$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ba59af8d-cd38-3210-95f1-ed3012495264.roa File: ba59af8d-cd38-3210-95f1-ed3012495264.roa (raw, json) Hash identifier: 4Cj3wYvQqFt6Nn9Lk0R5pnOtrRjU2itCuB3bIUfKKFg= Subject key identifier: E5:B3:8F:5A:24:0B:FC:CC:F2:80:89:5D:61:A1:63:95:C3:D3:D0:45 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F2957CC545B3B9D7993F85870 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ba59af8d-cd38-3210-95f1-ed3012495264.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 5650 IP address blocks: 64.81.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:cc:54:5b:3b:9d:79:93:f8:58:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=1a195f7d-3ba5-4d02-b3c4-9c5a04e36f7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:68:8b:36:fd:8f:55:49:46:5a:0d:52:fe:1a: 8f:8b:f4:7e:2d:32:25:5d:aa:34:67:14:27:af:58: 29:cb:3e:9c:de:ed:cd:6a:e6:0d:b3:87:e8:e3:54: 46:13:89:e4:19:bc:16:6e:56:43:e1:00:b4:a9:67: 0a:17:eb:0d:28:c2:06:d8:0d:9b:e4:08:e4:5b:22: cc:5b:d2:86:0c:dc:2e:3b:a0:b7:50:39:ba:0e:a5: 72:e3:21:5b:73:16:13:8c:d2:46:ed:11:fb:82:8f: a2:50:25:36:b8:db:1a:f8:ed:30:45:cf:08:52:36: 48:48:50:e3:13:eb:bc:be:3c:ae:e1:4f:e1:b2:e1: 16:6b:de:51:fa:56:e2:e2:27:14:eb:39:4a:63:5b: 6a:b0:2f:3a:63:62:d3:e0:27:5e:9a:53:3e:9a:36: 4e:6d:66:e7:f0:b8:0d:27:4c:70:34:2e:f7:4c:62: 08:68:79:8e:7e:2a:ab:c8:35:3c:36:eb:54:7f:2d: 86:b8:2b:20:6b:2f:3a:56:27:a3:09:59:d8:77:c4: d1:a2:6c:f1:19:50:fa:89:4d:ff:07:f4:91:77:77: 1b:c6:ca:0c:81:6a:3d:b9:d5:6d:46:dd:53:db:2c: aa:92:d9:89:b4:91:dd:87:c8:e6:07:d4:81:fb:cf: 00:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B3:8F:5A:24:0B:FC:CC:F2:80:89:5D:61:A1:63:95:C3:D3:D0:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ba59af8d-cd38-3210-95f1-ed3012495264.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.81.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:8a:83:c0:c8:50:5e:d3:4b:92:b9:25:cf:3b:35:c6:af:d5: 84:93:24:48:cd:cd:22:6e:75:17:79:11:10:f1:64:e4:85:50: 82:44:8a:58:03:79:f4:75:2c:61:9e:27:e9:79:51:e9:a2:b4: 2a:30:77:25:1f:53:d0:c2:73:00:df:b9:c4:11:f5:fc:15:3c: 0e:07:9d:ac:6a:70:b3:98:b7:0f:2d:83:fa:98:97:2a:b5:a8: 15:3e:8c:9f:f1:3d:42:e7:2a:ab:11:7d:00:e9:76:20:4d:bd: bd:0f:e3:d6:56:e8:9f:0a:f7:f4:45:d2:0b:f1:ef:b3:71:ed: 98:5a:99:0d:d9:19:c1:79:f6:8c:85:46:c7:9f:5f:23:35:4c: bb:43:b0:8e:99:50:e4:8e:e6:07:70:04:46:9c:ff:cc:97:3e: 08:d2:65:57:5b:82:56:7e:36:e0:d7:28:9c:00:12:a7:07:53: 96:cc:e4:85:f2:8a:ab:27:dd:d4:6e:45:f6:8f:cd:57:be:19: c2:d1:7d:1b:51:08:c0:ed:d4:97:89:fc:e4:bf:48:e4:8b:78: c9:81:33:c0:15:33:27:e4:2f:f4:2a:54:9b:7c:7d:86:d1:fd: 94:3b:69:50:66:76:78:c3:bc:a7:c8:b3:7f:10:e6:7e:08:37: 3b:68:02:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV8xUWzudeZP4WHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk MWExOTVmN2QtM2JhNS00ZDAyLWIzYzQtOWM1YTA0ZTM2ZjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2iLNv2PVUlGWg1S/hqPi/R+LTIlXao0ZxQn r1gpyz6c3u3NauYNs4fo41RGE4nkGbwWblZD4QC0qWcKF+sNKMIG2A2b5AjkWyLM W9KGDNwuO6C3UDm6DqVy4yFbcxYTjNJG7RH7go+iUCU2uNsa+O0wRc8IUjZISFDj E+u8vjyu4U/hsuEWa95R+lbi4icU6zlKY1tqsC86Y2LT4CdemlM+mjZObWbn8LgN J0xwNC73TGIIaHmOfiqryDU8NutUfy2GuCsgay86ViejCVnYd8TRomzxGVD6iU3/ B/SRd3cbxsoMgWo9udVtRt1T2yyqktmJtJHdh8jmB9SB+88AXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWzj1okC/zM8oCJXWGhY5XD09BFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYmE1OWFmOGQtY2QzOC0z MjEwLTk1ZjEtZWQzMDEyNDk1MjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFGxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeKg8DIUF7TS5K5Jc87Ncav1YSTJEjNzSJudRd5ERDxZOSFUIJEilgD efR1LGGeJ+l5UemitCowdyUfU9DCcwDfucQR9fwVPA4HnaxqcLOYtw8tg/qYlyq1 qBU+jJ/xPULnKqsRfQDpdiBNvb0P49ZW6J8K9/RF0gvx77Nx7ZhamQ3ZGcF59oyF RsefXyM1TLtDsI6ZUOSO5gdwBEac/8yXPgjSZVdbglZ+NuDXKJwAEqcHU5bM5IXy iqsn3dRuRfaPzVe+GcLRfRtRCMDt1JeJ/OS/SOSLeMmBM8AVMyfkL/QqVJt8fYbR /ZQ7aVBmdnjDvKfIs38Q5n4INztoAvc= -----END CERTIFICATE-----Generated at Mon Sep 28 10:13:05 2026 by rpki-client