$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea/a59b07bd-087c-3bd2-b8c2-4ce5bbd233f4.roa File: a59b07bd-087c-3bd2-b8c2-4ce5bbd233f4.roa (raw, json) Hash identifier: LCDMRNpcCEnZPImNr82xv4WT6QIF+X0eQBqkhHJjdKY= Subject key identifier: 62:44:79:17:35:4D:D4:32:D9:7A:FF:52:B5:78:67:B0:5A:3C:EF:7C Certificate issuer: /CN=ba34350e-8a32-444e-a9c3-3267735f96ea Certificate serial: 010D0C9F4328584C8476E96E657A5BAFB09F0F80 Authority key identifier: 95:CE:E8:CF:4D:E9:4C:D0:B3:22:3D:3C:68:D2:DD:A5:A0:52:B2:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea/a59b07bd-087c-3bd2-b8c2-4ce5bbd233f4.roa Signing time: Wed 14 Jan 2026 02:00:31 +0000 ROA not before: Wed 14 Jan 2026 02:00:31 +0000 ROA not after: Tue 14 Apr 2026 01:00:31 +0000 asID: 46179 IP address blocks: 199.91.152.0/21 maxlen: 21 205.196.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea/ba34350e-8a32-444e-a9c3-3267735f96ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea/ba34350e-8a32-444e-a9c3-3267735f96ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:84:76:e9:6e:65:7a:5b:af:b0:9f:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba34350e-8a32-444e-a9c3-3267735f96ea Validity Not Before: Jan 14 02:00:31 2026 GMT Not After : Apr 14 01:00:31 2026 GMT Subject: CN=f7a15a5a-33e9-45fd-b68b-f09be6571fc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:00:15:4c:37:6b:a2:d7:88:87:71:1e:7e:51: 3c:e2:f8:70:5e:4e:ff:ff:a2:3e:36:8d:48:87:b5: 71:ca:4b:1b:df:2c:09:3c:24:d2:76:7a:4e:94:dd: 54:91:7e:3c:47:91:a2:16:a4:95:05:23:60:58:d3: aa:ba:25:c7:74:c0:65:16:b6:e6:25:0e:87:bf:1a: ad:8a:6d:19:06:76:0d:50:4c:0c:6e:31:3a:e9:37: c7:f8:64:78:af:73:7e:90:4e:1b:01:2c:a7:d5:61: 7e:2d:7e:93:aa:fe:af:c9:73:0d:19:34:c3:48:df: 60:17:e9:38:33:04:5d:33:13:cd:39:23:b5:14:d5: 5f:e8:de:18:89:6b:6e:d7:93:40:68:84:93:68:98: a9:98:d9:01:fb:b0:17:06:0c:19:59:e1:d9:b4:fa: 58:6d:27:30:90:ab:3e:fb:f5:1a:f3:43:62:97:53: 45:7a:06:50:88:ca:f8:1a:e9:9b:70:17:37:06:99: bf:30:95:c7:18:f9:03:74:6c:9e:37:57:3a:d2:7b: 7e:79:a3:82:35:49:13:f5:eb:b2:97:3c:b9:70:b9: 75:2c:41:bc:fd:f2:49:39:96:14:ec:72:5e:59:95: 2b:59:09:13:5c:18:8b:69:5d:dd:1b:83:30:bb:cf: bb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:44:79:17:35:4D:D4:32:D9:7A:FF:52:B5:78:67:B0:5A:3C:EF:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea/a59b07bd-087c-3bd2-b8c2-4ce5bbd233f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea/ba34350e-8a32-444e-a9c3-3267735f96ea.crl X509v3 Authority Key Identifier: keyid:95:CE:E8:CF:4D:E9:4C:D0:B3:22:3D:3C:68:D2:DD:A5:A0:52:B2:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea.cer sbgp-ipAddrBlock: critical IPv4: 199.91.152.0/21 205.196.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:e4:d8:d0:ad:98:eb:b0:39:4b:0c:31:5d:95:45:bf:f3:f8: ab:3e:a1:c4:cd:f4:ff:3b:cf:09:97:51:13:69:96:29:43:11: 6d:7b:94:46:c7:52:07:cc:fb:1e:fb:c9:64:57:5d:20:1a:95: 36:7b:f9:74:ec:76:20:97:59:e5:d8:53:35:19:40:1b:d5:4d: b1:76:bd:5e:72:e4:5a:bf:0d:18:7f:5e:85:ba:1c:f4:25:9d: 96:61:02:f9:d5:33:67:59:28:7e:cc:89:99:e0:e5:7c:3a:90: 4b:36:14:ca:81:85:7d:51:36:79:f5:c3:35:dc:0b:62:1b:b0: 2f:1a:ef:bd:3b:bd:f0:e2:12:f4:88:55:dc:d1:6d:5f:b2:50: 06:40:fd:2f:2a:d3:62:f2:33:7f:78:d2:01:d2:62:a5:6c:1f: 76:ff:2c:df:cb:9e:7a:30:8d:08:ca:64:a7:c3:ca:35:93:94: 7f:ba:0f:0d:c6:08:93:95:91:cf:ba:ee:bb:5e:0c:16:0f:d1: 34:37:c4:80:82:ce:04:61:4d:c8:2b:64:36:8f:21:f0:c1:70: 36:9c:75:f4:c9:3f:c4:67:bb:73:c7:98:b7:b5:1b:ba:f6:2a: d5:dc:26:bf:5b:98:75:c9:f8:06:dc:c5:aa:c0:ff:41:70:26: f8:dd:c8:bd -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEyEduluZXpbr7CfD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEzNDM1MGUtOGEzMi00NDRlLWE5YzMtMzI2NzczNWY5 NmVhMB4XDTI2MDExNDAyMDAzMVoXDTI2MDQxNDAxMDAzMVowLzEtMCsGA1UEAxMk ZjdhMTVhNWEtMzNlOS00NWZkLWI2OGItZjA5YmU2NTcxZmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwAVTDdroteIh3EeflE84vhwXk7//6I+No1I h7Vxyksb3ywJPCTSdnpOlN1UkX48R5GiFqSVBSNgWNOquiXHdMBlFrbmJQ6Hvxqt im0ZBnYNUEwMbjE66TfH+GR4r3N+kE4bASyn1WF+LX6Tqv6vyXMNGTTDSN9gF+k4 MwRdMxPNOSO1FNVf6N4YiWtu15NAaISTaJipmNkB+7AXBgwZWeHZtPpYbScwkKs+ +/Ua80Nil1NFegZQiMr4GumbcBc3Bpm/MJXHGPkDdGyeN1c60nt+eaOCNUkT9euy lzy5cLl1LEG8/fJJOZYU7HJeWZUrWQkTXBiLaV3dG4Mwu8+7CQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGJEeRc1TdQy2Xr/UrV4Z7BaPO98MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iYTM0 MzUwZS04YTMyLTQ0NGUtYTljMy0zMjY3NzM1Zjk2ZWEvYTU5YjA3YmQtMDg3Yy0z YmQyLWI4YzItNGNlNWJiZDIzM2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmEzNDM1MGUtOGEzMi00NDRlLWE5 YzMtMzI2NzczNWY5NmVhL2JhMzQzNTBlLThhMzItNDQ0ZS1hOWMzLTMyNjc3MzVm OTZlYS5jcmwwHwYDVR0jBBgwFoAUlc7oz03pTNCzIj08aNLdpaBSst8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iYTM0MzUwZS04YTMyLTQ0NGUtYTljMy0zMjY3 NzM1Zjk2ZWEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDx1uYAwQC zcR4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJHk2NCtmOuwOUsMMV2VRb/z+Ks+ocTN9P87zwmXURNplilD EW17lEbHUgfM+x77yWRXXSAalTZ7+XTsdiCXWeXYUzUZQBvVTbF2vV5y5Fq/DRh/ XoW6HPQlnZZhAvnVM2dZKH7MiZng5Xw6kEs2FMqBhX1RNnn1wzXcC2IbsC8a7707 vfDiEvSIVdzRbV+yUAZA/S8q02LyM3940gHSYqVsH3b/LN/LnnowjQjKZKfDyjWT lH+6Dw3GCJOVkc+67rteDBYP0TQ3xICCzgRhTcgrZDaPIfDBcDacdfTJP8Rnu3PH mLe1G7r2KtXcJr9bmHXJ+AbcxarA/0FwJvjdyL0= -----END CERTIFICATE-----Generated at Mon Mar 2 18:07:43 2026 by rpki-client