$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/a5aae8bc-a6ed-382f-af18-c5e191e02393.roa File: a5aae8bc-a6ed-382f-af18-c5e191e02393.roa (raw, json) Hash identifier: J3xiKy9JkLWVqgr0BdpjLWholKAYyX0boPY0+adXrMU= Subject key identifier: D8:89:3D:97:8C:D1:AE:90:CF:15:17:89:AF:02:90:B4:C0:08:08:40 Certificate issuer: /CN=ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7 Certificate serial: 010D0C9F4328584E90BA464A42DE1E21D1590D80 Authority key identifier: E8:1E:15:0B:75:76:40:58:B6:9A:14:2D:A7:91:10:D7:B8:85:D2:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/a5aae8bc-a6ed-382f-af18-c5e191e02393.roa Signing time: Mon 20 Jul 2026 21:00:11 +0000 ROA not before: Mon 20 Jul 2026 21:00:11 +0000 ROA not after: Sun 18 Oct 2026 21:00:11 +0000 asID: 398091 IP address blocks: 64.140.172.0/22 maxlen: 24 64.185.238.0/24 maxlen: 24 64.185.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:90:ba:46:4a:42:de:1e:21:d1:59:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7 Validity Not Before: Jul 20 21:00:11 2026 GMT Not After : Oct 18 21:00:11 2026 GMT Subject: CN=5dcb39b0-4f6e-45a5-836d-8fbf18a9101a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:07:f6:1a:2c:3d:28:de:14:61:81:3d:e9:70: f8:c6:be:5a:74:92:d2:a6:f9:27:17:7c:db:ab:23: b9:a2:ed:ac:7e:3c:f3:e2:11:36:0d:7d:3e:03:05: 57:68:91:d7:c8:2c:5f:8a:9e:7b:ca:b6:45:7b:11: 4b:ce:85:62:78:b2:e4:01:ae:b7:20:2a:e2:d7:84: 6b:45:dc:a1:9d:9a:96:a0:15:47:44:c9:84:20:b4: ad:eb:81:94:7d:73:16:7d:b4:7b:03:25:6a:71:ec: fd:d2:43:c2:30:aa:7b:2f:41:47:22:0e:91:11:79: 06:52:6c:22:c3:bd:fa:e8:fc:23:bf:11:b9:5a:cf: 11:ae:3e:31:ad:ea:cf:9e:f7:0d:da:fb:d6:be:c0: 36:cb:4f:2b:fa:c8:04:ce:44:3c:fa:9d:03:8e:df: ae:a4:bf:d2:cc:b1:8e:28:c1:d1:87:96:60:d2:1c: 24:85:0a:b3:6a:8c:db:fc:c4:43:eb:9a:5f:78:65: 3e:69:6d:81:c1:9f:f8:05:52:b9:4a:d2:07:48:89: 57:2f:46:ed:1f:9e:53:79:25:9f:f8:8a:b7:3c:11: b0:b9:7f:b1:f4:3d:21:f6:3c:52:12:43:c7:15:cb: 69:0d:57:34:98:9e:ea:54:56:1d:53:10:f9:73:e8: a5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:89:3D:97:8C:D1:AE:90:CF:15:17:89:AF:02:90:B4:C0:08:08:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/a5aae8bc-a6ed-382f-af18-c5e191e02393.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.crl X509v3 Authority Key Identifier: keyid:E8:1E:15:0B:75:76:40:58:B6:9A:14:2D:A7:91:10:D7:B8:85:D2:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.cer sbgp-ipAddrBlock: critical IPv4: 64.140.172.0/22 64.185.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:39:a1:de:5c:13:5d:48:25:fc:37:cd:b4:bb:c1:a5:06:0a: 90:b8:60:ee:49:53:3b:c3:88:33:fc:fe:3f:27:ec:28:1e:4f: d6:92:d5:0d:53:48:c1:b1:df:8d:00:8b:d8:1d:b7:42:47:f1: f7:c9:f2:82:15:ba:d5:92:25:36:2b:29:e7:1a:8e:d8:e1:ef: fc:16:aa:e4:ec:27:75:c3:69:21:e6:37:26:71:45:6a:e0:10: 92:5f:12:db:16:3c:d1:28:ec:0d:cf:54:72:d0:51:a6:0c:1f: a4:68:34:56:8a:ef:7d:7c:ed:64:00:3f:65:fc:39:43:74:e0: ab:30:43:38:c3:b9:b0:1b:01:70:14:da:00:92:ba:94:89:e6: ac:b4:fe:52:90:d6:48:c2:ec:84:37:51:b8:02:50:a1:a9:ef: 3e:f4:e0:a5:4e:23:4c:f8:b9:ce:e9:00:a5:de:8c:01:42:39: 13:db:d5:cc:9a:7b:ad:8b:3f:7a:ad:e1:d9:f9:90:23:3d:f7: 17:34:fe:30:e3:0d:9a:48:e2:b8:e7:77:fe:db:f6:0f:e8:a6: ed:b9:f3:01:d6:5c:e9:8c:01:57:43:69:7c:18:d0:06:e4:97: 1b:65:61:e9:5f:56:1c:1c:a4:2e:c8:f5:df:12:40:0a:81:d6: 58:d8:9d:39 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE6QukZKQt4eIdFZDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEzNjhkYzItZGQ4YS00MGQyLWJjNTMtMGZlODdlOWQ5 ZGQ3MB4XDTI2MDcyMDIxMDAxMVoXDTI2MTAxODIxMDAxMVowLzEtMCsGA1UEAxMk NWRjYjM5YjAtNGY2ZS00NWE1LTgzNmQtOGZiZjE4YTkxMDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwf2Giw9KN4UYYE96XD4xr5adJLSpvknF3zb qyO5ou2sfjzz4hE2DX0+AwVXaJHXyCxfip57yrZFexFLzoVieLLkAa63ICri14Rr RdyhnZqWoBVHRMmEILSt64GUfXMWfbR7AyVqcez90kPCMKp7L0FHIg6REXkGUmwi w7366PwjvxG5Ws8Rrj4xrerPnvcN2vvWvsA2y08r+sgEzkQ8+p0Djt+upL/SzLGO KMHRh5Zg0hwkhQqzaozb/MRD65pfeGU+aW2BwZ/4BVK5StIHSIlXL0btH55TeSWf +Iq3PBGwuX+x9D0h9jxSEkPHFctpDVc0mJ7qVFYdUxD5c+iluQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNiJPZeM0a6QzxUXia8CkLTACAhAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iYTM2 OGRjMi1kZDhhLTQwZDItYmM1My0wZmU4N2U5ZDlkZDcvYTVhYWU4YmMtYTZlZC0z ODJmLWFmMTgtYzVlMTkxZTAyMzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYmEzNjhkYzItZGQ4YS00MGQyLWJj NTMtMGZlODdlOWQ5ZGQ3L2JhMzY4ZGMyLWRkOGEtNDBkMi1iYzUzLTBmZTg3ZTlk OWRkNy5jcmwwHwYDVR0jBBgwFoAU6B4VC3V2QFi2mhQtp5EQ17iF0t0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iYTM2OGRjMi1kZDhhLTQwZDItYmM1My0wZmU4 N2U5ZDlkZDcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCQIysAwQB QLnuMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADg5od5cE11IJfw3zbS7waUGCpC4YO5JUzvDiDP8/j8n7Cge T9aS1Q1TSMGx340Ai9gdt0JH8ffJ8oIVutWSJTYrKecajtjh7/wWquTsJ3XDaSHm NyZxRWrgEJJfEtsWPNEo7A3PVHLQUaYMH6RoNFaK73187WQAP2X8OUN04KswQzjD ubAbAXAU2gCSupSJ5qy0/lKQ1kjC7IQ3UbgCUKGp7z704KVOI0z4uc7pAKXejAFC ORPb1cyae62LP3qt4dn5kCM99xc0/jDjDZpI4rjnd/7b9g/opu258wHWXOmMAVdD aXwY0AbklxtlYelfVhwcpC7I9d8SQAqB1ljYnTk= -----END CERTIFICATE-----Generated at Fri Jul 24 12:16:20 2026 by rpki-client