$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/1fe8fbbb-e271-3bae-8bcc-88d82c6bca9b.roa File: 1fe8fbbb-e271-3bae-8bcc-88d82c6bca9b.roa (raw, json) Hash identifier: XGNdKGoiep6Pk6z88zk6NzvHs/V1byX/9OwQ3MQJD9c= Subject key identifier: 73:F4:24:14:21:3F:65:81:06:63:77:38:21:F9:4F:6A:C5:1C:08:B6 Certificate issuer: /CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5 Certificate serial: 010D0C9F4328584D67DFC7FC6EF2E3C5A1431D00 Authority key identifier: 91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/1fe8fbbb-e271-3bae-8bcc-88d82c6bca9b.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 32762 IP address blocks: 199.71.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:c7:fc:6e:f2:e3:c5:a1:43:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5 Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=d6764e68-9ba7-48d2-b2fb-0d6bc7706cd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:25:8e:c6:4c:91:ff:19:c1:13:68:88:3d:8e: 8a:96:c4:8a:32:52:ca:67:6b:0d:ac:4d:e5:71:60: f8:21:b7:a3:ee:0e:34:03:7a:08:55:c2:c0:6b:0f: c1:c9:7c:03:d8:a1:d8:64:49:88:10:80:d8:58:3b: 97:68:b7:d4:f4:c6:3c:cf:55:75:ca:69:f1:d2:a6: a3:63:e5:3c:46:40:45:18:4f:86:f8:f1:0b:ec:5e: ef:02:a0:c8:1b:e8:fb:ca:62:e6:7c:7c:c5:a4:54: 4a:97:6a:23:a0:c0:04:7b:97:c4:d4:e4:e4:1a:74: 56:00:a6:9b:47:d5:fa:27:c6:85:5c:e1:14:56:63: b9:3c:a3:da:2c:cb:53:f4:e9:b4:01:df:bc:1a:0e: 95:93:03:e6:52:1e:fd:cd:bd:45:f6:17:0f:81:a4: f7:f3:87:d6:a7:3f:b9:98:b0:32:c4:ae:9a:06:5f: da:1c:62:6d:a3:cc:d7:8d:96:b5:1a:e1:f7:4a:33: 40:12:ac:14:d9:da:05:ad:6c:fd:a6:94:e9:ce:47: b4:a1:f9:e3:ba:85:8c:c4:86:cf:0f:73:f6:c9:ef: 46:74:cb:05:a6:c0:7b:81:fa:66:bc:2a:61:98:1d: c0:ca:4f:ee:48:d7:85:60:9a:a9:55:46:ed:da:41: 42:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F4:24:14:21:3F:65:81:06:63:77:38:21:F9:4F:6A:C5:1C:08:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/1fe8fbbb-e271-3bae-8bcc-88d82c6bca9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.crl X509v3 Authority Key Identifier: keyid:91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer sbgp-ipAddrBlock: critical IPv4: 199.71.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:8c:e2:a1:7f:b1:7d:e8:04:00:db:d5:8b:6d:00:21:dd:01: 6e:a3:a8:01:2d:24:bf:4c:6d:22:f6:67:2e:c5:8d:4c:0d:9a: fe:b1:4f:cc:f5:69:60:30:f2:e0:55:24:8a:71:cd:5c:68:d7: bd:00:3c:e2:c2:53:0b:f2:4d:91:7b:4f:ab:35:5f:ae:71:18: a0:1c:46:35:91:77:8b:6a:58:69:18:a2:93:03:d6:20:c9:6f: b9:00:68:63:b8:16:23:33:9c:52:da:9b:81:83:f5:99:ec:51: a6:1c:31:e1:98:f6:06:fc:2e:b6:40:fa:10:16:96:bd:83:f4: d6:ef:7b:64:05:a7:ae:eb:da:70:3b:47:00:02:a7:f3:75:92: bd:0d:19:a4:20:68:fe:a3:0e:99:50:05:57:c5:ad:4e:7f:51: ac:51:e1:66:57:bd:0d:53:1c:96:1a:cf:ad:f8:e5:21:33:20: b6:64:c5:95:fc:1e:57:57:36:20:8c:db:4d:4a:c6:49:cd:08: b6:cd:7c:c0:6d:e5:b8:8d:f3:28:c8:5c:05:99:4b:79:df:b1: 2c:99:06:5e:8f:cc:8d:56:d0:af:a7:70:9f:7b:90:3d:e7:4f: 61:e2:0a:af:fd:82:10:79:bc:cb:f5:1c:e9:47:0e:c9:ef:56: e5:43:eb:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n38f8bvLjxaFDHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE1NzAzZmMtYjBlMi00ZGQzLWFiYmMtNzFkMDhlMWM2 N2M1MB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk ZDY3NjRlNjgtOWJhNy00OGQyLWIyZmItMGQ2YmM3NzA2Y2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyWOxkyR/xnBE2iIPY6KlsSKMlLKZ2sNrE3l cWD4Ibej7g40A3oIVcLAaw/ByXwD2KHYZEmIEIDYWDuXaLfU9MY8z1V1ymnx0qaj Y+U8RkBFGE+G+PEL7F7vAqDIG+j7ymLmfHzFpFRKl2ojoMAEe5fE1OTkGnRWAKab R9X6J8aFXOEUVmO5PKPaLMtT9Om0Ad+8Gg6VkwPmUh79zb1F9hcPgaT384fWpz+5 mLAyxK6aBl/aHGJto8zXjZa1GuH3SjNAEqwU2doFrWz9ppTpzke0ofnjuoWMxIbP D3P2ye9GdMsFpsB7gfpmvCphmB3Ayk/uSNeFYJqpVUbt2kFCTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHP0JBQhP2WBBmN3OCH5T2rFHAi2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iYTU3 MDNmYy1iMGUyLTRkZDMtYWJiYy03MWQwOGUxYzY3YzUvMWZlOGZiYmItZTI3MS0z YmFlLThiY2MtODhkODJjNmJjYTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmE1NzAzZmMtYjBlMi00ZGQzLWFi YmMtNzFkMDhlMWM2N2M1L2JhNTcwM2ZjLWIwZTItNGRkMy1hYmJjLTcxZDA4ZTFj NjdjNS5jcmwwHwYDVR0jBBgwFoAUkaMiLb6LWI+0+yzNjJHeFoQNiAswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iYTU3MDNmYy1iMGUyLTRkZDMtYWJiYy03MWQw OGUxYzY3YzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx0dgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOM4qF/sX3oBADb1YttACHdAW6jqAEtJL9MbSL2Zy7FjUwNmv6xT8z1 aWAw8uBVJIpxzVxo170APOLCUwvyTZF7T6s1X65xGKAcRjWRd4tqWGkYopMD1iDJ b7kAaGO4FiMznFLam4GD9ZnsUaYcMeGY9gb8LrZA+hAWlr2D9Nbve2QFp67r2nA7 RwACp/N1kr0NGaQgaP6jDplQBVfFrU5/UaxR4WZXvQ1THJYaz6345SEzILZkxZX8 HldXNiCM201KxknNCLbNfMBt5biN8yjIXAWZS3nfsSyZBl6PzI1W0K+ncJ97kD3n T2HiCq/9ghB5vMv1HOlHDsnvVuVD69E= -----END CERTIFICATE-----Generated at Fri Apr 17 16:33:00 2026 by rpki-client