$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b/3d8d4f07-8c76-3de2-9f87-8cd573008c48.roa File: 3d8d4f07-8c76-3de2-9f87-8cd573008c48.roa (raw, json) Hash identifier: nrisyL7s1+auNrnP5V6R5oswFQMs3O6b1ufGmJnMIpk= Subject key identifier: 3E:CF:20:32:28:F8:68:DD:ED:B7:F4:91:3C:54:C2:0E:34:B8:69:68 Certificate issuer: /CN=ba9fc663-6e78-4435-a4e3-45ff8082831b Certificate serial: 010D0C9F4328584EF44CCE0425AACD193E977700 Authority key identifier: 45:60:60:A9:6F:7D:C0:21:A6:EB:ED:89:D4:20:65:00:5E:2D:EF:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b/3d8d4f07-8c76-3de2-9f87-8cd573008c48.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 402673 IP address blocks: 23.160.172.0/24 maxlen: 32 2602:f37b::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b/ba9fc663-6e78-4435-a4e3-45ff8082831b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b/ba9fc663-6e78-4435-a4e3-45ff8082831b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:ce:04:25:aa:cd:19:3e:97:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9fc663-6e78-4435-a4e3-45ff8082831b Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=828d7f4b-fddc-4514-a354-738ba0e337ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:05:6f:ce:c9:8c:72:e0:ad:d2:5e:61:0b:cf: 08:67:46:2d:73:c2:b7:19:ec:bd:d3:e5:01:bd:04: 80:73:10:10:bf:3a:07:71:37:39:a6:9f:e2:01:51: 85:58:ea:0f:90:cb:ba:4e:43:72:54:35:d3:24:e2: 6b:32:cc:31:ce:92:12:3d:e2:cd:82:e9:71:60:d5: f6:c2:e9:3f:51:d2:33:20:08:4d:dc:bd:ae:a8:4c: a4:9d:fb:7d:27:8f:ee:53:2f:e4:67:db:06:05:1f: 36:7e:8b:f5:61:69:dd:ed:0d:f3:c4:62:5c:26:a4: fe:25:b9:aa:07:9b:d3:ff:ba:0f:68:91:9f:74:42: e9:48:92:76:f3:f6:f2:19:16:49:a3:48:c5:16:26: e0:14:58:63:e0:c0:72:5f:be:80:60:37:ab:16:8e: fa:96:41:62:b9:25:a0:e4:5c:c0:a1:3c:cf:5a:c6: 06:0c:30:a4:7f:7a:f9:50:e8:8a:6f:52:44:6a:5c: 86:8d:e1:fc:40:cd:28:b3:da:36:a6:0e:b5:5a:e1: a2:f0:99:b2:8f:d9:60:38:83:58:46:6e:c6:df:08: 29:49:95:6d:d6:94:e1:db:8f:c6:b6:18:99:6f:d6: fd:66:44:37:0a:3e:d6:9d:cf:d3:8b:e4:74:44:9a: bf:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CF:20:32:28:F8:68:DD:ED:B7:F4:91:3C:54:C2:0E:34:B8:69:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b/3d8d4f07-8c76-3de2-9f87-8cd573008c48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b/ba9fc663-6e78-4435-a4e3-45ff8082831b.crl X509v3 Authority Key Identifier: keyid:45:60:60:A9:6F:7D:C0:21:A6:EB:ED:89:D4:20:65:00:5E:2D:EF:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b.cer sbgp-ipAddrBlock: critical IPv4: 23.160.172.0/24 IPv6: 2602:f37b::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:a4:ee:c2:fb:8e:e5:8b:34:9b:87:23:69:b7:3a:0b:10:77: 59:6b:71:1a:1d:65:0f:fe:09:69:a5:6d:e9:99:34:d1:90:cf: 30:88:6d:65:21:e4:12:ff:9f:b1:ba:19:43:89:f7:dc:8c:d1: b4:b1:7d:5c:ac:2a:7a:45:7d:e0:14:06:42:c4:a6:46:06:34: c8:63:72:e9:24:2a:fe:8a:69:ec:7b:1e:27:e6:07:9a:16:da: 07:6b:b7:7b:4b:45:07:be:20:f8:3d:54:6d:e6:e6:95:af:1d: 82:47:ac:54:13:75:7b:c9:21:bc:a1:d2:74:0e:3e:bc:74:58: 9c:bc:7f:e0:31:e6:83:16:96:68:e3:4b:a1:cb:7a:6d:1c:6b: 83:d4:a7:b6:48:b9:f3:4f:9a:ad:75:cf:4e:8f:67:bc:ae:01: d0:d9:a9:98:d4:9c:26:31:a9:e6:78:68:17:51:77:7c:0d:35: 02:2b:e1:70:37:d9:e7:a6:06:26:7a:ce:2e:eb:5d:1a:71:e9: 02:be:f2:e8:b1:f9:44:29:d0:3b:bc:3c:e9:09:ad:ee:31:62: b5:d5:48:ea:4c:64:28:06:6e:08:cf:b2:66:f3:c5:07:62:4e: 85:74:34:bc:a6:91:8a:18:67:d1:af:7c:9f:69:28:ba:ea:b1: 8e:da:ac:0e -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE70TM4EJarNGT6XdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE5ZmM2NjMtNmU3OC00NDM1LWE0ZTMtNDVmZjgwODI4 MzFiMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk ODI4ZDdmNGItZmRkYy00NTE0LWEzNTQtNzM4YmEwZTMzN2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAVvzsmMcuCt0l5hC88IZ0Ytc8K3Gey90+UB vQSAcxAQvzoHcTc5pp/iAVGFWOoPkMu6TkNyVDXTJOJrMswxzpISPeLNgulxYNX2 wuk/UdIzIAhN3L2uqEyknft9J4/uUy/kZ9sGBR82fov1YWnd7Q3zxGJcJqT+Jbmq B5vT/7oPaJGfdELpSJJ28/byGRZJo0jFFibgFFhj4MByX76AYDerFo76lkFiuSWg 5FzAoTzPWsYGDDCkf3r5UOiKb1JEalyGjeH8QM0os9o2pg61WuGi8Jmyj9lgOINY Rm7G3wgpSZVt1pTh24/GthiZb9b9ZkQ3Cj7Wnc/Ti+R0RJq/vQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFD7PIDIo+Gjd7bf0kTxUwg40uGloMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iYTlm YzY2My02ZTc4LTQ0MzUtYTRlMy00NWZmODA4MjgzMWIvM2Q4ZDRmMDctOGM3Ni0z ZGUyLTlmODctOGNkNTczMDA4YzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYmE5ZmM2NjMtNmU3OC00NDM1LWE0 ZTMtNDVmZjgwODI4MzFiL2JhOWZjNjYzLTZlNzgtNDQzNS1hNGUzLTQ1ZmY4MDgy ODMxYi5jcmwwHwYDVR0jBBgwFoAURWBgqW99wCGm6+2J1CBlAF4t73swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iYTlmYzY2My02ZTc4LTQ0MzUtYTRlMy00NWZm ODA4MjgzMWIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6CsMA4E AgACMAgDBgAmAvN7ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCApO7C+47lizSbhyNptzoLEHdZa3EaHWUP /glppW3pmTTRkM8wiG1lIeQS/5+xuhlDiffcjNG0sX1crCp6RX3gFAZCxKZGBjTI Y3LpJCr+imnsex4n5geaFtoHa7d7S0UHviD4PVRt5uaVrx2CR6xUE3V7ySG8odJ0 Dj68dFicvH/gMeaDFpZo40uhy3ptHGuD1Ke2SLnzT5qtdc9Oj2e8rgHQ2amY1Jwm ManmeGgXUXd8DTUCK+FwN9nnpgYmes4u610acekCvvLosflEKdA7vDzpCa3uMWK1 1UjqTGQoBm4Iz7Jm88UHYk6FdDS8ppGKGGfRr3yfaSi66rGO2qwO -----END CERTIFICATE-----Generated at Sat Sep 5 06:06:03 2026 by rpki-client