$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/ba58b7ef-ee2a-31b1-951f-6e7b79a52f32.roa File: ba58b7ef-ee2a-31b1-951f-6e7b79a52f32.roa (raw, json) Hash identifier: 0QOleesgUxFhWGcGAjO1PpuLg+d8R6lqpe3TBjkaCw8= Subject key identifier: C9:A4:FA:F9:23:5B:67:92:32:9F:BE:C8:3E:7C:B2:A1:85:03:E6:4B Certificate issuer: /CN=3e886672-55f3-450f-ab6e-342c76f256db Certificate serial: 010D0C9F4328584D6515143A44B948251BFF6D50 Authority key identifier: C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/ba58b7ef-ee2a-31b1-951f-6e7b79a52f32.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 16584 IP address blocks: 23.140.98.0/24 maxlen: 24 172.111.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:14:3a:44:b9:48:25:1b:ff:6d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e886672-55f3-450f-ab6e-342c76f256db Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=8bd56883-c3e7-4aa7-ae2a-38581f83f8c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f6:e4:cc:07:a9:69:ad:14:2c:88:3f:b4:4e: 02:d9:e9:38:90:47:20:c5:43:77:06:f9:2b:5d:2c: 6e:54:d5:3f:d9:59:44:bf:b1:ac:05:3b:51:b4:bf: da:59:d7:d3:a8:58:2c:36:08:0c:c0:1a:94:9f:c0: 9b:a7:9b:8a:ab:0b:c1:e2:ac:f5:37:0a:95:82:6e: ca:38:f4:df:9d:4d:a4:76:12:5a:93:04:80:d5:65: e6:aa:a2:a3:98:b4:ed:61:f5:0f:dd:98:d2:6f:2e: db:5f:c8:35:e7:05:20:01:dc:b0:aa:c5:37:75:2e: e2:51:07:4e:46:83:7e:e4:28:75:26:9d:50:5f:23: 10:c3:81:ad:84:bd:ae:0c:fd:ed:d2:30:21:69:6c: cb:13:76:4e:54:5e:fb:23:27:3c:d5:ff:63:e1:c8: fd:94:45:66:d7:10:d5:15:2f:1a:13:ad:53:3d:38: 6d:10:92:78:91:c6:d9:0c:cf:e4:db:07:09:0d:1d: e4:dc:e5:e7:91:c1:72:6f:b6:69:e7:9f:8c:3a:aa: 81:5f:51:66:39:4a:eb:d1:97:57:96:5c:79:11:a3: 99:4a:9f:54:2d:13:71:4d:2a:9b:92:c6:15:5f:36: ce:af:9a:90:57:26:11:b1:70:f9:1e:f7:f5:6f:70: 42:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A4:FA:F9:23:5B:67:92:32:9F:BE:C8:3E:7C:B2:A1:85:03:E6:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/ba58b7ef-ee2a-31b1-951f-6e7b79a52f32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl X509v3 Authority Key Identifier: keyid:C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer sbgp-ipAddrBlock: critical IPv4: 23.140.98.0/24 172.111.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:b1:f9:b3:1c:a1:14:1a:ef:a9:ea:53:fb:b0:fa:39:fb:32: 0c:cc:32:e7:f8:7b:49:87:58:82:1e:cf:bc:7f:b8:27:bb:65: 71:78:96:e2:25:56:08:15:70:7b:14:dc:ac:28:2d:0b:f7:a7: be:79:46:a9:3c:7d:bc:7d:04:db:52:3e:4d:15:bd:e6:e9:80: d9:17:d0:ac:80:98:7d:72:10:ad:6f:e7:76:d7:c4:f1:c2:8c: 3d:10:22:7d:7a:1d:99:02:0e:d9:a4:eb:2d:90:38:55:18:9a: 71:a3:23:8d:54:cf:4e:33:9f:62:f7:b2:e5:e9:ef:6b:e7:02: 8a:0b:f9:f1:be:3d:76:2b:0b:2a:da:98:e1:0d:28:47:1b:35: a2:e0:56:4b:96:43:07:30:30:71:89:c0:be:87:ea:de:be:3c: be:86:25:57:da:cd:04:27:da:28:cb:be:d9:19:fd:c5:0d:bd: 42:62:d9:ef:eb:58:ba:22:d6:da:23:19:8f:f4:78:10:15:c6: 08:35:5a:4d:a0:cf:0f:79:df:51:6b:9b:c6:2f:dd:7f:28:46: 71:0f:bc:82:b7:9c:db:58:66:5b:c1:a0:e2:f9:75:77:6e:34: 9a:e8:bf:9b:c3:21:94:9f:01:15:94:e8:9c:41:12:80:80:fe: 58:90:35:e5 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE1lFRQ6RLlIJRv/bVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U4ODY2NzItNTVmMy00NTBmLWFiNmUtMzQyYzc2ZjI1 NmRiMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk OGJkNTY4ODMtYzNlNy00YWE3LWFlMmEtMzg1ODFmODNmOGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/bkzAepaa0ULIg/tE4C2ek4kEcgxUN3Bvkr XSxuVNU/2VlEv7GsBTtRtL/aWdfTqFgsNggMwBqUn8Cbp5uKqwvB4qz1NwqVgm7K OPTfnU2kdhJakwSA1WXmqqKjmLTtYfUP3ZjSby7bX8g15wUgAdywqsU3dS7iUQdO RoN+5Ch1Jp1QXyMQw4GthL2uDP3t0jAhaWzLE3ZOVF77Iyc81f9j4cj9lEVm1xDV FS8aE61TPThtEJJ4kcbZDM/k2wcJDR3k3OXnkcFyb7Zp55+MOqqBX1FmOUrr0ZdX llx5EaOZSp9ULRNxTSqbksYVXzbOr5qQVyYRsXD5Hvf1b3BCAwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMmk+vkjW2eSMp++yD58sqGFA+ZLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4 NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJjNzZmMjU2ZGIvYmE1OGI3ZWYtZWUyYS0z MWIxLTk1MWYtNmU3Yjc5YTUyZjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2U4ODY2NzItNTVmMy00NTBmLWFi NmUtMzQyYzc2ZjI1NmRiLzNlODg2NjcyLTU1ZjMtNDUwZi1hYjZlLTM0MmM3NmYy NTZkYi5jcmwwHwYDVR0jBBgwFoAUyffaYgRlgk+Ha8qShuQWCtT5MZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJj NzZmMjU2ZGIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF4xiAwQC rG8MMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIix+bMcoRQa76nqU/uw+jn7MgzMMuf4e0mHWIIez7x/uCe7 ZXF4luIlVggVcHsU3KwoLQv3p755Rqk8fbx9BNtSPk0VvebpgNkX0KyAmH1yEK1v 53bXxPHCjD0QIn16HZkCDtmk6y2QOFUYmnGjI41Uz04zn2L3suXp72vnAooL+fG+ PXYrCyramOENKEcbNaLgVkuWQwcwMHGJwL6H6t6+PL6GJVfazQQn2ijLvtkZ/cUN vUJi2e/rWLoi1tojGY/0eBAVxgg1Wk2gzw9531Frm8Yv3X8oRnEPvIK3nNtYZlvB oOL5dXduNJrov5vDIZSfARWU6JxBEoCA/liQNeU= -----END CERTIFICATE-----Generated at Sat Apr 18 01:07:19 2026 by rpki-client