$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/acb1cfa6-ba72-3f9c-a10d-430c59209c15.roa File: acb1cfa6-ba72-3f9c-a10d-430c59209c15.roa (raw, json) Hash identifier: 8Uuq1tHeo5U9e1R6gMTZJursdNS2q2adeDV8F+GUC30= Subject key identifier: BE:D3:51:0F:2B:2C:BD:AC:54:45:27:56:04:76:4D:D1:71:56:09:5F Certificate issuer: /CN=ba6a95b3-dd3c-40de-9bd2-84357b74f801 Certificate serial: 010D0C9F4328584F389DB0677628E5BD12330C80 Authority key identifier: 56:83:39:F0:DF:32:B7:60:C5:65:26:B1:9D:69:1F:6F:6C:44:A1:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/acb1cfa6-ba72-3f9c-a10d-430c59209c15.roa Signing time: Sat 19 Sep 2026 00:18:26 +0000 ROA not before: Sat 19 Sep 2026 00:18:26 +0000 ROA not after: Sun 08 Nov 2026 14:00:12 +0000 asID: 19814 IP address blocks: 23.189.120.0/24 maxlen: 24 208.72.224.0/24 maxlen: 24 2602:f805::/48 maxlen: 48 2602:f805:110::/48 maxlen: 48 2602:f805:800::/48 maxlen: 48 2602:f805:900::/48 maxlen: 48 2602:f805:a00::/48 maxlen: 48 2602:f805:b00::/48 maxlen: 48 2602:f805:c00::/48 maxlen: 48 2602:f805:d00::/48 maxlen: 48 2602:f805:e00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:38:9d:b0:67:76:28:e5:bd:12:33:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6a95b3-dd3c-40de-9bd2-84357b74f801 Validity Not Before: Sep 19 00:18:26 2026 GMT Not After : Nov 8 14:00:12 2026 GMT Subject: CN=b361d9ad-9af4-4bb6-88f3-6828aa7fd2a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:76:32:13:2e:7b:6b:34:8a:ec:5b:ea:eb:64: 9d:f8:8c:cf:f4:ab:ee:08:c5:94:fd:2c:f6:30:8d: 90:50:5d:cc:88:b3:e9:ad:d0:20:d0:71:40:82:5f: 38:89:f8:35:74:72:f1:dd:78:f8:2d:64:db:10:86: 7f:be:09:99:98:2c:02:2f:90:a4:aa:12:b7:7c:72: b0:ba:1b:4e:9f:24:18:80:2b:02:e1:af:95:29:91: 6e:f4:bf:dc:72:bf:88:4e:f3:e3:ed:f9:5a:ce:1c: 77:96:fa:3f:76:c1:7a:f3:9b:7b:8e:a6:06:54:a9: 63:0a:0d:99:7d:54:2a:2d:eb:54:bd:c3:be:de:9a: b4:c3:bb:7e:e6:2e:5b:df:fd:e3:89:27:00:79:36: ba:21:d7:ef:ec:d5:04:0f:d4:98:d8:b9:94:06:27: 2f:cd:72:7d:96:30:88:8d:7d:d4:e9:b8:2b:89:93: 55:80:af:e0:c5:a6:35:eb:57:7d:d7:ae:98:b7:fa: 33:a8:13:eb:74:11:16:01:18:51:84:48:9d:7f:a4: 5f:ef:0c:e8:28:68:1d:53:30:dd:38:2e:0c:ba:da: 9e:9c:e5:97:cd:1a:50:94:a3:c1:0b:9f:a7:bf:3e: 7a:73:c8:7a:5c:ed:7f:bb:c0:81:06:ad:2a:ef:29: 3f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D3:51:0F:2B:2C:BD:AC:54:45:27:56:04:76:4D:D1:71:56:09:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/acb1cfa6-ba72-3f9c-a10d-430c59209c15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.crl X509v3 Authority Key Identifier: keyid:56:83:39:F0:DF:32:B7:60:C5:65:26:B1:9D:69:1F:6F:6C:44:A1:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer sbgp-ipAddrBlock: critical IPv4: 23.189.120.0/24 208.72.224.0/24 IPv6: 2602:f805::/48 2602:f805:110::/48 2602:f805:800::/48 2602:f805:900::/48 2602:f805:a00::/48 2602:f805:b00::/48 2602:f805:c00::/48 2602:f805:d00::/48 2602:f805:e00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:e7:57:b1:22:2f:11:92:14:db:de:5b:6d:56:7e:41:60:3c: 41:69:92:9e:62:c0:59:e4:5e:f2:8a:68:d5:7b:c2:b2:db:80: 02:e1:f8:20:12:cf:76:f6:b5:12:3b:fd:bb:3b:2f:40:c4:23: f9:c0:30:ff:8b:47:36:f3:f1:e7:81:3b:9b:99:76:9e:12:58: 1e:3a:2c:9f:38:a4:af:b8:6e:03:b9:9e:06:47:ba:c6:b2:6e: 21:15:08:74:f5:fe:e8:26:c4:6b:4a:4f:95:93:df:2e:66:7c: 84:20:a6:bd:b9:0f:45:fa:10:52:3a:87:8d:06:2d:95:cc:c5: 37:09:f8:c1:34:d3:20:e5:5d:47:63:a5:fe:be:48:53:95:2a: 51:d1:dc:c8:ee:9f:6d:88:a2:e2:77:d2:84:b2:03:78:6d:23: ea:08:1f:62:55:df:f1:bb:9c:53:2e:98:e5:8a:25:e2:6e:bd: c1:98:98:d9:6b:3f:cc:7a:f0:8c:a6:34:4f:ca:a4:8d:50:46: df:56:19:48:17:be:0a:1a:75:53:2c:59:cc:ed:44:bc:00:f1: 04:04:c6:7f:bf:7d:ac:db:4d:4c:b4:60:94:dc:b9:16:c1:08: 44:1c:97:6b:65:df:e9:7b:92:8f:97:dc:08:0b:bd:4c:e0:18: 61:ff:3d:74 -----BEGIN CERTIFICATE----- MIIGojCCBYqgAwIBAgIUAQ0Mn0MoWE84nbBndijlvRIzDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE2YTk1YjMtZGQzYy00MGRlLTliZDItODQzNTdiNzRm ODAxMB4XDTI2MDkxOTAwMTgyNloXDTI2MTEwODE0MDAxMlowLzEtMCsGA1UEAxMk YjM2MWQ5YWQtOWFmNC00YmI2LTg4ZjMtNjgyOGFhN2ZkMmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nYyEy57azSK7Fvq62Sd+IzP9KvuCMWU/Sz2 MI2QUF3MiLPprdAg0HFAgl84ifg1dHLx3Xj4LWTbEIZ/vgmZmCwCL5CkqhK3fHKw uhtOnyQYgCsC4a+VKZFu9L/ccr+ITvPj7flazhx3lvo/dsF685t7jqYGVKljCg2Z fVQqLetUvcO+3pq0w7t+5i5b3/3jiScAeTa6Idfv7NUED9SY2LmUBicvzXJ9ljCI jX3U6bgriZNVgK/gxaY161d9166Yt/ozqBPrdBEWARhRhEidf6Rf7wzoKGgdUzDd OC4MutqenOWXzRpQlKPBC5+nvz56c8h6XO1/u8CBBq0q7yk/QQIDAQABo4IDtDCC A7AwHQYDVR0OBBYEFL7TUQ8rLL2sVEUnVgR2TdFxVglfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iYTZh OTViMy1kZDNjLTQwZGUtOWJkMi04NDM1N2I3NGY4MDEvYWNiMWNmYTYtYmE3Mi0z ZjljLWExMGQtNDMwYzU5MjA5YzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYmE2YTk1YjMtZGQzYy00MGRlLTli ZDItODQzNTdiNzRmODAxL2JhNmE5NWIzLWRkM2MtNDBkZS05YmQyLTg0MzU3Yjc0 ZjgwMS5jcmwwHwYDVR0jBBgwFoAUVoM58N8yt2DFZSaxnWkfb2xEoXMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iYTZhOTViMy1kZDNjLTQwZGUtOWJkMi04NDM1 N2I3NGY4MDEuY2VyMH4GCCsGAQUFBwEHAQH/BG8wbTASBAIAATAMAwQAF714AwQA 0EjgMFcEAgACMFEDBwAmAvgFAAADBwAmAvgFARADBwAmAvgFCAADBwAmAvgFCQAD BwAmAvgFCgADBwAmAvgFCwADBwAmAvgFDAADBwAmAvgFDQADBwAmAvgFDgAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAAedXsSIvEZIU295bbVZ+QWA8QWmSnmLAWeRe8opo1XvCstuAAuH4IBLP dva1Ejv9uzsvQMQj+cAw/4tHNvPx54E7m5l2nhJYHjosnzikr7huA7meBke6xrJu IRUIdPX+6CbEa0pPlZPfLmZ8hCCmvbkPRfoQUjqHjQYtlczFNwn4wTTTIOVdR2Ol /r5IU5UqUdHcyO6fbYii4nfShLIDeG0j6ggfYlXf8bucUy6Y5Yol4m69wZiY2Ws/ zHrwjKY0T8qkjVBG31YZSBe+Chp1UyxZzO1EvADxBATGf799rNtNTLRglNy5FsEI RByXa2Xf6XuSj5fcCAu9TOAYYf89dA== -----END CERTIFICATE-----Generated at Mon Sep 21 18:24:16 2026 by rpki-client