$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5ba1a4a3-8c3a-456f-a942-0536a41af226/2c3ca624-2acb-3e19-9bc2-bdfa17e5611e.roa File: 2c3ca624-2acb-3e19-9bc2-bdfa17e5611e.roa (raw, json) Hash identifier: rVB/dUu62bwIQDRcagoUQLK6+p2ZjIhzLnJgW7Pq4Qs= Subject key identifier: 4C:F3:58:37:15:4C:AE:4A:9A:0F:EE:FF:C2:C9:34:BC:66:EE:42:0B Certificate issuer: /CN=5ba1a4a3-8c3a-456f-a942-0536a41af226 Certificate serial: 010D0C9F4328584F498BD06333BAF7D121816CC0 Authority key identifier: 50:5E:A2:FB:03:73:9B:90:86:E6:4B:31:43:BD:F3:88:02:A1:74:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5ba1a4a3-8c3a-456f-a942-0536a41af226.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5ba1a4a3-8c3a-456f-a942-0536a41af226/2c3ca624-2acb-3e19-9bc2-bdfa17e5611e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 29886 IP address blocks: 162.217.48.0/21 maxlen: 21 2604:da80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5ba1a4a3-8c3a-456f-a942-0536a41af226/5ba1a4a3-8c3a-456f-a942-0536a41af226.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5ba1a4a3-8c3a-456f-a942-0536a41af226/5ba1a4a3-8c3a-456f-a942-0536a41af226.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5ba1a4a3-8c3a-456f-a942-0536a41af226.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:d0:63:33:ba:f7:d1:21:81:6c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ba1a4a3-8c3a-456f-a942-0536a41af226 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=cf14f0fc-37bc-46bc-9740-b867e72feaa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:23:0e:b4:c2:74:14:4f:ad:c0:28:1d:3e:7a: 62:9f:56:22:67:fe:f6:4a:fd:6c:23:32:f2:e5:3a: 33:f2:1e:3b:f2:66:58:f4:ea:78:12:75:73:e3:5b: 93:00:78:2e:20:42:39:51:33:88:70:21:9b:25:ed: 52:b2:db:46:67:91:41:9b:2c:c6:01:42:ff:45:5d: 3c:8f:be:1b:25:cc:e2:8c:49:05:36:a4:24:67:71: bd:9c:64:a3:15:cf:f6:d7:e2:7a:a8:7a:5a:ef:07: 8f:40:b0:3b:8a:90:12:aa:64:13:0b:06:f0:54:e9: 4a:66:30:60:f0:0a:45:1f:e5:37:9b:13:52:68:e2: a8:ef:40:eb:7b:6e:be:98:01:e8:4b:14:fe:a6:c9: c4:d1:a4:e7:c0:29:5c:e1:38:a2:23:45:62:ad:43: f5:52:a2:17:b3:4c:53:e6:5f:56:d9:07:65:14:54: ce:1b:13:f6:8a:02:0e:46:25:23:9e:44:93:2b:e6: 95:ab:15:fb:cb:10:0e:32:20:2b:21:ea:bf:87:ef: 74:45:3e:8a:5d:b1:83:e1:bf:87:e9:44:ca:bc:97: bc:07:06:2b:ff:48:8b:d9:46:0f:18:bc:50:6b:94: 55:03:85:55:b9:18:d1:22:90:bf:38:32:7a:c3:9e: 63:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F3:58:37:15:4C:AE:4A:9A:0F:EE:FF:C2:C9:34:BC:66:EE:42:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5ba1a4a3-8c3a-456f-a942-0536a41af226/2c3ca624-2acb-3e19-9bc2-bdfa17e5611e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5ba1a4a3-8c3a-456f-a942-0536a41af226/5ba1a4a3-8c3a-456f-a942-0536a41af226.crl X509v3 Authority Key Identifier: keyid:50:5E:A2:FB:03:73:9B:90:86:E6:4B:31:43:BD:F3:88:02:A1:74:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5ba1a4a3-8c3a-456f-a942-0536a41af226.cer sbgp-ipAddrBlock: critical IPv4: 162.217.48.0/21 IPv6: 2604:da80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:d0:47:df:32:60:f4:bf:e5:9b:68:8b:7f:0c:04:f6:21:e4: cb:7b:71:d3:35:f6:9a:00:00:c6:94:b6:9d:93:34:e7:57:d6: 0b:ea:bf:91:33:f0:09:76:31:c1:63:c9:8a:6b:4a:d5:7d:a7: 22:dd:e0:db:2c:d0:c9:d0:56:f8:90:6e:ba:9a:4b:b7:6f:15: cf:ed:37:15:34:48:4e:d4:44:b2:f7:c9:54:4c:17:93:83:69: 64:1c:c5:4b:6e:e2:d4:ca:49:f7:fd:77:25:97:7a:68:70:e6: 09:7c:e0:2a:65:cf:31:5c:24:34:4c:f1:4a:df:ac:3b:6a:94: 97:77:64:5d:81:87:75:41:c1:e4:d1:24:6d:68:ab:cf:6f:4d: c7:7f:02:53:dd:ed:30:83:29:f9:d8:3d:c1:10:ae:77:23:16: d3:3d:8c:85:fd:55:07:9d:b5:9e:d1:45:b2:6d:e4:3a:81:9d: eb:e2:15:6c:9f:42:42:e6:95:ac:1c:97:7e:1f:e8:b1:42:6f: 81:e6:24:60:13:42:96:21:26:b0:3d:62:6f:c3:1d:b8:06:2c: fb:93:a4:82:57:2a:3f:b7:4b:af:5a:28:16:a8:eb:4f:2f:f8: 22:a6:38:e7:5b:57:7d:b4:3e:43:cc:ad:27:30:69:9d:23:45: 92:35:85:63 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE9Ji9BjM7r30SGBbMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWJhMWE0YTMtOGMzYS00NTZmLWE5NDItMDUzNmE0MWFm MjI2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2YxNGYwZmMtMzdiYy00NmJjLTk3NDAtYjg2N2U3MmZlYWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiMOtMJ0FE+twCgdPnpin1YiZ/72Sv1sIzLy 5Toz8h478mZY9Op4EnVz41uTAHguIEI5UTOIcCGbJe1SsttGZ5FBmyzGAUL/RV08 j74bJczijEkFNqQkZ3G9nGSjFc/21+J6qHpa7wePQLA7ipASqmQTCwbwVOlKZjBg 8ApFH+U3mxNSaOKo70Dre26+mAHoSxT+psnE0aTnwClc4TiiI0VirUP1UqIXs0xT 5l9W2QdlFFTOGxP2igIORiUjnkSTK+aVqxX7yxAOMiArIeq/h+90RT6KXbGD4b+H 6UTKvJe8BwYr/0iL2UYPGLxQa5RVA4VVuRjRIpC/ODJ6w55jGQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFEzzWDcVTK5Kmg/u/8LJNLxm7kILMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81YmEx YTRhMy04YzNhLTQ1NmYtYTk0Mi0wNTM2YTQxYWYyMjYvMmMzY2E2MjQtMmFjYi0z ZTE5LTliYzItYmRmYTE3ZTU2MTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNWJhMWE0YTMtOGMzYS00NTZmLWE5 NDItMDUzNmE0MWFmMjI2LzViYTFhNGEzLThjM2EtNDU2Zi1hOTQyLTA1MzZhNDFh ZjIyNi5jcmwwHwYDVR0jBBgwFoAUUF6i+wNzm5CG5ksxQ73ziAKhdPEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS81YmExYTRhMy04YzNhLTQ1NmYtYTk0Mi0wNTM2 YTQxYWYyMjYuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDotkwMA0E AgACMAcDBQAmBNqAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAHTQR98yYPS/5Ztoi38MBPYh5Mt7cdM19poA AMaUtp2TNOdX1gvqv5Ez8Al2McFjyYprStV9pyLd4Nss0MnQVviQbrqaS7dvFc/t NxU0SE7URLL3yVRMF5ODaWQcxUtu4tTKSff9dyWXemhw5gl84CplzzFcJDRM8Urf rDtqlJd3ZF2Bh3VBweTRJG1oq89vTcd/AlPd7TCDKfnYPcEQrncjFtM9jIX9VQed tZ7RRbJt5DqBneviFWyfQkLmlawcl34f6LFCb4HmJGATQpYhJrA9Ym/DHbgGLPuT pIJXKj+3S69aKBao608v+CKmOOdbV320PkPMrScwaZ0jRZI1hWM= -----END CERTIFICATE-----Generated at Sun Sep 27 23:34:54 2026 by rpki-client