$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/9bba60d3-0bdd-3615-9dee-42f9533f7786.roa File: 9bba60d3-0bdd-3615-9dee-42f9533f7786.roa (raw, json) Hash identifier: q6ZwnXU8CDQAGVnZakQbj3CBqvJY4XTCo//d//dVq48= Subject key identifier: 90:9C:26:FA:39:DA:0D:7F:E6:FA:47:D8:2D:9E:D2:5A:22:86:79:E6 Certificate issuer: /CN=ba2a1fed-6973-4607-a297-20f3f241a739 Certificate serial: 010D0C9F4328584F3FAD3456B2FE6D4B442A8BC0 Authority key identifier: 96:BA:9F:DC:AB:CD:D9:CC:C5:C8:ED:6F:0F:30:3D:71:C0:8D:21:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/9bba60d3-0bdd-3615-9dee-42f9533f7786.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 16509 IP address blocks: 192.207.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/ba2a1fed-6973-4607-a297-20f3f241a739.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/ba2a1fed-6973-4607-a297-20f3f241a739.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:34:56:b2:fe:6d:4b:44:2a:8b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba2a1fed-6973-4607-a297-20f3f241a739 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=405bcaf3-5019-4e0d-8668-7090f3bdde65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8a:34:af:55:a3:24:95:76:61:bb:46:75:26: 96:15:e5:6c:f0:27:0c:72:86:a4:09:19:75:aa:de: e3:3d:96:5c:24:06:bf:c3:64:bb:d8:6e:a3:bb:a0: bb:63:bf:f2:41:1b:b4:55:ca:4e:f9:c4:1e:23:dc: 11:f8:dd:ba:c2:dd:0c:37:71:b3:5f:46:da:3a:a3: d4:24:48:23:bb:d7:ea:1d:e2:0c:20:38:74:05:0d: 2d:20:23:5c:1a:b5:2b:26:17:24:c5:3d:a4:2f:88: 0c:8b:90:18:69:28:3d:f7:5b:6f:86:24:b3:8d:ce: 6f:2b:6a:a1:c6:8f:bd:88:af:b9:1e:60:a7:39:5f: 3c:ba:26:71:af:b7:be:22:4b:dd:8a:98:a2:58:47: fc:90:21:3d:ef:56:1b:10:70:5f:2d:b2:03:f1:c6: b0:e3:a3:37:23:e8:3c:54:5e:78:0d:59:e3:31:b2: e0:4d:69:12:8e:cb:b7:ba:e2:e7:ed:e7:a4:a9:48: 78:cd:1e:cb:00:cf:e2:d4:ac:3c:9c:0c:9f:e1:d5: ca:f0:41:9e:71:5e:97:6c:14:c8:90:1d:6e:73:ad: 1e:a6:a0:de:9b:ea:7f:47:6d:da:b1:c9:ab:10:ac: 97:a0:f5:38:0a:dd:3b:7e:96:8d:4d:eb:7a:0e:93: 0d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:9C:26:FA:39:DA:0D:7F:E6:FA:47:D8:2D:9E:D2:5A:22:86:79:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/9bba60d3-0bdd-3615-9dee-42f9533f7786.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/ba2a1fed-6973-4607-a297-20f3f241a739.crl X509v3 Authority Key Identifier: keyid:96:BA:9F:DC:AB:CD:D9:CC:C5:C8:ED:6F:0F:30:3D:71:C0:8D:21:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739.cer sbgp-ipAddrBlock: critical IPv4: 192.207.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:1d:58:ea:10:14:71:93:c8:08:18:c3:8e:e7:ee:9a:29:e0: 8e:24:8b:a5:e7:73:1b:20:1c:fc:d2:de:f2:75:71:65:eb:e4: f0:00:49:2f:e4:58:ff:f0:a6:bf:93:ea:16:db:29:a9:08:ac: 0e:af:14:42:18:aa:ec:a7:7e:97:55:5c:c8:ed:65:7b:c9:69: dd:2d:8a:6e:38:52:b6:e5:23:f1:8e:7e:09:f4:59:da:8b:91: b4:0a:a9:b5:9c:be:11:d8:de:26:73:7e:f7:54:8c:a2:0b:1e: be:34:3c:6f:03:99:1d:25:88:8d:2d:88:c8:f0:c2:1c:14:d1: 4a:bc:f0:f5:17:8a:a9:5d:e8:c4:26:30:94:07:1b:94:ee:ed: d6:72:4e:85:de:e3:73:76:b3:17:8e:2d:b8:b3:88:da:c6:89: aa:ec:bb:13:a6:33:36:9e:dc:74:b7:77:28:dd:b7:23:b5:1d: 9e:07:e4:c0:26:42:13:55:69:d2:fb:29:60:94:9d:d2:58:87: 7d:46:ca:34:06:60:2e:e3:5c:11:1a:69:3d:aa:4f:51:37:3b: 8a:14:f2:43:f0:ec:59:d0:06:00:71:f1:4e:b6:86:7e:b3:58: c6:d5:6d:e9:10:5b:5f:a5:49:11:c5:ce:28:43:ba:58:ab:ff: f1:bc:73:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rTRWsv5tS0Qqi8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEyYTFmZWQtNjk3My00NjA3LWEyOTctMjBmM2YyNDFh NzM5MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk NDA1YmNhZjMtNTAxOS00ZTBkLTg2NjgtNzA5MGYzYmRkZTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoo0r1WjJJV2YbtGdSaWFeVs8CcMcoakCRl1 qt7jPZZcJAa/w2S72G6ju6C7Y7/yQRu0VcpO+cQeI9wR+N26wt0MN3GzX0baOqPU JEgju9fqHeIMIDh0BQ0tICNcGrUrJhckxT2kL4gMi5AYaSg991tvhiSzjc5vK2qh xo+9iK+5HmCnOV88uiZxr7e+IkvdipiiWEf8kCE971YbEHBfLbID8caw46M3I+g8 VF54DVnjMbLgTWkSjsu3uuLn7eekqUh4zR7LAM/i1Kw8nAyf4dXK8EGecV6XbBTI kB1uc60epqDem+p/R23ascmrEKyXoPU4Ct07fpaNTet6DpMNwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCcJvo52g1/5vpH2C2e0loihnnmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iYTJh MWZlZC02OTczLTQ2MDctYTI5Ny0yMGYzZjI0MWE3MzkvOWJiYTYwZDMtMGJkZC0z NjE1LTlkZWUtNDJmOTUzM2Y3Nzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYmEyYTFmZWQtNjk3My00NjA3LWEy OTctMjBmM2YyNDFhNzM5L2JhMmExZmVkLTY5NzMtNDYwNy1hMjk3LTIwZjNmMjQx YTczOS5jcmwwHwYDVR0jBBgwFoAUlrqf3KvN2czFyO1vDzA9ccCNIbYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iYTJhMWZlZC02OTczLTQ2MDctYTI5Ny0yMGYz ZjI0MWE3MzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwM/uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8dWOoQFHGTyAgYw47n7pop4I4ki6XncxsgHPzS3vJ1cWXr5PAASS/k WP/wpr+T6hbbKakIrA6vFEIYquynfpdVXMjtZXvJad0tim44UrblI/GOfgn0WdqL kbQKqbWcvhHY3iZzfvdUjKILHr40PG8DmR0liI0tiMjwwhwU0Uq88PUXiqld6MQm MJQHG5Tu7dZyToXe43N2sxeOLbiziNrGiarsuxOmMzae3HS3dyjdtyO1HZ4H5MAm QhNVadL7KWCUndJYh31GyjQGYC7jXBEaaT2qT1E3O4oU8kPw7FnQBgBx8U62hn6z WMbVbekQW1+lSRHFzihDulir//G8cwc= -----END CERTIFICATE-----Generated at Thu Oct 8 11:30:33 2026 by rpki-client