$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/baafe8fc-bff9-3c93-b421-7768a68436d3.roa File: baafe8fc-bff9-3c93-b421-7768a68436d3.roa (raw, json) Hash identifier: x9AXV6Ah3Ylsuye8innGRrNnq+/8le39O4goDnS9Zls= Subject key identifier: 54:AE:67:5A:7D:63:B9:E4:54:DE:69:E7:6C:71:14:54:99:01:7A:66 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F331D1C1F8B0F0FB278DED448 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/baafe8fc-bff9-3c93-b421-7768a68436d3.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 19905 IP address blocks: 173.22.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:1c:1f:8b:0f:0f:b2:78:de:d4:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=27b84a0b-428e-44c3-a093-eb7225eae35d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9b:b9:f2:53:b2:06:d6:2d:be:0e:df:3f:3f: 7b:a9:cf:25:ca:ca:e3:82:77:40:a4:d8:b1:1e:fd: 68:76:b8:94:49:ff:ff:39:19:60:95:35:a4:b3:af: 2c:d5:c9:c6:36:9b:b0:62:96:81:13:de:f8:6c:43: b3:18:0c:eb:42:be:f6:f8:50:81:8b:0d:92:bd:67: 95:26:4b:a6:0e:40:df:d6:a8:00:69:29:bf:7e:a7: 57:55:97:dd:04:57:a3:0e:38:f2:63:17:41:f0:a0: bb:eb:8e:e9:62:9f:64:dc:6d:79:06:47:93:78:4c: bf:c9:67:16:eb:6e:23:5a:a4:36:9f:13:84:c3:50: c7:26:41:93:2d:7b:df:98:fa:1e:9c:f6:fb:84:0f: 75:80:6f:65:09:0f:e7:d8:4f:5f:b0:4b:e1:18:3a: 93:a2:f7:da:d0:41:4f:9f:dd:81:2f:e9:39:31:f0: 1f:a9:bc:57:a8:47:53:36:f9:12:97:a2:3e:b9:5f: f9:ab:25:bc:53:29:80:18:bf:43:be:03:55:5a:96: 96:01:d0:93:64:f9:2e:14:69:d4:ab:58:30:49:e5: 39:66:61:b1:54:dc:3b:68:ab:2d:27:e5:27:cd:ef: bc:3a:e9:44:49:0a:81:3d:39:82:0a:d5:55:9f:07: fd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:AE:67:5A:7D:63:B9:E4:54:DE:69:E7:6C:71:14:54:99:01:7A:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/baafe8fc-bff9-3c93-b421-7768a68436d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:a8:d8:d2:69:28:09:8d:dd:aa:dc:0b:70:b0:a3:6a:a6:c3: eb:46:5b:5e:bf:60:ff:54:d6:d1:fa:44:6c:36:72:51:1b:b8: cc:ac:0e:4b:28:b3:74:08:cf:f6:b0:29:5a:d7:09:5e:1f:72: 80:e7:d5:72:ae:65:c8:5a:d9:ff:b4:9b:cc:9a:15:90:e9:53: c9:26:ed:80:0e:b4:7a:40:36:98:89:2e:92:df:0b:56:f5:f2: f7:8e:b6:a2:4f:0b:27:cd:e6:ab:26:ae:e0:cd:18:bc:fa:61: c2:0d:df:64:a1:d1:21:94:e6:bf:73:f4:79:98:15:12:dc:13: f3:ff:2e:92:47:1f:c6:f4:3d:97:00:ab:32:76:78:96:a4:86: 6b:42:90:02:98:2f:68:44:d8:13:a7:56:92:8b:4a:bf:bd:9a: 0e:e6:d1:47:2e:4a:2f:32:be:a7:45:83:a7:69:f0:1a:ad:59: aa:dd:3d:d4:ed:fd:97:a6:cd:6a:ce:9d:98:9c:12:82:51:dc: 56:dd:f9:b9:d0:b2:3c:90:0f:5a:05:b8:84:3a:1a:9a:4b:ce: 5e:f3:02:be:11:ee:d5:1f:84:0a:7b:60:0a:ac:13:f4:2b:45: 8f:6e:79:17:22:ab:36:02:d6:11:f0:f1:47:17:63:81:7a:2e: 8c:1e:e4:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHRwfiw8Psnje1EgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk MjdiODRhMGItNDI4ZS00NGMzLWEwOTMtZWI3MjI1ZWFlMzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJu58lOyBtYtvg7fPz97qc8lysrjgndApNix Hv1odriUSf//ORlglTWks68s1cnGNpuwYpaBE974bEOzGAzrQr72+FCBiw2SvWeV JkumDkDf1qgAaSm/fqdXVZfdBFejDjjyYxdB8KC7647pYp9k3G15BkeTeEy/yWcW 624jWqQ2nxOEw1DHJkGTLXvfmPoenPb7hA91gG9lCQ/n2E9fsEvhGDqTovfa0EFP n92BL+k5MfAfqbxXqEdTNvkSl6I+uV/5qyW8UymAGL9DvgNVWpaWAdCTZPkuFGnU q1gwSeU5ZmGxVNw7aKstJ+Unze+8OulESQqBPTmCCtVVnwf9KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSuZ1p9Y7nkVN5p52xxFFSZAXpmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmFhZmU4ZmMtYmZmOS0z YzkzLWI0MjEtNzc2OGE2ODQzNmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRaFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyo2NJpKAmN3arcC3Cwo2qmw+tGW16/YP9U1tH6RGw2clEbuMysDkso s3QIz/awKVrXCV4fcoDn1XKuZcha2f+0m8yaFZDpU8km7YAOtHpANpiJLpLfC1b1 8veOtqJPCyfN5qsmruDNGLz6YcIN32Sh0SGU5r9z9HmYFRLcE/P/LpJHH8b0PZcA qzJ2eJakhmtCkAKYL2hE2BOnVpKLSr+9mg7m0UcuSi8yvqdFg6dp8BqtWardPdTt /ZemzWrOnZicEoJR3Fbd+bnQsjyQD1oFuIQ6GppLzl7zAr4R7tUfhAp7YAqsE/Qr RY9ueRciqzYC1hHw8UcXY4F6Lowe5Lo= -----END CERTIFICATE-----Generated at Tue Sep 22 07:29:21 2026 by rpki-client