$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b/3d8d4f07-8c76-3de2-9f87-8cd573008c48.roa File: 3d8d4f07-8c76-3de2-9f87-8cd573008c48.roa (raw, json) Hash identifier: A9mxcJT5hvAYaqxQGfNRn7gGbEa7p4/iCfu4PO9xHt0= Subject key identifier: 51:A7:8B:76:03:DA:5B:C5:FB:58:F2:10:C9:2B:8B:98:2F:27:E2:62 Certificate issuer: /CN=ba9fc663-6e78-4435-a4e3-45ff8082831b Certificate serial: 010D0C9F4328584E52243DCA63BA0D2497FEF000 Authority key identifier: 45:60:60:A9:6F:7D:C0:21:A6:EB:ED:89:D4:20:65:00:5E:2D:EF:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b/3d8d4f07-8c76-3de2-9f87-8cd573008c48.roa Signing time: Sun 28 Jun 2026 10:57:49 +0000 ROA not before: Sun 28 Jun 2026 10:57:49 +0000 ROA not after: Sat 26 Sep 2026 10:57:49 +0000 asID: 402673 IP address blocks: 23.160.172.0/24 maxlen: 32 2602:f37b::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b/ba9fc663-6e78-4435-a4e3-45ff8082831b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b/ba9fc663-6e78-4435-a4e3-45ff8082831b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:52:24:3d:ca:63:ba:0d:24:97:fe:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9fc663-6e78-4435-a4e3-45ff8082831b Validity Not Before: Jun 28 10:57:49 2026 GMT Not After : Sep 26 10:57:49 2026 GMT Subject: CN=2dd21214-9d1f-4cda-9d00-0822b40d0eaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:00:f5:e0:35:48:a2:df:af:b8:a4:0c:e6:fb: c9:31:70:c7:a9:ea:12:77:da:93:42:a7:4e:cf:9f: b2:21:c1:83:71:12:2f:f8:4b:5d:2e:ff:a8:d9:e4: 3e:e0:12:fc:eb:01:b8:12:32:2e:fc:01:00:43:4c: 8a:d3:48:64:e0:58:22:99:69:68:ab:59:d4:b6:f4: 5b:60:e5:e9:82:85:28:c5:c9:90:ac:fb:9a:4e:c7: 4a:ba:0c:62:cd:16:58:09:ea:12:12:2f:3c:cd:74: 5e:b7:90:4e:b3:7d:d6:54:a7:a3:82:ab:65:b6:50: 54:07:0e:26:04:39:b1:37:79:91:0f:e5:31:4c:16: 38:f6:f3:fc:71:9e:dd:88:7f:59:7c:0a:b0:c0:36: 9b:c2:da:36:27:5c:07:53:10:ca:70:40:72:9d:59: f9:92:d4:5d:42:4a:6d:12:e2:87:0f:84:d4:a1:16: e8:20:ca:95:fe:d4:d5:11:98:d8:c8:08:52:71:e3: 73:1f:d8:9f:c9:b9:6c:88:55:28:2c:e4:53:b8:f2: 69:26:cd:94:0d:ec:8a:ea:a8:3f:99:32:f6:e3:07: 2e:c0:98:e5:43:8c:fb:ac:3c:52:2f:8d:e0:60:b8: ad:85:a1:b5:b8:18:df:f0:d3:25:e4:71:08:af:04: b7:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:A7:8B:76:03:DA:5B:C5:FB:58:F2:10:C9:2B:8B:98:2F:27:E2:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b/3d8d4f07-8c76-3de2-9f87-8cd573008c48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b/ba9fc663-6e78-4435-a4e3-45ff8082831b.crl X509v3 Authority Key Identifier: keyid:45:60:60:A9:6F:7D:C0:21:A6:EB:ED:89:D4:20:65:00:5E:2D:EF:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b.cer sbgp-ipAddrBlock: critical IPv4: 23.160.172.0/24 IPv6: 2602:f37b::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:cf:77:25:33:69:06:ee:93:3c:c4:c9:58:0b:36:c1:33:74: 04:a7:8d:7e:44:ee:88:f9:ae:b7:e3:29:25:5d:41:d2:9a:36: b8:06:82:76:bd:59:4d:c8:66:e4:1b:b5:04:97:04:02:9d:c4: c3:72:73:8c:34:3d:fe:ca:42:08:85:ed:1a:f7:55:1f:11:9f: 14:0d:c3:a7:06:72:88:56:a5:87:df:b0:34:a3:93:94:f0:18: c2:e4:5f:dc:f4:8f:09:2c:72:46:66:9f:b5:af:5c:a9:02:9a: d4:8b:4f:ac:2b:6a:4f:45:f4:03:7c:55:c3:ad:9c:e4:c8:4f: 3b:ec:66:ae:11:47:30:82:c6:56:24:4e:94:24:c6:88:0e:fe: db:5e:0d:15:05:a7:f4:96:c2:ce:f8:cc:09:c5:70:a9:9c:8c: 24:fb:d1:83:a4:84:6b:8e:cf:5c:51:d6:00:a7:77:e0:c8:16: 2a:23:ea:64:4b:ce:fa:05:7b:9e:f0:69:a9:a5:ba:69:2f:8b: 5f:79:7a:e5:3d:41:49:6e:32:9a:a5:1b:84:eb:98:32:a0:70: 2e:88:33:e8:92:b7:7d:ed:50:74:9b:76:56:4f:08:05:9a:d6: 5d:59:0b:ff:29:49:43:bb:d7:0b:6f:7b:45:c4:eb:3f:7a:d6: 58:d8:13:4b -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE5SJD3KY7oNJJf+8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE5ZmM2NjMtNmU3OC00NDM1LWE0ZTMtNDVmZjgwODI4 MzFiMB4XDTI2MDYyODEwNTc0OVoXDTI2MDkyNjEwNTc0OVowLzEtMCsGA1UEAxMk MmRkMjEyMTQtOWQxZi00Y2RhLTlkMDAtMDgyMmI0MGQwZWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgD14DVIot+vuKQM5vvJMXDHqeoSd9qTQqdO z5+yIcGDcRIv+EtdLv+o2eQ+4BL86wG4EjIu/AEAQ0yK00hk4FgimWloq1nUtvRb YOXpgoUoxcmQrPuaTsdKugxizRZYCeoSEi88zXRet5BOs33WVKejgqtltlBUBw4m BDmxN3mRD+UxTBY49vP8cZ7diH9ZfAqwwDabwto2J1wHUxDKcEBynVn5ktRdQkpt EuKHD4TUoRboIMqV/tTVEZjYyAhSceNzH9ifyblsiFUoLORTuPJpJs2UDeyK6qg/ mTL24wcuwJjlQ4z7rDxSL43gYLithaG1uBjf8NMl5HEIrwS3oQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFFGni3YD2lvF+1jyEMkri5gvJ+JiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iYTlm YzY2My02ZTc4LTQ0MzUtYTRlMy00NWZmODA4MjgzMWIvM2Q4ZDRmMDctOGM3Ni0z ZGUyLTlmODctOGNkNTczMDA4YzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYmE5ZmM2NjMtNmU3OC00NDM1LWE0 ZTMtNDVmZjgwODI4MzFiL2JhOWZjNjYzLTZlNzgtNDQzNS1hNGUzLTQ1ZmY4MDgy ODMxYi5jcmwwHwYDVR0jBBgwFoAURWBgqW99wCGm6+2J1CBlAF4t73swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iYTlmYzY2My02ZTc4LTQ0MzUtYTRlMy00NWZm ODA4MjgzMWIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6CsMA4E AgACMAgDBgAmAvN7ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBwz3clM2kG7pM8xMlYCzbBM3QEp41+RO6I +a634yklXUHSmja4BoJ2vVlNyGbkG7UElwQCncTDcnOMND3+ykIIhe0a91UfEZ8U DcOnBnKIVqWH37A0o5OU8BjC5F/c9I8JLHJGZp+1r1ypAprUi0+sK2pPRfQDfFXD rZzkyE877GauEUcwgsZWJE6UJMaIDv7bXg0VBaf0lsLO+MwJxXCpnIwk+9GDpIRr js9cUdYAp3fgyBYqI+pkS876BXue8GmppbppL4tfeXrlPUFJbjKapRuE65gyoHAu iDPokrd97VB0m3ZWTwgFmtZdWQv/KUlDu9cLb3tFxOs/etZY2BNL -----END CERTIFICATE-----Generated at Tue Jul 21 20:56:59 2026 by rpki-client