$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/31737d94-3b81-41f9-b1fb-fbdeacfc665a/bab30281-ddab-371f-a142-2ea350fb226a.roa File: bab30281-ddab-371f-a142-2ea350fb226a.roa (raw, json) Hash identifier: JEL/aSsFNY532qLW2PgyZGrr4bGEF9nRHKcgRw5Voqo= Subject key identifier: 29:C1:5A:E1:A1:2A:8D:E0:AE:F1:C0:6E:BC:A3:BE:FD:A5:4F:ED:9B Certificate issuer: /CN=31737d94-3b81-41f9-b1fb-fbdeacfc665a Certificate serial: 010D0C9F4328584F49731973113D70DEE8407940 Authority key identifier: 64:16:61:31:56:4D:3B:26:BC:59:4C:81:89:7D:A2:8A:C2:C5:A7:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/31737d94-3b81-41f9-b1fb-fbdeacfc665a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/31737d94-3b81-41f9-b1fb-fbdeacfc665a/bab30281-ddab-371f-a142-2ea350fb226a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 402495 IP address blocks: 23.158.100.0/24 maxlen: 24 2602:f3c7::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/31737d94-3b81-41f9-b1fb-fbdeacfc665a/31737d94-3b81-41f9-b1fb-fbdeacfc665a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/31737d94-3b81-41f9-b1fb-fbdeacfc665a/31737d94-3b81-41f9-b1fb-fbdeacfc665a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/31737d94-3b81-41f9-b1fb-fbdeacfc665a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:19:73:11:3d:70:de:e8:40:79:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31737d94-3b81-41f9-b1fb-fbdeacfc665a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c9d0b84a-186e-4dfe-81a6-11e4ebb93343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6d:0d:c1:c9:95:fb:15:8f:11:cd:8b:25:d9: 7a:af:6a:bf:c3:67:98:6d:11:cc:f5:4e:41:10:f3: e5:03:7c:d1:47:79:be:f2:a4:74:8d:35:4f:f4:a4: 73:b6:20:3f:08:16:9c:85:8e:65:b9:bf:28:1c:e2: a5:48:c9:30:31:49:4a:5f:7f:51:99:54:57:88:4a: 32:0f:84:4f:73:55:ac:93:8a:b8:f6:ed:be:21:64: a4:6e:31:eb:c2:c0:27:21:fc:5c:e3:47:a6:1a:45: cc:2d:51:7e:ce:18:89:8b:af:9b:0b:09:e5:ff:12: c1:94:2e:83:7a:6a:15:cb:76:37:4a:71:6f:63:c6: 50:d2:ce:01:e0:c0:2e:6c:06:07:6d:74:6f:a3:44: ca:ef:65:0e:df:b8:8d:1d:08:13:6f:c1:0d:17:4b: a2:88:65:81:52:f0:5b:ff:05:9f:96:50:2d:81:9b: b2:74:12:1b:ce:10:d9:f2:75:fa:d4:5f:e0:f9:8c: 59:1e:2d:7f:e9:7c:ed:7a:c1:eb:f6:e8:55:2d:ad: 82:1c:6b:ae:e8:78:86:97:98:75:15:fa:5e:0e:29: 2e:9c:c5:ab:bd:92:ee:b5:70:b8:17:2c:91:9a:12: dd:22:76:c8:0c:99:cd:ae:d0:83:3e:1c:11:d0:5f: a2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C1:5A:E1:A1:2A:8D:E0:AE:F1:C0:6E:BC:A3:BE:FD:A5:4F:ED:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/31737d94-3b81-41f9-b1fb-fbdeacfc665a/bab30281-ddab-371f-a142-2ea350fb226a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/31737d94-3b81-41f9-b1fb-fbdeacfc665a/31737d94-3b81-41f9-b1fb-fbdeacfc665a.crl X509v3 Authority Key Identifier: keyid:64:16:61:31:56:4D:3B:26:BC:59:4C:81:89:7D:A2:8A:C2:C5:A7:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/31737d94-3b81-41f9-b1fb-fbdeacfc665a.cer sbgp-ipAddrBlock: critical IPv4: 23.158.100.0/24 IPv6: 2602:f3c7::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:44:ba:2a:d7:f3:43:f1:94:e9:0c:75:70:60:77:9a:02:8d: 69:4b:74:4d:f6:b6:44:49:90:f1:32:7f:5d:5a:d6:bb:2e:91: 82:56:b1:e3:cf:08:27:c4:f7:e9:69:f5:b0:32:bb:6e:51:94: ab:7d:6d:cc:18:47:7b:53:b6:14:33:2d:1c:dc:26:29:57:27: 33:c0:15:12:b7:9b:82:b7:56:ac:f2:7c:26:61:2b:0a:46:dc: 1e:95:b8:e6:73:12:4d:58:22:c2:1f:bb:cc:ff:9d:63:0f:b1: a4:06:9d:51:a6:45:fb:d5:27:cd:50:f6:e1:c6:9d:58:32:6a: c4:c6:5f:f7:e7:71:3e:64:a0:84:14:b4:61:3e:96:81:54:3f: 57:9a:db:35:fe:45:09:3f:f5:0b:4d:01:6b:3b:07:25:11:1f: 51:47:05:52:4b:d9:30:b8:95:86:b9:03:7c:30:33:bf:ea:8a: a7:39:d0:43:ac:51:fe:e7:38:95:10:26:7e:a6:78:18:fd:79: 31:4a:71:38:ea:97:5b:93:97:d6:31:fa:b3:6c:4b:42:6f:e9: 2e:de:26:73:c3:bb:b2:e3:7d:4a:e4:85:50:7e:1c:8e:49:8b: 65:ec:c1:63:54:47:30:ab:93:b5:46:c6:af:5d:7d:db:36:aa: 72:75:7b:03 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9JcxlzET1w3uhAeUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzE3MzdkOTQtM2I4MS00MWY5LWIxZmItZmJkZWFjZmM2 NjVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzlkMGI4NGEtMTg2ZS00ZGZlLTgxYTYtMTFlNGViYjkzMzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4m0NwcmV+xWPEc2LJdl6r2q/w2eYbRHM9U5B EPPlA3zRR3m+8qR0jTVP9KRztiA/CBachY5lub8oHOKlSMkwMUlKX39RmVRXiEoy D4RPc1Wsk4q49u2+IWSkbjHrwsAnIfxc40emGkXMLVF+zhiJi6+bCwnl/xLBlC6D emoVy3Y3SnFvY8ZQ0s4B4MAubAYHbXRvo0TK72UO37iNHQgTb8ENF0uiiGWBUvBb /wWfllAtgZuydBIbzhDZ8nX61F/g+YxZHi1/6XztesHr9uhVLa2CHGuu6HiGl5h1 FfpeDikunMWrvZLutXC4FyyRmhLdInbIDJnNrtCDPhwR0F+iEQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFCnBWuGhKo3grvHAbryjvv2lT+2bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zMTcz N2Q5NC0zYjgxLTQxZjktYjFmYi1mYmRlYWNmYzY2NWEvYmFiMzAyODEtZGRhYi0z NzFmLWExNDItMmVhMzUwZmIyMjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMzE3MzdkOTQtM2I4MS00MWY5LWIx ZmItZmJkZWFjZmM2NjVhLzMxNzM3ZDk0LTNiODEtNDFmOS1iMWZiLWZiZGVhY2Zj NjY1YS5jcmwwHwYDVR0jBBgwFoAUZBZhMVZNOya8WUyBiX2iisLFp8wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8zMTczN2Q5NC0zYjgxLTQxZjktYjFmYi1mYmRl YWNmYzY2NWEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF55kMA4E AgACMAgDBgAmAvPHADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCQRLoq1/ND8ZTpDHVwYHeaAo1pS3RN9rZE SZDxMn9dWta7LpGCVrHjzwgnxPfpafWwMrtuUZSrfW3MGEd7U7YUMy0c3CYpVycz wBUSt5uCt1as8nwmYSsKRtwelbjmcxJNWCLCH7vM/51jD7GkBp1RpkX71SfNUPbh xp1YMmrExl/353E+ZKCEFLRhPpaBVD9Xmts1/kUJP/ULTQFrOwclER9RRwVSS9kw uJWGuQN8MDO/6oqnOdBDrFH+5ziVECZ+pngY/XkxSnE46pdbk5fWMfqzbEtCb+ku 3iZzw7uy431K5IVQfhyOSYtl7MFjVEcwq5O1RsavXX3bNqpydXsD -----END CERTIFICATE-----Generated at Sun Sep 27 07:51:58 2026 by rpki-client