$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/ba7c317a-02be-3815-93f4-dcdcf8a400d1.roa File: ba7c317a-02be-3815-93f4-dcdcf8a400d1.roa (raw, json) Hash identifier: pcXEngp/Pjg7l7c3501Cwz+qDPDYtyL9RLUe3Ed7IS4= Subject key identifier: 84:CA:88:9E:13:19:56:26:3E:B4:2E:94:39:79:BE:A2:B6:3A:EB:7F Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584F4972A8AE8BD3B1072E786290 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/ba7c317a-02be-3815-93f4-dcdcf8a400d1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 10794 IP address blocks: 171.162.88.0/24 maxlen: 24 171.162.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:a8:ae:8b:d3:b1:07:2e:78:62:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=37a4ba57-f117-43b7-8096-83bf4810bfbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:39:bd:7e:f0:16:4f:4e:4f:24:06:e3:84:d1: d3:b6:8b:a6:ed:93:eb:8d:ff:a6:70:f1:b6:17:e1: 6d:35:46:5a:8b:49:85:e8:f5:d4:96:ee:01:58:03: 62:04:07:b5:be:eb:41:78:e5:7e:39:74:8e:eb:84: 32:6d:8a:17:68:27:ad:53:8b:f8:47:c9:6a:0a:a5: 76:df:02:74:c7:b7:25:cc:4a:11:79:9d:2d:ea:3f: 73:b3:2f:92:2b:60:64:a7:c5:54:f8:65:a0:e1:2a: cb:5d:09:9c:92:21:28:b9:91:a0:f8:c7:24:31:0d: 03:1c:c6:61:5a:a6:25:1d:74:50:52:f3:b5:de:7d: 1d:4c:58:a7:a0:97:8e:32:61:bb:a5:f6:75:06:e0: 80:e1:65:10:29:23:b2:56:75:f3:27:f0:cc:37:f1: fd:e8:94:78:84:f7:06:ce:28:38:72:d3:17:28:7b: 77:ac:a3:ba:32:a1:c8:22:6d:4f:13:53:9d:7c:49: eb:8d:ce:da:c4:d5:1f:68:b4:17:4c:c9:55:91:59: 6d:16:de:c9:1c:d4:67:06:9f:32:9b:32:2d:68:ee: 3d:60:be:60:5f:9a:6e:11:6f:d3:72:b0:c5:94:67: 39:91:c8:42:43:3e:6b:27:f4:71:1c:a8:94:a4:d5: f6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:CA:88:9E:13:19:56:26:3E:B4:2E:94:39:79:BE:A2:B6:3A:EB:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/ba7c317a-02be-3815-93f4-dcdcf8a400d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.162.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:9a:c5:c1:bf:78:74:15:c3:b9:a7:67:97:35:b1:0c:92:9f: 29:be:60:7a:49:06:2d:85:2d:56:ef:67:16:91:06:2a:29:a9: 70:54:64:af:5f:a2:55:ea:07:cc:85:bd:50:91:23:6a:97:68: 3d:7a:48:82:6e:9a:2e:04:b0:84:ee:13:b1:87:a4:9c:f4:dc: 34:a1:ae:e3:b3:30:49:c9:6e:35:85:37:a8:13:a9:3a:c5:a7: de:1f:d4:35:2c:f9:9c:c8:18:01:ed:2f:ff:5f:8f:aa:5c:aa: d7:9a:e7:22:13:ef:a3:0b:05:87:58:71:95:7d:42:79:fe:40: fb:d7:f6:63:36:8e:e8:f3:83:4f:08:2f:aa:ff:02:a1:1c:c9: ea:ce:0c:2f:9d:1c:b4:10:85:0a:92:56:51:e9:30:c7:15:bf: 24:1a:dc:f6:e3:b6:60:cc:fc:ad:f0:83:56:e4:53:a7:68:21: 0c:6f:6a:fe:5b:95:50:c7:89:25:ac:ca:75:ec:27:e1:80:6c: 5c:1d:63:bf:04:37:36:46:f8:a2:e0:cb:ae:9b:a5:06:6e:a6: c8:a2:f1:e5:b8:86:b5:9e:91:c5:35:7b:3c:33:13:58:d9:34: b5:ca:06:60:89:87:a7:00:17:fb:6a:23:55:23:3f:49:a4:d3: a4:f8:49:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcqiui9OxBy54YpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzdhNGJhNTctZjExNy00M2I3LTgwOTYtODNiZjQ4MTBiZmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDm9fvAWT05PJAbjhNHTtoum7ZPrjf+mcPG2 F+FtNUZai0mF6PXUlu4BWANiBAe1vutBeOV+OXSO64QybYoXaCetU4v4R8lqCqV2 3wJ0x7clzEoReZ0t6j9zsy+SK2Bkp8VU+GWg4SrLXQmckiEouZGg+MckMQ0DHMZh WqYlHXRQUvO13n0dTFinoJeOMmG7pfZ1BuCA4WUQKSOyVnXzJ/DMN/H96JR4hPcG zig4ctMXKHt3rKO6MqHIIm1PE1OdfEnrjc7axNUfaLQXTMlVkVltFt7JHNRnBp8y mzItaO49YL5gX5puEW/TcrDFlGc5kchCQz5rJ/RxHKiUpNX2xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITKiJ4TGVYmPrQulDl5vqK2Out/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvYmE3YzMxN2EtMDJiZS0z ODE1LTkzZjQtZGNkY2Y4YTQwMGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBq6JYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALCaxcG/eHQVw7mnZ5c1sQySnym+YHpJBi2FLVbvZxaRBiopqXBUZK9f olXqB8yFvVCRI2qXaD16SIJumi4EsITuE7GHpJz03DShruOzMEnJbjWFN6gTqTrF p94f1DUs+ZzIGAHtL/9fj6pcqtea5yIT76MLBYdYcZV9Qnn+QPvX9mM2jujzg08I L6r/AqEcyerODC+dHLQQhQqSVlHpMMcVvyQa3PbjtmDM/K3wg1bkU6doIQxvav5b lVDHiSWsynXsJ+GAbFwdY78ENzZG+KLgy66bpQZupsii8eW4hrWekcU1ezwzE1jZ NLXKBmCJh6cAF/tqI1UjP0mk06T4SWc= -----END CERTIFICATE-----Generated at Sun Sep 27 10:12:44 2026 by rpki-client