93:10:a1:53:7d:0d:60:0e:4a:fd:61:96:3f:5e:eb: 7c:32:be:29:f7:b0:4c:9f:f8:92:a3:a2:18:c3:9f: 4f:30:78:be:55:4a:22:02:87:7c:07:eb:e5:26:87: ad:05:59:eb:37:df:fd:25:69:4c:02:2d:9f:dd:2e: eb:f5:34:35:3b:13:bd:b7:9c:8b:27:a2:07:14:19: e0:da:20:d1:2e:e9:4e:a4:8f:87:29:7d:e5:0f:50: 99:54:d3:1d:a0:3d:a2:6b:7b:c8:be:16:d7:aa:41: 65:d9:ae:8b:fb:aa:6f:cb:09:b6:e2:3c:97:0b:70: 3d:52:22:b4:e9:56:20:f8:d5:95:a6:c2:20:ae:bc: ad:a9:8a:d5:cc:0e:fa:22:07:1e:23:9e:86:c8:b6: 60:d5:6a:44:b9:63:cf:9d:ef:b3:07:6e:e3:ea:32: ef:75:e2:0a:64:d6:ae:9b:dc:33:31:27:c2:71:e8: 6c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:41:78:EC:8E:BA:87:CB:C3:6F:29:E4:8E:9D:7F:F4:70:AE:08:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3d0ba77b-204c-4fa1-bbc0-5c0d7b6b2a68/ba0f22cc-bd0d-3988-b4d1-9249a8574452.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3d0ba77b-204c-4fa1-bbc0-5c0d7b6b2a68/3d0ba77b-204c-4fa1-bbc0-5c0d7b6b2a68.crl X509v3 Authority Key Identifier: keyid:04:2F:FA:3A:38:E1:BD:DC:7F:3A:F0:45:6B:B2:3B:1A:7D:82:DC:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3d0ba77b-204c-4fa1-bbc0-5c0d7b6b2a68.cer sbgp-ipAddrBlock: critical IPv4: 172.87.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:70:ef:8d:2e:c1:d6:2e:30:e9:3e:16:08:19:62:51:dc:51: 5a:8e:8b:07:38:90:ea:2f:ef:ba:9d:36:84:d6:28:17:c5:76: 08:d3:8a:a6:e2:1c:1f:77:9d:8e:c9:8a:aa:d4:50:7a:77:64: 28:ee:bd:79:fe:83:e1:df:21:e9:9d:36:3b:e2:a4:9b:07:67: f6:51:eb:16:74:57:ff:44:f0:c7:30:a8:ea:5c:a3:d7:40:46: c8:96:be:b2:76:f1:9c:b0:34:c4:64:af:60:93:77:7e:27:65: 41:da:f6:70:36:71:eb:cb:03:d9:0d:25:e4:19:06:62:b7:83: 0b:95:e4:b2:d1:aa:3a:62:93:c5:bf:bd:98:03:08:e9:d9:5a: 91:3f:e3:4d:2a:97:0c:6a:ba:d8:14:9b:a6:b5:c9:bf:9b:02: 76:dd:5a:e4:8b:19:bf:bb:a8:94:70:37:53:ad:58:27:35:a4: 75:4c:4c:8e:c8:f0:4c:d0:62:52:79:29:93:8e:56:cd:28:51: 29:11:94:1d:58:77:4c:e4:25:ca:7f:63:87:f2:58:be:39:ca: 90:c3:36:7e:95:ff:f1:97:0f:3a:9b:2c:34:d6:f1:a9:69:49: 87:77:c6:f4:e3:37:95:d2:ac:58:29:f0:06:fe:82:55:9c:6d: 50:fa:5e:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE27oHCD9YrhngCX+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QwYmE3N2ItMjA0Yy00ZmExLWJiYzAtNWMwZDdiNmIy YTY4MB4XDTI2MDUwNTEzMDAzMVoXDTI2MDgwMzEzMDAzMVowLzEtMCsGA1UEAxMk YmQyODc1YWYtMTU3Yy00MDk3LThjMzEtZjE5ZmZhNjhjZDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNUcfmjFbAvG63liIJOoAz262x9lbCuwun8K Nqh2yKxD3hR5SRHVH2hI8k7lEkujs9purVqTUhdtMN0380HpApKuasRPyRt8qteT EKFTfQ1gDkr9YZY/Xut8Mr4p97BMn/iSo6IYw59PMHi+VUoiAod8B+vlJoetBVnr N9/9JWlMAi2f3S7r9TQ1OxO9t5yLJ6IHFBng2iDRLulOpI+HKX3lD1CZVNMdoD2i a3vIvhbXqkFl2a6L+6pvywm24jyXC3A9UiK06VYg+NWVpsIgrrytqYrVzA76Igce I56GyLZg1WpEuWPPne+zB27j6jLvdeIKZNaum9wzMSfCcehsRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhBeOyOuofLw28p5I6df/RwrgjYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8zZDBi YTc3Yi0yMDRjLTRmYTEtYmJjMC01YzBkN2I2YjJhNjgvYmEwZjIyY2MtYmQwZC0z OTg4LWI0ZDEtOTI0OWE4NTc0NDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvM2QwYmE3N2ItMjA0Yy00ZmExLWJi YzAtNWMwZDdiNmIyYTY4LzNkMGJhNzdiLTIwNGMtNGZhMS1iYmMwLTVjMGQ3YjZi MmE2OC5jcmwwHwYDVR0jBBgwFoAUBC/6Ojjhvdx/OvBFa7I7Gn2C3GUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8zZDBiYTc3Yi0yMDRjLTRmYTEtYmJjMC01YzBk N2I2YjJhNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFcoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxw740uwdYuMOk+FggZYlHcUVqOiwc4kOov77qdNoTWKBfFdgjTiqbi HB93nY7JiqrUUHp3ZCjuvXn+g+HfIemdNjvipJsHZ/ZR6xZ0V/9E8McwqOpco9dA RsiWvrJ28ZywNMRkr2CTd34nZUHa9nA2cevLA9kNJeQZBmK3gwuV5LLRqjpik8W/ vZgDCOnZWpE/400qlwxqutgUm6a1yb+bAnbdWuSLGb+7qJRwN1OtWCc1pHVMTI7I 8EzQYlJ5KZOOVs0oUSkRlB1Yd0zkJcp/Y4fyWL45ypDDNn6V//GXDzqbLDTW8alp SYd3xvTjN5XSrFgp8Ab+glWcbVD6Xjc= -----END CERTIFICATE-----Generated at Wed May 13 01:22:39 2026 by rpki-client