$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/ba58b7ef-ee2a-31b1-951f-6e7b79a52f32.roa File: ba58b7ef-ee2a-31b1-951f-6e7b79a52f32.roa (raw, json) Hash identifier: gMzE/b3u0S4RpYFIf4wuSLEu6vho2IIL2YY7RdmBo9g= Subject key identifier: E9:63:5E:F6:88:FF:A3:5E:ED:2C:19:BD:66:2B:BB:51:79:AC:FC:A1 Certificate issuer: /CN=3e886672-55f3-450f-ab6e-342c76f256db Certificate serial: 010D0C9F4328584E4559D9C8BD044CE62CAD0E90 Authority key identifier: C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/ba58b7ef-ee2a-31b1-951f-6e7b79a52f32.roa Signing time: Tue 23 Jun 2026 21:00:12 +0000 ROA not before: Tue 23 Jun 2026 21:00:12 +0000 ROA not after: Mon 21 Sep 2026 21:00:12 +0000 asID: 16584 IP address blocks: 23.140.98.0/24 maxlen: 24 172.111.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:45:59:d9:c8:bd:04:4c:e6:2c:ad:0e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e886672-55f3-450f-ab6e-342c76f256db Validity Not Before: Jun 23 21:00:12 2026 GMT Not After : Sep 21 21:00:12 2026 GMT Subject: CN=77314e33-480f-407a-889d-9b6b419f0dc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:85:c6:79:03:71:bc:29:d4:f7:91:cd:26:9f: 20:79:90:c6:69:fa:ea:82:57:3b:2b:08:eb:d4:52: 7e:c0:f4:ce:22:ae:8f:4a:68:56:8c:75:19:4f:e5: e4:e2:44:a6:9b:0e:2b:c1:fb:64:5c:7e:53:90:dc: 17:e8:94:00:18:9c:ee:8a:89:4a:19:6f:0e:8c:fc: 46:1a:8d:ab:e2:57:82:c1:0b:dd:6f:cc:45:7e:76: ab:a6:47:85:10:2c:2a:1e:fb:cc:81:70:5c:20:9c: e0:ed:c6:43:7c:fe:dd:df:9d:78:be:b2:f3:f9:82: 0c:e0:41:09:e4:e3:2c:c0:82:82:16:8e:fe:de:8a: 31:f0:12:fc:6d:2c:fd:ef:90:4b:2c:dc:4a:4e:7f: 73:b9:37:17:0d:01:8b:be:cf:73:cd:27:57:25:7b: 4a:7d:1c:78:dd:ec:af:2e:b8:ea:44:ff:28:aa:70: 22:c8:60:ae:cf:55:fe:ae:f0:0b:0c:55:6f:e6:ae: dd:55:03:f8:b1:be:09:01:7c:9d:4d:2f:98:94:27: 35:3d:36:55:e8:0a:09:f0:fc:75:ee:1a:cf:22:ee: ce:eb:34:de:40:35:3f:d2:12:17:ce:78:93:a8:ff: 7d:a0:fa:14:b8:45:b6:93:ff:f4:f1:72:5e:f7:36: fb:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:63:5E:F6:88:FF:A3:5E:ED:2C:19:BD:66:2B:BB:51:79:AC:FC:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/ba58b7ef-ee2a-31b1-951f-6e7b79a52f32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl X509v3 Authority Key Identifier: keyid:C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer sbgp-ipAddrBlock: critical IPv4: 23.140.98.0/24 172.111.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:99:41:03:67:b1:40:8e:ec:40:a8:90:21:15:77:0c:65:41: a1:54:fb:dc:c7:af:b1:27:46:db:b2:37:28:a3:f5:be:94:35: b3:b9:9a:3c:93:a0:a1:89:bf:89:76:48:c7:15:ac:70:24:15: 24:d4:15:36:67:cf:b0:09:cb:cd:aa:16:16:3a:b1:c0:57:98: 40:32:6d:65:f5:c2:3a:ac:62:ee:7d:32:55:bb:01:a3:2f:7f: 4f:23:80:5d:26:5f:b3:a1:df:33:50:02:5a:7b:cf:c3:49:cd: a9:19:2e:68:5f:d1:35:d4:24:56:c9:ec:bf:30:69:b5:b7:49: e6:d0:d6:e1:6f:51:35:87:25:84:1f:2b:d5:fc:c6:b3:21:cd: 1e:b4:d2:f7:f1:8a:11:22:e5:fb:2f:91:69:bd:a5:f6:cb:6b: 6f:c9:7f:89:78:24:99:f1:cc:6e:4d:36:45:cc:57:a7:d8:32: b8:bb:a7:7c:24:ed:26:09:83:a5:01:fe:21:64:cf:ee:81:7e: 31:34:f9:d6:97:1b:d5:94:c8:d4:83:62:e6:d4:b9:c3:71:eb: d8:ea:57:5b:c7:c0:c4:2a:45:fc:71:b2:83:6d:bf:93:23:af: 0c:73:84:4d:03:f8:b4:fb:85:53:7f:f4:1f:a2:39:d1:24:6c: 8c:2e:c4:31 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE5FWdnIvQRM5iytDpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U4ODY2NzItNTVmMy00NTBmLWFiNmUtMzQyYzc2ZjI1 NmRiMB4XDTI2MDYyMzIxMDAxMloXDTI2MDkyMTIxMDAxMlowLzEtMCsGA1UEAxMk NzczMTRlMzMtNDgwZi00MDdhLTg4OWQtOWI2YjQxOWYwZGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYXGeQNxvCnU95HNJp8geZDGafrqglc7Kwjr 1FJ+wPTOIq6PSmhWjHUZT+Xk4kSmmw4rwftkXH5TkNwX6JQAGJzuiolKGW8OjPxG Go2r4leCwQvdb8xFfnarpkeFECwqHvvMgXBcIJzg7cZDfP7d3514vrLz+YIM4EEJ 5OMswIKCFo7+3oox8BL8bSz975BLLNxKTn9zuTcXDQGLvs9zzSdXJXtKfRx43eyv LrjqRP8oqnAiyGCuz1X+rvALDFVv5q7dVQP4sb4JAXydTS+YlCc1PTZV6AoJ8Px1 7hrPIu7O6zTeQDU/0hIXzniTqP99oPoUuEW2k//08XJe9zb73QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFOljXvaI/6Ne7SwZvWYru1F5rPyhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4 NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJjNzZmMjU2ZGIvYmE1OGI3ZWYtZWUyYS0z MWIxLTk1MWYtNmU3Yjc5YTUyZjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2U4ODY2NzItNTVmMy00NTBmLWFi NmUtMzQyYzc2ZjI1NmRiLzNlODg2NjcyLTU1ZjMtNDUwZi1hYjZlLTM0MmM3NmYy NTZkYi5jcmwwHwYDVR0jBBgwFoAUyffaYgRlgk+Ha8qShuQWCtT5MZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJj NzZmMjU2ZGIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF4xiAwQC rG8MMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACKZQQNnsUCO7ECokCEVdwxlQaFU+9zHr7EnRtuyNyij9b6U NbO5mjyToKGJv4l2SMcVrHAkFSTUFTZnz7AJy82qFhY6scBXmEAybWX1wjqsYu59 MlW7AaMvf08jgF0mX7Oh3zNQAlp7z8NJzakZLmhf0TXUJFbJ7L8wabW3SebQ1uFv UTWHJYQfK9X8xrMhzR600vfxihEi5fsvkWm9pfbLa2/Jf4l4JJnxzG5NNkXMV6fY Mri7p3wk7SYJg6UB/iFkz+6BfjE0+daXG9WUyNSDYubUucNx69jqV1vHwMQqRfxx soNtv5MjrwxzhE0D+LT7hVN/9B+iOdEkbIwuxDE= -----END CERTIFICATE-----Generated at Tue Jul 21 14:17:14 2026 by rpki-client