$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/ba0136e4-bde7-3b49-b89a-31bfece2e729.roa File: ba0136e4-bde7-3b49-b89a-31bfece2e729.roa (raw, json) Hash identifier: y+dHeWPwwNuSmR1ZKaes5ZArb5ZImntmTsmq0UxjgPc= Subject key identifier: CD:1E:84:CF:3A:C2:87:E4:48:19:3D:C8:8C:AE:56:95:37:88:CE:29 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584E253F1C7E190B96AC0F930BC0 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/ba0136e4-bde7-3b49-b89a-31bfece2e729.roa Signing time: Fri 12 Jun 2026 09:00:11 +0000 ROA not before: Fri 12 Jun 2026 09:00:11 +0000 ROA not after: Thu 10 Sep 2026 09:00:11 +0000 asID: 834 IP address blocks: 198.1.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:25:3f:1c:7e:19:0b:96:ac:0f:93:0b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Jun 12 09:00:11 2026 GMT Not After : Sep 10 09:00:11 2026 GMT Subject: CN=d8e51007-44f9-4e89-9556-89c93d140bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:0b:65:39:2b:3d:22:48:f5:f1:71:f7:b8:7a: fb:9b:ab:bf:0f:87:34:e0:64:bf:03:1e:2e:28:7f: 15:78:af:3e:a8:d4:10:e6:ba:1f:fa:c1:fd:06:1b: 03:c7:bc:0c:10:8a:0e:92:78:f7:ba:79:50:02:c4: cb:a3:aa:36:df:ed:f4:96:6f:d1:13:61:0c:2d:67: 8d:04:c5:41:08:d9:af:e5:80:f9:aa:77:72:08:55: 1b:48:14:59:01:e1:6f:8f:67:20:4c:63:4b:bb:09: 4d:9f:a5:73:ba:88:ff:fa:a5:66:b8:78:9a:22:3c: f2:bf:1f:9d:f3:72:7d:b1:a8:6d:e4:83:be:23:3d: 01:22:1f:1d:6c:0c:27:f6:20:66:d0:34:57:d7:7f: 34:77:93:94:84:1f:18:9c:fa:4d:19:55:b6:9f:c9: 83:34:47:ca:ab:eb:21:cc:45:11:28:38:d5:1b:ba: 22:da:72:ce:55:58:1a:d6:c5:5f:e9:72:b1:ab:f6: 20:61:b2:5f:dd:0b:e8:3f:ab:b2:7c:82:b9:ce:4a: fd:80:6d:53:62:2c:10:d6:92:04:f5:fb:0a:49:56: c5:2d:30:55:5d:16:ae:a9:94:bc:93:72:8c:98:36: f5:3f:cb:22:84:fe:c7:e7:d3:18:f5:52:79:03:8e: ff:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:1E:84:CF:3A:C2:87:E4:48:19:3D:C8:8C:AE:56:95:37:88:CE:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/ba0136e4-bde7-3b49-b89a-31bfece2e729.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:fa:39:46:e2:71:6e:01:14:e4:d7:b7:72:15:74:82:c9:7d: 1e:88:98:8d:53:99:9f:c5:a0:0f:7c:0a:93:8d:a1:9c:15:36: 37:ac:2a:62:58:5b:49:27:a6:3f:f0:0d:62:28:42:da:65:88: d5:9a:5e:e5:9a:5f:b1:10:bd:39:1a:41:d6:10:df:b1:0a:26: 41:1b:ea:38:57:70:11:83:34:0d:2b:02:63:1d:17:19:36:7c: 1a:16:b9:24:02:a0:24:1e:8b:5b:62:0c:89:00:38:bf:79:6e: 2e:e8:35:c9:54:9d:f0:36:12:18:1c:c8:78:c2:be:ac:07:6a: a8:3f:91:38:0b:76:fd:e5:47:be:1f:b2:3c:dd:69:31:38:5a: bd:41:82:06:61:60:c9:93:7f:29:c8:ac:b5:8c:6d:22:fe:bf: db:db:04:62:96:89:6b:87:28:59:1e:c5:72:24:b2:23:87:c9: 28:d4:c6:a5:23:fe:ed:2d:ad:c0:e8:69:ac:dd:b6:ad:54:4f: 83:a0:44:4a:7a:93:63:41:b2:01:ba:19:af:59:a5:e4:7d:89: e5:af:ea:21:59:73:75:54:92:6a:02:85:12:63:1d:54:4d:26: 43:84:be:d9:e4:4e:48:a5:09:91:c0:63:07:1f:73:3f:b5:c2: 52:82:9f:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4lPxx+GQuWrA+TC8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk ZDhlNTEwMDctNDRmOS00ZTg5LTk1NTYtODljOTNkMTQwYmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6AtlOSs9Ikj18XH3uHr7m6u/D4c04GS/Ax4u KH8VeK8+qNQQ5rof+sH9BhsDx7wMEIoOknj3unlQAsTLo6o23+30lm/RE2EMLWeN BMVBCNmv5YD5qndyCFUbSBRZAeFvj2cgTGNLuwlNn6Vzuoj/+qVmuHiaIjzyvx+d 83J9saht5IO+Iz0BIh8dbAwn9iBm0DRX1380d5OUhB8YnPpNGVW2n8mDNEfKq+sh zEURKDjVG7oi2nLOVVga1sVf6XKxq/YgYbJf3QvoP6uyfIK5zkr9gG1TYiwQ1pIE 9fsKSVbFLTBVXRauqZS8k3KMmDb1P8sihP7H59MY9VJ5A47/AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0ehM86wofkSBk9yIyuVpU3iM4pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvYmEwMTM2ZTQtYmRlNy0z YjQ5LWI4OWEtMzFiZmVjZTJlNzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABz6OUbicW4BFOTXt3IVdILJfR6ImI1TmZ/FoA98CpONoZwVNjesKmJY W0knpj/wDWIoQtpliNWaXuWaX7EQvTkaQdYQ37EKJkEb6jhXcBGDNA0rAmMdFxk2 fBoWuSQCoCQei1tiDIkAOL95bi7oNclUnfA2EhgcyHjCvqwHaqg/kTgLdv3lR74f sjzdaTE4Wr1BggZhYMmTfynIrLWMbSL+v9vbBGKWiWuHKFkexXIksiOHySjUxqUj /u0trcDoaazdtq1UT4OgREp6k2NBsgG6Ga9ZpeR9ieWv6iFZc3VUkmoChRJjHVRN JkOEvtnkTkilCZHAYwcfcz+1wlKCn0Q= -----END CERTIFICATE-----Generated at Sat Jun 13 05:52:21 2026 by rpki-client