$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ba0ea17e-dac9-3ee8-a70a-dc8aebab6e54.roa File: ba0ea17e-dac9-3ee8-a70a-dc8aebab6e54.roa (raw, json) Hash identifier: vp5/paHdwSkkHpMJztYPXRILjdCij4WJkuizcdwk3fI= Subject key identifier: 58:F3:53:D4:AF:5A:21:7A:F7:5F:08:B6:85:A3:38:2F:DE:54:72:12 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D852FD1120A8A63A35C453B80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ba0ea17e-dac9-3ee8-a70a-dc8aebab6e54.roa Signing time: Thu 16 Apr 2026 01:00:23 +0000 ROA not before: Thu 16 Apr 2026 01:00:23 +0000 ROA not after: Wed 15 Jul 2026 01:00:23 +0000 asID: 134578 IP address blocks: 206.54.11.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:85:2f:d1:12:0a:8a:63:a3:5c:45:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 16 01:00:23 2026 GMT Not After : Jul 15 01:00:23 2026 GMT Subject: CN=f24c432e-bbd0-4e13-9fc0-e1d989dd2f19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a9:3c:a3:0d:91:cf:02:14:e6:00:ac:b6:6c: ab:63:07:0d:11:96:73:78:13:93:85:a8:37:c2:89: 94:e6:ad:3c:5c:6f:e6:69:ef:24:60:52:6e:2b:b1: b5:ea:e4:17:30:c0:07:c2:9c:f2:a6:93:30:be:79: 88:52:67:ab:10:0c:3a:66:a0:26:b1:85:4a:7c:75: 0d:91:ee:93:67:5f:dd:f8:b8:62:6b:f5:a6:06:75: 41:86:e2:99:de:55:1b:5d:23:47:ba:29:f2:f3:65: c8:22:4b:d6:9b:ae:ac:b4:e9:6c:14:67:61:aa:22: 38:c1:34:b6:28:79:b9:d8:77:00:8f:6b:a7:87:28: ff:5f:c3:9b:2c:df:e3:22:85:e5:f5:5c:9e:fe:ef: 45:0a:b3:45:61:74:31:43:74:77:3f:ea:a3:17:5e: d6:9f:56:fc:be:a5:64:60:70:2d:7f:69:07:77:89: fc:76:10:39:b1:9b:76:be:d5:aa:c8:8f:b8:6a:b1: 2a:e5:08:9e:57:8d:d0:13:cb:55:97:77:df:ec:00: 5a:a0:24:21:50:58:c0:e6:4b:5d:30:1f:ac:d4:64: 5e:b2:be:44:34:ad:8d:2e:b1:a6:26:99:fe:68:b5: ca:06:3c:16:93:da:6a:b4:f4:5e:74:d9:a2:5c:a8: e8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F3:53:D4:AF:5A:21:7A:F7:5F:08:B6:85:A3:38:2F:DE:54:72:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ba0ea17e-dac9-3ee8-a70a-dc8aebab6e54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 206.54.11.0/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:cf:77:82:c6:66:89:14:4c:7f:da:8d:2b:14:c6:ec:89:af: 98:d1:ae:48:83:23:d8:b4:1b:e3:27:32:78:bc:c5:1a:77:05: d0:18:a7:a7:94:0e:5a:87:52:8a:36:94:25:b3:60:26:aa:2e: 22:62:9a:6d:de:ee:80:65:7c:94:c2:96:a7:2a:74:5b:2c:d8: 96:a0:4d:ce:81:8b:dc:0e:3b:87:5f:af:3d:42:af:e6:0c:db: ba:ff:6e:74:cc:89:ed:4d:6d:6a:a4:fd:b1:cc:30:e2:f3:62: 19:44:48:70:48:64:7d:c1:d3:8d:56:8c:fc:eb:0e:8c:8f:ef: 21:de:d8:f6:52:06:b2:3f:10:78:08:f3:da:ea:ae:52:b5:6b: 19:de:5d:07:e6:67:76:f8:0c:d2:cf:ae:30:c0:47:bf:bb:d5: 94:76:5c:69:10:71:70:21:f6:0c:a4:80:3d:90:a4:a2:ac:1d: b9:dc:f6:ae:9c:71:e3:f8:1b:cd:fb:bb:66:b3:4f:6f:67:f9: eb:f1:a0:cc:25:40:90:a2:48:22:cf:91:80:9f:a5:24:47:b4: b2:32:ff:22:72:8a:ca:c0:02:aa:dc:46:70:ae:d2:b9:71:3e: 7e:9d:cb:e0:62:ca:34:c9:a1:2e:5c:7d:94:88:7b:ae:a5:86: 11:6c:52:19 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2FL9ESCopjo1xFO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQxNjAxMDAyM1oXDTI2MDcxNTAxMDAyM1owLzEtMCsGA1UEAxMk ZjI0YzQzMmUtYmJkMC00ZTEzLTlmYzAtZTFkOTg5ZGQyZjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgak8ow2RzwIU5gCstmyrYwcNEZZzeBOThag3 womU5q08XG/mae8kYFJuK7G16uQXMMAHwpzyppMwvnmIUmerEAw6ZqAmsYVKfHUN ke6TZ1/d+Lhia/WmBnVBhuKZ3lUbXSNHuiny82XIIkvWm66stOlsFGdhqiI4wTS2 KHm52HcAj2unhyj/X8ObLN/jIoXl9Vye/u9FCrNFYXQxQ3R3P+qjF17Wn1b8vqVk YHAtf2kHd4n8dhA5sZt2vtWqyI+4arEq5QieV43QE8tVl3ff7ABaoCQhUFjA5ktd MB+s1GResr5ENK2NLrGmJpn+aLXKBjwWk9pqtPRedNmiXKjovQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFjzU9SvWiF6918ItoWjOC/eVHISMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYmEwZWExN2UtZGFjOS0z ZWU4LWE3MGEtZGM4YWViYWI2ZTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHzjYLADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBgz3eCxmaJFEx/2o0rFMbsia+Y0a5IgyPYtBvjJzJ4vMUadwXQGKen lA5ah1KKNpQls2Amqi4iYppt3u6AZXyUwpanKnRbLNiWoE3OgYvcDjuHX689Qq/m DNu6/250zIntTW1qpP2xzDDi82IZREhwSGR9wdONVoz86w6Mj+8h3tj2UgayPxB4 CPPa6q5StWsZ3l0H5md2+AzSz64wwEe/u9WUdlxpEHFwIfYMpIA9kKSirB253Pau nHHj+BvN+7tms09vZ/nr8aDMJUCQokgiz5GAn6UkR7SyMv8icorKwAKq3EZwrtK5 cT5+ncvgYso0yaEuXH2UiHuupYYRbFIZ -----END CERTIFICATE-----Generated at Fri Apr 17 11:34:17 2026 by rpki-client