$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/ba900d95-d43c-3c51-8845-315aeb2d1789.roa File: ba900d95-d43c-3c51-8845-315aeb2d1789.roa (raw, json) Hash identifier: 21XQA29mXlOF/L7rYU6ngrOyxIXQTtk/Kh1+YAZlj6c= Subject key identifier: 86:DC:C6:14:4C:A2:BB:C2:46:B4:F1:7F:2D:80:99:B1:3A:25:16:3F Certificate issuer: /CN=9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec Certificate serial: 010D0C9F4328584F1241850897F470388CF36F80 Authority key identifier: B6:F3:A8:F6:CC:10:73:46:38:5F:AB:6A:C9:47:D8:74:32:0F:94:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/ba900d95-d43c-3c51-8845-315aeb2d1789.roa Signing time: Sat 05 Sep 2026 06:32:01 +0000 ROA not before: Sat 05 Sep 2026 06:32:01 +0000 ROA not after: Fri 04 Dec 2026 07:32:01 +0000 asID: 11179 IP address blocks: 206.201.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:12:41:85:08:97:f4:70:38:8c:f3:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec Validity Not Before: Sep 5 06:32:01 2026 GMT Not After : Dec 4 07:32:01 2026 GMT Subject: CN=00133a50-8cf9-4966-9059-7c6670c5e1f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8a:10:ee:eb:bf:6e:a6:fc:44:3b:16:76:35: b4:44:f1:c3:e5:27:db:17:34:cc:94:da:48:d9:71: 2f:b9:fb:c8:05:bf:2f:12:93:ad:0c:2c:33:40:6f: 8e:09:7c:ca:a6:ae:dc:83:8e:b0:bc:8c:da:a0:b5: f7:b9:25:18:1c:3c:3a:73:6e:71:7d:5d:fa:30:9a: c4:83:0e:c4:8e:77:27:19:9f:ae:b9:4a:93:af:f3: fc:9d:bc:39:f8:8e:bc:b7:95:08:8d:42:4a:17:ee: e5:86:6f:cf:fa:1e:a1:98:28:24:fb:e3:06:d3:6c: bc:c6:6b:28:90:46:65:31:ad:30:3f:db:88:a8:01: 32:39:45:f7:19:63:81:18:0c:2e:18:14:81:dc:d1: 81:dd:b9:82:21:a4:ce:74:15:5c:b7:22:b5:e5:eb: 2a:44:66:11:03:c6:da:1c:9c:f5:0b:0f:3c:a4:b8: 86:84:ea:54:35:87:6d:44:f5:86:8b:d9:0a:66:d3: dc:73:96:06:41:ab:b8:57:8f:ea:9c:e6:f5:34:03: 55:7f:c8:98:5b:4c:cf:bd:82:50:cc:64:3b:6a:20: 62:f1:50:7d:ed:e4:37:28:93:34:36:42:e0:8f:13: 6c:82:7d:75:f8:eb:06:33:e5:ea:99:73:6b:1d:e6: bc:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:DC:C6:14:4C:A2:BB:C2:46:B4:F1:7F:2D:80:99:B1:3A:25:16:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/ba900d95-d43c-3c51-8845-315aeb2d1789.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.crl X509v3 Authority Key Identifier: keyid:B6:F3:A8:F6:CC:10:73:46:38:5F:AB:6A:C9:47:D8:74:32:0F:94:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.cer sbgp-ipAddrBlock: critical IPv4: 206.201.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:14:92:2a:ca:d1:33:71:ea:d2:2c:54:42:b9:0b:1f:ec:ef: 49:34:80:bc:ff:84:34:18:55:81:2a:1e:eb:11:03:95:76:86: e5:9c:b6:f5:26:a5:cd:1d:fe:4b:f0:91:49:26:2f:46:a6:5f: 55:9c:1d:d3:23:d9:53:4a:d9:b8:df:e8:68:ba:7a:4c:7b:3c: 10:11:2e:5a:d6:1e:80:65:14:e4:78:ef:43:9b:02:ae:03:67: c8:b9:70:12:0b:af:55:16:1b:e6:d6:c0:ea:4f:ea:73:28:fe: 42:2c:3d:2b:0c:58:c2:36:f1:ae:53:43:c6:ad:63:88:f3:a6: 62:5d:c2:d3:92:2e:ce:6a:b9:c1:14:de:75:92:18:7b:25:bb: 1d:e3:72:11:6f:91:ce:50:a6:a7:23:c7:54:03:15:09:cc:b9: b6:34:5b:84:78:35:70:27:82:45:d0:07:c0:7a:7c:09:e6:27: 3f:ef:6b:b8:23:c7:c2:7c:2e:1c:9d:2a:b4:48:59:a9:c4:68: 1d:35:e9:4e:b6:b5:3d:ce:4f:e2:e9:47:9b:e0:e4:e2:07:2f: 8e:68:c0:e6:2a:58:a4:4d:d4:95:e0:92:72:35:a1:ef:4d:c4: eb:2f:22:97:9b:4f:72:2e:7b:53:48:d7:50:f0:58:6c:ca:75: 51:7f:cd:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8SQYUIl/RwOIzzb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFjMzNiZDUtOWRmNC00YWIwLWIwODQtOGQ1OGU1MmZm N2VjMB4XDTI2MDkwNTA2MzIwMVoXDTI2MTIwNDA3MzIwMVowLzEtMCsGA1UEAxMk MDAxMzNhNTAtOGNmOS00OTY2LTkwNTktN2M2NjcwYzVlMWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IoQ7uu/bqb8RDsWdjW0RPHD5SfbFzTMlNpI 2XEvufvIBb8vEpOtDCwzQG+OCXzKpq7cg46wvIzaoLX3uSUYHDw6c25xfV36MJrE gw7EjncnGZ+uuUqTr/P8nbw5+I68t5UIjUJKF+7lhm/P+h6hmCgk++MG02y8xmso kEZlMa0wP9uIqAEyOUX3GWOBGAwuGBSB3NGB3bmCIaTOdBVctyK15esqRGYRA8ba HJz1Cw88pLiGhOpUNYdtRPWGi9kKZtPcc5YGQau4V4/qnOb1NANVf8iYW0zPvYJQ zGQ7aiBi8VB97eQ3KJM0NkLgjxNsgn11+OsGM+XqmXNrHea8IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbcxhRMorvCRrTxfy2AmbE6JRY/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi85YWMz M2JkNS05ZGY0LTRhYjAtYjA4NC04ZDU4ZTUyZmY3ZWMvYmE5MDBkOTUtZDQzYy0z YzUxLTg4NDUtMzE1YWViMmQxNzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvOWFjMzNiZDUtOWRmNC00YWIwLWIw ODQtOGQ1OGU1MmZmN2VjLzlhYzMzYmQ1LTlkZjQtNGFiMC1iMDg0LThkNThlNTJm ZjdlYy5jcmwwHwYDVR0jBBgwFoAUtvOo9swQc0Y4X6tqyUfYdDIPlMgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi85YWMzM2JkNS05ZGY0LTRhYjAtYjA4NC04ZDU4 ZTUyZmY3ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzsnJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMUkirK0TNx6tIsVEK5Cx/s70k0gLz/hDQYVYEqHusRA5V2huWctvUm pc0d/kvwkUkmL0amX1WcHdMj2VNK2bjf6Gi6ekx7PBARLlrWHoBlFOR470ObAq4D Z8i5cBILr1UWG+bWwOpP6nMo/kIsPSsMWMI28a5TQ8atY4jzpmJdwtOSLs5qucEU 3nWSGHslux3jchFvkc5Qpqcjx1QDFQnMubY0W4R4NXAngkXQB8B6fAnmJz/va7gj x8J8LhydKrRIWanEaB016U62tT3OT+LpR5vg5OIHL45owOYqWKRN1JXgknI1oe9N xOsvIpebT3Iue1NI11DwWGzKdVF/zYo= -----END CERTIFICATE-----Generated at Tue Sep 22 11:06:52 2026 by rpki-client