$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba321e18-86bd-46af-83a2-478b4fd1fa97/f67a871c-0b62-3102-8a24-888640c592fa.roa File: f67a871c-0b62-3102-8a24-888640c592fa.roa (raw, json) Hash identifier: 7QOBpHVEzg4ycVJv99t4zJK7482FGnKUlQOjEPoRFbo= Subject key identifier: 4A:21:78:7C:06:8F:DC:F0:63:E8:1D:77:A3:12:5C:AC:B6:8F:1A:74 Certificate issuer: /CN=ba321e18-86bd-46af-83a2-478b4fd1fa97 Certificate serial: 010D0C9F4328584EE7BCB385B2724E04F3F76700 Authority key identifier: 5C:70:00:42:A7:CC:07:80:1A:06:BF:41:D4:F2:01:DB:FC:8D:2A:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba321e18-86bd-46af-83a2-478b4fd1fa97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba321e18-86bd-46af-83a2-478b4fd1fa97/f67a871c-0b62-3102-8a24-888640c592fa.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 396264 IP address blocks: 23.146.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba321e18-86bd-46af-83a2-478b4fd1fa97/ba321e18-86bd-46af-83a2-478b4fd1fa97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba321e18-86bd-46af-83a2-478b4fd1fa97/ba321e18-86bd-46af-83a2-478b4fd1fa97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba321e18-86bd-46af-83a2-478b4fd1fa97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:b3:85:b2:72:4e:04:f3:f7:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba321e18-86bd-46af-83a2-478b4fd1fa97 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=00e26176-500a-43b3-84db-b88213b8d41e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2d:cf:f5:99:92:47:a2:1e:9f:86:a8:ed:ad: 10:15:94:7c:b7:9b:ed:eb:ab:78:b1:4b:8b:01:52: 8c:9a:0e:7b:c9:25:2e:26:c9:a6:bd:7f:43:57:43: f0:d6:6f:aa:3f:9c:3e:0a:d8:77:13:de:3f:31:ae: 3b:18:63:84:d2:bc:f6:50:ad:cc:f3:32:df:09:cf: 8e:a6:86:46:a4:3a:73:92:4a:e0:7a:73:17:45:6e: 3e:7b:5f:e5:74:54:90:3d:2e:25:6c:df:6b:0e:8e: 7b:09:4c:aa:ff:bd:7c:09:8c:d3:b0:ef:10:2d:85: 6e:1d:c6:6b:59:4d:da:6d:fe:88:17:65:34:2b:2c: a5:55:c1:1f:26:e0:e2:aa:29:da:1c:2d:2b:a4:b4: 73:40:af:d8:64:82:bc:af:0d:26:07:68:08:ad:e1: 6d:5e:13:d5:dd:e4:6b:59:df:a1:ef:c4:ad:64:fe: 89:36:0e:8a:87:21:ea:c0:4b:75:e2:22:05:6b:d8: 61:3a:8b:f8:19:57:ec:05:56:69:62:a1:60:8a:85: 7a:a8:94:0a:43:7b:c2:54:15:9e:4b:22:eb:59:9a: 91:3b:06:45:ac:a1:67:e9:ac:31:e0:eb:4d:46:ce: 46:0b:11:64:fe:cc:a1:58:a1:3e:29:9a:0d:a6:09: b6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:21:78:7C:06:8F:DC:F0:63:E8:1D:77:A3:12:5C:AC:B6:8F:1A:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba321e18-86bd-46af-83a2-478b4fd1fa97/f67a871c-0b62-3102-8a24-888640c592fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba321e18-86bd-46af-83a2-478b4fd1fa97/ba321e18-86bd-46af-83a2-478b4fd1fa97.crl X509v3 Authority Key Identifier: keyid:5C:70:00:42:A7:CC:07:80:1A:06:BF:41:D4:F2:01:DB:FC:8D:2A:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba321e18-86bd-46af-83a2-478b4fd1fa97.cer sbgp-ipAddrBlock: critical IPv4: 23.146.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:98:a7:50:d8:71:09:d8:58:91:c7:98:1a:ca:2b:b2:85:b4: 5c:72:26:87:0a:4f:ca:37:4a:cf:af:3a:63:34:d3:dd:7b:50: e1:4a:15:f5:4e:17:0c:2f:ab:a7:98:6d:59:26:24:48:3f:c5: db:16:23:33:35:de:74:d7:55:7e:17:5d:e2:62:72:5a:e8:3f: 3b:60:3f:84:3d:80:b4:b3:38:51:6e:16:c9:e8:ca:cb:c3:25: 8f:d8:62:34:dc:2c:0f:cb:f3:66:76:67:25:6b:6d:5e:f2:29: 36:27:19:e8:8b:2a:8c:25:0d:e9:db:28:ca:7d:8c:52:3a:3e: 9c:0e:3f:5a:69:37:24:38:1e:63:c4:18:01:eb:f4:68:3d:c5: db:2c:b3:fe:36:a2:11:0c:73:c9:bb:c0:84:23:77:17:ef:e1: 6c:95:10:26:12:7c:98:e2:dc:97:82:aa:94:05:4d:45:1f:e3: 55:f6:ee:32:01:8c:d2:bf:f6:e8:ca:82:3a:4f:15:07:2c:d7: 90:56:6e:db:5f:11:70:91:11:a0:7c:e2:29:5b:02:53:ab:b2: 8f:3b:00:9d:12:c4:43:30:b8:e6:c5:33:06:35:2b:75:0c:d5: 32:c0:09:10:bd:3a:a9:63:ff:87:83:c3:7a:ef:2d:83:04:6e: e7:11:e3:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvLOFsnJOBPP3ZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEzMjFlMTgtODZiZC00NmFmLTgzYTItNDc4YjRmZDFm YTk3MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk MDBlMjYxNzYtNTAwYS00M2IzLTg0ZGItYjg4MjEzYjhkNDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4S3P9ZmSR6Ien4ao7a0QFZR8t5vt66t4sUuL AVKMmg57ySUuJsmmvX9DV0Pw1m+qP5w+Cth3E94/Ma47GGOE0rz2UK3M8zLfCc+O poZGpDpzkkrgenMXRW4+e1/ldFSQPS4lbN9rDo57CUyq/718CYzTsO8QLYVuHcZr WU3abf6IF2U0KyylVcEfJuDiqinaHC0rpLRzQK/YZIK8rw0mB2gIreFtXhPV3eRr Wd+h78StZP6JNg6KhyHqwEt14iIFa9hhOov4GVfsBVZpYqFgioV6qJQKQ3vCVBWe SyLrWZqROwZFrKFn6awx4OtNRs5GCxFk/syhWKE+KZoNpgm2KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoheHwGj9zwY+gdd6MSXKy2jxp0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iYTMy MWUxOC04NmJkLTQ2YWYtODNhMi00NzhiNGZkMWZhOTcvZjY3YTg3MWMtMGI2Mi0z MTAyLThhMjQtODg4NjQwYzU5MmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYmEzMjFlMTgtODZiZC00NmFmLTgz YTItNDc4YjRmZDFmYTk3L2JhMzIxZTE4LTg2YmQtNDZhZi04M2EyLTQ3OGI0ZmQx ZmE5Ny5jcmwwHwYDVR0jBBgwFoAUXHAAQqfMB4AaBr9B1PIB2/yNKtUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9iYTMyMWUxOC04NmJkLTQ2YWYtODNhMi00Nzhi NGZkMWZhOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5KUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOYp1DYcQnYWJHHmBrKK7KFtFxyJocKT8o3Ss+vOmM00917UOFKFfVO Fwwvq6eYbVkmJEg/xdsWIzM13nTXVX4XXeJiclroPztgP4Q9gLSzOFFuFsnoysvD JY/YYjTcLA/L82Z2ZyVrbV7yKTYnGeiLKowlDenbKMp9jFI6PpwOP1ppNyQ4HmPE GAHr9Gg9xdsss/42ohEMc8m7wIQjdxfv4WyVECYSfJji3JeCqpQFTUUf41X27jIB jNK/9ujKgjpPFQcs15BWbttfEXCREaB84ilbAlOrso87AJ0SxEMwuObFMwY1K3UM 1TLACRC9Oqlj/4eDw3rvLYMEbucR47g= -----END CERTIFICATE-----Generated at Tue Sep 22 00:29:54 2026 by rpki-client