$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/ba0f5949-0792-3f7c-9cde-b7e74546e79c.roa File: ba0f5949-0792-3f7c-9cde-b7e74546e79c.roa (raw, json) Hash identifier: RN3VmfsjVCrf0p/KquEigB/73WlcMxBVHK5PyFeMOyM= Subject key identifier: D2:64:BC:B0:DA:22:68:C2:AE:AD:B3:C6:4F:02:C4:A0:9E:B4:4D:DF Certificate issuer: /CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Certificate serial: 010D0C9F4328584F4975DE0384BBA52415EDFF40 Authority key identifier: B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/ba0f5949-0792-3f7c-9cde-b7e74546e79c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 394002 IP address blocks: 64.136.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:de:03:84:bb:a5:24:15:ed:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a8099816-fc75-4f3e-bde8-4f15e6c65e61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6c:11:91:73:c9:72:31:b9:3d:8f:54:92:2e: 67:d0:68:aa:fd:10:b8:64:20:a7:c4:30:f6:55:b1: b3:40:19:c7:ce:f4:a7:64:df:27:8f:d7:87:1f:03: 01:5d:e4:d3:ee:5d:bb:eb:1d:d3:ee:a1:4e:b3:f7: bc:08:72:c2:95:52:92:cc:cd:12:89:04:63:b9:3e: d2:24:66:a7:61:20:59:a5:2b:84:b0:e8:83:c8:d6: 67:43:c0:00:c4:7c:54:d8:71:a3:06:8c:43:3b:46: 54:1a:22:4e:0f:08:bd:9e:96:9c:36:e8:a9:c2:be: ec:51:0c:91:c8:f7:80:8b:94:4a:ee:f4:b9:ef:72: a9:42:2b:0e:4c:4c:fc:31:c4:15:69:13:86:3e:fb: 27:94:3f:e3:49:34:77:3b:16:74:bc:bb:f4:04:6d: 71:35:e6:92:6d:7b:d5:d1:4b:a3:da:fa:9b:33:82: 1f:66:9c:bd:7a:15:a6:e4:bb:a4:29:53:80:ed:f3: 5d:d9:12:b5:1e:db:d9:c4:fc:1d:d4:cf:36:c0:6e: cc:a9:17:62:3b:9f:84:29:24:37:e7:97:ee:ba:0e: 8d:60:f4:b5:51:a1:d3:41:9b:87:1a:87:72:73:16: 87:bc:ad:bb:62:4f:65:14:f4:66:c2:c1:9a:f0:42: 11:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:64:BC:B0:DA:22:68:C2:AE:AD:B3:C6:4F:02:C4:A0:9E:B4:4D:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/ba0f5949-0792-3f7c-9cde-b7e74546e79c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl X509v3 Authority Key Identifier: keyid:B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer sbgp-ipAddrBlock: critical IPv4: 64.136.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:a4:75:5b:ac:30:84:9c:33:e2:bf:c0:65:d9:d3:29:1c:13: cb:a7:36:52:96:be:d3:6a:dd:05:9d:c0:60:75:4e:fb:fc:a7: 6e:4d:c0:3f:fe:d7:8c:d4:2d:3f:49:cf:d6:9c:e7:dd:4f:8a: 91:c3:64:fd:1e:a5:f3:3e:3e:fe:76:67:ba:47:ed:fc:98:c4: 7a:cb:3f:1d:c5:e9:db:e0:cb:40:0d:c2:0d:ca:3e:62:ef:69: 9f:33:92:05:2f:b9:50:70:8a:2d:8f:f5:3d:7e:4e:7e:e9:6d: ae:ec:c9:64:b6:d0:56:d3:67:84:10:b0:ce:bf:ed:4b:4f:2c: bc:8b:3c:1b:ff:43:e1:fb:b4:ca:9e:2f:21:f7:7f:12:30:a9: fe:d7:03:05:fd:21:a6:f9:b9:2c:30:2d:c7:43:c1:ed:59:d1: 0a:55:e6:01:26:1d:c2:fc:e2:2d:d8:3a:e3:99:fd:fb:62:41: 15:d8:9d:af:1d:df:91:6c:1a:1f:49:92:5f:01:0e:95:26:58: ee:8a:b1:ba:57:70:29:65:d2:a1:8e:d0:99:ea:1b:fe:2d:db: 1c:39:f1:ea:96:7f:ec:41:1c:9c:ed:c1:95:bf:12:fd:1c:ca: 52:bb:dd:61:8a:d6:a1:f5:c7:46:aa:25:4a:0f:4e:fe:63:60: c2:30:10:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdd4DhLulJBXt/0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1OGJmNzUtOTUzMS00YWNhLWE1MmUtMmEzMjQxZmE2 ZGQ4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTgwOTk4MTYtZmM3NS00ZjNlLWJkZTgtNGYxNWU2YzY1ZTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2wRkXPJcjG5PY9Uki5n0Giq/RC4ZCCnxDD2 VbGzQBnHzvSnZN8nj9eHHwMBXeTT7l276x3T7qFOs/e8CHLClVKSzM0SiQRjuT7S JGanYSBZpSuEsOiDyNZnQ8AAxHxU2HGjBoxDO0ZUGiJODwi9npacNuipwr7sUQyR yPeAi5RK7vS573KpQisOTEz8McQVaROGPvsnlD/jSTR3OxZ0vLv0BG1xNeaSbXvV 0Uuj2vqbM4IfZpy9ehWm5LukKVOA7fNd2RK1HtvZxPwd1M82wG7MqRdiO5+EKSQ3 55fuug6NYPS1UaHTQZuHGodycxaHvK27Yk9lFPRmwsGa8EIR7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJkvLDaImjCrq2zxk8CxKCetE3fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4 YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMyNDFmYTZkZDgvYmEwZjU5NDktMDc5Mi0z ZjdjLTljZGUtYjdlNzQ1NDZlNzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWY1OGJmNzUtOTUzMS00YWNhLWE1 MmUtMmEzMjQxZmE2ZGQ4LzFmNThiZjc1LTk1MzEtNGFjYS1hNTJlLTJhMzI0MWZh NmRkOC5jcmwwHwYDVR0jBBgwFoAUuMx8HBZNy4KZTSwdb5O2OAgUDTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMy NDFmYTZkZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQIhiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAikdVusMIScM+K/wGXZ0ykcE8unNlKWvtNq3QWdwGB1Tvv8p25NwD/+ 14zULT9Jz9ac591PipHDZP0epfM+Pv52Z7pH7fyYxHrLPx3F6dvgy0ANwg3KPmLv aZ8zkgUvuVBwii2P9T1+Tn7pba7syWS20FbTZ4QQsM6/7UtPLLyLPBv/Q+H7tMqe LyH3fxIwqf7XAwX9Iab5uSwwLcdDwe1Z0QpV5gEmHcL84i3YOuOZ/ftiQRXYna8d 35FsGh9Jkl8BDpUmWO6KsbpXcCll0qGO0JnqG/4t2xw58eqWf+xBHJztwZW/Ev0c ylK73WGK1qH1x0aqJUoPTv5jYMIwEIw= -----END CERTIFICATE-----Generated at Sat Sep 26 11:40:42 2026 by rpki-client