$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/ba58b7ef-ee2a-31b1-951f-6e7b79a52f32.roa File: ba58b7ef-ee2a-31b1-951f-6e7b79a52f32.roa (raw, json) Hash identifier: GlfQHPnZ9T66yYtdSbU9ihMa4E3FUmqzNJmP7Tu72AI= Subject key identifier: 6F:68:E0:30:2B:FA:1F:8F:20:98:C7:0F:04:05:38:E4:40:79:5A:8C Certificate issuer: /CN=3e886672-55f3-450f-ab6e-342c76f256db Certificate serial: 010D0C9F4328584EE7BCA524CFB4A09900F572C0 Authority key identifier: C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/ba58b7ef-ee2a-31b1-951f-6e7b79a52f32.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 16584 IP address blocks: 23.140.98.0/24 maxlen: 24 172.111.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:a5:24:cf:b4:a0:99:00:f5:72:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e886672-55f3-450f-ab6e-342c76f256db Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=2c2596e0-80ca-4614-a57b-456609e45528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5a:1e:51:c7:d0:51:1c:d5:87:f4:44:c7:c7: 78:b2:81:94:7a:49:c4:7d:28:a1:b6:d3:97:65:ce: 28:97:c5:b4:0c:b9:4b:7a:05:63:cc:2a:20:69:a9: e3:fa:c3:66:dd:d4:80:36:f4:f1:82:f6:04:d0:b5: 43:94:cb:e0:e2:60:7b:1a:2c:f0:d0:bd:29:6a:8c: 89:a9:df:47:11:8b:3e:75:b4:33:8c:b4:bf:69:f9: 8b:a5:b2:10:6e:9b:5f:9e:6a:54:30:61:5b:bc:2f: cf:11:01:39:62:d0:fd:b1:ec:7f:d3:10:1b:83:70: 46:6a:37:fb:4f:d5:f5:8c:1b:c0:74:76:cd:e2:e7: 10:b2:80:a1:78:07:43:28:64:4f:a2:0c:1d:0c:12: 91:a4:f7:11:88:7a:11:eb:75:a7:e7:4b:6f:c4:1e: f7:55:06:48:0e:e3:61:a4:05:0a:2c:8f:d7:a6:ba: 47:aa:9c:b4:aa:8b:9b:4a:c5:21:6e:79:53:ab:aa: 24:8d:f5:e5:28:28:5e:db:61:8b:e2:3c:8b:e7:ce: a9:42:c2:6d:65:b2:7f:10:6e:a1:c3:6a:a0:ce:81: 91:7e:68:b1:7c:d0:10:ed:ca:0f:29:80:43:4e:78: 3c:c1:c8:52:cc:8a:93:ce:9d:9a:ab:6c:57:df:2d: 2b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:68:E0:30:2B:FA:1F:8F:20:98:C7:0F:04:05:38:E4:40:79:5A:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/ba58b7ef-ee2a-31b1-951f-6e7b79a52f32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl X509v3 Authority Key Identifier: keyid:C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer sbgp-ipAddrBlock: critical IPv4: 23.140.98.0/24 172.111.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:d3:a1:a9:94:b4:eb:48:9f:b0:42:48:9a:b2:2a:f3:5d:97: 7b:1d:83:98:33:ca:c6:c2:96:fc:a2:12:95:05:bf:c0:39:d3: 21:1e:bb:3f:79:0d:48:cb:d9:dc:1b:fe:74:7c:7b:82:3b:04: a6:2b:b6:c3:10:82:3a:18:90:13:bc:07:99:b0:c4:65:b9:d2: 6a:c2:ac:a9:8c:18:62:cb:d9:c7:8c:65:0d:02:80:12:b1:e6: 8d:70:a8:4f:89:45:d1:30:d9:03:b4:3c:8d:b1:16:ff:54:ac: f1:01:67:f8:f2:5d:1d:0b:4a:81:3b:7f:d9:9a:fd:0e:a1:5c: 80:83:3f:6b:94:24:07:bb:8e:63:8a:f2:7d:9b:53:de:5b:e3: 63:13:fc:6b:e1:4d:4b:07:99:7d:21:97:11:fb:14:ef:92:a5: f4:56:ae:a2:09:3c:d3:d0:c0:c5:f4:fb:29:a8:b0:48:e3:1c: 1a:d9:a5:d3:3a:ef:bf:39:41:59:76:34:8b:87:6b:fd:ab:04: a0:1d:2d:c3:38:2b:ca:77:ad:d0:12:22:a0:b1:b5:03:50:72: e0:4f:df:f3:1e:d3:c3:2a:8e:2b:8b:42:e9:85:04:cf:2e:37: 4e:c2:ad:35:a8:27:53:8f:6f:ca:7b:06:fe:9d:3e:63:33:ee: ef:c0:c2:1d -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE7nvKUkz7SgmQD1csAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U4ODY2NzItNTVmMy00NTBmLWFiNmUtMzQyYzc2ZjI1 NmRiMB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk MmMyNTk2ZTAtODBjYS00NjE0LWE1N2ItNDU2NjA5ZTQ1NTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxloeUcfQURzVh/REx8d4soGUeknEfSihttOX Zc4ol8W0DLlLegVjzCogaanj+sNm3dSANvTxgvYE0LVDlMvg4mB7Gizw0L0paoyJ qd9HEYs+dbQzjLS/afmLpbIQbptfnmpUMGFbvC/PEQE5YtD9sex/0xAbg3BGajf7 T9X1jBvAdHbN4ucQsoCheAdDKGRPogwdDBKRpPcRiHoR63Wn50tvxB73VQZIDuNh pAUKLI/XprpHqpy0qoubSsUhbnlTq6okjfXlKChe22GL4jyL586pQsJtZbJ/EG6h w2qgzoGRfmixfNAQ7coPKYBDTng8wchSzIqTzp2aq2xX3y0rRQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFG9o4DAr+h+PIJjHDwQFOORAeVqMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4 NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJjNzZmMjU2ZGIvYmE1OGI3ZWYtZWUyYS0z MWIxLTk1MWYtNmU3Yjc5YTUyZjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2U4ODY2NzItNTVmMy00NTBmLWFi NmUtMzQyYzc2ZjI1NmRiLzNlODg2NjcyLTU1ZjMtNDUwZi1hYjZlLTM0MmM3NmYy NTZkYi5jcmwwHwYDVR0jBBgwFoAUyffaYgRlgk+Ha8qShuQWCtT5MZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJj NzZmMjU2ZGIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF4xiAwQC rG8MMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGHToamUtOtIn7BCSJqyKvNdl3sdg5gzysbClvyiEpUFv8A5 0yEeuz95DUjL2dwb/nR8e4I7BKYrtsMQgjoYkBO8B5mwxGW50mrCrKmMGGLL2ceM ZQ0CgBKx5o1wqE+JRdEw2QO0PI2xFv9UrPEBZ/jyXR0LSoE7f9ma/Q6hXICDP2uU JAe7jmOK8n2bU95b42MT/GvhTUsHmX0hlxH7FO+SpfRWrqIJPNPQwMX0+ymosEjj HBrZpdM67785QVl2NIuHa/2rBKAdLcM4K8p3rdASIqCxtQNQcuBP3/Me08MqjiuL QumFBM8uN07CrTWoJ1OPb8p7Bv6dPmMz7u/Awh0= -----END CERTIFICATE-----Generated at Sat Sep 5 01:40:20 2026 by rpki-client