$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/ba40fff0-9611-34fc-81a1-ebf7141e0cf5.roa File: ba40fff0-9611-34fc-81a1-ebf7141e0cf5.roa (raw, json) Hash identifier: KzI9NGlpL2Kkq55iUPpI1ZhJKSb5VsRePhB9IOAMQFg= Subject key identifier: A0:83:5A:19:76:CD:6A:32:3A:85:8E:08:34:7F:4E:23:2F:4A:79:12 Certificate issuer: /CN=3d182bd9-cdc4-4b65-b79d-8927691ae9c2 Certificate serial: 010D0C9F4328584D2BDA22C50DE074B4FE886240 Authority key identifier: AD:32:38:49:8D:26:D8:9D:B1:0C:72:87:DB:A6:C1:31:24:79:B9:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/ba40fff0-9611-34fc-81a1-ebf7141e0cf5.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 8075 IP address blocks: 167.21.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:22:c5:0d:e0:74:b4:fe:88:62:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d182bd9-cdc4-4b65-b79d-8927691ae9c2 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=1ddda660-6757-424f-a28c-69a00da862e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:41:f2:1a:36:f8:15:f7:54:26:1a:7b:04:84: 76:58:09:65:ba:45:73:27:50:d6:91:b8:33:a6:fc: f7:c3:bd:ad:cf:dd:bd:65:0f:16:0e:be:9b:29:0b: 67:4a:dc:9d:ea:f0:de:81:57:d9:ef:05:5b:cd:d1: 93:e1:67:e1:2e:f9:ac:2a:7a:26:2b:8d:fd:d3:5b: b8:ba:af:33:9c:11:de:56:ab:0b:cd:66:93:71:20: 2c:27:96:a1:81:b4:96:c3:07:38:49:84:1e:6d:ed: 42:f8:9e:f7:e9:7b:0b:fe:9d:05:ba:14:50:a0:d1: fa:5e:d4:65:a1:d8:59:22:5d:5b:a1:b5:da:2d:fa: d7:e8:86:e2:4d:7c:b9:28:e8:34:20:9f:28:e2:56: c0:14:39:a6:14:27:0a:57:e8:71:56:bc:d3:f9:92: 84:cd:31:71:5d:f7:6a:74:74:fe:ba:0c:c6:b8:ff: f6:ed:b1:b0:dc:f7:8d:59:fb:3d:bf:c9:cb:a1:2c: bd:86:ff:64:9f:ad:cb:f5:44:bb:df:bd:66:cc:30: 64:f2:be:81:30:4d:ec:e3:ae:bf:e4:00:43:18:b2: 7c:04:5b:7d:ad:55:e1:54:f5:b4:3e:cd:e8:ec:2e: 54:96:b8:c1:23:a0:f5:b0:ba:6c:95:21:5d:7d:67: fe:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:83:5A:19:76:CD:6A:32:3A:85:8E:08:34:7F:4E:23:2F:4A:79:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/ba40fff0-9611-34fc-81a1-ebf7141e0cf5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.crl X509v3 Authority Key Identifier: keyid:AD:32:38:49:8D:26:D8:9D:B1:0C:72:87:DB:A6:C1:31:24:79:B9:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.cer sbgp-ipAddrBlock: critical IPv4: 167.21.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:ad:10:90:32:bd:3b:65:76:a1:ed:06:ab:a3:a7:80:eb:07: 8b:f6:c5:27:37:8d:ea:d3:f6:90:ed:28:28:f3:ca:c0:1a:7d: 62:d8:9e:f4:53:f4:8d:53:7a:57:f6:a5:f9:8f:15:34:93:f3: e8:a7:ea:a3:6b:2b:3b:0f:69:8e:73:3c:ba:98:10:5f:96:d4: 6a:d5:8a:a3:d9:91:48:ca:0a:a6:50:af:70:8f:a1:de:2e:f6: 1d:ce:91:e1:4e:29:7b:2d:8a:d2:7b:ca:cf:bb:13:b5:0a:d2: b3:0d:86:c8:79:39:4a:ff:2d:03:3f:59:b7:4e:01:c5:51:79: 4c:ab:23:bd:dd:3d:c6:a2:7f:81:2d:30:41:4e:48:00:de:9c: e3:ab:33:f4:e4:23:d6:38:d0:c0:f5:df:8c:f7:21:91:90:5d: 42:24:a2:9f:73:82:9c:6a:fd:26:18:59:2c:54:81:ea:01:01: 34:f0:c3:a5:73:7d:d7:5a:50:76:96:42:a1:52:64:1f:a0:0b: f9:26:e6:41:93:75:14:83:0d:42:ff:e4:34:84:4a:96:e1:21: e1:6c:2b:23:f9:cb:e4:cb:58:bb:8d:c4:ed:93:14:f5:6e:a0: 3d:83:87:5a:ff:c0:af:20:41:45:ca:64:cf:82:d2:18:b8:3b: b6:81:e2:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2iLFDeB0tP6IYkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QxODJiZDktY2RjNC00YjY1LWI3OWQtODkyNzY5MWFl OWMyMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk MWRkZGE2NjAtNjc1Ny00MjRmLWEyOGMtNjlhMDBkYTg2MmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkHyGjb4FfdUJhp7BIR2WAllukVzJ1DWkbgz pvz3w72tz929ZQ8WDr6bKQtnStyd6vDegVfZ7wVbzdGT4WfhLvmsKnomK43901u4 uq8znBHeVqsLzWaTcSAsJ5ahgbSWwwc4SYQebe1C+J736XsL/p0FuhRQoNH6XtRl odhZIl1bobXaLfrX6IbiTXy5KOg0IJ8o4lbAFDmmFCcKV+hxVrzT+ZKEzTFxXfdq dHT+ugzGuP/27bGw3PeNWfs9v8nLoSy9hv9kn63L9US7371mzDBk8r6BME3s466/ 5ABDGLJ8BFt9rVXhVPW0Ps3o7C5UlrjBI6D1sLpslSFdfWf+0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCDWhl2zWoyOoWOCDR/TiMvSnkSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDE4 MmJkOS1jZGM0LTRiNjUtYjc5ZC04OTI3NjkxYWU5YzIvYmE0MGZmZjAtOTYxMS0z NGZjLTgxYTEtZWJmNzE0MWUwY2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2QxODJiZDktY2RjNC00YjY1LWI3 OWQtODkyNzY5MWFlOWMyLzNkMTgyYmQ5LWNkYzQtNGI2NS1iNzlkLTg5Mjc2OTFh ZTljMi5jcmwwHwYDVR0jBBgwFoAUrTI4SY0m2J2xDHKH26bBMSR5uQkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDE4MmJkOS1jZGM0LTRiNjUtYjc5ZC04OTI3 NjkxYWU5YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDpxUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEitEJAyvTtldqHtBqujp4DrB4v2xSc3jerT9pDtKCjzysAafWLYnvRT 9I1Telf2pfmPFTST8+in6qNrKzsPaY5zPLqYEF+W1GrViqPZkUjKCqZQr3CPod4u 9h3OkeFOKXstitJ7ys+7E7UK0rMNhsh5OUr/LQM/WbdOAcVReUyrI73dPcaif4Et MEFOSADenOOrM/TkI9Y40MD134z3IZGQXUIkop9zgpxq/SYYWSxUgeoBATTww6Vz fddaUHaWQqFSZB+gC/km5kGTdRSDDUL/5DSESpbhIeFsKyP5y+TLWLuNxO2TFPVu oD2Dh1r/wK8gQUXKZM+C0hi4O7aB4lA= -----END CERTIFICATE-----Generated at Thu Mar 26 06:05:41 2026 by rpki-client