$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/ba52dd0f-62ec-36b6-b8f7-c08371482a4b.roa File: ba52dd0f-62ec-36b6-b8f7-c08371482a4b.roa (raw, json) Hash identifier: aPY7sRy7naL8c9K/hyItPE77vtZuI87+0bW+P4wtT4o= Subject key identifier: 72:E3:7F:F4:23:8D:B7:D0:E5:B3:DB:73:C5:36:05:30:7A:42:40:BC Certificate issuer: /CN=2ac961ff-f406-4f80-b06d-e1284358815a Certificate serial: 010D0C9F4328584F4974C0C79A2943C593EB0700 Authority key identifier: F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/ba52dd0f-62ec-36b6-b8f7-c08371482a4b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11096 IP address blocks: 162.248.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:c0:c7:9a:29:43:c5:93:eb:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac961ff-f406-4f80-b06d-e1284358815a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=27ebc3f5-1872-4708-98d5-010c622f36c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a3:3d:e4:55:68:2b:fe:2f:38:19:df:ed:5a: 2c:93:5b:82:7c:a7:13:d6:49:ce:5a:38:ce:c1:6a: a8:0c:08:5d:8e:4f:2d:b1:99:a9:4b:50:e3:53:82: 62:55:7a:d1:b4:f8:5b:ab:ac:4b:31:11:e8:6d:1f: 3a:a8:70:71:98:ff:fe:79:bb:4e:7f:3c:19:29:f7: e7:56:7f:29:00:79:02:03:a6:e6:d4:a9:89:92:f6: b8:6e:d0:16:8c:95:93:b1:51:ba:ba:1d:28:c3:f2: 9b:8f:24:9b:39:a9:42:17:ef:ad:98:77:9e:cf:8e: 03:39:c5:cb:be:90:7d:2d:88:c9:03:a9:d2:f6:4f: d9:bd:37:15:f5:ea:3e:d0:c7:21:0f:c2:a8:4d:84: d6:4b:d8:60:c8:d3:5f:48:65:b2:7a:c0:7b:6e:df: 68:eb:c3:41:fc:83:95:48:b2:19:bd:84:63:98:9a: a6:a1:09:c7:74:db:c0:d1:ed:f7:c3:18:53:cd:1e: eb:05:34:25:2d:37:c4:8b:18:65:ec:9d:cc:88:06: 69:cf:19:9e:01:0c:4e:0e:bc:90:09:7a:44:53:7a: 89:33:e9:72:e7:fe:7f:b7:a3:be:78:15:b5:be:14: 2a:eb:ae:2e:f7:46:a1:80:74:9d:d5:f0:d3:07:f8: 10:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E3:7F:F4:23:8D:B7:D0:E5:B3:DB:73:C5:36:05:30:7A:42:40:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/ba52dd0f-62ec-36b6-b8f7-c08371482a4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl X509v3 Authority Key Identifier: keyid:F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer sbgp-ipAddrBlock: critical IPv4: 162.248.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:a9:40:27:87:27:4a:d2:5c:87:20:44:97:b8:41:f8:d0:4a: e3:45:a7:43:e2:fe:ae:45:27:a6:d7:3d:34:13:cd:eb:c6:f1: 11:80:75:f9:e0:2d:fc:95:a2:9e:4e:06:d0:96:b3:ce:93:f4: 84:7c:43:77:31:66:15:8b:dc:98:cf:c5:83:19:7a:1a:40:1b: 08:0e:95:a1:20:5b:86:38:0f:76:2e:c9:32:e4:09:f7:10:71: 95:9c:7d:2b:e9:35:2d:09:cf:bf:5b:18:c7:61:74:4d:b3:3e: ce:56:fa:bf:85:3b:b4:e0:fe:06:d4:16:73:3c:e7:26:24:8c: 07:ef:7d:3a:97:0a:e3:e5:f6:f3:11:12:82:f9:de:55:f1:64: f9:b2:99:07:54:3f:78:6c:6c:dd:e8:ee:20:af:2c:c3:e6:41: 62:e3:a6:11:50:54:94:d0:c4:5f:a7:e0:6e:5d:66:5a:12:60: d1:83:ae:2c:75:dd:7f:38:a3:1e:a9:f0:0e:67:cb:c4:4f:4a: 09:da:cc:a6:86:47:d6:2a:6b:56:0a:34:7d:e5:6a:0e:4b:d0: 5d:24:da:1e:22:2a:c1:f6:c2:72:8e:d2:a9:27:a0:00:b0:99: 69:b2:37:d3:31:48:c8:53:66:47:e2:91:c6:fe:0b:2e:3c:40: 63:a5:ce:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdMDHmilDxZPrBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFjOTYxZmYtZjQwNi00ZjgwLWIwNmQtZTEyODQzNTg4 MTVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjdlYmMzZjUtMTg3Mi00NzA4LTk4ZDUtMDEwYzYyMmYzNmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26M95FVoK/4vOBnf7Vosk1uCfKcT1knOWjjO wWqoDAhdjk8tsZmpS1DjU4JiVXrRtPhbq6xLMRHobR86qHBxmP/+ebtOfzwZKffn Vn8pAHkCA6bm1KmJkva4btAWjJWTsVG6uh0ow/KbjySbOalCF++tmHeez44DOcXL vpB9LYjJA6nS9k/ZvTcV9eo+0MchD8KoTYTWS9hgyNNfSGWyesB7bt9o68NB/IOV SLIZvYRjmJqmoQnHdNvA0e33wxhTzR7rBTQlLTfEixhl7J3MiAZpzxmeAQxODryQ CXpEU3qJM+ly5/5/t6O+eBW1vhQq664u90ahgHSd1fDTB/gQZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLjf/QjjbfQ5bPbc8U2BTB6QkC8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yYWM5 NjFmZi1mNDA2LTRmODAtYjA2ZC1lMTI4NDM1ODgxNWEvYmE1MmRkMGYtNjJlYy0z NmI2LWI4ZjctYzA4MzcxNDgyYTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmFjOTYxZmYtZjQwNi00ZjgwLWIw NmQtZTEyODQzNTg4MTVhLzJhYzk2MWZmLWY0MDYtNGY4MC1iMDZkLWUxMjg0MzU4 ODE1YS5jcmwwHwYDVR0jBBgwFoAU8Yt6W/iH5Nsxa/yxbRpn3jG1fJ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yYWM5NjFmZi1mNDA2LTRmODAtYjA2ZC1lMTI4 NDM1ODgxNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovhDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmpQCeHJ0rSXIcgRJe4QfjQSuNFp0Pi/q5FJ6bXPTQTzevG8RGAdfng LfyVop5OBtCWs86T9IR8Q3cxZhWL3JjPxYMZehpAGwgOlaEgW4Y4D3YuyTLkCfcQ cZWcfSvpNS0Jz79bGMdhdE2zPs5W+r+FO7Tg/gbUFnM85yYkjAfvfTqXCuPl9vMR EoL53lXxZPmymQdUP3hsbN3o7iCvLMPmQWLjphFQVJTQxF+n4G5dZloSYNGDrix1 3X84ox6p8A5ny8RPSgnazKaGR9Yqa1YKNH3lag5L0F0k2h4iKsH2wnKO0qknoACw mWmyN9MxSMhTZkfikcb+Cy48QGOlzm0= -----END CERTIFICATE-----Generated at Sat Oct 3 08:30:38 2026 by rpki-client