$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/ba687bac-932b-3035-a3bd-b7f3d9c0eee0.roa File: ba687bac-932b-3035-a3bd-b7f3d9c0eee0.roa (raw, json) Hash identifier: D3brUQEXzX2O8+5tFL1F9H4tLFVylNGKN3usVmEdwZc= Subject key identifier: 9F:62:D0:E3:7A:D9:6F:EC:2E:BE:87:81:D9:B4:7C:DA:ED:D2:F6:95 Certificate issuer: /CN=b71f9e4f-426c-4d5a-90cb-5ecf436fd773 Certificate serial: 010D0C9F4328584F4974F79BAECA6CB49753D900 Authority key identifier: EB:E9:57:1A:5D:A9:42:DA:51:B2:D4:8A:80:7A:FA:5B:51:DA:52:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/ba687bac-932b-3035-a3bd-b7f3d9c0eee0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14791 IP address blocks: 72.59.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:f7:9b:ae:ca:6c:b4:97:53:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b71f9e4f-426c-4d5a-90cb-5ecf436fd773 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=795bbc7e-bccc-4274-b07f-dc9284d8d192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b2:8a:bb:5b:43:f7:a1:e8:66:0d:49:fe:7a: 2e:12:47:fa:72:4e:5d:6b:a0:bf:2f:66:5e:51:bc: a4:92:e1:cf:ea:73:10:14:78:1e:06:a3:74:c9:2a: 7c:8e:99:b9:8e:47:31:6d:db:60:67:39:65:0a:f7: eb:bf:38:40:ea:de:32:fb:05:57:2b:a3:9f:6f:13: 55:f8:45:da:5a:70:2e:0b:03:81:4c:1b:8b:1f:bb: 30:17:bd:8c:26:e8:05:55:73:8f:4e:63:d0:2d:38: 7c:a9:5d:a7:ae:e9:25:88:de:4b:aa:e3:90:02:02: cf:55:f0:eb:b6:65:8b:10:8b:a2:1f:f3:5a:a4:98: d6:c6:f8:b3:c8:bf:06:86:23:be:43:d1:f3:4b:e6: d0:81:a5:df:8b:cb:d9:9a:08:b5:31:c3:40:24:98: b8:c3:b0:a3:4c:d5:0e:b2:c3:c0:9b:83:df:4d:9d: b3:a4:72:1f:fe:de:95:d7:15:13:ef:bf:38:12:d2: f4:6a:c8:34:1e:95:65:5c:70:bd:8d:03:b2:93:c5: a3:d3:37:b3:cc:e3:2a:cc:c4:a9:96:5b:18:68:30: c1:30:b3:fc:e1:06:26:7f:7d:11:da:83:c7:c2:67: 5c:ca:e5:26:01:01:60:31:e1:3d:bf:b3:77:ed:bd: e5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:62:D0:E3:7A:D9:6F:EC:2E:BE:87:81:D9:B4:7C:DA:ED:D2:F6:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/ba687bac-932b-3035-a3bd-b7f3d9c0eee0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.crl X509v3 Authority Key Identifier: keyid:EB:E9:57:1A:5D:A9:42:DA:51:B2:D4:8A:80:7A:FA:5B:51:DA:52:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer sbgp-ipAddrBlock: critical IPv4: 72.59.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:26:ce:4c:3b:68:75:96:cf:33:bf:ca:94:cf:3b:e2:bd:52: f3:fd:0c:f9:7f:a7:7e:08:c0:27:1c:b1:af:28:43:ab:df:1e: f6:16:58:15:b5:38:bb:38:a1:ca:fe:27:91:8a:a6:b9:37:7e: e2:da:33:6d:32:22:b5:f8:13:b8:5d:59:e8:3a:0b:5c:91:19: 8a:df:04:ef:36:c3:b6:25:0c:56:cf:6d:f2:b5:cb:11:28:f2: 66:b4:7b:73:e1:d5:8a:9a:88:31:ba:3e:58:cc:0b:79:fe:31: 8a:76:7a:87:6f:9b:4a:d6:1b:4f:f3:12:83:13:5b:b8:20:87: b0:73:44:f3:96:24:c1:9e:86:f6:36:b2:29:bf:27:f8:f3:6e: c9:8a:42:4e:35:c1:85:a8:77:23:fc:7c:28:69:2e:f3:b1:c1: fa:97:38:04:33:c9:ce:26:42:d5:a5:89:9a:eb:a9:09:97:30: 41:d9:26:da:db:5d:94:c2:3f:cf:73:b6:11:9b:c5:d4:0a:f9: fa:7d:81:e8:bf:0e:6e:f2:c0:22:1d:57:6a:db:38:25:68:f8: a6:21:9c:e3:db:6f:12:24:6c:e8:a6:62:47:3d:20:f2:f7:d2: 96:97:0f:37:74:0e:68:1d:38:0b:82:f7:ce:a4:49:95:b5:63: df:f2:a7:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdPebrspstJdT2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjcxZjllNGYtNDI2Yy00ZDVhLTkwY2ItNWVjZjQzNmZk NzczMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Nzk1YmJjN2UtYmNjYy00Mjc0LWIwN2YtZGM5Mjg0ZDhkMTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbKKu1tD96HoZg1J/nouEkf6ck5da6C/L2Ze UbykkuHP6nMQFHgeBqN0ySp8jpm5jkcxbdtgZzllCvfrvzhA6t4y+wVXK6OfbxNV +EXaWnAuCwOBTBuLH7swF72MJugFVXOPTmPQLTh8qV2nrukliN5LquOQAgLPVfDr tmWLEIuiH/NapJjWxvizyL8GhiO+Q9HzS+bQgaXfi8vZmgi1McNAJJi4w7CjTNUO ssPAm4PfTZ2zpHIf/t6V1xUT7784EtL0asg0HpVlXHC9jQOyk8Wj0zezzOMqzMSp llsYaDDBMLP84QYmf30R2oPHwmdcyuUmAQFgMeE9v7N37b3lawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9i0ON62W/sLr6Hgdm0fNrt0vaVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNzFm OWU0Zi00MjZjLTRkNWEtOTBjYi01ZWNmNDM2ZmQ3NzMvYmE2ODdiYWMtOTMyYi0z MDM1LWEzYmQtYjdmM2Q5YzBlZWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjcxZjllNGYtNDI2Yy00ZDVhLTkw Y2ItNWVjZjQzNmZkNzczL2I3MWY5ZTRmLTQyNmMtNGQ1YS05MGNiLTVlY2Y0MzZm ZDc3My5jcmwwHwYDVR0jBBgwFoAU6+lXGl2pQtpRstSKgHr6W1HaUuIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNzFmOWU0Zi00MjZjLTRkNWEtOTBjYi01ZWNm NDM2ZmQ3NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSDv4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwmzkw7aHWWzzO/ypTPO+K9UvP9DPl/p34IwCccsa8oQ6vfHvYWWBW1 OLs4ocr+J5GKprk3fuLaM20yIrX4E7hdWeg6C1yRGYrfBO82w7YlDFbPbfK1yxEo 8ma0e3Ph1YqaiDG6PljMC3n+MYp2eodvm0rWG0/zEoMTW7ggh7BzRPOWJMGehvY2 sim/J/jzbsmKQk41wYWodyP8fChpLvOxwfqXOAQzyc4mQtWliZrrqQmXMEHZJtrb XZTCP89zthGbxdQK+fp9gei/Dm7ywCIdV2rbOCVo+KYhnOPbbxIkbOimYkc9IPL3 0paXDzd0DmgdOAuC986kSZW1Y9/yp78= -----END CERTIFICATE-----Generated at Sat Sep 26 14:45:09 2026 by rpki-client