$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/ba0f5949-0792-3f7c-9cde-b7e74546e79c.roa File: ba0f5949-0792-3f7c-9cde-b7e74546e79c.roa (raw, json) Hash identifier: +XswnGrVkLdAFxV+BwYWdIJ9XFFEfpcrK8oRhj4yL8Y= Subject key identifier: C9:94:0F:15:71:4A:12:FC:74:CF:3C:38:33:5B:68:64:1E:83:53:8A Certificate issuer: /CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Certificate serial: 010D0C9F4328584EA79C4450F88D1FF934FEC500 Authority key identifier: B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/ba0f5949-0792-3f7c-9cde-b7e74546e79c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 394002 IP address blocks: 64.136.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:44:50:f8:8d:1f:f9:34:fe:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ba079dcc-f3f9-4c00-91f2-2668e093cbf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6e:7e:2a:c0:e6:4c:f8:3f:b3:48:4a:68:f1: 3f:99:14:d8:d3:60:d2:ab:89:c4:d7:15:b5:25:44: e6:4a:b6:31:fc:b5:6d:aa:82:01:31:39:d4:da:30: 3e:c0:98:a3:4d:95:9b:2a:34:f6:1c:44:2d:8a:ad: 3a:0b:e9:5d:7f:59:58:da:61:9c:63:55:32:a0:64: 39:09:39:ef:b6:20:e9:76:dc:56:eb:43:af:02:e8: c9:39:ba:04:47:8d:44:d2:4c:29:ae:2c:b5:4e:f4: a1:96:6b:1e:dc:64:00:c9:8e:d4:d8:d1:4f:b7:9f: f0:77:b9:e1:0c:18:1e:0f:56:fc:e0:a2:89:b1:75: cd:ae:f1:55:08:85:48:08:5f:7b:0b:ce:aa:d5:80: ba:5d:8d:6f:78:75:4c:20:7e:c5:5d:18:0e:31:cf: 85:bd:32:c4:33:1b:3f:1f:0d:8f:83:12:b5:50:e5: 25:a2:c0:91:fa:67:ee:98:50:a8:79:e5:d8:09:79: d1:b1:ea:1b:57:44:ec:32:51:2a:95:f6:8a:21:0e: 9e:6b:80:00:a4:67:f8:03:1e:81:a2:81:aa:99:cf: 9c:6d:98:f8:be:f1:7e:52:a3:11:43:92:18:82:4a: 05:ec:0e:94:3f:30:b6:48:43:f3:00:31:1f:78:77: 30:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:94:0F:15:71:4A:12:FC:74:CF:3C:38:33:5B:68:64:1E:83:53:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/ba0f5949-0792-3f7c-9cde-b7e74546e79c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl X509v3 Authority Key Identifier: keyid:B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer sbgp-ipAddrBlock: critical IPv4: 64.136.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:11:08:41:75:38:41:69:ce:e2:7d:51:9d:c0:89:3a:cf:eb: 0e:98:ca:34:3e:87:b9:06:a8:26:d2:91:b9:df:86:0f:42:db: 30:61:85:be:6d:32:dc:4e:b3:90:c4:e4:ba:9b:25:64:88:72: 59:10:ba:19:da:bd:a5:3b:28:13:22:2b:f1:1f:1b:50:fe:6d: b1:be:0e:6a:8c:ca:50:b1:26:2c:3c:07:8b:30:a0:91:e8:11: 32:4a:1f:c0:01:42:8d:ff:a6:29:aa:3b:ee:05:3b:61:a6:c1: bd:43:61:0a:91:d2:5e:5f:21:95:34:e8:68:33:db:fe:7f:15: d0:a4:4d:14:dd:88:9e:88:96:ca:d5:35:a9:92:06:16:b9:a1: 84:cf:50:16:49:2a:4d:1d:72:fb:e8:6f:ae:59:be:22:b5:d4: 46:2e:f2:ff:b1:0a:f1:eb:9b:a5:ac:b8:89:54:05:e6:6d:dd: 95:c0:9e:b3:ab:2f:65:92:88:a7:88:5a:8f:b7:82:d2:5f:84: 2d:9f:37:a3:20:ef:ca:9e:d5:91:8b:9d:25:ce:12:d7:0a:42: 4b:66:27:7c:37:a5:cf:fd:b3:ac:78:3d:54:ba:db:a1:26:08: 0f:d0:e1:e5:be:88:de:4e:ba:48:e5:a4:fb:22:7f:c1:f6:66: ff:fd:91:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnERQ+I0f+TT+xQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1OGJmNzUtOTUzMS00YWNhLWE1MmUtMmEzMjQxZmE2 ZGQ4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YmEwNzlkY2MtZjNmOS00YzAwLTkxZjItMjY2OGUwOTNjYmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyW5+KsDmTPg/s0hKaPE/mRTY02DSq4nE1xW1 JUTmSrYx/LVtqoIBMTnU2jA+wJijTZWbKjT2HEQtiq06C+ldf1lY2mGcY1UyoGQ5 CTnvtiDpdtxW60OvAujJOboER41E0kwpriy1TvShlmse3GQAyY7U2NFPt5/wd7nh DBgeD1b84KKJsXXNrvFVCIVICF97C86q1YC6XY1veHVMIH7FXRgOMc+FvTLEMxs/ Hw2PgxK1UOUlosCR+mfumFCoeeXYCXnRseobV0TsMlEqlfaKIQ6ea4AApGf4Ax6B ooGqmc+cbZj4vvF+UqMRQ5IYgkoF7A6UPzC2SEPzADEfeHcwpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmUDxVxShL8dM88ODNbaGQeg1OKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4 YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMyNDFmYTZkZDgvYmEwZjU5NDktMDc5Mi0z ZjdjLTljZGUtYjdlNzQ1NDZlNzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWY1OGJmNzUtOTUzMS00YWNhLWE1 MmUtMmEzMjQxZmE2ZGQ4LzFmNThiZjc1LTk1MzEtNGFjYS1hNTJlLTJhMzI0MWZh NmRkOC5jcmwwHwYDVR0jBBgwFoAUuMx8HBZNy4KZTSwdb5O2OAgUDTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMy NDFmYTZkZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQIhiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoRCEF1OEFpzuJ9UZ3AiTrP6w6YyjQ+h7kGqCbSkbnfhg9C2zBhhb5t MtxOs5DE5LqbJWSIclkQuhnavaU7KBMiK/EfG1D+bbG+DmqMylCxJiw8B4swoJHo ETJKH8ABQo3/pimqO+4FO2Gmwb1DYQqR0l5fIZU06Ggz2/5/FdCkTRTdiJ6IlsrV NamSBha5oYTPUBZJKk0dcvvob65ZviK11EYu8v+xCvHrm6WsuIlUBeZt3ZXAnrOr L2WSiKeIWo+3gtJfhC2fN6Mg78qe1ZGLnSXOEtcKQktmJ3w3pc/9s6x4PVS626Em CA/Q4eW+iN5OukjlpPsif8H2Zv/9kXA= -----END CERTIFICATE-----Generated at Wed Jul 29 04:34:29 2026 by rpki-client