$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f2c87d8-024d-4346-b284-d9791df623fe/ba3881cb-2f10-3529-8a0a-02382642e417.roa File: ba3881cb-2f10-3529-8a0a-02382642e417.roa (raw, json) Hash identifier: x7dC6d3w3FTse2qIRMvlMtXtnZMKJ8paNOajo3wBviY= Subject key identifier: 5A:D9:72:0B:46:DD:FE:58:BA:DE:92:FC:21:60:FD:6E:F0:3B:89:10 Certificate issuer: /CN=1f2c87d8-024d-4346-b284-d9791df623fe Certificate serial: 010D0C9F4328584CAE5E90BF06BFDE8EDB2CFC58 Authority key identifier: BA:74:4B:3C:63:17:17:CD:C7:38:71:9D:91:B6:85:59:BE:39:1D:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f2c87d8-024d-4346-b284-d9791df623fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f2c87d8-024d-4346-b284-d9791df623fe/ba3881cb-2f10-3529-8a0a-02382642e417.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 14618 IP address blocks: 65.61.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f2c87d8-024d-4346-b284-d9791df623fe/1f2c87d8-024d-4346-b284-d9791df623fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f2c87d8-024d-4346-b284-d9791df623fe/1f2c87d8-024d-4346-b284-d9791df623fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f2c87d8-024d-4346-b284-d9791df623fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:90:bf:06:bf:de:8e:db:2c:fc:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f2c87d8-024d-4346-b284-d9791df623fe Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=16272772-3f4f-4ab6-ace5-cb04aa14ecb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:06:05:21:49:a7:64:a7:31:07:02:0c:11:5f: 7c:ea:19:64:f7:d1:f3:9f:14:18:30:dd:b2:8c:60: 0a:be:18:6b:c5:3d:30:b5:d3:12:54:57:6d:6b:77: f4:04:90:3e:e1:4c:e9:d6:b4:fd:b0:f5:da:eb:8c: f2:9f:24:dd:50:50:31:98:23:77:b5:ff:4c:1d:5f: 07:3a:6c:c5:c2:5d:90:c9:84:1c:ec:0e:cd:91:db: ac:72:3f:39:1d:a8:d7:dc:63:9a:e0:d0:f0:b2:27: 4c:b6:17:21:bf:dc:0c:bc:5d:36:1c:64:f5:13:60: 26:55:55:e3:75:74:02:24:b6:4c:1f:a6:ce:0c:84: bf:d4:c7:97:a6:67:f5:d5:db:80:62:51:79:2a:c5: ec:7d:12:ac:e4:98:a6:f1:02:6a:e1:fa:32:36:59: 9e:69:10:28:95:4f:47:33:18:10:f5:d6:5b:08:fc: 15:1d:a8:8f:1c:f3:7a:cf:08:b9:ba:bf:06:53:ad: 73:86:74:94:d6:f5:4b:32:25:65:df:80:99:8a:ad: 63:a5:85:98:03:9f:b2:78:e9:f5:48:32:a6:cd:ec: 01:9d:0d:85:1e:82:56:05:8a:c5:17:6d:35:2c:1c: 81:67:d7:81:72:92:5d:63:88:c5:7b:16:98:b7:1c: db:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D9:72:0B:46:DD:FE:58:BA:DE:92:FC:21:60:FD:6E:F0:3B:89:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f2c87d8-024d-4346-b284-d9791df623fe/ba3881cb-2f10-3529-8a0a-02382642e417.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f2c87d8-024d-4346-b284-d9791df623fe/1f2c87d8-024d-4346-b284-d9791df623fe.crl X509v3 Authority Key Identifier: keyid:BA:74:4B:3C:63:17:17:CD:C7:38:71:9D:91:B6:85:59:BE:39:1D:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f2c87d8-024d-4346-b284-d9791df623fe.cer sbgp-ipAddrBlock: critical IPv4: 65.61.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:37:ed:5b:5f:c1:3a:af:c0:c6:81:bb:4c:03:6a:7a:2a:d7: 8e:0c:93:43:01:ef:7e:4a:92:2b:86:a7:2b:9a:1e:19:03:ea: a1:53:15:bd:55:d4:f2:fa:ad:6d:67:e2:84:1d:d5:d8:ad:fe: 27:12:6c:e2:71:21:22:7a:69:d1:a9:eb:fe:4b:10:b8:ef:5b: 8b:6c:84:e2:55:7c:df:f1:5e:63:6d:4b:eb:51:96:5e:89:a8: 3e:c9:15:65:38:e1:85:b7:46:b7:ce:24:02:a1:70:da:1c:61: ec:38:70:e0:7b:ca:02:8a:46:eb:6a:50:c6:61:a6:cb:4b:a6: 16:56:5f:9e:77:65:a3:21:27:8b:66:2f:a8:bf:bd:70:7d:d7: 2b:51:5c:4c:ab:f0:b4:03:1d:d5:97:15:ad:da:20:71:33:a6: da:7a:50:ba:5e:86:fb:04:d4:84:ed:97:d1:bc:9d:db:79:d1: 6b:68:76:c1:42:71:16:dc:fd:9b:19:ac:69:70:f3:e3:eb:17: a6:25:c9:93:1b:ba:33:ba:75:ce:bc:0d:2d:94:6d:56:22:8e: 67:79:5c:2f:f3:13:2b:1a:c9:45:ee:b8:90:18:82:25:9c:36: 66:20:f7:ca:b5:3e:2c:54:31:20:4a:f3:aa:e3:a6:1c:08:e3: e7:94:84:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXpC/Br/ejtss/FgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWYyYzg3ZDgtMDI0ZC00MzQ2LWIyODQtZDk3OTFkZjYy M2ZlMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MTYyNzI3NzItM2Y0Zi00YWI2LWFjZTUtY2IwNGFhMTRlY2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgYFIUmnZKcxBwIMEV986hlk99HznxQYMN2y jGAKvhhrxT0wtdMSVFdta3f0BJA+4Uzp1rT9sPXa64zynyTdUFAxmCN3tf9MHV8H OmzFwl2QyYQc7A7Nkduscj85HajX3GOa4NDwsidMthchv9wMvF02HGT1E2AmVVXj dXQCJLZMH6bODIS/1MeXpmf11duAYlF5KsXsfRKs5Jim8QJq4foyNlmeaRAolU9H MxgQ9dZbCPwVHaiPHPN6zwi5ur8GU61zhnSU1vVLMiVl34CZiq1jpYWYA5+yeOn1 SDKmzewBnQ2FHoJWBYrFF201LByBZ9eBcpJdY4jFexaYtxzbfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFrZcgtG3f5Yut6S/CFg/W7wO4kQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZjJj ODdkOC0wMjRkLTQzNDYtYjI4NC1kOTc5MWRmNjIzZmUvYmEzODgxY2ItMmYxMC0z NTI5LThhMGEtMDIzODI2NDJlNDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWYyYzg3ZDgtMDI0ZC00MzQ2LWIy ODQtZDk3OTFkZjYyM2ZlLzFmMmM4N2Q4LTAyNGQtNDM0Ni1iMjg0LWQ5NzkxZGY2 MjNmZS5jcmwwHwYDVR0jBBgwFoAUunRLPGMXF83HOHGdkbaFWb45HWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZjJjODdkOC0wMjRkLTQzNDYtYjI4NC1kOTc5 MWRmNjIzZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQT00MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHk37VtfwTqvwMaBu0wDanoq144Mk0MB735KkiuGpyuaHhkD6qFTFb1V 1PL6rW1n4oQd1dit/icSbOJxISJ6adGp6/5LELjvW4tshOJVfN/xXmNtS+tRll6J qD7JFWU44YW3RrfOJAKhcNocYew4cOB7ygKKRutqUMZhpstLphZWX553ZaMhJ4tm L6i/vXB91ytRXEyr8LQDHdWXFa3aIHEzptp6ULpehvsE1ITtl9G8ndt50WtodsFC cRbc/ZsZrGlw8+PrF6YlyZMbujO6dc68DS2UbVYijmd5XC/zEysayUXuuJAYgiWc NmYg98q1PixUMSBK86rjphwI4+eUhL0= -----END CERTIFICATE-----Generated at Sun Mar 1 22:38:19 2026 by rpki-client