$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/d2135f21-7eb4-3c34-8d49-ce2a4bacb4f1.roa File: d2135f21-7eb4-3c34-8d49-ce2a4bacb4f1.roa (raw, json) Hash identifier: 6TDZWQniBw1J+EMD4/JP+y/EwyC7K2NwnczPowxnpxU= Subject key identifier: 63:F6:72:E9:FC:2F:E1:FD:EC:67:D8:80:79:2E:75:B9:82:FC:FC:AE Certificate issuer: /CN=ba371da1-cd74-46bd-82a8-de7b9f7a9ffa Certificate serial: 010D0C9F4328584F4973328A6D72734D87CB3540 Authority key identifier: 3D:2D:60:F6:42:2A:04:1A:A1:84:7A:85:B6:56:BD:0F:CA:4A:99:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/d2135f21-7eb4-3c34-8d49-ce2a4bacb4f1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30006 IP address blocks: 23.171.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:32:8a:6d:72:73:4d:87:cb:35:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba371da1-cd74-46bd-82a8-de7b9f7a9ffa Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=035c8a42-0d7f-43ab-825a-15fac7297518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7f:27:9d:f7:ed:d1:1e:ab:da:9d:81:ed:00: d8:be:ad:0d:2b:e4:15:be:07:29:e7:8c:b9:21:96: ae:bd:77:76:09:f0:6e:ff:25:fd:7b:f5:39:cf:15: 1d:31:fd:81:eb:98:a2:74:8e:79:cf:19:77:02:19: 1e:d5:52:75:f1:ce:12:03:f5:0b:a2:ea:95:96:0a: 93:10:d1:c1:7f:b5:f0:91:93:b6:44:ae:ac:ac:7a: b3:7e:ed:a5:b9:f0:e5:ab:82:ce:ca:04:2d:59:73: 46:e5:2a:bf:e7:c8:4d:a3:c7:e5:b2:f3:65:d6:39: 37:82:17:5c:7f:71:71:01:56:80:a9:3c:f5:72:f0: 21:c3:ff:8d:b7:f2:13:1c:23:44:d9:8b:30:6d:ab: 2c:ac:eb:d8:c7:9b:89:95:46:8c:34:e4:4c:95:0e: 45:a9:36:69:a4:16:f7:5d:7d:9b:60:38:59:2c:67: 22:19:57:24:03:74:c7:37:c0:21:84:7f:ef:37:aa: 9d:9a:95:9f:0f:f8:14:7a:9e:fc:0c:2e:a5:25:61: 92:82:8b:e5:dd:32:41:fd:c7:c4:64:05:2f:a3:ac: 4b:8d:1e:0d:2b:08:13:9b:69:d5:19:e8:4f:99:b8: 6a:18:cd:8e:91:2c:4e:5f:de:e7:8b:15:aa:d1:48: db:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F6:72:E9:FC:2F:E1:FD:EC:67:D8:80:79:2E:75:B9:82:FC:FC:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/d2135f21-7eb4-3c34-8d49-ce2a4bacb4f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.crl X509v3 Authority Key Identifier: keyid:3D:2D:60:F6:42:2A:04:1A:A1:84:7A:85:B6:56:BD:0F:CA:4A:99:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.cer sbgp-ipAddrBlock: critical IPv4: 23.171.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:ec:92:88:dd:7c:20:7f:8d:72:1e:02:3d:51:fe:31:97:de: 54:03:62:6d:bd:09:59:d1:c6:ec:5f:1f:7c:cd:24:1a:cf:b5: 92:ac:73:f9:ec:fe:2d:03:04:04:46:2c:53:ea:a4:4b:e3:c6: 4f:d9:ac:f8:08:97:33:9d:77:b1:05:af:21:11:fa:c4:3f:9e: c2:8e:25:57:8b:47:25:59:18:b0:ac:0d:34:4f:5a:0a:45:bd: 03:6c:f4:a7:3e:49:54:74:f6:2a:76:d0:29:de:9a:f7:b6:4d: a2:de:83:f1:e1:10:f0:87:5a:93:30:38:e1:27:c7:3d:1f:35: 47:61:94:d0:ae:d6:2e:f2:2e:da:75:f9:ac:2d:ed:ca:9b:59: 6e:38:80:51:24:06:9d:42:ca:e7:fd:72:b6:ae:e7:17:f4:31: bd:ca:5a:5f:bd:32:38:d8:33:1c:85:f6:00:fc:80:40:d8:bc: ce:45:31:09:c4:6b:a8:92:92:b1:d4:35:2b:be:a5:4c:c7:f6: 7f:1d:1f:2b:17:11:14:48:6c:12:95:dc:15:b6:d0:0e:cd:55: 6c:84:9d:90:0b:80:2e:55:51:f2:62:b1:fd:df:77:ba:41:58: 6a:fd:23:7a:3a:ec:28:b0:1e:ae:6a:e1:b6:8a:a9:4b:40:ba: 07:14:cb:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JczKKbXJzTYfLNUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEzNzFkYTEtY2Q3NC00NmJkLTgyYTgtZGU3YjlmN2E5 ZmZhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDM1YzhhNDItMGQ3Zi00M2FiLTgyNWEtMTVmYWM3Mjk3NTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq38nnfft0R6r2p2B7QDYvq0NK+QVvgcp54y5 IZauvXd2CfBu/yX9e/U5zxUdMf2B65iidI55zxl3Ahke1VJ18c4SA/ULouqVlgqT ENHBf7XwkZO2RK6srHqzfu2lufDlq4LOygQtWXNG5Sq/58hNo8flsvNl1jk3ghdc f3FxAVaAqTz1cvAhw/+Nt/ITHCNE2YswbassrOvYx5uJlUaMNORMlQ5FqTZppBb3 XX2bYDhZLGciGVckA3THN8AhhH/vN6qdmpWfD/gUep78DC6lJWGSgovl3TJB/cfE ZAUvo6xLjR4NKwgTm2nVGehPmbhqGM2OkSxOX97nixWq0UjbaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGP2cun8L+H97GfYgHkudbmC/PyuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9iYTM3 MWRhMS1jZDc0LTQ2YmQtODJhOC1kZTdiOWY3YTlmZmEvZDIxMzVmMjEtN2ViNC0z YzM0LThkNDktY2UyYTRiYWNiNGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYmEzNzFkYTEtY2Q3NC00NmJkLTgy YTgtZGU3YjlmN2E5ZmZhL2JhMzcxZGExLWNkNzQtNDZiZC04MmE4LWRlN2I5Zjdh OWZmYS5jcmwwHwYDVR0jBBgwFoAUPS1g9kIqBBqhhHqFtla9D8pKmUswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9iYTM3MWRhMS1jZDc0LTQ2YmQtODJhOC1kZTdi OWY3YTlmZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6vYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTskojdfCB/jXIeAj1R/jGX3lQDYm29CVnRxuxfH3zNJBrPtZKsc/ns /i0DBARGLFPqpEvjxk/ZrPgIlzOdd7EFryER+sQ/nsKOJVeLRyVZGLCsDTRPWgpF vQNs9Kc+SVR09ip20Cnemve2TaLeg/HhEPCHWpMwOOEnxz0fNUdhlNCu1i7yLtp1 +awt7cqbWW44gFEkBp1Cyuf9crau5xf0Mb3KWl+9MjjYMxyF9gD8gEDYvM5FMQnE a6iSkrHUNSu+pUzH9n8dHysXERRIbBKV3BW20A7NVWyEnZALgC5VUfJisf3fd7pB WGr9I3o67CiwHq5q4baKqUtAugcUywc= -----END CERTIFICATE-----Generated at Sun Oct 25 18:03:27 2026 by rpki-client