$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/ba58b7ef-ee2a-31b1-951f-6e7b79a52f32.roa File: ba58b7ef-ee2a-31b1-951f-6e7b79a52f32.roa (raw, json) Hash identifier: c8+pgPusw5qRZv5jUT/NSMiw8He5DP6CJeZFl3xtKX0= Subject key identifier: A3:EC:96:9E:5C:39:0A:3A:16:6A:E9:42:F3:2E:21:31:B2:3B:9B:10 Certificate issuer: /CN=3e886672-55f3-450f-ab6e-342c76f256db Certificate serial: 010D0C9F4328584F89A8614CB6FD0838DB4B5400 Authority key identifier: C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/ba58b7ef-ee2a-31b1-951f-6e7b79a52f32.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 16584 IP address blocks: 23.140.98.0/24 maxlen: 24 172.111.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:61:4c:b6:fd:08:38:db:4b:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e886672-55f3-450f-ab6e-342c76f256db Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=31ada8e9-5d73-4005-b01f-7c92b6d6513e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bf:c2:81:62:17:b5:c7:26:18:ef:e9:74:b9: a7:f3:1d:d7:d0:21:9c:38:a1:04:d5:a1:bf:0a:4d: 78:0f:7c:19:92:00:e0:98:f4:7c:6c:ac:58:3a:0d: 03:e3:10:22:57:1f:48:c9:53:74:17:e6:61:c4:29: d4:91:57:f4:8a:f2:23:03:40:9b:32:5d:83:51:32: 36:3f:d8:8e:b6:d7:e1:6a:c5:f3:f6:d3:61:06:37: 0b:36:1f:f8:19:0c:7d:89:7d:dc:a4:39:11:bd:cd: f2:e1:23:e9:20:d0:3f:64:85:34:d1:7a:f7:61:ba: 73:ac:7e:80:ee:80:e5:8f:8d:76:93:58:29:28:79: 34:e6:d6:3c:05:18:99:00:8d:56:7f:cb:12:c3:b0: f1:21:9f:98:10:f8:66:fb:d7:60:86:cf:5c:36:b4: a4:30:ca:c5:7e:68:c1:ea:68:e3:87:db:a9:24:14: 11:22:30:52:2a:61:56:49:05:7f:5f:03:5a:4f:49: c7:1a:f3:a4:b6:81:e4:ed:5e:b1:f1:72:21:23:bc: b8:b7:99:ed:80:c8:29:cc:74:23:f4:3a:d7:52:9b: ee:dc:2f:e4:b0:90:39:9d:eb:9a:b9:d3:e7:c5:b5: 92:b0:a8:96:9a:a8:34:92:cc:11:39:e9:b3:3b:01: e5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:EC:96:9E:5C:39:0A:3A:16:6A:E9:42:F3:2E:21:31:B2:3B:9B:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/ba58b7ef-ee2a-31b1-951f-6e7b79a52f32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl X509v3 Authority Key Identifier: keyid:C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer sbgp-ipAddrBlock: critical IPv4: 23.140.98.0/24 172.111.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:91:46:67:d1:a3:07:df:0d:b4:02:29:6c:9b:6a:b5:44:f0: 26:fa:2e:a6:c2:15:e0:78:8d:16:b4:c8:cc:70:b0:6a:e5:66: 6f:f9:c4:e6:9e:a1:30:cf:8d:1d:48:b5:3d:39:73:c1:01:23: 4b:2e:a7:1d:b3:3e:af:b0:59:9f:8a:96:03:b3:18:9f:0e:74: fb:ec:a2:e3:b7:03:46:57:45:ac:20:03:99:80:62:7d:6d:f3: 35:77:dc:26:41:d9:1b:44:e8:19:35:99:46:c1:83:5e:a9:04: 07:cc:76:fa:88:2a:d9:03:a2:2d:d0:96:5c:57:25:56:a5:fc: 6e:70:11:0d:62:e8:36:71:1f:42:3c:24:f5:21:1b:c2:27:53: 49:60:40:3e:83:0f:29:67:cf:7c:f7:09:a4:cb:ae:b9:2e:cc: 2b:7d:d6:fb:1f:b0:ed:78:f4:60:71:ef:ed:1d:51:c3:3d:d8: 33:28:3d:83:46:7b:b3:7a:a0:6c:0d:20:2a:2d:7e:00:7e:a1: c9:64:ae:d3:82:5f:09:32:a4:99:e2:c9:bf:4d:66:6a:5c:f2: 8d:39:fa:16:61:fc:ba:8d:1a:8f:f6:f9:0a:aa:27:cc:9a:ff: ca:00:2f:b6:64:e4:d9:eb:e1:e2:bc:c9:f6:b3:8b:19:fd:08: 6b:a8:0b:45 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE+JqGFMtv0IONtLVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U4ODY2NzItNTVmMy00NTBmLWFiNmUtMzQyYzc2ZjI1 NmRiMB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk MzFhZGE4ZTktNWQ3My00MDA1LWIwMWYtN2M5MmI2ZDY1MTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7/CgWIXtccmGO/pdLmn8x3X0CGcOKEE1aG/ Ck14D3wZkgDgmPR8bKxYOg0D4xAiVx9IyVN0F+ZhxCnUkVf0ivIjA0CbMl2DUTI2 P9iOttfhasXz9tNhBjcLNh/4GQx9iX3cpDkRvc3y4SPpINA/ZIU00Xr3YbpzrH6A 7oDlj412k1gpKHk05tY8BRiZAI1Wf8sSw7DxIZ+YEPhm+9dghs9cNrSkMMrFfmjB 6mjjh9upJBQRIjBSKmFWSQV/XwNaT0nHGvOktoHk7V6x8XIhI7y4t5ntgMgpzHQj 9DrXUpvu3C/ksJA5neuaudPnxbWSsKiWmqg0kswROemzOwHl5QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKPslp5cOQo6FmrpQvMuITGyO5sQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4 NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJjNzZmMjU2ZGIvYmE1OGI3ZWYtZWUyYS0z MWIxLTk1MWYtNmU3Yjc5YTUyZjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2U4ODY2NzItNTVmMy00NTBmLWFi NmUtMzQyYzc2ZjI1NmRiLzNlODg2NjcyLTU1ZjMtNDUwZi1hYjZlLTM0MmM3NmYy NTZkYi5jcmwwHwYDVR0jBBgwFoAUyffaYgRlgk+Ha8qShuQWCtT5MZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJj NzZmMjU2ZGIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF4xiAwQC rG8MMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHiRRmfRowffDbQCKWybarVE8Cb6LqbCFeB4jRa0yMxwsGrl Zm/5xOaeoTDPjR1ItT05c8EBI0supx2zPq+wWZ+KlgOzGJ8OdPvsouO3A0ZXRawg A5mAYn1t8zV33CZB2RtE6Bk1mUbBg16pBAfMdvqIKtkDoi3QllxXJVal/G5wEQ1i 6DZxH0I8JPUhG8InU0lgQD6DDylnz3z3CaTLrrkuzCt91vsfsO149GBx7+0dUcM9 2DMoPYNGe7N6oGwNICotfgB+oclkrtOCXwkypJniyb9NZmpc8o05+hZh/LqNGo/2 +QqqJ8ya/8oAL7Zk5Nnr4eK8yfazixn9CGuoC0U= -----END CERTIFICATE-----Generated at Wed Oct 28 14:37:43 2026 by rpki-client