$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/baa68c67-2eff-30bf-976e-892fa383dd82.roa File: baa68c67-2eff-30bf-976e-892fa383dd82.roa (raw, json) Hash identifier: yASLeJiSCcdLCvDNnENqmUJuZoQ9gShihwaSHKWCKVw= Subject key identifier: D4:4D:29:BD:FE:7F:2F:1A:A6:7F:8F:58:6E:0C:0C:25:7F:27:6A:9D Certificate issuer: /CN=1bd97e7a-c31d-417a-bc07-1ecdb96be09f Certificate serial: 010D0C9F4328584EED523C837F58B341ECE1DF80 Authority key identifier: E0:BC:46:6D:8F:5F:DC:23:84:62:42:1C:22:C8:6C:C1:EE:EB:CB:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/baa68c67-2eff-30bf-976e-892fa383dd82.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 40605 IP address blocks: 173.0.96.0/24 maxlen: 24 173.0.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:3c:83:7f:58:b3:41:ec:e1:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bd97e7a-c31d-417a-bc07-1ecdb96be09f Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=a8fe42b0-f173-4c55-98d1-a8b1fe309b0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fb:fa:df:5f:c7:a1:6f:70:dc:03:0f:69:5a: 56:6b:a4:02:cb:e5:ea:39:1b:b2:8d:9d:65:cd:c6: 62:03:e6:5b:36:22:31:eb:c8:90:eb:4a:9c:d5:29: 02:d6:ea:47:c7:ca:62:e1:2f:46:40:ae:10:b9:cb: da:35:6a:a5:4b:cd:62:a3:d6:ff:ef:ba:a9:a4:f1: fb:36:7d:bb:6a:68:42:5a:cd:d4:5c:b9:93:be:fd: 48:d1:a3:6d:3c:09:89:28:20:cd:e4:4f:7e:74:d4: de:15:ba:e1:14:3c:47:89:22:ae:2d:d2:78:9c:a4: f4:f7:62:60:9b:90:28:8f:60:d1:de:d3:99:a4:82: 8e:d0:a8:41:3e:3c:6c:52:d1:6b:5e:1c:b1:6a:77: 54:a8:46:4a:4b:25:0c:a8:a2:c6:b5:e9:6a:99:82: 7d:ea:c8:64:c0:70:5d:35:67:4b:fa:17:bd:c3:4b: 87:10:bb:66:76:96:29:58:d4:2c:34:9f:79:57:d5: 9c:e4:03:0b:6c:cf:70:30:02:1c:d1:fd:7c:39:47: 13:7d:4f:11:f7:b7:c7:0c:a5:bf:08:2d:25:76:f8: f7:58:7d:18:eb:e3:40:81:10:7e:63:ff:17:80:4c: 29:ed:6f:3a:c3:17:19:ab:16:54:68:ef:68:84:e8: c1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:4D:29:BD:FE:7F:2F:1A:A6:7F:8F:58:6E:0C:0C:25:7F:27:6A:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/baa68c67-2eff-30bf-976e-892fa383dd82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.crl X509v3 Authority Key Identifier: keyid:E0:BC:46:6D:8F:5F:DC:23:84:62:42:1C:22:C8:6C:C1:EE:EB:CB:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer sbgp-ipAddrBlock: critical IPv4: 173.0.96.0/24 173.0.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:75:19:64:34:78:4e:18:3a:84:ee:9b:b7:18:bb:c1:f6:53: 61:18:f6:c8:53:60:41:49:7b:a5:fb:73:40:e8:3d:08:69:38: 8c:c7:ad:cc:2c:d1:1f:db:4f:cc:8d:d9:4b:a9:f4:c7:15:06: df:46:42:fe:3d:71:43:c8:88:e1:13:65:33:bf:2c:39:b2:13: 7c:6a:1f:02:52:1f:33:37:10:b4:0c:4c:06:db:e2:5b:6b:49: f2:69:54:de:d1:b1:23:ab:69:66:e0:9b:49:1c:2d:50:80:f1: 15:a3:49:5f:08:ef:2e:9d:14:7b:ad:b6:5d:af:c7:da:58:29: 5c:07:4d:90:4b:e8:23:14:54:36:48:10:ac:60:07:7a:8d:83: 56:e9:d2:70:54:dd:98:e5:5f:92:65:2d:43:f3:32:90:64:4c: 8f:22:2f:ea:f2:67:ea:d8:aa:de:ac:4c:c6:87:af:60:22:c4: 54:0d:ce:53:2d:ae:fd:52:6f:12:ab:d4:73:38:f2:85:21:a2: 9d:2c:4c:73:f5:f4:a6:f5:1e:1b:34:74:35:74:c0:5b:2a:93: 69:17:cc:04:c2:b3:46:84:29:3a:51:02:76:b1:9b:47:8e:3c: f8:89:30:77:d3:d1:ac:8a:ad:6a:02:79:a8:1f:2c:5f:67:d7: b1:5e:4b:e2 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE7tUjyDf1izQezh34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWJkOTdlN2EtYzMxZC00MTdhLWJjMDctMWVjZGI5NmJl MDlmMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk YThmZTQyYjAtZjE3My00YzU1LTk4ZDEtYThiMWZlMzA5YjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPv631/HoW9w3AMPaVpWa6QCy+XqORuyjZ1l zcZiA+ZbNiIx68iQ60qc1SkC1upHx8pi4S9GQK4QucvaNWqlS81io9b/77qppPH7 Nn27amhCWs3UXLmTvv1I0aNtPAmJKCDN5E9+dNTeFbrhFDxHiSKuLdJ4nKT092Jg m5Aoj2DR3tOZpIKO0KhBPjxsUtFrXhyxandUqEZKSyUMqKLGtelqmYJ96shkwHBd NWdL+he9w0uHELtmdpYpWNQsNJ95V9Wc5AMLbM9wMAIc0f18OUcTfU8R97fHDKW/ CC0ldvj3WH0Y6+NAgRB+Y/8XgEwp7W86wxcZqxZUaO9ohOjB5QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNRNKb3+fy8apn+PWG4MDCV/J2qdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xYmQ5 N2U3YS1jMzFkLTQxN2EtYmMwNy0xZWNkYjk2YmUwOWYvYmFhNjhjNjctMmVmZi0z MGJmLTk3NmUtODkyZmEzODNkZDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWJkOTdlN2EtYzMxZC00MTdhLWJj MDctMWVjZGI5NmJlMDlmLzFiZDk3ZTdhLWMzMWQtNDE3YS1iYzA3LTFlY2RiOTZi ZTA5Zi5jcmwwHwYDVR0jBBgwFoAU4LxGbY9f3COEYkIcIshswe7ry44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xYmQ5N2U3YS1jMzFkLTQxN2EtYmMwNy0xZWNk Yjk2YmUwOWYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQArQBgAwQA rQBrMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAD11GWQ0eE4YOoTum7cYu8H2U2EY9shTYEFJe6X7c0DoPQhp OIzHrcws0R/bT8yN2Uup9McVBt9GQv49cUPIiOETZTO/LDmyE3xqHwJSHzM3ELQM TAbb4ltrSfJpVN7RsSOraWbgm0kcLVCA8RWjSV8I7y6dFHuttl2vx9pYKVwHTZBL 6CMUVDZIEKxgB3qNg1bp0nBU3ZjlX5JlLUPzMpBkTI8iL+ryZ+rYqt6sTMaHr2Ai xFQNzlMtrv1SbxKr1HM48oUhop0sTHP19Kb1Hhs0dDV0wFsqk2kXzATCs0aEKTpR Anaxm0eOPPiJMHfT0ayKrWoCeagfLF9n17FeS+I= -----END CERTIFICATE-----Generated at Sun Sep 20 21:26:58 2026 by rpki-client