$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/5a7e94aa-da20-3620-9a5f-e4e7fbda04e1.roa File: 5a7e94aa-da20-3620-9a5f-e4e7fbda04e1.roa (raw, json) Hash identifier: AQlkEsA9NJ8CdAOw74d56AGcm3J0F2IDkBFO3vu3MNY= Subject key identifier: 01:AA:64:5B:85:99:75:45:C6:5E:C3:73:EA:8F:5E:BF:23:7E:0D:9C Certificate issuer: /CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd Certificate serial: 010D0C9F4328584F093CDE9077B6F9B586F766E0 Authority key identifier: D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/5a7e94aa-da20-3620-9a5f-e4e7fbda04e1.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 192.80.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:de:90:77:b6:f9:b5:86:f7:66:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=b5a859b1-7358-47c8-9569-a655b4ba7fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7a:b2:2a:f6:f4:dc:9f:67:00:ea:74:8a:35: 62:1f:c1:f6:8a:ee:ee:72:24:61:82:0a:27:72:b3: ef:c9:93:79:d0:bc:63:6d:9a:dd:23:9d:f8:1c:e6: cb:14:15:c6:a8:fc:27:d1:bb:af:c6:4e:0a:a6:66: b8:8a:8a:41:22:4d:5a:36:73:fc:a5:b7:35:15:95: 84:86:13:03:af:97:fd:7b:b2:e2:de:18:de:df:41: 17:7b:9e:b4:e3:e9:20:ae:fb:62:7c:a9:61:49:ce: 88:70:9a:6b:ef:c4:69:43:75:9a:37:60:ea:21:e7: b6:78:85:85:4c:1d:13:4e:41:8e:e6:4c:19:bc:4b: d1:c9:09:4a:6d:87:92:28:9a:32:4c:e1:d7:9e:54: 43:47:ea:bf:01:7f:0d:ed:bc:f9:1a:cc:50:8e:93: 8f:51:9b:b9:27:8c:f3:4d:2d:4a:4c:91:19:44:5c: 1e:83:5f:aa:8f:90:d8:ef:d1:8c:e1:94:54:54:86: 8e:34:4a:bf:97:c1:a9:d1:6d:6d:1e:90:1d:f9:1d: d1:46:af:8a:7e:f4:07:cc:b5:ae:72:fd:26:88:f4: 82:85:b7:80:2b:fd:30:02:52:c8:77:99:fc:b7:e5: 47:9d:e7:eb:7f:17:ba:a6:72:44:fa:40:3e:83:99: 37:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:AA:64:5B:85:99:75:45:C6:5E:C3:73:EA:8F:5E:BF:23:7E:0D:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/5a7e94aa-da20-3620-9a5f-e4e7fbda04e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl X509v3 Authority Key Identifier: keyid:D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer sbgp-ipAddrBlock: critical IPv4: 192.80.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:a8:49:e9:3c:9d:51:81:8e:3b:63:d7:2d:db:7b:c6:ab:d3: 23:71:63:e3:ab:d2:7f:51:bd:ed:c0:5d:4a:11:b6:be:ad:22: be:b9:54:6f:52:f4:da:fb:02:67:2f:5f:41:f3:39:08:9f:8e: 18:a5:7b:8f:9e:40:32:4e:57:43:ad:9c:92:a8:f4:70:bc:33: 56:38:0f:66:bb:1e:7d:1c:98:ad:d1:11:46:e7:a0:b2:32:6a: a8:01:a5:31:e7:5b:5d:75:1c:76:3e:f8:7d:95:eb:cc:44:46: 2b:56:33:be:2a:79:1a:13:b3:0d:9f:df:22:4d:95:35:b5:af: 8b:ed:1c:c5:c7:46:92:a5:0f:0b:6f:dd:51:ae:af:12:dc:d0: b8:30:49:60:3f:c1:65:ab:44:71:c4:47:20:59:28:ec:03:78: 4c:03:e3:92:51:5e:a6:dc:c4:ed:ef:76:92:54:5b:e0:de:9d: 6a:38:63:20:1d:68:1d:9a:c6:3d:e7:87:66:92:05:94:1e:72: fa:3b:33:43:28:f0:0d:4d:ab:cd:81:38:c1:f1:bc:4b:30:cd: 5b:84:ba:8e:19:4f:cf:96:be:15:2c:7b:0a:82:bd:61:28:73: 72:80:8a:e1:94:90:1d:3a:ab:ee:32:7e:40:58:42:bc:c1:73: a4:c9:15:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPN6Qd7b5tYb3ZuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JhNzQ3Y2UtOWE0ZC00NzBjLWIzYTEtZGZjMzZmOWM3 OGRkMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk YjVhODU5YjEtNzM1OC00N2M4LTk1NjktYTY1NWI0YmE3ZmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHqyKvb03J9nAOp0ijViH8H2iu7uciRhggon crPvyZN50LxjbZrdI534HObLFBXGqPwn0buvxk4Kpma4iopBIk1aNnP8pbc1FZWE hhMDr5f9e7Li3hje30EXe5604+kgrvtifKlhSc6IcJpr78RpQ3WaN2DqIee2eIWF TB0TTkGO5kwZvEvRyQlKbYeSKJoyTOHXnlRDR+q/AX8N7bz5GsxQjpOPUZu5J4zz TS1KTJEZRFweg1+qj5DY79GM4ZRUVIaONEq/l8Gp0W1tHpAd+R3RRq+KfvQHzLWu cv0miPSChbeAK/0wAlLId5n8t+VHnefrfxe6pnJE+kA+g5k3yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGqZFuFmXVFxl7Dc+qPXr8jfg2cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YmE3 NDdjZS05YTRkLTQ3MGMtYjNhMS1kZmMzNmY5Yzc4ZGQvNWE3ZTk0YWEtZGEyMC0z NjIwLTlhNWYtZTRlN2ZiZGEwNGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2JhNzQ3Y2UtOWE0ZC00NzBjLWIz YTEtZGZjMzZmOWM3OGRkLzdiYTc0N2NlLTlhNGQtNDcwYy1iM2ExLWRmYzM2Zjlj NzhkZC5jcmwwHwYDVR0jBBgwFoAU2cENbez66cRVgdY1AR7AbdZwSqowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YmE3NDdjZS05YTRkLTQ3MGMtYjNhMS1kZmMz NmY5Yzc4ZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFDwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2oSek8nVGBjjtj1y3be8ar0yNxY+Or0n9Rve3AXUoRtr6tIr65VG9S 9Nr7AmcvX0HzOQifjhile4+eQDJOV0OtnJKo9HC8M1Y4D2a7Hn0cmK3REUbnoLIy aqgBpTHnW111HHY++H2V68xERitWM74qeRoTsw2f3yJNlTW1r4vtHMXHRpKlDwtv 3VGurxLc0LgwSWA/wWWrRHHERyBZKOwDeEwD45JRXqbcxO3vdpJUW+DenWo4YyAd aB2axj3nh2aSBZQecvo7M0Mo8A1Nq82BOMHxvEswzVuEuo4ZT8+WvhUsewqCvWEo c3KAiuGUkB06q+4yfkBYQrzBc6TJFdE= -----END CERTIFICATE-----Generated at Tue Sep 22 08:33:55 2026 by rpki-client