$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/a5aae8bc-a6ed-382f-af18-c5e191e02393.roa File: a5aae8bc-a6ed-382f-af18-c5e191e02393.roa (raw, json) Hash identifier: Iagks3zpwtMar7tJ/wYmUXMdXwW3I86QQ1Y6fFkB56A= Subject key identifier: 1E:26:D4:7E:B3:7A:0A:CB:2D:31:23:2E:89:2E:F4:75:4B:10:59:CF Certificate issuer: /CN=ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7 Certificate serial: 010D0C9F4328584DB0757DF151F059C0B2F1FE80 Authority key identifier: E8:1E:15:0B:75:76:40:58:B6:9A:14:2D:A7:91:10:D7:B8:85:D2:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/a5aae8bc-a6ed-382f-af18-c5e191e02393.roa Signing time: Fri 01 May 2026 13:00:30 +0000 ROA not before: Fri 01 May 2026 13:00:30 +0000 ROA not after: Thu 30 Jul 2026 13:00:30 +0000 asID: 398091 IP address blocks: 64.140.172.0/22 maxlen: 24 64.185.238.0/24 maxlen: 24 64.185.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b0:75:7d:f1:51:f0:59:c0:b2:f1:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7 Validity Not Before: May 1 13:00:30 2026 GMT Not After : Jul 30 13:00:30 2026 GMT Subject: CN=db23acb5-282e-493d-8013-984ee34af0ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:0b:89:a3:61:cb:e6:d1:28:8e:ef:f0:43:96: c7:e4:06:5d:ab:b6:c1:52:2d:3e:39:7e:fa:1f:c8: b7:48:6b:c1:79:72:7f:57:ae:17:98:b6:29:61:48: 7c:cd:46:2f:f3:3d:98:26:8c:f6:64:04:f2:1b:23: bf:6d:43:d7:cb:39:72:a4:d5:36:27:80:84:a5:26: 70:c5:21:ef:6c:c9:3c:d1:cc:3d:0f:8b:2d:ec:21: 1a:07:00:8b:c1:57:e6:f2:80:09:96:df:b5:dd:2a: 8e:3e:eb:7c:04:28:ac:ae:41:d4:59:18:6c:6b:52: 99:23:dd:4c:0b:53:46:5e:4c:22:a8:c4:59:0c:5f: 0a:71:06:db:79:ac:c4:2b:b6:d0:92:b7:cb:55:b4: 0a:b7:8f:de:25:8d:c6:a8:3e:68:35:72:b7:25:cf: 0e:e7:5b:c1:31:ec:87:fc:44:65:ad:28:88:8a:cb: 91:aa:9e:7c:7a:aa:ac:e5:6b:c6:5b:18:cb:82:64: c1:0a:af:2c:7b:a3:6a:a6:d9:b8:ae:7b:09:a2:e7: 85:64:7a:45:2f:3f:3a:e3:93:15:dc:3d:76:1a:67: aa:30:08:26:12:47:4d:6d:7c:46:0b:9a:91:20:49: e2:c6:54:fb:20:dd:91:cb:e3:6e:fd:1a:4c:4b:33: 79:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:26:D4:7E:B3:7A:0A:CB:2D:31:23:2E:89:2E:F4:75:4B:10:59:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/a5aae8bc-a6ed-382f-af18-c5e191e02393.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.crl X509v3 Authority Key Identifier: keyid:E8:1E:15:0B:75:76:40:58:B6:9A:14:2D:A7:91:10:D7:B8:85:D2:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.cer sbgp-ipAddrBlock: critical IPv4: 64.140.172.0/22 64.185.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:84:5b:44:bf:10:f3:1d:e7:f8:f8:a5:dc:cf:ab:fc:47:9b: 10:0a:e0:9a:8a:c2:28:dd:cd:9b:e2:60:87:69:ff:47:3d:9b: 34:19:dc:b5:a5:30:84:b7:8d:2c:5c:73:54:21:b6:54:b8:ad: 4f:d6:b6:d6:8d:cd:ee:ca:09:6b:6b:8e:48:1f:d2:b2:a6:77: 13:dd:ad:1c:76:4b:2d:c1:f8:f1:93:07:cb:88:61:f4:02:b0: 5b:e7:80:87:7d:6f:a3:6a:b0:e9:1b:36:99:58:a4:6f:16:34: d1:59:75:79:93:42:8f:f6:33:c3:4c:cd:6f:a3:8a:f0:ee:5e: fa:bf:c1:05:8f:06:ac:2c:4c:ef:98:95:37:58:39:86:4a:a6: 2f:c1:e3:0a:1f:a7:9d:45:9b:a0:ef:19:64:bf:c9:73:0d:6d: 77:f3:54:f2:a8:a8:ff:d0:e7:81:ab:62:e3:a7:fc:e0:e9:7c: 79:7d:8e:fb:35:04:d8:88:e2:3c:6e:55:0e:46:96:f6:8e:ef: 8d:dc:af:4b:65:fc:e0:c1:85:62:27:e5:a0:09:0f:c5:52:ad: 31:b4:d2:34:e6:95:aa:b0:86:37:eb:e0:4c:ab:21:3e:78:f8: 92:4d:07:12:24:ce:2d:76:23:a8:69:6d:1b:ac:94:98:8a:a7: 85:e6:59:12 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE2wdX3xUfBZwLLx/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEzNjhkYzItZGQ4YS00MGQyLWJjNTMtMGZlODdlOWQ5 ZGQ3MB4XDTI2MDUwMTEzMDAzMFoXDTI2MDczMDEzMDAzMFowLzEtMCsGA1UEAxMk ZGIyM2FjYjUtMjgyZS00OTNkLTgwMTMtOTg0ZWUzNGFmMGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgguJo2HL5tEoju/wQ5bH5AZdq7bBUi0+OX76 H8i3SGvBeXJ/V64XmLYpYUh8zUYv8z2YJoz2ZATyGyO/bUPXyzlypNU2J4CEpSZw xSHvbMk80cw9D4st7CEaBwCLwVfm8oAJlt+13SqOPut8BCisrkHUWRhsa1KZI91M C1NGXkwiqMRZDF8KcQbbeazEK7bQkrfLVbQKt4/eJY3GqD5oNXK3Jc8O51vBMeyH /ERlrSiIisuRqp58eqqs5WvGWxjLgmTBCq8se6Nqptm4rnsJoueFZHpFLz8645MV 3D12GmeqMAgmEkdNbXxGC5qRIEnixlT7IN2Ry+Nu/RpMSzN5DwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFB4m1H6zegrLLTEjLoku9HVLEFnPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iYTM2 OGRjMi1kZDhhLTQwZDItYmM1My0wZmU4N2U5ZDlkZDcvYTVhYWU4YmMtYTZlZC0z ODJmLWFmMTgtYzVlMTkxZTAyMzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYmEzNjhkYzItZGQ4YS00MGQyLWJj NTMtMGZlODdlOWQ5ZGQ3L2JhMzY4ZGMyLWRkOGEtNDBkMi1iYzUzLTBmZTg3ZTlk OWRkNy5jcmwwHwYDVR0jBBgwFoAU6B4VC3V2QFi2mhQtp5EQ17iF0t0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iYTM2OGRjMi1kZDhhLTQwZDItYmM1My0wZmU4 N2U5ZDlkZDcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCQIysAwQB QLnuMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFmEW0S/EPMd5/j4pdzPq/xHmxAK4JqKwijdzZviYIdp/0c9 mzQZ3LWlMIS3jSxcc1QhtlS4rU/WttaNze7KCWtrjkgf0rKmdxPdrRx2Sy3B+PGT B8uIYfQCsFvngId9b6NqsOkbNplYpG8WNNFZdXmTQo/2M8NMzW+jivDuXvq/wQWP BqwsTO+YlTdYOYZKpi/B4wofp51Fm6DvGWS/yXMNbXfzVPKoqP/Q54GrYuOn/ODp fHl9jvs1BNiI4jxuVQ5GlvaO743cr0tl/ODBhWIn5aAJD8VSrTG00jTmlaqwhjfr 4EyrIT54+JJNBxIkzi12I6hpbRuslJiKp4XmWRI= -----END CERTIFICATE-----Generated at Wed May 13 09:33:43 2026 by rpki-client