$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ba34520e-e96e-37a7-b058-c5eb6ff959e1.roa File: ba34520e-e96e-37a7-b058-c5eb6ff959e1.roa (raw, json) Hash identifier: PopFQeh/qqwUQMXzwkF6Uha1Q9gzbQuAAqwgsoGi4Ro= Subject key identifier: 9D:2B:D1:D5:25:38:39:13:C3:08:5E:0B:32:61:5B:1A:C8:3E:5A:DD Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D60E4ECBFCC68E9B10EB8EC52 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ba34520e-e96e-37a7-b058-c5eb6ff959e1.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 30036 IP address blocks: 192.119.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e4:ec:bf:cc:68:e9:b1:0e:b8:ec:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=05ac72db-1bbc-46c4-bf9d-cf56b7565f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2c:87:58:4e:f4:e4:e1:2b:97:b8:04:aa:83: 60:c3:01:de:98:c4:a8:67:a4:d7:6d:fd:f9:23:38: d7:d1:b9:d5:56:80:36:69:03:81:d9:01:39:6c:78: 6c:b9:0a:a6:e8:30:d4:ef:e7:19:f0:e8:3e:18:fe: b9:6f:25:91:5d:08:8f:9c:fb:02:bb:b4:98:84:7a: 27:91:00:72:b4:a5:b5:1f:7b:3e:d5:f7:d5:99:1f: 0f:67:56:21:31:1b:aa:2d:cc:38:f8:2f:91:25:29: 7d:f2:dc:43:06:e9:b7:88:a9:fb:63:1e:14:50:45: fe:43:6a:4a:e7:9b:2c:fe:d5:65:73:65:a3:ce:d5: 03:c4:7f:fe:29:05:23:65:7c:3f:f0:08:8d:b3:6e: 8a:65:fc:03:57:6b:4c:94:e6:66:53:32:0c:48:d3: ab:f4:1d:33:7b:53:c3:54:de:78:f9:48:a6:fc:6f: 6f:d8:89:c8:a1:ec:c6:ea:83:48:3e:bf:d5:ea:11: b3:2f:a9:3c:75:d6:5a:57:e9:5b:ee:5b:d3:ed:91: 75:56:35:8e:09:e7:0d:66:16:ab:df:a0:db:71:3b: ef:ce:40:9c:6e:3e:92:3e:fb:75:93:65:37:fa:9e: a4:62:b2:c4:ad:1e:1d:c0:20:c5:07:c0:39:cf:90: 21:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:2B:D1:D5:25:38:39:13:C3:08:5E:0B:32:61:5B:1A:C8:3E:5A:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ba34520e-e96e-37a7-b058-c5eb6ff959e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 192.119.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:c7:89:a8:9b:19:81:97:84:c6:9e:9d:b3:20:b8:dd:cf:52: 60:45:e5:5e:bb:f9:19:ef:36:72:30:37:98:37:f3:40:26:77: e1:df:74:cf:d7:13:bb:f9:8c:c3:e0:34:04:9b:80:94:8c:33: 14:e7:01:b5:42:1d:6d:a1:93:b8:df:66:b7:01:48:7e:cf:d1: 7a:93:0c:84:e1:6f:53:ae:31:42:0a:5e:96:cb:72:1b:7d:8f: 29:f2:77:df:a5:0d:90:a0:5a:b6:2d:d6:c2:95:24:67:b7:00: 7a:5f:05:1c:e3:e3:10:f1:65:09:4c:fe:28:0d:ad:6f:a5:da: 12:a8:82:96:ef:ee:b9:da:c2:1a:f5:b6:03:29:42:9e:85:f7: 97:80:f6:da:cd:21:b8:c6:a3:90:94:93:0a:0e:33:0d:1d:4e: 60:85:39:77:0d:24:2c:10:a2:f2:7b:f9:3e:bc:1b:86:26:fb: 57:b6:3d:bd:1d:68:1f:23:88:d6:74:2a:5d:65:a5:cf:93:0f: 88:8a:2e:82:bf:65:30:6a:ea:a2:f2:ca:9f:be:2b:99:e2:f5: 28:93:42:27:19:de:7c:e0:ef:bf:0e:ed:8a:77:5d:7b:1e:3d: f3:40:93:99:0f:03:b3:5e:db:bf:7f:f9:77:ca:fe:f2:56:3a: 71:fb:ff:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5Oy/zGjpsQ647FIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk MDVhYzcyZGItMWJiYy00NmM0LWJmOWQtY2Y1NmI3NTY1ZjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSyHWE705OErl7gEqoNgwwHemMSoZ6TXbf35 IzjX0bnVVoA2aQOB2QE5bHhsuQqm6DDU7+cZ8Og+GP65byWRXQiPnPsCu7SYhHon kQBytKW1H3s+1ffVmR8PZ1YhMRuqLcw4+C+RJSl98txDBum3iKn7Yx4UUEX+Q2pK 55ss/tVlc2WjztUDxH/+KQUjZXw/8AiNs26KZfwDV2tMlOZmUzIMSNOr9B0ze1PD VN54+Uim/G9v2InIoezG6oNIPr/V6hGzL6k8ddZaV+lb7lvT7ZF1VjWOCecNZhar 36DbcTvvzkCcbj6SPvt1k2U3+p6kYrLErR4dwCDFB8A5z5AhtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0r0dUlODkTwwheCzJhWxrIPlrdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmEzNDUyMGUtZTk2ZS0z N2E3LWIwNTgtYzVlYjZmZjk1OWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHf9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzHiaibGYGXhMaenbMguN3PUmBF5V67+RnvNnIwN5g380Amd+HfdM/X E7v5jMPgNASbgJSMMxTnAbVCHW2hk7jfZrcBSH7P0XqTDIThb1OuMUIKXpbLcht9 jynyd9+lDZCgWrYt1sKVJGe3AHpfBRzj4xDxZQlM/igNrW+l2hKogpbv7rnawhr1 tgMpQp6F95eA9trNIbjGo5CUkwoOMw0dTmCFOXcNJCwQovJ7+T68G4Ym+1e2Pb0d aB8jiNZ0Kl1lpc+TD4iKLoK/ZTBq6qLyyp++K5ni9SiTQicZ3nzg778O7Yp3XXse PfNAk5kPA7Ne279/+XfK/vJWOnH7/2g= -----END CERTIFICATE-----Generated at Fri Apr 17 11:34:49 2026 by rpki-client