$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/c9f84ebb-eb90-3b1e-a3a6-9d95540ce8df.roa File: c9f84ebb-eb90-3b1e-a3a6-9d95540ce8df.roa (raw, json) Hash identifier: 4shZ9Jze7fQil+QKcN2Ipomq1Ye12K6H9hCZe4NTQxo= Subject key identifier: F8:3A:A0:D6:9D:7B:16:17:72:E3:E2:95:C7:B9:22:85:0F:DC:23:90 Certificate issuer: /CN=ba2a1fed-6973-4607-a297-20f3f241a739 Certificate serial: 010D0C9F4328584F3FAD3463B9CF335E30A3D400 Authority key identifier: 96:BA:9F:DC:AB:CD:D9:CC:C5:C8:ED:6F:0F:30:3D:71:C0:8D:21:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/c9f84ebb-eb90-3b1e-a3a6-9d95540ce8df.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 14618 IP address blocks: 192.207.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/ba2a1fed-6973-4607-a297-20f3f241a739.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/ba2a1fed-6973-4607-a297-20f3f241a739.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:34:63:b9:cf:33:5e:30:a3:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba2a1fed-6973-4607-a297-20f3f241a739 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=c9e1388a-9e55-4566-b9e9-7c16d23e2acd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:46:20:01:5f:c8:04:34:23:07:5c:93:84:b3: 2e:c7:d0:56:60:46:16:7a:2a:58:f9:14:2e:a3:32: e5:a9:b7:ce:56:e7:af:c3:c6:15:53:69:03:02:c0: 5e:a1:14:3f:f0:9d:56:72:b7:8d:26:4c:11:74:bd: f4:a1:d0:ee:44:e6:bb:db:1c:cd:43:30:84:73:f6: dd:7f:64:db:6e:80:3a:43:a4:c3:ab:2f:27:e2:3c: a6:76:da:44:21:6c:12:b1:7f:aa:9b:cc:5e:9d:93: e2:b7:0d:4b:6f:34:27:67:bd:57:6c:ca:0d:cd:fd: a9:ce:c1:d9:36:57:af:a9:08:87:24:47:1e:6f:63: dd:d1:33:fb:a6:bc:fa:9d:2b:50:a9:74:33:b3:2d: 40:96:ac:9e:58:83:44:0c:d5:ee:07:df:c3:d1:4d: 5f:e4:fa:f4:c7:e6:74:88:c4:75:9e:4e:7c:13:bc: 1f:e6:44:6a:6a:9a:a7:49:03:da:38:47:07:9e:c3: 45:46:8b:05:da:00:ad:b4:32:cf:f4:d6:f5:24:3b: 2f:19:cd:f5:57:30:fc:22:8f:7e:02:cc:e5:f7:29: 21:fd:42:c2:a5:f3:14:8a:e9:c7:cb:86:2d:9d:87: 7b:8c:40:72:85:36:06:22:9c:4b:4c:c8:db:ca:09: fc:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:3A:A0:D6:9D:7B:16:17:72:E3:E2:95:C7:B9:22:85:0F:DC:23:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/c9f84ebb-eb90-3b1e-a3a6-9d95540ce8df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/ba2a1fed-6973-4607-a297-20f3f241a739.crl X509v3 Authority Key Identifier: keyid:96:BA:9F:DC:AB:CD:D9:CC:C5:C8:ED:6F:0F:30:3D:71:C0:8D:21:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739.cer sbgp-ipAddrBlock: critical IPv4: 192.207.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:cc:a5:b3:22:58:2f:ed:d9:94:b5:05:1b:a2:63:d9:5a:f2: e3:de:fa:ca:21:81:f1:28:e4:52:a9:9d:05:a7:50:14:0d:29: a6:ba:40:4f:86:54:e5:22:c5:00:89:9f:fb:64:83:a6:35:46: 73:30:86:64:5c:d3:ab:cd:d9:cd:aa:18:aa:4a:d9:0a:14:9b: 8a:e7:31:dc:20:74:f6:9a:a8:ac:fb:b8:5f:ca:50:18:b9:9b: c6:d7:aa:28:2b:50:12:74:86:d7:d3:7c:8b:6a:d5:19:80:5d: 6f:eb:2c:58:24:8d:8e:20:7f:87:48:53:ed:95:27:e3:46:2c: df:13:8f:5f:fd:38:97:65:1e:52:17:b3:f1:78:c8:b8:e0:3a: 53:45:c9:8f:50:13:3b:30:24:72:fc:36:7c:a3:d3:2b:ee:95: 33:e6:fb:a0:0e:94:17:27:da:d4:5d:e0:4b:f8:3a:b7:8a:8e: 6f:ff:b5:01:87:f2:46:a5:69:52:19:fd:22:55:92:6b:64:47: 26:9f:0f:73:99:a3:bc:dd:5a:d3:b3:c6:a3:21:4e:1e:69:92: 49:38:e6:22:e5:f6:28:43:36:12:5b:02:d7:a5:19:56:b5:32: 86:fa:f4:18:42:26:29:3c:1a:40:a2:f4:b0:9f:f4:01:2e:1d: 13:d1:14:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rTRjuc8zXjCj1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEyYTFmZWQtNjk3My00NjA3LWEyOTctMjBmM2YyNDFh NzM5MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk YzllMTM4OGEtOWU1NS00NTY2LWI5ZTktN2MxNmQyM2UyYWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkYgAV/IBDQjB1yThLMux9BWYEYWeipY+RQu ozLlqbfOVuevw8YVU2kDAsBeoRQ/8J1WcreNJkwRdL30odDuROa72xzNQzCEc/bd f2TbboA6Q6TDqy8n4jymdtpEIWwSsX+qm8xenZPitw1LbzQnZ71XbMoNzf2pzsHZ NlevqQiHJEceb2Pd0TP7prz6nStQqXQzsy1AlqyeWINEDNXuB9/D0U1f5Pr0x+Z0 iMR1nk58E7wf5kRqapqnSQPaOEcHnsNFRosF2gCttDLP9Nb1JDsvGc31VzD8Io9+ Aszl9ykh/ULCpfMUiunHy4YtnYd7jEByhTYGIpxLTMjbygn8RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPg6oNadexYXcuPilce5IoUP3COQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iYTJh MWZlZC02OTczLTQ2MDctYTI5Ny0yMGYzZjI0MWE3MzkvYzlmODRlYmItZWI5MC0z YjFlLWEzYTYtOWQ5NTU0MGNlOGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYmEyYTFmZWQtNjk3My00NjA3LWEy OTctMjBmM2YyNDFhNzM5L2JhMmExZmVkLTY5NzMtNDYwNy1hMjk3LTIwZjNmMjQx YTczOS5jcmwwHwYDVR0jBBgwFoAUlrqf3KvN2czFyO1vDzA9ccCNIbYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iYTJhMWZlZC02OTczLTQ2MDctYTI5Ny0yMGYz ZjI0MWE3MzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwM/uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHMpbMiWC/t2ZS1BRuiY9la8uPe+sohgfEo5FKpnQWnUBQNKaa6QE+G VOUixQCJn/tkg6Y1RnMwhmRc06vN2c2qGKpK2QoUm4rnMdwgdPaaqKz7uF/KUBi5 m8bXqigrUBJ0htfTfItq1RmAXW/rLFgkjY4gf4dIU+2VJ+NGLN8Tj1/9OJdlHlIX s/F4yLjgOlNFyY9QEzswJHL8Nnyj0yvulTPm+6AOlBcn2tRd4Ev4OreKjm//tQGH 8kalaVIZ/SJVkmtkRyafD3OZo7zdWtOzxqMhTh5pkkk45iLl9ihDNhJbAtelGVa1 Mob69BhCJik8GkCi9LCf9AEuHRPRFDo= -----END CERTIFICATE-----Generated at Wed Sep 23 08:02:21 2026 by rpki-client