$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/ba7b0b47-562e-3d6a-b52a-a9e895f8748d.roa File: ba7b0b47-562e-3d6a-b52a-a9e895f8748d.roa (raw, json) Hash identifier: aLWEmtmrYa6oty/nwtnKBG0G78MhNIpCqL6JCHWfRVo= Subject key identifier: 32:70:C0:13:54:E1:94:57:29:10:E5:50:A4:EE:71:89:81:B5:4F:BE Certificate issuer: /CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460 Certificate serial: 010D0C9F4328584F119D0B5281403D1ACD3A2A80 Authority key identifier: 10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/ba7b0b47-562e-3d6a-b52a-a9e895f8748d.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 7018 IP address blocks: 199.187.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:0b:52:81:40:3d:1a:cd:3a:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=37f5f8f9-651a-448b-a036-9ccb2787c966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:60:17:e4:54:0a:a1:e5:c1:1a:34:b6:51:80: 97:c5:20:24:19:75:38:11:6b:b7:7e:a1:bf:37:c7: 58:79:82:f1:a4:6e:56:94:71:8a:28:6f:53:44:ef: a8:7a:87:26:24:c5:42:8e:e3:b9:35:24:16:b9:85: 90:2d:23:18:17:77:b6:2d:e4:68:5d:4f:34:6b:97: 60:4c:1e:4c:1e:9e:94:92:40:ec:15:73:d6:c9:b2: 21:34:79:7d:f3:23:53:f9:6f:f5:76:42:da:d5:98: db:10:d1:c5:47:1d:c1:e6:77:e6:70:1f:21:4c:47: 18:53:6d:45:65:de:d1:50:31:f9:f8:59:b3:38:0a: f2:18:c5:95:06:44:e3:54:e0:c9:c6:ee:c4:63:8a: d5:c2:42:8b:e7:cb:9d:0b:82:28:dd:00:ff:9f:f3: 8c:87:58:9f:06:be:b9:73:d9:77:06:f5:00:c7:54: 0d:9f:ac:47:9e:9b:97:b8:0e:47:a3:55:b1:78:88: 1f:96:ae:3a:97:42:4e:67:82:f4:f0:e8:9d:1b:79: c0:4c:c0:e7:32:90:78:3d:c0:80:bc:0f:d3:ff:03: 97:84:5c:d3:0a:d0:12:41:07:be:7d:61:a2:78:e9: b8:1a:de:a6:32:9c:7c:12:f4:36:2e:ed:2c:52:fd: 7a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:70:C0:13:54:E1:94:57:29:10:E5:50:A4:EE:71:89:81:B5:4F:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/ba7b0b47-562e-3d6a-b52a-a9e895f8748d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl X509v3 Authority Key Identifier: keyid:10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer sbgp-ipAddrBlock: critical IPv4: 199.187.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:37:27:83:1d:1d:32:0d:ec:1d:7b:a4:96:71:d6:90:14:17: 80:8f:52:8c:13:bd:d3:15:95:2d:e0:40:66:22:67:76:89:91: f5:0d:a1:c9:0c:f7:44:a0:e1:54:c1:eb:2d:a0:b8:02:e1:5f: 2b:2b:a5:84:73:83:0c:b6:e6:e0:62:77:04:38:8a:36:35:23: c4:ec:9d:df:12:20:67:59:b1:be:76:76:50:24:7e:84:a9:c4: 27:cc:e9:55:38:ba:68:bf:7f:b3:0d:6b:9f:11:29:78:24:31: d0:07:67:35:ec:99:67:6d:47:05:73:b7:f2:eb:f9:57:37:74: 7f:48:a4:c5:c2:bf:e9:ed:40:e1:75:eb:24:cb:1f:bd:0c:df: 0e:b8:22:98:f0:ae:06:4e:eb:3e:9e:e1:5e:35:59:b5:e7:d3: 2b:ca:7a:c3:b4:b5:91:c7:8a:20:52:92:5f:52:4d:c3:f9:d2: 26:fc:33:1b:58:be:39:84:39:8f:72:3b:68:88:c2:97:87:44: 78:18:0e:a7:79:77:5d:01:a8:30:bf:b0:40:7d:39:32:22:d3: 51:81:41:25:a3:37:03:64:d9:9e:f1:58:8d:67:07:d3:e1:02: 82:3b:a6:ce:4d:d3:8d:5f:8d:0e:d6:60:07:6f:ee:ac:8a:9c: 00:0a:64:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnQtSgUA9Gs06KoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDNmYWMtYWI5OS00YjM3LWE0MmUtZGJmNjdhOTVj NDYwMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MzdmNWY4ZjktNjUxYS00NDhiLWEwMzYtOWNjYjI3ODdjOTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomAX5FQKoeXBGjS2UYCXxSAkGXU4EWu3fqG/ N8dYeYLxpG5WlHGKKG9TRO+oeocmJMVCjuO5NSQWuYWQLSMYF3e2LeRoXU80a5dg TB5MHp6UkkDsFXPWybIhNHl98yNT+W/1dkLa1ZjbENHFRx3B5nfmcB8hTEcYU21F Zd7RUDH5+FmzOAryGMWVBkTjVODJxu7EY4rVwkKL58udC4Io3QD/n/OMh1ifBr65 c9l3BvUAx1QNn6xHnpuXuA5Ho1WxeIgflq46l0JOZ4L08OidG3nATMDnMpB4PcCA vA/T/wOXhFzTCtASQQe+fWGieOm4Gt6mMpx8EvQ2Lu0sUv16OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJwwBNU4ZRXKRDlUKTucYmBtU++MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk M2ZhYy1hYjk5LTRiMzctYTQyZS1kYmY2N2E5NWM0NjAvYmE3YjBiNDctNTYyZS0z ZDZhLWI1MmEtYTllODk1Zjg3NDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDNmYWMtYWI5OS00YjM3LWE0 MmUtZGJmNjdhOTVjNDYwL2Q0NGQzZmFjLWFiOTktNGIzNy1hNDJlLWRiZjY3YTk1 YzQ2MC5jcmwwHwYDVR0jBBgwFoAUEHfkdKYtZFtD8H4411+2zqs3WzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkM2ZhYy1hYjk5LTRiMzctYTQyZS1kYmY2 N2E5NWM0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx7u8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJU3J4MdHTIN7B17pJZx1pAUF4CPUowTvdMVlS3gQGYiZ3aJkfUNockM 90Sg4VTB6y2guALhXysrpYRzgwy25uBidwQ4ijY1I8Tsnd8SIGdZsb52dlAkfoSp xCfM6VU4umi/f7MNa58RKXgkMdAHZzXsmWdtRwVzt/Lr+Vc3dH9IpMXCv+ntQOF1 6yTLH70M3w64IpjwrgZO6z6e4V41WbXn0yvKesO0tZHHiiBSkl9STcP50ib8MxtY vjmEOY9yO2iIwpeHRHgYDqd5d10BqDC/sEB9OTIi01GBQSWjNwNk2Z7xWI1nB9Ph AoI7ps5N041fjQ7WYAdv7qyKnAAKZPg= -----END CERTIFICATE-----Generated at Sun Sep 20 14:54:47 2026 by rpki-client