$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/ba40fff0-9611-34fc-81a1-ebf7141e0cf5.roa File: ba40fff0-9611-34fc-81a1-ebf7141e0cf5.roa (raw, json) Hash identifier: hnd7wSF78DSEGcPDyQIoY3FCiQHA347rOSOfnI+PR4A= Subject key identifier: AE:B7:54:DE:38:84:A4:B4:29:9C:E2:B8:73:2A:DF:37:30:3A:1B:D4 Certificate issuer: /CN=3d182bd9-cdc4-4b65-b79d-8927691ae9c2 Certificate serial: 010D0C9F4328584F506D55771BD767F7DEB99380 Authority key identifier: AD:32:38:49:8D:26:D8:9D:B1:0C:72:87:DB:A6:C1:31:24:79:B9:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/ba40fff0-9611-34fc-81a1-ebf7141e0cf5.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 8075 IP address blocks: 167.21.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:55:77:1b:d7:67:f7:de:b9:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d182bd9-cdc4-4b65-b79d-8927691ae9c2 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=0fc558af-1a88-419d-baf4-6df74e092e7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:41:b5:59:00:e5:aa:40:95:35:bf:b9:3a:92: ba:d7:6e:7a:4a:6c:40:f2:74:13:a8:45:fd:45:67: e3:08:0a:53:1d:87:11:9a:60:e3:78:db:52:ed:a1: da:df:4d:a4:bf:0b:2b:ea:b9:4d:e7:49:64:a2:05: b1:58:95:3d:80:6e:06:e9:2c:5e:c0:9e:f3:8d:3c: b9:8a:95:2c:4d:6f:df:8e:88:96:02:1b:24:a0:d7: f1:12:95:21:81:bf:cb:84:6b:01:7b:4f:33:42:d7: 7a:c5:5c:a6:93:c2:b5:26:2d:39:3e:ec:e2:d7:49: bd:c5:dd:8f:4a:d1:52:73:de:e5:c4:cc:3b:95:06: 3c:bd:94:c8:59:6e:b5:70:7f:48:1f:5a:3a:b9:a0: 3e:0f:41:56:86:5d:32:33:76:6e:97:ea:92:3d:49: 6b:9e:62:fd:c3:33:75:91:f9:90:3f:cf:46:81:f8: e7:ad:c4:c5:e7:97:42:ab:e3:88:28:5f:6a:38:da: a3:2d:c4:c8:1f:f5:84:05:6d:84:d5:88:ce:be:b6: 88:36:7d:3d:39:f1:c2:a9:fe:ef:1b:ad:8e:91:b1: 95:f8:d9:d7:a1:0c:1f:15:9f:96:eb:3b:fb:95:7e: 65:a1:65:8f:43:f4:c6:9d:ce:34:a1:b1:2c:87:9c: 12:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:B7:54:DE:38:84:A4:B4:29:9C:E2:B8:73:2A:DF:37:30:3A:1B:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/ba40fff0-9611-34fc-81a1-ebf7141e0cf5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.crl X509v3 Authority Key Identifier: keyid:AD:32:38:49:8D:26:D8:9D:B1:0C:72:87:DB:A6:C1:31:24:79:B9:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.cer sbgp-ipAddrBlock: critical IPv4: 167.21.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:d2:ac:4e:cd:40:b5:c6:79:0c:c1:65:bb:7c:0a:35:70:06: e7:d4:27:52:b8:92:82:2f:89:e6:a4:56:d4:39:e4:06:a0:7b: d0:0e:53:24:72:d8:a1:38:ba:40:bd:95:ac:62:97:ab:32:0d: 7b:f5:8b:23:48:83:71:2f:ee:f1:43:27:fa:ea:91:22:d6:7b: 3e:28:81:e6:08:b5:ce:8f:af:89:a5:20:be:e9:c2:97:59:b1: f1:0d:dc:f0:58:74:bd:9e:27:d4:f1:8f:2d:5d:31:1d:d2:4d: 2f:97:dd:39:6a:8f:07:b4:60:3a:35:8e:9d:e7:d4:dc:03:d5: f6:f3:98:9f:62:ae:34:38:4f:8f:4e:63:f5:7b:72:e8:bc:1b: 9a:63:bb:c3:39:b0:72:c4:dc:f7:a6:18:8f:3c:ed:13:cf:f0: 80:3c:07:5d:6f:d6:99:85:8e:13:b2:3b:44:ab:8c:04:cb:b0: 5c:4b:4c:9a:41:b4:4f:e7:f1:2e:ee:27:bd:d8:55:c8:42:33: 47:89:09:fd:06:73:e6:29:86:c8:db:b5:fa:ba:49:2e:1c:be: d2:dd:c8:06:ed:71:65:86:f2:64:e5:46:89:f4:1f:35:e2:86: ab:61:11:a8:c6:48:49:74:b5:9e:80:29:84:a5:40:55:1f:14: 2a:35:85:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbVV3G9dn9965k4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QxODJiZDktY2RjNC00YjY1LWI3OWQtODkyNzY5MWFl OWMyMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk MGZjNTU4YWYtMWE4OC00MTlkLWJhZjQtNmRmNzRlMDkyZTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUG1WQDlqkCVNb+5OpK61256SmxA8nQTqEX9 RWfjCApTHYcRmmDjeNtS7aHa302kvwsr6rlN50lkogWxWJU9gG4G6SxewJ7zjTy5 ipUsTW/fjoiWAhskoNfxEpUhgb/LhGsBe08zQtd6xVymk8K1Ji05Puzi10m9xd2P StFSc97lxMw7lQY8vZTIWW61cH9IH1o6uaA+D0FWhl0yM3Zul+qSPUlrnmL9wzN1 kfmQP89GgfjnrcTF55dCq+OIKF9qONqjLcTIH/WEBW2E1YjOvraINn09OfHCqf7v G62OkbGV+NnXoQwfFZ+W6zv7lX5loWWPQ/TGnc40obEsh5wSXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK63VN44hKS0KZziuHMq3zcwOhvUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDE4 MmJkOS1jZGM0LTRiNjUtYjc5ZC04OTI3NjkxYWU5YzIvYmE0MGZmZjAtOTYxMS0z NGZjLTgxYTEtZWJmNzE0MWUwY2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2QxODJiZDktY2RjNC00YjY1LWI3 OWQtODkyNzY5MWFlOWMyLzNkMTgyYmQ5LWNkYzQtNGI2NS1iNzlkLTg5Mjc2OTFh ZTljMi5jcmwwHwYDVR0jBBgwFoAUrTI4SY0m2J2xDHKH26bBMSR5uQkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDE4MmJkOS1jZGM0LTRiNjUtYjc5ZC04OTI3 NjkxYWU5YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDpxUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErSrE7NQLXGeQzBZbt8CjVwBufUJ1K4koIvieakVtQ55Aage9AOUyRy 2KE4ukC9laxil6syDXv1iyNIg3Ev7vFDJ/rqkSLWez4ogeYItc6Pr4mlIL7pwpdZ sfEN3PBYdL2eJ9Txjy1dMR3STS+X3Tlqjwe0YDo1jp3n1NwD1fbzmJ9irjQ4T49O Y/V7cui8G5pju8M5sHLE3PemGI887RPP8IA8B11v1pmFjhOyO0SrjATLsFxLTJpB tE/n8S7uJ73YVchCM0eJCf0Gc+Yphsjbtfq6SS4cvtLdyAbtcWWG8mTlRon0HzXi hqthEajGSEl0tZ6AKYSlQFUfFCo1hfc= -----END CERTIFICATE-----Generated at Sun Oct 25 01:02:39 2026 by rpki-client