$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5/aaa70b8e-c142-3e55-a70b-62a959e78932.roa File: aaa70b8e-c142-3e55-a70b-62a959e78932.roa (raw, json) Hash identifier: O/DUios83/GHIyocdegXFZ1CcevDlE3HscOE/Fitsdo= Subject key identifier: E2:4E:4F:14:13:65:F0:84:BA:D2:5D:62:69:1E:39:62:8A:00:D6:BE Certificate issuer: /CN=ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5 Certificate serial: 010D0C9F4328584D8EF5781318768F6BEC41A280 Authority key identifier: FA:1E:C0:9E:FD:15:31:F1:5A:5E:41:B6:7D:07:06:AB:76:F2:2C:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5/aaa70b8e-c142-3e55-a70b-62a959e78932.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 7018 IP address blocks: 163.123.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:78:13:18:76:8f:6b:ec:41:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=8b171ac1-ec5d-4bc7-82c0-068f6e93ff43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:37:2d:a5:98:46:fa:b6:4d:09:40:1e:96:83: 73:ee:dd:c6:45:8d:99:92:8c:a7:d6:3f:2b:ec:97: 75:74:f7:38:b5:f9:ae:3f:09:62:17:65:ba:80:8d: 60:b6:5e:9f:85:72:98:9e:08:27:30:56:ed:a0:05: 31:47:34:79:3b:81:58:f6:88:fa:35:10:de:e5:fe: a9:e9:df:81:50:82:1d:d4:3b:bf:d7:15:5e:0f:f4: 8c:40:c8:ba:c4:3c:43:c9:22:82:bf:72:64:c9:16: 4c:cb:04:8c:41:b5:8e:dd:35:e5:03:45:60:69:82: cb:91:c6:b3:75:2d:11:14:8a:5c:07:82:f1:f4:55: cc:9c:b2:a4:f9:6f:aa:f9:06:06:aa:61:b2:b4:a3: d2:58:9e:ec:56:82:ee:46:3b:9a:de:82:0b:c6:31: e9:2a:d9:a3:a0:64:3a:f8:70:bc:15:93:2d:ee:be: 46:1a:3d:23:33:2b:1a:ac:70:65:02:bb:6f:0b:6d: c9:9c:9d:a8:ee:ca:c9:4e:6c:4d:65:cb:ab:25:a7: e5:f8:45:e7:15:89:b5:2d:e1:27:95:c2:a5:d0:36: 04:6e:d8:56:78:9e:c0:b0:e4:62:7d:f7:7a:b6:e2: b8:e6:e9:89:28:94:b7:d2:dd:88:59:dd:35:8a:93: 2a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:4E:4F:14:13:65:F0:84:BA:D2:5D:62:69:1E:39:62:8A:00:D6:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5/aaa70b8e-c142-3e55-a70b-62a959e78932.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5.crl X509v3 Authority Key Identifier: keyid:FA:1E:C0:9E:FD:15:31:F1:5A:5E:41:B6:7D:07:06:AB:76:F2:2C:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5.cer sbgp-ipAddrBlock: critical IPv4: 163.123.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:a2:36:80:0d:36:91:c0:01:e5:bd:6a:0f:40:ca:3a:e3:3a: c4:4a:05:1e:87:aa:25:53:a6:1c:a5:a4:12:a3:05:6e:59:48: 12:34:e5:b7:10:86:13:d8:5d:62:47:79:66:e2:99:5f:7f:38: 0c:66:3a:b3:05:aa:08:3d:f5:f6:75:ee:ed:c1:e4:1d:c2:b5: 5f:55:df:b1:2e:4b:81:35:bb:49:8c:85:3b:4e:f8:96:d4:66: 9d:34:75:da:a7:f9:f5:e7:94:42:78:09:5c:13:85:d2:36:20: cc:e7:d5:9a:4b:d9:4e:b3:ce:e6:da:7d:21:6d:3f:44:73:54: 18:b6:ca:81:2d:62:99:1a:43:20:24:ef:d3:81:49:62:48:b2: 34:b5:b9:ca:88:61:1f:b0:7b:f6:4a:67:1c:cd:a9:1b:22:29: 99:81:67:84:42:21:77:f2:4b:03:1e:7f:a8:75:15:87:94:92: e3:8c:26:e4:77:39:5b:54:21:c3:b6:1f:6f:37:0c:35:9e:0d: 88:34:43:63:dc:de:dd:ff:76:96:88:ad:80:15:27:9e:73:d6: 9b:f3:8e:7b:0d:37:f7:be:09:87:17:58:e5:d9:fe:2d:bc:e8: 98:d2:7e:5c:70:8e:cb:17:45:68:6c:ae:6c:f5:58:49:ba:aa: 6d:e6:c6:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9XgTGHaPa+xBooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE5YzBmZTUtOGFjNi00MmEyLTljMGEtNTA1MzRhYWEw MWM1MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk OGIxNzFhYzEtZWM1ZC00YmM3LTgyYzAtMDY4ZjZlOTNmZjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8zctpZhG+rZNCUAeloNz7t3GRY2Zkoyn1j8r 7Jd1dPc4tfmuPwliF2W6gI1gtl6fhXKYnggnMFbtoAUxRzR5O4FY9oj6NRDe5f6p 6d+BUIId1Du/1xVeD/SMQMi6xDxDySKCv3JkyRZMywSMQbWO3TXlA0VgaYLLkcaz dS0RFIpcB4Lx9FXMnLKk+W+q+QYGqmGytKPSWJ7sVoLuRjua3oILxjHpKtmjoGQ6 +HC8FZMt7r5GGj0jMysarHBlArtvC23JnJ2o7srJTmxNZcurJafl+EXnFYm1LeEn lcKl0DYEbthWeJ7AsORiffd6tuK45umJKJS30t2IWd01ipMqAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJOTxQTZfCEutJdYmkeOWKKANa+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iYTlj MGZlNS04YWM2LTQyYTItOWMwYS01MDUzNGFhYTAxYzUvYWFhNzBiOGUtYzE0Mi0z ZTU1LWE3MGItNjJhOTU5ZTc4OTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmE5YzBmZTUtOGFjNi00MmEyLTlj MGEtNTA1MzRhYWEwMWM1L2JhOWMwZmU1LThhYzYtNDJhMi05YzBhLTUwNTM0YWFh MDFjNS5jcmwwHwYDVR0jBBgwFoAU+h7Anv0VMfFaXkG2fQcGq3byLAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iYTljMGZlNS04YWM2LTQyYTItOWMwYS01MDUz NGFhYTAxYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo3v1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2iNoANNpHAAeW9ag9AyjrjOsRKBR6HqiVTphylpBKjBW5ZSBI05bcQ hhPYXWJHeWbimV9/OAxmOrMFqgg99fZ17u3B5B3CtV9V37EuS4E1u0mMhTtO+JbU Zp00ddqn+fXnlEJ4CVwThdI2IMzn1ZpL2U6zzubafSFtP0RzVBi2yoEtYpkaQyAk 79OBSWJIsjS1ucqIYR+we/ZKZxzNqRsiKZmBZ4RCIXfySwMef6h1FYeUkuOMJuR3 OVtUIcO2H283DDWeDYg0Q2Pc3t3/dpaIrYAVJ55z1pvzjnsNN/e+CYcXWOXZ/i28 6JjSflxwjssXRWhsrmz1WEm6qm3mxnY= -----END CERTIFICATE-----Generated at Wed May 13 13:09:59 2026 by rpki-client