$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/d2135f21-7eb4-3c34-8d49-ce2a4bacb4f1.roa File: d2135f21-7eb4-3c34-8d49-ce2a4bacb4f1.roa (raw, json) Hash identifier: 2HOXTi808nwPcnEtxP7rcOPRztGA2X5S7J70HSxUmJk= Subject key identifier: 00:CB:03:51:66:DD:98:ED:D1:1F:10:58:DC:5A:6E:E2:CE:66:15:C2 Certificate issuer: /CN=ba371da1-cd74-46bd-82a8-de7b9f7a9ffa Certificate serial: 010D0C9F4328584EA7976F8BED145F0300E15000 Authority key identifier: 3D:2D:60:F6:42:2A:04:1A:A1:84:7A:85:B6:56:BD:0F:CA:4A:99:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/d2135f21-7eb4-3c34-8d49-ce2a4bacb4f1.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 30006 IP address blocks: 23.171.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:97:6f:8b:ed:14:5f:03:00:e1:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba371da1-cd74-46bd-82a8-de7b9f7a9ffa Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=e5c31a5b-8263-4708-ad05-b9fedc57ed51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:97:ad:f4:e9:4a:e8:34:35:fe:27:ee:2f:dc: e3:1d:da:93:6d:59:8f:d5:b3:74:84:14:cf:f0:e1: a3:51:70:4f:ce:4e:e6:80:35:5b:6a:27:e8:e6:c3: 49:c5:f9:88:40:91:b8:b8:51:17:bd:46:59:cd:1b: ae:78:b3:05:f7:2f:86:c9:72:61:54:7a:3d:30:f4: 36:2a:8a:cd:a8:77:65:12:94:04:da:fc:72:f8:80: 9e:d3:a4:f1:ce:d1:96:6c:2c:a8:2a:c9:a3:2e:6d: f3:e6:18:7c:bf:b5:74:ad:2d:94:5e:26:77:31:1b: f6:46:56:05:84:f4:ea:55:97:47:72:96:2e:1a:fb: fc:43:b8:c1:72:8a:b1:cc:f9:66:6a:42:d5:a6:27: bb:68:51:e2:62:15:73:5d:d6:d2:23:78:e8:67:08: ab:ab:45:c7:8e:09:e7:77:1a:5e:fb:8e:25:f3:13: e1:0d:f5:13:df:13:a3:dd:b6:f4:84:b7:76:ce:ab: 88:7c:4a:df:55:ec:ed:cc:04:ee:f6:d6:c6:f4:fb: c2:ec:7e:6b:82:de:e8:b6:82:d2:a6:7c:ac:9f:05: 61:a5:b1:cf:0c:99:6a:a0:72:c2:a9:e8:23:59:26: fd:e2:e5:02:4d:13:3f:cf:a9:9b:65:76:fe:74:15: d6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:CB:03:51:66:DD:98:ED:D1:1F:10:58:DC:5A:6E:E2:CE:66:15:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/d2135f21-7eb4-3c34-8d49-ce2a4bacb4f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.crl X509v3 Authority Key Identifier: keyid:3D:2D:60:F6:42:2A:04:1A:A1:84:7A:85:B6:56:BD:0F:CA:4A:99:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.cer sbgp-ipAddrBlock: critical IPv4: 23.171.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:22:d7:80:f0:cb:1d:bf:a6:90:c4:58:3c:0a:de:3c:e4:aa: 1c:f2:c0:1a:48:ea:36:5a:34:3a:a2:a5:5c:64:3c:17:f9:18: 64:33:69:3b:62:0f:b6:8b:61:41:e5:39:c1:80:ec:16:6b:aa: ac:1d:0e:be:fa:74:1b:7e:b1:4b:86:82:9b:7e:b4:27:6c:0a: 59:83:46:6c:2a:e5:c1:ba:14:0c:28:37:bd:48:d8:b8:e4:15: 3a:a4:30:7f:60:9c:82:99:e4:16:ce:b8:4a:3d:16:a7:55:a4: 3e:2d:84:c7:34:63:ce:44:00:44:0a:87:14:10:8a:5f:8f:93: b3:63:6f:43:3a:82:58:e6:80:f4:3a:e5:74:37:0b:1c:16:97: 82:3e:f7:e5:d6:34:7b:f0:ec:37:38:38:46:e1:e2:a7:6a:40: 0e:58:82:08:5e:52:c3:a2:05:ba:8a:63:d7:a4:5a:bd:77:c7: d9:af:44:a3:20:67:e8:4e:50:22:56:ee:2f:3b:a5:0b:9e:8b: 43:cc:d1:05:5b:4e:23:f9:9d:3f:8d:ef:21:4c:d0:4f:ce:15: 8c:1a:43:da:e2:ec:f3:a5:8a:24:6b:9b:83:1b:4e:37:d9:27: e8:a5:27:9a:41:69:c0:45:b2:36:df:b3:7d:8a:34:53:6c:c7: 4d:80:bf:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nl2+L7RRfAwDhUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEzNzFkYTEtY2Q3NC00NmJkLTgyYTgtZGU3YjlmN2E5 ZmZhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZTVjMzFhNWItODI2My00NzA4LWFkMDUtYjlmZWRjNTdlZDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJet9OlK6DQ1/ifuL9zjHdqTbVmP1bN0hBTP 8OGjUXBPzk7mgDVbaifo5sNJxfmIQJG4uFEXvUZZzRuueLMF9y+GyXJhVHo9MPQ2 KorNqHdlEpQE2vxy+ICe06TxztGWbCyoKsmjLm3z5hh8v7V0rS2UXiZ3MRv2RlYF hPTqVZdHcpYuGvv8Q7jBcoqxzPlmakLVpie7aFHiYhVzXdbSI3joZwirq0XHjgnn dxpe+44l8xPhDfUT3xOj3bb0hLd2zquIfErfVeztzATu9tbG9PvC7H5rgt7otoLS pnysnwVhpbHPDJlqoHLCqegjWSb94uUCTRM/z6mbZXb+dBXWzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADLA1Fm3Zjt0R8QWNxabuLOZhXCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9iYTM3 MWRhMS1jZDc0LTQ2YmQtODJhOC1kZTdiOWY3YTlmZmEvZDIxMzVmMjEtN2ViNC0z YzM0LThkNDktY2UyYTRiYWNiNGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYmEzNzFkYTEtY2Q3NC00NmJkLTgy YTgtZGU3YjlmN2E5ZmZhL2JhMzcxZGExLWNkNzQtNDZiZC04MmE4LWRlN2I5Zjdh OWZmYS5jcmwwHwYDVR0jBBgwFoAUPS1g9kIqBBqhhHqFtla9D8pKmUswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9iYTM3MWRhMS1jZDc0LTQ2YmQtODJhOC1kZTdi OWY3YTlmZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6vYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUi14Dwyx2/ppDEWDwK3jzkqhzywBpI6jZaNDqipVxkPBf5GGQzaTti D7aLYUHlOcGA7BZrqqwdDr76dBt+sUuGgpt+tCdsClmDRmwq5cG6FAwoN71I2Ljk FTqkMH9gnIKZ5BbOuEo9FqdVpD4thMc0Y85EAEQKhxQQil+Pk7Njb0M6gljmgPQ6 5XQ3CxwWl4I+9+XWNHvw7Dc4OEbh4qdqQA5YggheUsOiBbqKY9ekWr13x9mvRKMg Z+hOUCJW7i87pQuei0PM0QVbTiP5nT+N7yFM0E/OFYwaQ9ri7POliiRrm4MbTjfZ J+ilJ5pBacBFsjbfs32KNFNsx02Av4g= -----END CERTIFICATE-----Generated at Mon Aug 31 11:10:43 2026 by rpki-client