$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3ba39ba7-a768-4a44-aad9-880db8565967/ed6283b6-8a7d-3ea2-83e2-d65fe0194a03.roa File: ed6283b6-8a7d-3ea2-83e2-d65fe0194a03.roa (raw, json) Hash identifier: usXIDm+OJ8VY34soZWjTgBoZq96Tbqh+fjC3XPpC1l0= Subject key identifier: 2B:57:03:46:4F:01:3F:D4:EE:F8:04:00:0A:E1:D5:6F:65:86:DC:D3 Certificate issuer: /CN=3ba39ba7-a768-4a44-aad9-880db8565967 Certificate serial: 010D0C9F4328584EA7999519725AE552A3483A00 Authority key identifier: 85:2E:78:51:7B:11:9D:94:14:6E:F3:A1:C4:63:54:E7:99:A8:32:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3ba39ba7-a768-4a44-aad9-880db8565967.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3ba39ba7-a768-4a44-aad9-880db8565967/ed6283b6-8a7d-3ea2-83e2-d65fe0194a03.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 10956 IP address blocks: 198.235.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3ba39ba7-a768-4a44-aad9-880db8565967/3ba39ba7-a768-4a44-aad9-880db8565967.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3ba39ba7-a768-4a44-aad9-880db8565967/3ba39ba7-a768-4a44-aad9-880db8565967.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3ba39ba7-a768-4a44-aad9-880db8565967.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:99:95:19:72:5a:e5:52:a3:48:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ba39ba7-a768-4a44-aad9-880db8565967 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=5fa1c1ea-3fb9-49f9-842c-e30f4e443ffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:96:e5:f4:77:3c:e6:21:29:31:cf:fa:2b:a4: a6:16:c5:a0:db:22:ac:ab:0c:af:8b:94:b9:01:1e: f5:88:96:80:da:4c:d6:61:e7:ab:fb:08:3d:da:06: 0a:c5:83:85:a2:5f:c6:a0:e3:d9:29:db:8d:33:c4: 1e:93:8d:ee:d4:4c:c3:86:d2:f9:03:84:68:28:f7: 38:c0:23:78:8b:62:b4:5b:4b:b6:91:81:f8:95:e9: b4:f4:24:e8:42:dd:f8:d5:52:b5:85:90:67:ac:cd: 6a:64:e1:e7:4d:00:be:8b:f2:f3:80:0a:66:96:cd: 45:32:6c:b0:1c:63:2e:d9:60:69:d5:e5:05:86:6d: d4:c2:ff:28:d5:55:84:55:6a:62:4d:d7:c8:1c:45: 10:43:79:90:c5:79:d7:4e:98:df:b7:59:52:df:29: 70:86:cf:5e:4c:30:e1:a3:68:81:82:c5:44:43:7f: be:99:7c:99:0c:ec:f7:5b:fa:d8:80:15:df:0c:2e: 23:fa:51:17:01:0d:c2:f8:af:4f:61:49:8c:82:c7: 65:05:c8:f2:d5:86:b6:6c:91:3c:28:92:4d:c9:7e: aa:dc:41:ef:30:82:2e:15:74:8a:bf:1f:32:c2:83: 89:3b:24:59:1c:c8:dc:cb:36:f6:99:96:d6:ad:6b: 1a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:57:03:46:4F:01:3F:D4:EE:F8:04:00:0A:E1:D5:6F:65:86:DC:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3ba39ba7-a768-4a44-aad9-880db8565967/ed6283b6-8a7d-3ea2-83e2-d65fe0194a03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3ba39ba7-a768-4a44-aad9-880db8565967/3ba39ba7-a768-4a44-aad9-880db8565967.crl X509v3 Authority Key Identifier: keyid:85:2E:78:51:7B:11:9D:94:14:6E:F3:A1:C4:63:54:E7:99:A8:32:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3ba39ba7-a768-4a44-aad9-880db8565967.cer sbgp-ipAddrBlock: critical IPv4: 198.235.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:50:54:ee:2e:73:de:68:c6:40:b8:09:7a:86:1b:0c:6e:7d: 84:cb:ee:75:42:d3:26:53:8c:e1:f5:2f:79:06:74:17:06:e6: e2:61:f1:d5:04:1e:d3:81:2a:2e:cc:d4:4e:e4:4d:72:51:97: 3a:c6:e3:84:4d:c2:e5:43:68:9d:f3:4a:b1:0d:04:92:a5:2d: 1f:90:8f:ff:59:31:e0:8e:8d:33:ab:50:1a:1c:e7:b2:f7:34: 2a:b7:77:22:fe:47:cc:bb:23:e8:c3:fc:c4:7f:10:6e:92:36: 75:74:cb:20:66:0d:f4:1b:fe:9d:c8:e2:47:92:4e:99:23:ab: 36:65:c9:6e:c4:a3:66:11:0c:96:ce:84:98:e3:43:3c:41:d1: 48:c4:db:a1:ff:df:ed:da:9b:04:9c:c0:c3:4f:1d:47:9d:3b: cc:6a:da:76:f0:49:7b:20:51:66:c9:12:d9:82:07:34:f4:2e: eb:74:79:ab:a3:cb:84:36:1a:8c:5e:b0:85:63:8a:cf:30:46: 88:61:b1:7d:e2:d4:e4:90:c8:f6:fc:3d:9b:84:fb:29:78:12: 1a:67:72:25:d4:bb:15:39:8a:9f:cf:90:ab:4f:0c:bc:20:a2: f2:02:91:6a:4e:cd:71:71:e4:08:2a:72:5c:20:21:34:df:54: e5:2e:52:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmZUZclrlUqNIOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JhMzliYTctYTc2OC00YTQ0LWFhZDktODgwZGI4NTY1 OTY3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NWZhMWMxZWEtM2ZiOS00OWY5LTg0MmMtZTMwZjRlNDQzZmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZbl9Hc85iEpMc/6K6SmFsWg2yKsqwyvi5S5 AR71iJaA2kzWYeer+wg92gYKxYOFol/GoOPZKduNM8Qek43u1EzDhtL5A4RoKPc4 wCN4i2K0W0u2kYH4lem09CToQt341VK1hZBnrM1qZOHnTQC+i/LzgApmls1FMmyw HGMu2WBp1eUFhm3Uwv8o1VWEVWpiTdfIHEUQQ3mQxXnXTpjft1lS3ylwhs9eTDDh o2iBgsVEQ3++mXyZDOz3W/rYgBXfDC4j+lEXAQ3C+K9PYUmMgsdlBcjy1Ya2bJE8 KJJNyX6q3EHvMIIuFXSKvx8ywoOJOyRZHMjcyzb2mZbWrWsacQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtXA0ZPAT/U7vgEAArh1W9lhtzTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8zYmEz OWJhNy1hNzY4LTRhNDQtYWFkOS04ODBkYjg1NjU5NjcvZWQ2MjgzYjYtOGE3ZC0z ZWEyLTgzZTItZDY1ZmUwMTk0YTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvM2JhMzliYTctYTc2OC00YTQ0LWFh ZDktODgwZGI4NTY1OTY3LzNiYTM5YmE3LWE3NjgtNGE0NC1hYWQ5LTg4MGRiODU2 NTk2Ny5jcmwwHwYDVR0jBBgwFoAUhS54UXsRnZQUbvOhxGNU55moMmAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8zYmEzOWJhNy1hNzY4LTRhNDQtYWFkOS04ODBk Yjg1NjU5NjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxuuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALZQVO4uc95oxkC4CXqGGwxufYTL7nVC0yZTjOH1L3kGdBcG5uJh8dUE HtOBKi7M1E7kTXJRlzrG44RNwuVDaJ3zSrENBJKlLR+Qj/9ZMeCOjTOrUBoc57L3 NCq3dyL+R8y7I+jD/MR/EG6SNnV0yyBmDfQb/p3I4keSTpkjqzZlyW7Eo2YRDJbO hJjjQzxB0UjE26H/3+3amwScwMNPHUedO8xq2nbwSXsgUWbJEtmCBzT0Lut0eauj y4Q2GoxesIVjis8wRohhsX3i1OSQyPb8PZuE+yl4EhpnciXUuxU5ip/PkKtPDLwg ovICkWpOzXFx5AgqclwgITTfVOUuUv8= -----END CERTIFICATE-----Generated at Tue Sep 22 18:03:51 2026 by rpki-client