$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba6fd69e-38a6-3cc9-9b00-857e950199a0.roa File: ba6fd69e-38a6-3cc9-9b00-857e950199a0.roa (raw, json) Hash identifier: ZMmdMmJO38raw0A1msdPBixjtT+K3TGNtCk3sIf/awU= Subject key identifier: A2:BA:5A:33:89:29:F0:67:EF:DE:83:FD:0D:3E:A5:9D:4B:C0:86:58 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F024216F5239E34C551FAFCB0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba6fd69e-38a6-3cc9-9b00-857e950199a0.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 31898 IP address blocks: 140.204.52.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:16:f5:23:9e:34:c5:51:fa:fc:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=3bd1d5fb-c460-4aee-a095-1929d18a12da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b5:fb:4a:8f:93:f4:61:a7:73:80:28:ad:97: 2f:dd:a0:c1:36:0f:15:1f:07:f8:d7:6c:cd:02:9f: 8d:89:93:40:44:db:33:c0:cd:06:26:82:a8:48:23: b8:e9:3d:03:29:75:e0:84:29:03:dc:f7:c3:06:11: 1a:84:48:e3:f7:24:a8:5f:18:8e:20:36:d9:cd:c2: a6:d5:10:3a:a8:3e:0c:33:fa:82:36:9d:f8:51:0a: af:fc:31:d3:55:d5:46:92:06:73:f9:15:dd:90:5f: 91:f8:07:02:82:12:2c:a9:ba:62:4b:a0:80:8b:dd: d8:30:46:27:5a:65:93:09:54:81:dc:79:4f:e2:a2: 56:b7:2c:df:c5:c1:13:a0:d9:c5:88:5c:0f:ce:74: c0:c2:75:da:62:38:02:d4:d8:2d:8b:ce:ca:6d:4d: 83:83:74:0e:cc:52:0f:7c:32:46:df:cd:da:87:37: 28:f7:fe:18:4e:bd:58:33:f8:85:e2:11:59:72:34: 91:ed:0d:16:4e:89:ac:05:d5:26:f0:4f:9d:a3:ef: 8e:74:73:b9:c1:60:f4:e9:1b:21:fa:e5:01:2e:24: e6:90:76:82:e2:51:e2:d1:b1:ef:79:99:44:07:17: 82:2d:95:54:00:23:94:19:26:d3:da:a4:ca:f3:48: 56:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:BA:5A:33:89:29:F0:67:EF:DE:83:FD:0D:3E:A5:9D:4B:C0:86:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba6fd69e-38a6-3cc9-9b00-857e950199a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.52.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:0a:f9:63:e2:c2:2a:a1:75:70:6f:2f:66:3a:f0:41:14:d7: 78:a2:b5:3f:1a:e6:42:8c:77:b2:91:7d:d2:e2:21:d9:a8:9c: 1c:49:f5:42:32:62:ca:d8:b5:10:85:79:15:1f:c1:67:02:f5: 48:d6:e1:64:69:de:26:72:c9:a6:94:50:78:ea:7c:33:70:d8: 88:be:c2:d8:aa:dd:c0:fd:c3:12:86:5b:47:7d:eb:bd:d8:3a: 66:41:48:06:99:22:6d:4f:f4:2b:e1:06:1c:8c:01:e1:ce:6c: 08:42:9c:a7:59:8b:e9:9f:9a:b1:ff:a3:54:e7:f5:0d:a8:aa: 31:87:4a:df:33:44:c8:1b:68:27:9c:d3:12:64:b2:01:fb:66: 30:0e:54:b6:0c:c4:97:32:c0:75:1c:bc:cc:3d:a9:14:8a:87: 95:fe:da:78:25:a4:c0:54:61:2a:71:37:7a:45:fe:f7:ec:e9: e6:d5:d5:d8:51:f0:53:c9:d2:e1:b3:25:ff:1f:a4:a1:9e:90: 54:8e:f4:db:5f:88:fb:ff:c7:5e:ba:2a:ed:bf:41:7f:d6:4c: b9:66:3b:5f:f2:04:20:15:a6:dd:2f:2f:0d:24:2c:42:9f:3b: 46:37:de:b1:3f:2f:2a:b6:b3:45:f3:55:8f:ab:37:79:66:5b: 9d:50:32:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQhb1I540xVH6/LAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk M2JkMWQ1ZmItYzQ2MC00YWVlLWEwOTUtMTkyOWQxOGExMmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbX7So+T9GGnc4AorZcv3aDBNg8VHwf412zN Ap+NiZNARNszwM0GJoKoSCO46T0DKXXghCkD3PfDBhEahEjj9ySoXxiOIDbZzcKm 1RA6qD4MM/qCNp34UQqv/DHTVdVGkgZz+RXdkF+R+AcCghIsqbpiS6CAi93YMEYn WmWTCVSB3HlP4qJWtyzfxcEToNnFiFwPznTAwnXaYjgC1Ngti87KbU2Dg3QOzFIP fDJG383ahzco9/4YTr1YM/iF4hFZcjSR7Q0WTomsBdUm8E+do++OdHO5wWD06Rsh +uUBLiTmkHaC4lHi0bHveZlEBxeCLZVUACOUGSbT2qTK80hWeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKK6WjOJKfBn796D/Q0+pZ1LwIZYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmE2ZmQ2OWUtMzhhNi0z Y2M5LTliMDAtODU3ZTk1MDE5OWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMw0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgK+WPiwiqhdXBvL2Y68EEU13iitT8a5kKMd7KRfdLiIdmonBxJ9UIy YsrYtRCFeRUfwWcC9UjW4WRp3iZyyaaUUHjqfDNw2Ii+wtiq3cD9wxKGW0d9673Y OmZBSAaZIm1P9CvhBhyMAeHObAhCnKdZi+mfmrH/o1Tn9Q2oqjGHSt8zRMgbaCec 0xJksgH7ZjAOVLYMxJcywHUcvMw9qRSKh5X+2nglpMBUYSpxN3pF/vfs6ebV1dhR 8FPJ0uGzJf8fpKGekFSO9NtfiPv/x166Ku2/QX/WTLlmO1/yBCAVpt0vLw0kLEKf O0Y33rE/Lyq2s0XzVY+rN3lmW51QMmU= -----END CERTIFICATE-----Generated at Thu Oct 1 01:37:59 2026 by rpki-client