$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b/3d8d4f07-8c76-3de2-9f87-8cd573008c48.roa File: 3d8d4f07-8c76-3de2-9f87-8cd573008c48.roa (raw, json) Hash identifier: 39PC24jiKqSNI18xYFzCyevwnn/NnGuwEFQCg4snYjA= Subject key identifier: 0B:70:68:4C:B1:84:4B:82:1B:04:18:69:C8:75:83:FC:68:89:AB:91 Certificate issuer: /CN=ba9fc663-6e78-4435-a4e3-45ff8082831b Certificate serial: 010D0C9F4328584F963864E4E1D554FC87E40A40 Authority key identifier: 45:60:60:A9:6F:7D:C0:21:A6:EB:ED:89:D4:20:65:00:5E:2D:EF:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b/3d8d4f07-8c76-3de2-9f87-8cd573008c48.roa Signing time: Thu 22 Oct 2026 13:00:13 +0000 ROA not before: Thu 22 Oct 2026 13:00:13 +0000 ROA not after: Wed 20 Jan 2027 14:00:13 +0000 asID: 402673 IP address blocks: 23.160.172.0/24 maxlen: 32 2602:f37b::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b/ba9fc663-6e78-4435-a4e3-45ff8082831b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b/ba9fc663-6e78-4435-a4e3-45ff8082831b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:96:38:64:e4:e1:d5:54:fc:87:e4:0a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9fc663-6e78-4435-a4e3-45ff8082831b Validity Not Before: Oct 22 13:00:13 2026 GMT Not After : Jan 20 14:00:13 2027 GMT Subject: CN=ec209ba0-f4c2-4a3c-a92e-b56d4ca61478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:55:a6:6b:34:0c:bc:4f:67:51:f2:0b:43:c6: 58:bb:60:7c:51:aa:e2:b1:fd:e9:d1:6a:bd:57:9d: f6:8f:7e:f9:e7:2a:43:2a:52:d5:1e:1a:a2:f2:f0: 01:ed:b5:0e:4d:b1:a3:78:5c:d7:79:da:36:98:a9: b7:ed:bc:29:7b:bf:3b:80:5d:91:09:c6:48:d5:bf: 8d:05:90:a2:a7:f9:30:28:cc:6e:2c:2e:ec:fd:d3: 38:78:f7:9f:7c:3d:16:30:e0:24:f1:9e:9e:00:ab: 1a:03:ea:3a:00:64:af:97:2b:a2:50:0b:08:2a:a3: 6b:92:51:58:5f:02:42:3a:f5:81:fd:83:70:07:49: 81:a5:91:52:00:fa:fd:7f:d3:b8:6d:41:74:0f:93: 0c:29:43:e2:a2:f7:fc:5b:a9:c4:f4:af:a5:e8:2a: d1:99:97:8c:f8:41:0b:af:36:e5:14:98:06:af:1e: 0f:a5:b7:2f:07:88:e6:db:62:03:7f:49:9a:22:b8: 3b:04:9f:6a:40:d0:92:11:cf:80:17:7e:4c:4f:43: cd:ed:39:e2:c2:98:8d:0a:86:f8:3e:f1:1e:fa:9a: 39:c8:49:cc:1d:b1:71:17:bd:e7:bd:bc:3a:98:83: 1f:50:3c:94:bc:4b:48:3e:06:8b:14:89:3d:7f:0c: cf:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:70:68:4C:B1:84:4B:82:1B:04:18:69:C8:75:83:FC:68:89:AB:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b/3d8d4f07-8c76-3de2-9f87-8cd573008c48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b/ba9fc663-6e78-4435-a4e3-45ff8082831b.crl X509v3 Authority Key Identifier: keyid:45:60:60:A9:6F:7D:C0:21:A6:EB:ED:89:D4:20:65:00:5E:2D:EF:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b.cer sbgp-ipAddrBlock: critical IPv4: 23.160.172.0/24 IPv6: 2602:f37b::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:fe:da:ed:d0:af:c1:40:e7:fa:b5:6e:dd:7c:96:92:16:c0: 93:9a:05:68:58:dd:cc:de:20:98:8e:b5:7a:62:fe:4c:85:5d: 71:7e:c1:f1:3a:e5:b9:20:94:97:25:19:98:9f:59:e1:68:78: 2e:da:44:71:51:4e:d3:53:ea:e8:da:2a:f3:12:b7:82:0d:6d: dd:a8:e7:a5:0f:85:9a:41:bc:26:23:cf:82:58:c3:2b:92:16: 3e:af:b4:04:2d:02:a8:d3:c5:52:34:e2:04:1b:15:98:3f:4e: cb:0b:55:e5:d3:5a:62:7f:d9:6b:99:dd:a0:e9:5f:5f:03:18: 3f:3c:ca:96:2b:d5:c1:5c:0e:fb:b0:94:a8:30:17:ac:e5:30: 63:d5:70:e2:33:be:8f:c1:79:19:52:49:5f:b5:ea:87:85:d9: e7:3a:20:0d:a7:bd:be:a7:53:f2:04:9e:13:b5:e2:8c:86:9e: 01:58:06:08:71:0f:de:3a:3d:f0:cc:37:11:e7:d9:6c:d7:e9: 72:f2:66:6e:45:33:2a:08:2a:cd:f6:1c:67:1d:f7:64:d5:c5: 43:40:b1:bd:0d:20:f3:df:3c:ef:6e:fa:c0:67:d9:3e:f3:d1: 82:c9:54:81:10:6f:25:86:d6:7c:a1:f9:b4:b8:3b:ab:c8:6e: b9:48:d8:72 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE+WOGTk4dVU/IfkCkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE5ZmM2NjMtNmU3OC00NDM1LWE0ZTMtNDVmZjgwODI4 MzFiMB4XDTI2MTAyMjEzMDAxM1oXDTI3MDEyMDE0MDAxM1owLzEtMCsGA1UEAxMk ZWMyMDliYTAtZjRjMi00YTNjLWE5MmUtYjU2ZDRjYTYxNDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1WmazQMvE9nUfILQ8ZYu2B8Uarisf3p0Wq9 V532j3755ypDKlLVHhqi8vAB7bUOTbGjeFzXedo2mKm37bwpe787gF2RCcZI1b+N BZCip/kwKMxuLC7s/dM4ePeffD0WMOAk8Z6eAKsaA+o6AGSvlyuiUAsIKqNrklFY XwJCOvWB/YNwB0mBpZFSAPr9f9O4bUF0D5MMKUPiovf8W6nE9K+l6CrRmZeM+EEL rzblFJgGrx4PpbcvB4jm22IDf0maIrg7BJ9qQNCSEc+AF35MT0PN7TniwpiNCob4 PvEe+po5yEnMHbFxF73nvbw6mIMfUDyUvEtIPgaLFIk9fwzPZQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFAtwaEyxhEuCGwQYach1g/xoiauRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iYTlm YzY2My02ZTc4LTQ0MzUtYTRlMy00NWZmODA4MjgzMWIvM2Q4ZDRmMDctOGM3Ni0z ZGUyLTlmODctOGNkNTczMDA4YzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYmE5ZmM2NjMtNmU3OC00NDM1LWE0 ZTMtNDVmZjgwODI4MzFiL2JhOWZjNjYzLTZlNzgtNDQzNS1hNGUzLTQ1ZmY4MDgy ODMxYi5jcmwwHwYDVR0jBBgwFoAURWBgqW99wCGm6+2J1CBlAF4t73swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iYTlmYzY2My02ZTc4LTQ0MzUtYTRlMy00NWZm ODA4MjgzMWIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6CsMA4E AgACMAgDBgAmAvN7ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAU/trt0K/BQOf6tW7dfJaSFsCTmgVoWN3M 3iCYjrV6Yv5MhV1xfsHxOuW5IJSXJRmYn1nhaHgu2kRxUU7TU+ro2irzEreCDW3d qOelD4WaQbwmI8+CWMMrkhY+r7QELQKo08VSNOIEGxWYP07LC1Xl01pif9lrmd2g 6V9fAxg/PMqWK9XBXA77sJSoMBes5TBj1XDiM76PwXkZUklfteqHhdnnOiANp72+ p1PyBJ4TteKMhp4BWAYIcQ/eOj3wzDcR59ls1+ly8mZuRTMqCCrN9hxnHfdk1cVD QLG9DSDz3zzvbvrAZ9k+89GCyVSBEG8lhtZ8ofm0uDuryG65SNhy -----END CERTIFICATE-----Generated at Sun Oct 25 21:57:50 2026 by rpki-client