$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ba21cea2-4c1d-32bc-ac65-8207e236eedf.roa File: ba21cea2-4c1d-32bc-ac65-8207e236eedf.roa (raw, json) Hash identifier: ugcQ18KfdTDifkGV1gr6zfmFIso4Zqdh/7l7mCS1ZMw= Subject key identifier: 7D:7C:59:A3:78:5E:F0:EC:DA:74:32:10:BD:9A:AE:67:B0:4F:8A:A2 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584EE7BCB31607531D67679BF100 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ba21cea2-4c1d-32bc-ac65-8207e236eedf.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 30036 IP address blocks: 107.167.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:b3:16:07:53:1d:67:67:9b:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=52f783b9-c61b-4612-9b3d-e7c72231faa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f8:70:11:23:e0:0c:7c:25:28:d1:70:6d:8b: d6:b8:54:cc:7e:f1:b6:12:01:30:df:93:3b:88:89: 7a:ff:37:2e:fe:d0:3a:9a:86:91:b5:22:7c:07:8a: ea:b6:f1:6c:bc:5e:7c:ec:32:ce:2e:d6:e5:e5:a1: 06:5c:27:af:9f:a3:ab:34:cb:de:14:02:cf:bb:37: a9:67:6d:05:7b:52:78:66:7a:ac:6d:58:a7:4f:f2: 4c:d1:09:26:32:cf:13:01:d3:de:1e:a2:3c:b4:c2: 86:54:c9:35:36:f6:b4:0e:ad:9e:cf:d1:dd:11:51: be:68:84:33:77:47:1a:8d:25:d9:50:30:b1:c6:70: c5:42:4f:69:c6:12:b2:a7:cd:42:17:f6:a2:5b:be: 8a:d3:93:aa:a3:bd:a7:b2:88:b7:60:88:a1:7a:6a: 88:67:82:f0:75:b4:24:50:23:e2:ed:9e:e6:5c:5e: e7:f3:86:ba:39:cb:22:af:23:34:1b:45:57:dc:b2: b5:ab:d4:1c:a0:e7:75:bd:0f:9a:88:97:ff:31:37: b6:ab:cc:d3:38:9b:ae:e6:8d:04:2a:b7:96:44:51: 68:d5:7d:b1:12:79:46:b3:41:d7:13:7f:8b:43:f2: 83:47:18:45:cf:74:c0:36:eb:f4:1e:78:0f:0e:74: db:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:7C:59:A3:78:5E:F0:EC:DA:74:32:10:BD:9A:AE:67:B0:4F:8A:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ba21cea2-4c1d-32bc-ac65-8207e236eedf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 107.167.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:5b:a6:ad:d3:1d:32:40:e4:ea:72:be:7f:a5:7a:ce:1a:a8: 5a:74:90:1c:33:8e:28:80:14:b8:c3:d7:f0:0a:07:14:f4:b6: dd:ec:b8:3e:c4:38:dc:59:ab:59:d2:c5:34:64:de:43:d6:89: 3f:42:d3:7b:0b:e9:22:ca:4e:07:c3:5b:0f:7e:43:92:e1:23: 2f:7f:36:0e:7a:03:85:c7:ac:9c:3f:44:d0:4d:67:8d:3f:14: ea:b4:6c:a3:a5:16:2a:fc:ac:04:75:38:83:6e:74:23:85:23: 43:51:c3:2c:fe:f7:ed:bf:35:df:e8:ec:8f:24:a8:83:1a:6f: fd:5a:12:39:66:3f:41:14:f3:2a:c2:e5:ce:5c:e8:cb:fd:7e: 68:9e:d8:af:06:6b:8f:73:36:b3:5e:e4:17:e5:4e:18:8c:00: 43:4c:f8:ba:b4:54:36:a7:b1:dd:63:d2:6e:71:52:a9:6f:77: ed:e8:ea:bf:16:f4:86:a7:ee:5c:19:96:5a:0a:72:c3:b6:57: 8c:09:ad:84:be:35:a9:dd:ad:a7:05:d1:44:bb:b1:aa:b7:0c: 60:8a:75:ef:2b:0f:8b:1e:5b:94:65:51:f7:7d:df:9d:64:cc: 48:e5:49:08:c4:12:a9:3f:76:57:03:f1:dd:9b:8e:b5:0d:44: f6:a0:8c:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvLMWB1MdZ2eb8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk NTJmNzgzYjktYzYxYi00NjEyLTliM2QtZTdjNzIyMzFmYWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvhwESPgDHwlKNFwbYvWuFTMfvG2EgEw35M7 iIl6/zcu/tA6moaRtSJ8B4rqtvFsvF587DLOLtbl5aEGXCevn6OrNMveFALPuzep Z20Fe1J4ZnqsbVinT/JM0QkmMs8TAdPeHqI8tMKGVMk1Nva0Dq2ez9HdEVG+aIQz d0cajSXZUDCxxnDFQk9pxhKyp81CF/aiW76K05Oqo72nsoi3YIihemqIZ4LwdbQk UCPi7Z7mXF7n84a6OcsiryM0G0VX3LK1q9QcoOd1vQ+aiJf/MTe2q8zTOJuu5o0E KreWRFFo1X2xEnlGs0HXE3+LQ/KDRxhFz3TANuv0HngPDnTbiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH18WaN4XvDs2nQyEL2armewT4qiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmEyMWNlYTItNGMxZC0z MmJjLWFjNjUtODIwN2UyMzZlZWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa6fbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZbpq3THTJA5Opyvn+les4aqFp0kBwzjiiAFLjD1/AKBxT0tt3suD7E ONxZq1nSxTRk3kPWiT9C03sL6SLKTgfDWw9+Q5LhIy9/Ng56A4XHrJw/RNBNZ40/ FOq0bKOlFir8rAR1OINudCOFI0NRwyz+9+2/Nd/o7I8kqIMab/1aEjlmP0EU8yrC 5c5c6Mv9fmie2K8Ga49zNrNe5BflThiMAENM+Lq0VDansd1j0m5xUqlvd+3o6r8W 9Ian7lwZlloKcsO2V4wJrYS+NandracF0US7saq3DGCKde8rD4seW5RlUfd9351k zEjlSQjEEqk/dlcD8d2bjrUNRPagjCg= -----END CERTIFICATE-----Generated at Tue Sep 22 17:46:27 2026 by rpki-client