$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/a8a5e5d0-1203-30a1-9c88-3fd3fd06c358.roa File: a8a5e5d0-1203-30a1-9c88-3fd3fd06c358.roa (raw, json) Hash identifier: nxgJU1amlUn+InaR3O/nv01E4UofBLBQu/3MJBRH05A= Subject key identifier: 27:A0:16:19:6F:44:84:F9:B6:E2:47:8E:00:81:5F:D6:6D:F4:5D:34 Certificate issuer: /CN=ba461ed6-9748-4005-b669-8946003e1ae1 Certificate serial: 010D0C9F4328584E1E44572DE2F1B119A7DF8000 Authority key identifier: 86:FF:2D:22:FE:C4:48:05:84:E8:92:00:D8:2D:7A:2E:A3:82:9E:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/a8a5e5d0-1203-30a1-9c88-3fd3fd06c358.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 4246 IP address blocks: 128.235.0.0/17 maxlen: 17 128.235.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:57:2d:e2:f1:b1:19:a7:df:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba461ed6-9748-4005-b669-8946003e1ae1 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=8f148d95-3648-49c4-a06a-bd2b24c791c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:0a:92:2a:8d:7e:0b:2b:c5:6f:9c:b7:cd:ec: 67:9c:21:0f:06:db:1b:47:41:c9:25:4f:0a:36:ea: 4f:be:9d:50:c0:f2:82:9b:cf:af:c0:f8:c2:45:2f: 3b:33:b4:7a:31:10:ea:43:f8:d6:d4:14:95:a3:bc: 2f:25:74:4f:99:4b:12:69:ee:2c:b8:8d:b6:7f:fb: d7:01:df:0f:32:5f:f2:e2:62:93:7e:2c:c7:52:de: b1:e0:06:af:66:fa:d1:f2:60:6b:5c:af:3d:26:94: 34:07:b7:67:30:55:0e:4b:a4:0b:f8:0e:cb:d1:c1: e0:f6:4f:b4:bb:2c:4f:2e:56:42:24:cc:f9:8f:18: 28:a1:ac:4d:f5:45:ba:c9:8b:b1:c8:b6:d2:6c:94: e6:7f:50:89:12:32:4c:56:60:d8:24:bb:2d:85:89: 28:70:87:57:f3:17:ec:21:1f:61:cb:f8:be:36:6a: 29:de:32:4f:b8:63:d3:be:8d:4d:68:24:5f:cb:01: 8d:d7:a9:c7:92:9a:aa:c7:26:9e:03:9c:4b:8b:58: 74:e2:f5:16:27:20:5e:1e:64:af:84:56:19:ad:01: fc:f6:26:1c:35:fe:53:8d:e6:78:38:35:24:cd:62: b2:3d:9d:7b:23:80:ec:9c:12:02:f4:9f:7d:05:70: c5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A0:16:19:6F:44:84:F9:B6:E2:47:8E:00:81:5F:D6:6D:F4:5D:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/a8a5e5d0-1203-30a1-9c88-3fd3fd06c358.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.crl X509v3 Authority Key Identifier: keyid:86:FF:2D:22:FE:C4:48:05:84:E8:92:00:D8:2D:7A:2E:A3:82:9E:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer sbgp-ipAddrBlock: critical IPv4: 128.235.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:0a:e5:71:00:8d:10:91:df:d0:ec:ce:f4:d2:2f:17:2e:90: ba:ab:bb:d6:b0:08:bc:01:40:fd:f7:64:2a:03:60:8d:93:62: 70:23:a4:42:68:71:ef:b4:90:f2:98:a1:8e:6c:09:5f:b1:b2: ac:b0:2f:c1:14:38:02:5e:cb:bc:99:29:00:6f:4f:3c:03:52: e3:11:a2:d8:50:98:63:94:8f:f4:cd:e7:20:26:86:4f:2f:37: 49:39:49:4d:03:e3:0e:d8:02:48:02:38:79:1d:1b:e8:4b:a8: 08:29:cf:ef:c7:29:b6:25:4e:9f:bf:0e:6b:15:9a:8f:a9:ea: 6b:fd:7c:99:2e:a9:a2:58:eb:b3:d4:fe:9f:ba:2c:13:73:96: b8:84:e3:67:ed:1a:53:7b:a2:e2:f5:43:b5:d6:b7:d0:da:31: 97:4e:3f:dc:48:38:14:e0:0e:96:ad:76:49:20:b1:bb:c4:2b: 99:7f:19:95:fc:14:8c:d0:d4:a3:25:65:07:43:b8:47:5d:98: dc:10:9b:03:5c:bd:21:4d:ab:36:fc:f8:ac:86:57:c4:cc:86: b4:70:7a:66:54:a5:16:60:84:31:c7:4a:13:95:2f:53:d2:6b: 77:43:53:2f:5b:64:97:64:6b:c6:3e:25:23:ae:c2:53:84:b6: bb:25:b7:69 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE4eRFct4vGxGaffgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE0NjFlZDYtOTc0OC00MDA1LWI2NjktODk0NjAwM2Ux YWUxMB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk OGYxNDhkOTUtMzY0OC00OWM0LWEwNmEtYmQyYjI0Yzc5MWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggqSKo1+CyvFb5y3zexnnCEPBtsbR0HJJU8K NupPvp1QwPKCm8+vwPjCRS87M7R6MRDqQ/jW1BSVo7wvJXRPmUsSae4suI22f/vX Ad8PMl/y4mKTfizHUt6x4AavZvrR8mBrXK89JpQ0B7dnMFUOS6QL+A7L0cHg9k+0 uyxPLlZCJMz5jxgooaxN9UW6yYuxyLbSbJTmf1CJEjJMVmDYJLsthYkocIdX8xfs IR9hy/i+Nmop3jJPuGPTvo1NaCRfywGN16nHkpqqxyaeA5xLi1h04vUWJyBeHmSv hFYZrQH89iYcNf5TjeZ4ODUkzWKyPZ17I4DsnBIC9J99BXDFmwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCegFhlvRIT5tuJHjgCBX9Zt9F00MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iYTQ2 MWVkNi05NzQ4LTQwMDUtYjY2OS04OTQ2MDAzZTFhZTEvYThhNWU1ZDAtMTIwMy0z MGExLTljODgtM2ZkM2ZkMDZjMzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmE0NjFlZDYtOTc0OC00MDA1LWI2 NjktODk0NjAwM2UxYWUxL2JhNDYxZWQ2LTk3NDgtNDAwNS1iNjY5LTg5NDYwMDNl MWFlMS5jcmwwHwYDVR0jBBgwFoAUhv8tIv7ESAWE6JIA2C16LqOCnnUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iYTQ2MWVkNi05NzQ4LTQwMDUtYjY2OS04OTQ2 MDAzZTFhZTEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgOswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEATArlcQCNEJHf0OzO9NIvFy6Ququ71rAIvAFA/fdkKgNgjZNicCOkQmhx 77SQ8pihjmwJX7GyrLAvwRQ4Al7LvJkpAG9PPANS4xGi2FCYY5SP9M3nICaGTy83 STlJTQPjDtgCSAI4eR0b6EuoCCnP78cptiVOn78OaxWaj6nqa/18mS6poljrs9T+ n7osE3OWuITjZ+0aU3ui4vVDtda30Noxl04/3Eg4FOAOlq12SSCxu8QrmX8ZlfwU jNDUoyVlB0O4R12Y3BCbA1y9IU2rNvz4rIZXxMyGtHB6ZlSlFmCEMcdKE5UvU9Jr d0NTL1tkl2Rrxj4lI67CU4S2uyW3aQ== -----END CERTIFICATE-----Generated at Sat Jun 13 16:47:26 2026 by rpki-client