$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/2145dd7e-ab65-3c98-bc0d-77196940761e.roa File: 2145dd7e-ab65-3c98-bc0d-77196940761e.roa (raw, json) Hash identifier: Qk2ZWHpNSJQC5cLPnB82+lAIk6FhuaFu8ti/bfB85ZU= Subject key identifier: 40:2E:9E:16:63:9F:57:8C:78:57:A5:A1:F5:81:7B:E8:6F:D7:F5:57 Certificate issuer: /CN=ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7 Certificate serial: 010D0C9F4328584F093CDF5069232920CE1E1B80 Authority key identifier: E8:1E:15:0B:75:76:40:58:B6:9A:14:2D:A7:91:10:D7:B8:85:D2:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/2145dd7e-ab65-3c98-bc0d-77196940761e.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 18450 IP address blocks: 23.252.112.0/20 maxlen: 24 50.115.32.0/20 maxlen: 24 64.140.160.0/20 maxlen: 24 64.185.224.0/20 maxlen: 24 67.220.192.0/19 maxlen: 24 100.42.208.0/20 maxlen: 24 104.237.48.0/20 maxlen: 24 107.182.160.0/20 maxlen: 24 108.171.192.0/19 maxlen: 24 142.4.32.0/19 maxlen: 24 173.231.0.0/18 maxlen: 24 192.69.192.0/19 maxlen: 24 216.18.192.0/19 maxlen: 24 216.158.64.0/19 maxlen: 24 2607:f2d8::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:df:50:69:23:29:20:ce:1e:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=4f4c9c8a-2e51-4646-91ef-f84e306ca0a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:74:e3:97:e6:a6:01:49:bd:bb:4e:13:41:9d: 73:04:8f:77:ec:af:e8:7d:3d:57:46:77:fd:a8:3b: 75:6b:52:b4:1a:aa:53:f4:f3:b5:43:81:58:26:37: d1:e3:83:b7:36:ce:14:2c:76:68:35:47:b9:e9:f7: 94:a3:f4:40:c5:67:d0:3b:cf:6a:0a:b5:dd:a2:b3: 6b:b6:01:9c:ea:19:e2:f9:4f:ce:4c:e5:4b:b4:3a: d1:fe:2f:02:fd:df:eb:0c:5f:6c:95:99:87:48:8b: bd:df:12:f9:67:18:e9:c2:12:d8:e4:f4:bf:57:fe: 96:ee:1c:58:88:df:0d:5a:57:1f:2a:08:9c:a9:d3: 6d:d5:1a:f8:b4:8e:29:99:98:b2:17:73:a9:07:c8: 27:df:9a:8a:c0:ec:a8:b8:01:eb:9e:20:3e:e3:7a: f6:6b:0a:39:46:2e:f9:07:32:f2:ae:44:54:72:09: 51:9b:16:b8:de:5c:1c:1c:38:37:c3:ea:d9:a4:51: d5:31:99:42:0a:c5:67:9a:7b:87:1a:99:8d:a2:95: 88:f7:c7:a6:1c:73:6f:7a:d8:60:99:43:ab:e7:65: 48:69:c2:c9:a0:bc:50:bb:95:80:42:bc:ca:65:6a: b1:69:d4:cc:f4:0a:9e:5a:2e:d5:11:5d:7f:87:5d: 06:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:2E:9E:16:63:9F:57:8C:78:57:A5:A1:F5:81:7B:E8:6F:D7:F5:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/2145dd7e-ab65-3c98-bc0d-77196940761e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.crl X509v3 Authority Key Identifier: keyid:E8:1E:15:0B:75:76:40:58:B6:9A:14:2D:A7:91:10:D7:B8:85:D2:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.cer sbgp-ipAddrBlock: critical IPv4: 23.252.112.0/20 50.115.32.0/20 64.140.160.0/20 64.185.224.0/20 67.220.192.0/19 100.42.208.0/20 104.237.48.0/20 107.182.160.0/20 108.171.192.0/19 142.4.32.0/19 173.231.0.0/18 192.69.192.0/19 216.18.192.0/19 216.158.64.0/19 IPv6: 2607:f2d8::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:3d:13:d8:1c:18:82:20:1f:c3:2c:65:ad:20:6a:5e:19:c7: 11:c3:59:60:ce:9c:db:29:ac:2e:25:99:5f:55:5e:51:1c:79: 03:ce:de:28:f9:e5:65:33:b2:87:41:69:ad:0d:6a:f6:bb:36: aa:07:9b:65:f7:9b:f5:2b:80:cd:ce:7e:51:75:96:33:2a:20: be:09:6a:c3:32:84:53:a2:e5:f2:8b:29:49:85:4e:e4:00:aa: 74:0b:e9:ea:13:ef:3d:d8:d3:ab:34:e9:f9:f5:97:4d:3d:69: cf:e5:13:61:64:9b:ea:ac:f0:b9:6c:19:36:17:a9:49:52:ce: e8:b5:a8:af:2a:3f:ae:f9:a6:c2:1a:bc:3b:66:1a:11:a0:04: 60:1c:e4:3f:7f:48:cb:43:c7:f1:9f:ab:46:ba:4b:7a:d4:53: cc:b9:1c:07:28:22:d6:de:ce:79:88:6d:5c:6e:a5:60:29:1f: 01:1a:0a:4a:7a:6e:c4:5a:de:ed:d8:52:99:70:cb:5d:8e:ec: 47:d5:3e:1c:74:c2:e8:91:f4:45:9d:cd:c6:bc:44:bb:77:0c: 6d:7e:ff:f9:db:fd:6a:c3:44:78:c2:4f:75:72:e3:85:94:6b: b6:a4:43:92:bc:16:90:a7:61:3f:54:74:ae:fa:d6:18:0a:aa: 68:ce:2a:39 -----BEGIN CERTIFICATE----- MIIGoDCCBYigAwIBAgIUAQ0Mn0MoWE8JPN9QaSMpIM4eG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEzNjhkYzItZGQ4YS00MGQyLWJjNTMtMGZlODdlOWQ5 ZGQ3MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk NGY0YzljOGEtMmU1MS00NjQ2LTkxZWYtZjg0ZTMwNmNhMGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnTjl+amAUm9u04TQZ1zBI937K/ofT1XRnf9 qDt1a1K0GqpT9PO1Q4FYJjfR44O3Ns4ULHZoNUe56feUo/RAxWfQO89qCrXdorNr tgGc6hni+U/OTOVLtDrR/i8C/d/rDF9slZmHSIu93xL5ZxjpwhLY5PS/V/6W7hxY iN8NWlcfKgicqdNt1Rr4tI4pmZiyF3OpB8gn35qKwOyouAHrniA+43r2awo5Ri75 BzLyrkRUcglRmxa43lwcHDg3w+rZpFHVMZlCCsVnmnuHGpmNopWI98emHHNvethg mUOr52VIacLJoLxQu5WAQrzKZWqxadTM9AqeWi7VEV1/h10GIQIDAQABo4IDsjCC A64wHQYDVR0OBBYEFEAunhZjn1eMeFelofWBe+hv1/VXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iYTM2 OGRjMi1kZDhhLTQwZDItYmM1My0wZmU4N2U5ZDlkZDcvMjE0NWRkN2UtYWI2NS0z Yzk4LWJjMGQtNzcxOTY5NDA3NjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYmEzNjhkYzItZGQ4YS00MGQyLWJj NTMtMGZlODdlOWQ5ZGQ3L2JhMzY4ZGMyLWRkOGEtNDBkMi1iYzUzLTBmZTg3ZTlk OWRkNy5jcmwwHwYDVR0jBBgwFoAU6B4VC3V2QFi2mhQtp5EQ17iF0t0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iYTM2OGRjMi1kZDhhLTQwZDItYmM1My0wZmU4 N2U5ZDlkZDcuY2VyMHwGCCsGAQUFBwEHAQH/BG0wazBaBAIAATBUAwQEF/xwAwQE MnMgAwQEQIygAwQEQLngAwQFQ9zAAwQEZCrQAwQEaO0wAwQEa7agAwQFbKvAAwQF jgQgAwQGrecAAwQFwEXAAwQF2BLAAwQF2J5AMA0EAgACMAcDBQAmB/LYMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBADk9E9gcGIIgH8MsZa0gal4ZxxHDWWDOnNsprC4lmV9VXlEceQPO3ij55WUz sodBaa0Nava7NqoHm2X3m/UrgM3OflF1ljMqIL4JasMyhFOi5fKLKUmFTuQAqnQL 6eoT7z3Y06s06fn1l009ac/lE2Fkm+qs8LlsGTYXqUlSzui1qK8qP675psIavDtm GhGgBGAc5D9/SMtDx/Gfq0a6S3rUU8y5HAcoItbeznmIbVxupWApHwEaCkp6bsRa 3u3YUplwy12O7EfVPhx0wuiR9EWdzca8RLt3DG1+//nb/WrDRHjCT3Vy44WUa7ak Q5K8FpCnYT9UdK761hgKqmjOKjk= -----END CERTIFICATE-----Generated at Sat Sep 19 00:04:52 2026 by rpki-client