$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/427f59fa-33fa-40f0-a5e6-ad09dff0b5b0/bffcad6f-5c6b-3ed6-b719-ff052f10daf7.roa File: bffcad6f-5c6b-3ed6-b719-ff052f10daf7.roa (raw, json) Hash identifier: bYi7V0gNeJ/YDcoZaVPJ/boNdWB2o6rkMd2r2nwXtxY= Subject key identifier: 9C:F7:C7:B5:DD:53:2E:A4:A5:20:DE:5F:91:F8:A3:E3:30:0E:7A:DE Certificate issuer: /CN=427f59fa-33fa-40f0-a5e6-ad09dff0b5b0 Certificate serial: 010D0C9F4328584F963860F6C926F4AE00572980 Authority key identifier: A7:D1:E5:FC:8F:85:49:9C:C1:14:90:84:73:FE:8F:CC:E5:58:1E:5D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/427f59fa-33fa-40f0-a5e6-ad09dff0b5b0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/427f59fa-33fa-40f0-a5e6-ad09dff0b5b0/bffcad6f-5c6b-3ed6-b719-ff052f10daf7.roa Signing time: Thu 22 Oct 2026 13:00:13 +0000 ROA not before: Thu 22 Oct 2026 13:00:13 +0000 ROA not after: Wed 20 Jan 2027 14:00:13 +0000 asID: 202036 IP address blocks: 23.160.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/427f59fa-33fa-40f0-a5e6-ad09dff0b5b0/427f59fa-33fa-40f0-a5e6-ad09dff0b5b0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/427f59fa-33fa-40f0-a5e6-ad09dff0b5b0/427f59fa-33fa-40f0-a5e6-ad09dff0b5b0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/427f59fa-33fa-40f0-a5e6-ad09dff0b5b0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:96:38:60:f6:c9:26:f4:ae:00:57:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=427f59fa-33fa-40f0-a5e6-ad09dff0b5b0 Validity Not Before: Oct 22 13:00:13 2026 GMT Not After : Jan 20 14:00:13 2027 GMT Subject: CN=4923b590-48b6-4724-8003-5647e9bbc95d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c8:02:bb:04:d9:41:3d:12:0c:79:95:92:a1: 79:f6:f1:75:03:a6:4a:a1:26:32:04:64:6b:08:9c: d8:29:8f:e0:56:e3:11:da:c6:59:93:d4:64:b3:2d: 93:b6:1b:a7:cd:54:b4:83:fb:cd:06:9f:1d:fd:02: 40:dd:c0:27:42:72:b3:3f:41:34:f7:72:12:95:d6: 40:3d:ba:10:11:52:95:b2:dc:e7:49:ed:07:85:18: 93:83:84:19:42:e5:d1:66:7b:cb:24:47:3e:8a:be: e4:a6:32:96:d6:b8:dd:77:b3:8c:a8:68:5f:0a:2b: b9:9c:3b:03:c6:90:14:f1:14:57:17:a7:6f:18:6d: 14:f4:49:9a:0d:a4:08:2c:5a:b4:ee:83:d9:4c:ae: 56:1e:bb:1a:23:03:79:40:8b:a8:80:92:78:4a:0d: 0d:ef:46:44:7c:21:94:53:36:7a:42:a8:0e:c4:34: 6e:56:66:84:18:f2:c5:99:38:34:12:58:8c:32:74: 7e:97:db:24:14:03:e8:a0:84:b4:74:c5:27:d5:fd: d2:71:1d:89:2c:52:02:50:23:46:2f:fe:d5:7a:13: aa:ec:e3:94:b9:5a:b1:88:8e:c1:bd:9c:90:88:f3: d2:32:67:96:ea:6f:ea:79:b2:e9:63:b7:b6:90:0a: b0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F7:C7:B5:DD:53:2E:A4:A5:20:DE:5F:91:F8:A3:E3:30:0E:7A:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/427f59fa-33fa-40f0-a5e6-ad09dff0b5b0/bffcad6f-5c6b-3ed6-b719-ff052f10daf7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/427f59fa-33fa-40f0-a5e6-ad09dff0b5b0/427f59fa-33fa-40f0-a5e6-ad09dff0b5b0.crl X509v3 Authority Key Identifier: keyid:A7:D1:E5:FC:8F:85:49:9C:C1:14:90:84:73:FE:8F:CC:E5:58:1E:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/427f59fa-33fa-40f0-a5e6-ad09dff0b5b0.cer sbgp-ipAddrBlock: critical IPv4: 23.160.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:83:e0:dc:8c:e3:2b:db:24:be:95:66:27:1f:5d:48:66:f7: 8d:f1:d5:ed:36:0e:85:2a:20:c8:32:37:9c:ec:bf:45:e6:d6: 26:48:5c:60:8a:3d:55:88:f9:64:02:b2:6a:85:87:9c:09:07: eb:43:46:63:86:d4:38:0c:17:46:63:89:24:66:fc:3f:65:4e: c0:34:c7:57:4f:6b:03:b0:49:83:01:91:5c:1b:2f:5a:cb:c8: 10:3f:0b:44:4b:7e:c2:4e:15:7e:c3:ba:4a:29:2e:cb:d1:29: 3e:c8:ea:7c:a7:85:9b:86:55:9b:41:2f:f6:80:19:aa:86:15: 1d:55:e2:fb:f1:6e:d3:bf:10:f1:f3:25:48:4f:ba:bc:1c:71: 36:dc:ab:a8:b7:5d:9b:b3:16:1c:eb:48:1b:38:eb:7c:81:f8: b2:3c:ad:1b:35:fe:6e:3f:3e:63:77:6a:03:2b:6d:c5:e3:0e: c2:28:5f:05:4f:25:bf:0e:0d:0d:76:b4:a4:98:07:a4:f9:da: ea:e2:04:5d:b2:db:87:3a:3a:72:4c:66:47:e5:b2:6d:1b:34: fd:c3:fe:b7:60:6d:65:50:fe:6a:12:f8:16:2b:91:0d:e0:1a: f7:44:d6:bf:27:04:e6:03:99:24:63:54:67:a2:4e:3a:b8:45: 21:ea:3b:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+WOGD2ySb0rgBXKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDI3ZjU5ZmEtMzNmYS00MGYwLWE1ZTYtYWQwOWRmZjBi NWIwMB4XDTI2MTAyMjEzMDAxM1oXDTI3MDEyMDE0MDAxM1owLzEtMCsGA1UEAxMk NDkyM2I1OTAtNDhiNi00NzI0LTgwMDMtNTY0N2U5YmJjOTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncgCuwTZQT0SDHmVkqF59vF1A6ZKoSYyBGRr CJzYKY/gVuMR2sZZk9Rksy2TthunzVS0g/vNBp8d/QJA3cAnQnKzP0E093ISldZA PboQEVKVstznSe0HhRiTg4QZQuXRZnvLJEc+ir7kpjKW1rjdd7OMqGhfCiu5nDsD xpAU8RRXF6dvGG0U9EmaDaQILFq07oPZTK5WHrsaIwN5QIuogJJ4Sg0N70ZEfCGU UzZ6QqgOxDRuVmaEGPLFmTg0EliMMnR+l9skFAPooIS0dMUn1f3ScR2JLFICUCNG L/7VehOq7OOUuVqxiI7BvZyQiPPSMmeW6m/qebLpY7e2kAqwQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJz3x7XdUy6kpSDeX5H4o+MwDnreMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80Mjdm NTlmYS0zM2ZhLTQwZjAtYTVlNi1hZDA5ZGZmMGI1YjAvYmZmY2FkNmYtNWM2Yi0z ZWQ2LWI3MTktZmYwNTJmMTBkYWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNDI3ZjU5ZmEtMzNmYS00MGYwLWE1 ZTYtYWQwOWRmZjBiNWIwLzQyN2Y1OWZhLTMzZmEtNDBmMC1hNWU2LWFkMDlkZmYw YjViMC5jcmwwHwYDVR0jBBgwFoAUp9Hl/I+FSZzBFJCEc/6PzOVYHl0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi80MjdmNTlmYS0zM2ZhLTQwZjAtYTVlNi1hZDA5 ZGZmMGI1YjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6CEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyD4NyM4yvbJL6VZicfXUhm943x1e02DoUqIMgyN5zsv0Xm1iZIXGCK PVWI+WQCsmqFh5wJB+tDRmOG1DgMF0ZjiSRm/D9lTsA0x1dPawOwSYMBkVwbL1rL yBA/C0RLfsJOFX7DukopLsvRKT7I6nynhZuGVZtBL/aAGaqGFR1V4vvxbtO/EPHz JUhPurwccTbcq6i3XZuzFhzrSBs463yB+LI8rRs1/m4/PmN3agMrbcXjDsIoXwVP Jb8ODQ12tKSYB6T52uriBF2y24c6OnJMZkflsm0bNP3D/rdgbWVQ/moS+BYrkQ3g GvdE1r8nBOYDmSRjVGeiTjq4RSHqOxs= -----END CERTIFICATE-----Generated at Sun Oct 25 20:12:30 2026 by rpki-client