$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/ba40fff0-9611-34fc-81a1-ebf7141e0cf5.roa File: ba40fff0-9611-34fc-81a1-ebf7141e0cf5.roa (raw, json) Hash identifier: u9MU07e1TYP0C2OUOPgnN5eACVlWq+NZ1dGiPTvPjCU= Subject key identifier: 40:02:6A:D8:8B:CB:5A:30:9B:A8:4E:EF:13:F6:FC:7F:51:45:FC:21 Certificate issuer: /CN=3d182bd9-cdc4-4b65-b79d-8927691ae9c2 Certificate serial: 010D0C9F4328584EAE81A5D64753243293D0B300 Authority key identifier: AD:32:38:49:8D:26:D8:9D:B1:0C:72:87:DB:A6:C1:31:24:79:B9:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/ba40fff0-9611-34fc-81a1-ebf7141e0cf5.roa Signing time: Fri 31 Jul 2026 13:00:12 +0000 ROA not before: Fri 31 Jul 2026 13:00:12 +0000 ROA not after: Thu 29 Oct 2026 13:00:12 +0000 asID: 8075 IP address blocks: 167.21.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ae:81:a5:d6:47:53:24:32:93:d0:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d182bd9-cdc4-4b65-b79d-8927691ae9c2 Validity Not Before: Jul 31 13:00:12 2026 GMT Not After : Oct 29 13:00:12 2026 GMT Subject: CN=1e3515a0-9c70-497f-9f59-f8319ae334aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:20:08:80:95:7e:16:72:24:fd:71:dc:8b:bf: 16:af:82:c2:6b:19:a4:54:df:10:67:37:54:ab:e5: f6:ea:64:bd:fb:5e:ea:39:02:97:47:ad:03:56:e1: 98:f0:a9:ca:d5:e3:67:13:88:fc:e5:9d:28:9c:11: ad:c0:67:cb:0a:4b:ac:03:4c:57:fc:f3:02:40:20: e4:a4:31:87:bc:aa:ea:4d:8a:b5:d2:2d:fd:96:d0: af:8b:ba:9c:2e:a3:82:f1:11:04:af:0d:5a:b0:a2: ad:a6:4d:6c:72:31:1a:1e:34:6e:d7:23:8a:41:db: 8a:da:cd:b8:86:93:6e:5f:2f:35:d7:70:a0:3c:9a: 45:0a:4d:55:e6:20:8b:ca:68:27:74:8d:7a:69:82: 17:a2:51:57:5e:65:24:e4:f2:2f:12:8d:0f:20:8e: 5d:95:04:ea:1a:29:85:64:f5:7e:b1:30:88:4f:90: 96:e9:85:93:30:88:25:7f:ba:93:95:6a:b0:e7:f8: ec:28:ec:9a:e1:f4:fb:4a:f2:88:6d:f3:b2:de:71: cc:c5:5b:65:a1:82:31:a5:5c:a4:e7:ae:6a:46:b8: 7f:6e:02:a7:54:b3:eb:5a:1f:b9:88:b1:50:ed:64: 7a:5e:a7:68:0e:64:56:87:fa:c6:e8:d5:05:86:9a: de:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:02:6A:D8:8B:CB:5A:30:9B:A8:4E:EF:13:F6:FC:7F:51:45:FC:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/ba40fff0-9611-34fc-81a1-ebf7141e0cf5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.crl X509v3 Authority Key Identifier: keyid:AD:32:38:49:8D:26:D8:9D:B1:0C:72:87:DB:A6:C1:31:24:79:B9:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.cer sbgp-ipAddrBlock: critical IPv4: 167.21.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:17:1c:46:8c:a6:1a:e0:a4:4c:95:91:94:de:27:10:83:8f: 57:35:39:80:af:a0:58:02:5b:6f:08:b4:36:77:16:7b:bf:34: 30:48:8c:d3:0f:c3:0a:f8:ff:de:a8:ca:9c:3f:cb:9f:f4:7c: d0:56:31:79:49:16:d6:2b:7d:9b:b9:3f:32:c0:e0:ed:9c:27: 28:e0:e3:e9:65:bf:f3:15:78:c7:00:81:89:a1:f1:df:e4:8f: 82:56:e7:e1:be:1c:8d:dd:bc:7e:cb:74:b2:61:ff:2b:01:68: 43:bc:a5:b8:78:4b:b3:72:01:14:4f:ad:42:ae:cf:8d:e6:13: 8b:90:16:e8:d7:bf:56:90:12:da:e4:48:f9:34:56:a7:d0:29: 0d:4c:70:f9:a2:ba:40:55:87:7e:f9:8a:b3:31:91:6c:61:69: a5:d4:fa:07:71:a2:32:67:c3:e1:1f:81:a2:ff:24:41:05:e2: 8f:84:1c:08:29:2f:dc:03:40:37:26:d0:f9:f4:53:63:08:a6: 9e:46:55:46:cf:61:32:b1:87:e7:74:e8:c6:74:64:87:24:8e: f0:ab:83:da:93:1c:3d:09:55:df:03:21:f2:32:5d:78:5d:be: a1:5b:8b:fe:a4:32:df:43:17:d5:4c:e9:bb:17:36:c9:c9:e1: 31:5a:73:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugaXWR1MkMpPQswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QxODJiZDktY2RjNC00YjY1LWI3OWQtODkyNzY5MWFl OWMyMB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk MWUzNTE1YTAtOWM3MC00OTdmLTlmNTktZjgzMTlhZTMzNGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiAIgJV+FnIk/XHci78Wr4LCaxmkVN8QZzdU q+X26mS9+17qOQKXR60DVuGY8KnK1eNnE4j85Z0onBGtwGfLCkusA0xX/PMCQCDk pDGHvKrqTYq10i39ltCvi7qcLqOC8REErw1asKKtpk1scjEaHjRu1yOKQduK2s24 hpNuXy8113CgPJpFCk1V5iCLymgndI16aYIXolFXXmUk5PIvEo0PII5dlQTqGimF ZPV+sTCIT5CW6YWTMIglf7qTlWqw5/jsKOya4fT7SvKIbfOy3nHMxVtloYIxpVyk 565qRrh/bgKnVLPrWh+5iLFQ7WR6XqdoDmRWh/rG6NUFhpre1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEACatiLy1owm6hO7xP2/H9RRfwhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDE4 MmJkOS1jZGM0LTRiNjUtYjc5ZC04OTI3NjkxYWU5YzIvYmE0MGZmZjAtOTYxMS0z NGZjLTgxYTEtZWJmNzE0MWUwY2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2QxODJiZDktY2RjNC00YjY1LWI3 OWQtODkyNzY5MWFlOWMyLzNkMTgyYmQ5LWNkYzQtNGI2NS1iNzlkLTg5Mjc2OTFh ZTljMi5jcmwwHwYDVR0jBBgwFoAUrTI4SY0m2J2xDHKH26bBMSR5uQkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDE4MmJkOS1jZGM0LTRiNjUtYjc5ZC04OTI3 NjkxYWU5YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDpxUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsXHEaMphrgpEyVkZTeJxCDj1c1OYCvoFgCW28ItDZ3Fnu/NDBIjNMP wwr4/96oypw/y5/0fNBWMXlJFtYrfZu5PzLA4O2cJyjg4+llv/MVeMcAgYmh8d/k j4JW5+G+HI3dvH7LdLJh/ysBaEO8pbh4S7NyARRPrUKuz43mE4uQFujXv1aQEtrk SPk0VqfQKQ1McPmiukBVh375irMxkWxhaaXU+gdxojJnw+EfgaL/JEEF4o+EHAgp L9wDQDcm0Pn0U2MIpp5GVUbPYTKxh+d06MZ0ZIckjvCrg9qTHD0JVd8DIfIyXXhd vqFbi/6kMt9DF9VM6bsXNsnJ4TFac+Q= -----END CERTIFICATE-----Generated at Sat Sep 5 06:08:01 2026 by rpki-client