$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba321e18-86bd-46af-83a2-478b4fd1fa97/ef9c95ce-12ab-3c5b-9dcb-aefe2dcb1ac2.roa File: ef9c95ce-12ab-3c5b-9dcb-aefe2dcb1ac2.roa (raw, json) Hash identifier: nUL0oAbwhjvB619FUrt+WyHy+1jR/rk49TBzoiaKG/A= Subject key identifier: C2:79:BC:82:4A:0F:A4:83:10:0A:3D:5E:BD:2A:44:4E:AC:BD:15:22 Certificate issuer: /CN=ba321e18-86bd-46af-83a2-478b4fd1fa97 Certificate serial: 010D0C9F4328584E4559CEF9E5DC6E6C2CE3A000 Authority key identifier: 5C:70:00:42:A7:CC:07:80:1A:06:BF:41:D4:F2:01:DB:FC:8D:2A:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba321e18-86bd-46af-83a2-478b4fd1fa97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba321e18-86bd-46af-83a2-478b4fd1fa97/ef9c95ce-12ab-3c5b-9dcb-aefe2dcb1ac2.roa Signing time: Tue 23 Jun 2026 21:00:12 +0000 ROA not before: Tue 23 Jun 2026 21:00:12 +0000 ROA not after: Mon 21 Sep 2026 21:00:12 +0000 asID: 396264 IP address blocks: 158.51.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba321e18-86bd-46af-83a2-478b4fd1fa97/ba321e18-86bd-46af-83a2-478b4fd1fa97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba321e18-86bd-46af-83a2-478b4fd1fa97/ba321e18-86bd-46af-83a2-478b4fd1fa97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba321e18-86bd-46af-83a2-478b4fd1fa97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Jul 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:45:59:ce:f9:e5:dc:6e:6c:2c:e3:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba321e18-86bd-46af-83a2-478b4fd1fa97 Validity Not Before: Jun 23 21:00:12 2026 GMT Not After : Sep 21 21:00:12 2026 GMT Subject: CN=36d8d2db-041d-467c-8c5d-75c399c85bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a4:43:67:f5:ef:dc:20:90:de:da:68:12:70: d5:dc:56:de:da:d8:d0:8e:2d:43:aa:af:bc:94:eb: 41:cd:db:50:cc:0a:d2:fe:bd:74:fa:49:2f:f0:a0: 5a:eb:b0:e8:00:09:08:ab:b6:0e:4a:e9:b3:52:8a: b3:e2:3d:36:68:7b:c8:f9:37:ec:13:4b:1c:07:50: 1e:9b:38:c1:24:87:52:7b:ea:d1:40:8d:d8:86:ed: 20:28:51:0e:f6:36:0c:27:af:22:76:f9:4e:a2:83: 5f:19:bf:8f:8f:91:c6:f4:46:b7:89:3d:d2:2a:58: 65:94:50:6d:d9:bd:04:74:61:a9:1a:af:a9:c4:4e: a0:76:ea:06:44:1e:10:d2:c2:ce:33:fb:fa:8e:da: b6:70:30:30:4f:9a:f1:2d:dc:ad:f5:3b:26:0f:c7: f5:e2:f2:44:df:f3:ae:0c:b5:07:83:33:27:84:8e: 55:4b:e9:62:bf:c4:95:27:28:0c:1d:d9:4a:da:c1: cf:da:e6:1e:6c:67:b2:17:31:a4:25:6e:7f:01:77: 6f:7d:35:0d:7f:31:fb:52:81:a4:3f:42:86:32:08: 7d:87:b1:fc:5c:7d:00:07:4f:e8:c8:f4:44:19:4f: 53:5c:70:d0:c1:ba:d6:3f:e7:29:cf:4a:2c:12:d5: 20:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:79:BC:82:4A:0F:A4:83:10:0A:3D:5E:BD:2A:44:4E:AC:BD:15:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba321e18-86bd-46af-83a2-478b4fd1fa97/ef9c95ce-12ab-3c5b-9dcb-aefe2dcb1ac2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba321e18-86bd-46af-83a2-478b4fd1fa97/ba321e18-86bd-46af-83a2-478b4fd1fa97.crl X509v3 Authority Key Identifier: keyid:5C:70:00:42:A7:CC:07:80:1A:06:BF:41:D4:F2:01:DB:FC:8D:2A:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba321e18-86bd-46af-83a2-478b4fd1fa97.cer sbgp-ipAddrBlock: critical IPv4: 158.51.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:bd:f3:7c:2f:cb:cb:9e:24:d8:0b:f7:e2:fe:bd:0a:93:bd: b2:54:42:fb:7b:04:8f:a0:f4:ea:15:94:4f:21:50:a7:05:d3: c3:cd:45:20:17:52:b2:6a:46:a5:3f:df:7e:03:b9:85:f3:8b: be:19:8e:c1:46:88:d3:bd:40:69:1d:ed:af:c5:38:b1:a1:91: 74:b1:9f:0a:f8:84:32:93:9d:67:23:10:d9:55:49:9d:e7:5a: 5a:f2:7f:21:df:87:74:ce:e7:dc:72:aa:9e:e5:d5:d0:9f:3e: a6:8c:19:66:da:8f:dc:b4:c9:9a:f1:1a:53:11:6a:50:94:d7: 83:f9:25:68:5c:cf:18:1b:3f:cb:a4:b1:9e:82:84:2b:bd:9f: f9:1b:fa:0b:55:e3:2e:2c:80:e5:1e:e8:55:b6:52:8d:3c:5a: f2:01:d1:3f:c0:aa:6a:be:72:7e:03:76:6e:d1:36:f8:6d:2a: 4b:35:7a:29:f1:69:d0:96:0f:ce:24:16:d8:e7:2b:67:61:c8: 79:10:0c:24:d8:57:be:08:8a:b4:ac:5b:c4:ab:ac:d1:7c:85: 52:0c:c1:c2:9a:c7:f6:f1:05:59:44:02:78:7e:0b:3c:7b:6d: 24:73:d7:87:84:3e:ea:3c:55:c5:04:d2:c2:d4:64:c7:2d:0f: ee:75:01:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5FWc755dxubCzjoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEzMjFlMTgtODZiZC00NmFmLTgzYTItNDc4YjRmZDFm YTk3MB4XDTI2MDYyMzIxMDAxMloXDTI2MDkyMTIxMDAxMlowLzEtMCsGA1UEAxMk MzZkOGQyZGItMDQxZC00NjdjLThjNWQtNzVjMzk5Yzg1YmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6RDZ/Xv3CCQ3tpoEnDV3Fbe2tjQji1Dqq+8 lOtBzdtQzArS/r10+kkv8KBa67DoAAkIq7YOSumzUoqz4j02aHvI+TfsE0scB1Ae mzjBJIdSe+rRQI3Yhu0gKFEO9jYMJ68idvlOooNfGb+Pj5HG9Ea3iT3SKlhllFBt 2b0EdGGpGq+pxE6gduoGRB4Q0sLOM/v6jtq2cDAwT5rxLdyt9TsmD8f14vJE3/Ou DLUHgzMnhI5VS+liv8SVJygMHdlK2sHP2uYebGeyFzGkJW5/AXdvfTUNfzH7UoGk P0KGMgh9h7H8XH0AB0/oyPREGU9TXHDQwbrWP+cpz0osEtUg4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJ5vIJKD6SDEAo9Xr0qRE6svRUiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iYTMy MWUxOC04NmJkLTQ2YWYtODNhMi00NzhiNGZkMWZhOTcvZWY5Yzk1Y2UtMTJhYi0z YzViLTlkY2ItYWVmZTJkY2IxYWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYmEzMjFlMTgtODZiZC00NmFmLTgz YTItNDc4YjRmZDFmYTk3L2JhMzIxZTE4LTg2YmQtNDZhZi04M2EyLTQ3OGI0ZmQx ZmE5Ny5jcmwwHwYDVR0jBBgwFoAUXHAAQqfMB4AaBr9B1PIB2/yNKtUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9iYTMyMWUxOC04NmJkLTQ2YWYtODNhMi00Nzhi NGZkMWZhOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnjMYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANS983wvy8ueJNgL9+L+vQqTvbJUQvt7BI+g9OoVlE8hUKcF08PNRSAX UrJqRqU/334DuYXzi74ZjsFGiNO9QGkd7a/FOLGhkXSxnwr4hDKTnWcjENlVSZ3n WlryfyHfh3TO59xyqp7l1dCfPqaMGWbaj9y0yZrxGlMRalCU14P5JWhczxgbP8uk sZ6ChCu9n/kb+gtV4y4sgOUe6FW2Uo08WvIB0T/Aqmq+cn4Ddm7RNvhtKks1einx adCWD84kFtjnK2dhyHkQDCTYV74IirSsW8SrrNF8hVIMwcKax/bxBVlEAnh+Czx7 bSRz14eEPuo8VcUE0sLUZMctD+51AdE= -----END CERTIFICATE-----Generated at Wed Jul 15 02:59:38 2026 by rpki-client