$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba321e18-86bd-46af-83a2-478b4fd1fa97/f67a871c-0b62-3102-8a24-888640c592fa.roa File: f67a871c-0b62-3102-8a24-888640c592fa.roa (raw, json) Hash identifier: O/vrDU+Jzerl5sI3QuoOZLdvTKzqT7n1ZDp03egvhtI= Subject key identifier: AC:73:F1:36:A3:FC:E3:16:9E:F7:77:F0:DB:1F:DF:06:94:BB:7D:45 Certificate issuer: /CN=ba321e18-86bd-46af-83a2-478b4fd1fa97 Certificate serial: 010D0C9F4328584D65153E4B250E93DE5997DD00 Authority key identifier: 5C:70:00:42:A7:CC:07:80:1A:06:BF:41:D4:F2:01:DB:FC:8D:2A:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba321e18-86bd-46af-83a2-478b4fd1fa97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba321e18-86bd-46af-83a2-478b4fd1fa97/f67a871c-0b62-3102-8a24-888640c592fa.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 396264 IP address blocks: 23.146.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba321e18-86bd-46af-83a2-478b4fd1fa97/ba321e18-86bd-46af-83a2-478b4fd1fa97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba321e18-86bd-46af-83a2-478b4fd1fa97/ba321e18-86bd-46af-83a2-478b4fd1fa97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba321e18-86bd-46af-83a2-478b4fd1fa97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:3e:4b:25:0e:93:de:59:97:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba321e18-86bd-46af-83a2-478b4fd1fa97 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=389459d4-6afb-4d79-ab0d-18b4a0ba65a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:32:f1:e1:65:8a:e5:94:34:e2:5e:ff:ef:6c: e0:37:74:e4:ed:75:18:95:78:ba:56:2d:f6:23:44: a4:16:e1:c2:58:9e:aa:87:27:bf:6c:5d:2a:39:17: 8f:1a:6f:e0:c6:48:97:a9:db:0b:0b:6c:d9:71:db: c2:82:29:e1:7f:e2:5b:16:9e:0a:57:11:1b:00:03: d5:fb:fb:b6:6e:51:1c:96:50:a5:0f:d6:b8:81:b5: 94:ef:5d:f9:8e:dc:54:11:4d:06:7c:27:3c:37:19: d9:2d:28:b1:01:46:26:86:d2:c5:6e:63:2d:99:15: cb:eb:2e:77:63:07:1f:a2:84:31:73:40:b6:49:cd: 2f:53:95:fe:02:c1:7c:da:81:9f:ca:5e:fc:b0:76: 71:44:42:6c:3d:55:b0:fb:03:03:da:9f:b0:fe:0f: 2a:23:25:7f:e3:e1:7b:1b:52:7e:b4:12:7b:e9:c1: b4:0d:19:06:76:2f:a8:6e:50:68:ed:41:f5:ea:90: 68:19:84:da:e1:b7:1a:11:d2:70:29:cb:44:be:69: 85:a6:9a:a4:bb:51:9d:3a:e0:fa:7d:fb:1a:39:c5: c5:ce:33:a9:74:f3:f0:b3:5b:7b:8a:f4:8f:d6:2b: 78:0b:43:4e:e3:94:7b:a8:7b:1c:72:8a:02:b3:df: 71:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:73:F1:36:A3:FC:E3:16:9E:F7:77:F0:DB:1F:DF:06:94:BB:7D:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba321e18-86bd-46af-83a2-478b4fd1fa97/f67a871c-0b62-3102-8a24-888640c592fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba321e18-86bd-46af-83a2-478b4fd1fa97/ba321e18-86bd-46af-83a2-478b4fd1fa97.crl X509v3 Authority Key Identifier: keyid:5C:70:00:42:A7:CC:07:80:1A:06:BF:41:D4:F2:01:DB:FC:8D:2A:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba321e18-86bd-46af-83a2-478b4fd1fa97.cer sbgp-ipAddrBlock: critical IPv4: 23.146.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:73:f5:29:6f:b9:10:2b:86:ea:63:9e:a0:84:6e:c2:9e:b8: 51:0d:de:c7:20:29:0e:be:c0:c7:56:a1:4a:16:56:17:96:62: 43:62:67:89:45:ae:62:01:30:43:09:98:2b:e5:48:90:03:a2: 49:36:8f:09:41:27:9d:68:73:41:b3:bf:3a:fb:05:04:cc:1b: b3:64:8b:0c:54:6e:61:07:1f:0e:a7:9b:eb:40:21:2a:59:82: ff:38:a2:d4:85:b7:63:26:52:06:93:c1:ed:a0:19:f6:9f:c0: ca:31:b1:8e:31:f4:d1:96:68:e9:84:e9:ea:54:6c:24:23:a2: c5:a4:15:50:58:20:be:57:d0:ae:57:2f:ab:07:af:32:0f:8f: 01:be:28:1d:3d:c2:36:4b:4e:11:17:08:fd:ed:f6:06:6f:21: 67:a7:83:da:ad:08:41:34:84:7c:2a:be:b8:34:c2:24:a3:f5: f0:39:5f:58:3a:f4:e6:f3:2c:cb:57:12:e9:84:16:c4:7d:60: 66:b4:a1:67:61:78:c3:60:78:ce:a1:65:4b:63:4b:ce:13:8e: ac:e4:e7:57:06:30:72:fe:38:e6:cb:4e:88:c5:9b:67:dc:1b: f5:8f:8b:ca:c5:ac:dc:7f:ee:7e:4e:89:05:4f:64:8b:c6:b6: b7:e8:c7:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFT5LJQ6T3lmX3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEzMjFlMTgtODZiZC00NmFmLTgzYTItNDc4YjRmZDFm YTk3MB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk Mzg5NDU5ZDQtNmFmYi00ZDc5LWFiMGQtMThiNGEwYmE2NWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjLx4WWK5ZQ04l7/72zgN3Tk7XUYlXi6Vi32 I0SkFuHCWJ6qhye/bF0qORePGm/gxkiXqdsLC2zZcdvCginhf+JbFp4KVxEbAAPV +/u2blEcllClD9a4gbWU7135jtxUEU0GfCc8NxnZLSixAUYmhtLFbmMtmRXL6y53 YwcfooQxc0C2Sc0vU5X+AsF82oGfyl78sHZxREJsPVWw+wMD2p+w/g8qIyV/4+F7 G1J+tBJ76cG0DRkGdi+oblBo7UH16pBoGYTa4bcaEdJwKctEvmmFppqku1GdOuD6 ffsaOcXFzjOpdPPws1t7ivSP1it4C0NO45R7qHsccooCs99xEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxz8Taj/OMWnvd38Nsf3waUu31FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iYTMy MWUxOC04NmJkLTQ2YWYtODNhMi00NzhiNGZkMWZhOTcvZjY3YTg3MWMtMGI2Mi0z MTAyLThhMjQtODg4NjQwYzU5MmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYmEzMjFlMTgtODZiZC00NmFmLTgz YTItNDc4YjRmZDFmYTk3L2JhMzIxZTE4LTg2YmQtNDZhZi04M2EyLTQ3OGI0ZmQx ZmE5Ny5jcmwwHwYDVR0jBBgwFoAUXHAAQqfMB4AaBr9B1PIB2/yNKtUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9iYTMyMWUxOC04NmJkLTQ2YWYtODNhMi00Nzhi NGZkMWZhOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5KUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMRz9SlvuRArhupjnqCEbsKeuFEN3scgKQ6+wMdWoUoWVheWYkNiZ4lF rmIBMEMJmCvlSJADokk2jwlBJ51oc0Gzvzr7BQTMG7NkiwxUbmEHHw6nm+tAISpZ gv84otSFt2MmUgaTwe2gGfafwMoxsY4x9NGWaOmE6epUbCQjosWkFVBYIL5X0K5X L6sHrzIPjwG+KB09wjZLThEXCP3t9gZvIWeng9qtCEE0hHwqvrg0wiSj9fA5X1g6 9ObzLMtXEumEFsR9YGa0oWdheMNgeM6hZUtjS84Tjqzk51cGMHL+OObLTojFm2fc G/WPi8rFrNx/7n5OiQVPZIvGtrfox8Y= -----END CERTIFICATE-----Generated at Mon Apr 13 12:00:39 2026 by rpki-client