$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/1fe8fbbb-e271-3bae-8bcc-88d82c6bca9b.roa File: 1fe8fbbb-e271-3bae-8bcc-88d82c6bca9b.roa (raw, json) Hash identifier: jc8Ex7b2tJtRX9tAQrqoKwZSxTKv9bJOwrgaKOhGs3I= Subject key identifier: CC:F1:A6:9D:2C:FA:A1:E1:F8:D1:5E:5F:6F:A2:5A:5D:DF:AE:97:AD Certificate issuer: /CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5 Certificate serial: 010D0C9F4328584F8DD85DECB7CB036A8E0FF200 Authority key identifier: 91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/1fe8fbbb-e271-3bae-8bcc-88d82c6bca9b.roa Signing time: Mon 19 Oct 2026 13:00:12 +0000 ROA not before: Mon 19 Oct 2026 13:00:12 +0000 ROA not after: Sun 17 Jan 2027 14:00:12 +0000 asID: 32762 IP address blocks: 199.71.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8d:d8:5d:ec:b7:cb:03:6a:8e:0f:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5 Validity Not Before: Oct 19 13:00:12 2026 GMT Not After : Jan 17 14:00:12 2027 GMT Subject: CN=5df0872d-7e0a-40f6-9f29-d726798982de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:30:24:f8:bc:33:6d:d8:a2:df:17:51:d3:68: a6:76:77:ef:09:28:3f:b4:42:92:cd:f1:5d:8f:44: ff:6f:af:f7:11:d5:f3:7e:dd:76:fe:1b:b1:1b:ff: 82:e5:1d:fc:d2:bc:de:66:85:2b:e6:16:b5:d4:10: bb:00:5a:52:b0:bb:ae:00:44:ce:2d:1d:03:49:79: d6:d9:1d:81:b6:7f:39:67:cb:2d:0c:34:44:cc:8f: 64:2b:77:b9:f2:69:9b:5d:ed:c3:2a:f5:22:d1:26: 80:5e:c8:a8:a8:dc:2d:4e:9c:e2:9f:5e:b7:d5:63: b5:8f:50:ec:4b:ad:d1:97:47:51:3c:ec:ba:d5:66: 6e:1e:8d:29:07:a2:b8:d0:55:25:67:18:d5:a3:a2: 24:08:32:c9:04:f1:1c:cc:3f:fd:4a:e4:aa:95:af: 02:a4:35:c2:c0:7e:7c:cb:8c:40:d0:90:80:eb:b3: ff:74:5e:25:97:bf:a9:dc:29:54:42:1e:8a:f2:cc: d8:c7:5f:6f:a9:a7:85:4c:0b:32:6b:7a:d2:a5:c0: ae:d3:61:56:82:be:8a:26:d2:28:d0:02:2f:72:0d: 4c:11:ea:11:d6:a2:f9:5e:ba:9d:07:7e:26:91:73: 1d:1c:76:26:7f:08:42:d8:48:cb:c6:d4:4a:6a:76: df:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F1:A6:9D:2C:FA:A1:E1:F8:D1:5E:5F:6F:A2:5A:5D:DF:AE:97:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/1fe8fbbb-e271-3bae-8bcc-88d82c6bca9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.crl X509v3 Authority Key Identifier: keyid:91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer sbgp-ipAddrBlock: critical IPv4: 199.71.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:82:90:29:5d:6c:d8:21:d0:44:de:13:84:28:9c:e1:54:57: fc:e9:e3:eb:f9:25:3f:dd:34:01:ee:94:b1:05:ef:65:89:e7: 47:d1:c3:cf:42:38:d4:da:53:c5:b0:4d:10:7b:0c:76:fa:9b: bb:a9:16:c7:c2:90:55:23:f0:94:68:62:3b:38:ec:5e:38:fc: ab:e0:7e:83:77:b5:ba:91:59:8d:70:47:70:3e:75:d0:16:8c: de:38:c1:9d:18:03:25:48:b8:6b:08:4c:1b:87:92:06:17:1a: 9d:3d:53:7e:99:c9:70:eb:d5:e7:3b:41:bc:0b:32:f2:c6:27: d0:f4:41:a0:44:e5:6b:10:60:46:a5:06:d0:5d:75:e7:3e:1f: 98:cd:fa:64:b7:ab:45:5f:79:4a:de:4d:26:1c:fc:25:2c:3a: 9c:57:5e:9e:2a:92:f6:60:41:48:37:2f:1d:b5:96:53:cd:e4: 21:a7:1e:5a:4e:04:d1:9c:2e:23:07:59:6a:cc:8b:e2:15:8d: f5:7f:de:c8:69:56:fd:c9:d8:74:fe:63:61:2b:38:87:d7:93: 72:aa:2c:95:27:bc:ff:18:8b:04:d8:f6:ac:62:b3:06:c2:c0: a3:b7:c7:58:e9:7f:b7:82:7d:56:bf:95:2a:32:1e:f0:4b:04: 6d:2b:62:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+N2F3st8sDao4P8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE1NzAzZmMtYjBlMi00ZGQzLWFiYmMtNzFkMDhlMWM2 N2M1MB4XDTI2MTAxOTEzMDAxMloXDTI3MDExNzE0MDAxMlowLzEtMCsGA1UEAxMk NWRmMDg3MmQtN2UwYS00MGY2LTlmMjktZDcyNjc5ODk4MmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DAk+Lwzbdii3xdR02imdnfvCSg/tEKSzfFd j0T/b6/3EdXzft12/huxG/+C5R380rzeZoUr5ha11BC7AFpSsLuuAETOLR0DSXnW 2R2Btn85Z8stDDREzI9kK3e58mmbXe3DKvUi0SaAXsioqNwtTpzin1631WO1j1Ds S63Rl0dRPOy61WZuHo0pB6K40FUlZxjVo6IkCDLJBPEczD/9SuSqla8CpDXCwH58 y4xA0JCA67P/dF4ll7+p3ClUQh6K8szYx19vqaeFTAsya3rSpcCu02FWgr6KJtIo 0AIvcg1MEeoR1qL5XrqdB34mkXMdHHYmfwhC2EjLxtRKanbfJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMzxpp0s+qHh+NFeX2+iWl3frpetMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iYTU3 MDNmYy1iMGUyLTRkZDMtYWJiYy03MWQwOGUxYzY3YzUvMWZlOGZiYmItZTI3MS0z YmFlLThiY2MtODhkODJjNmJjYTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmE1NzAzZmMtYjBlMi00ZGQzLWFi YmMtNzFkMDhlMWM2N2M1L2JhNTcwM2ZjLWIwZTItNGRkMy1hYmJjLTcxZDA4ZTFj NjdjNS5jcmwwHwYDVR0jBBgwFoAUkaMiLb6LWI+0+yzNjJHeFoQNiAswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iYTU3MDNmYy1iMGUyLTRkZDMtYWJiYy03MWQw OGUxYzY3YzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx0dgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOCkCldbNgh0ETeE4QonOFUV/zp4+v5JT/dNAHulLEF72WJ50fRw89C ONTaU8WwTRB7DHb6m7upFsfCkFUj8JRoYjs47F44/KvgfoN3tbqRWY1wR3A+ddAW jN44wZ0YAyVIuGsITBuHkgYXGp09U36ZyXDr1ec7QbwLMvLGJ9D0QaBE5WsQYEal BtBddec+H5jN+mS3q0VfeUreTSYc/CUsOpxXXp4qkvZgQUg3Lx21llPN5CGnHlpO BNGcLiMHWWrMi+IVjfV/3shpVv3J2HT+Y2ErOIfXk3KqLJUnvP8YiwTY9qxiswbC wKO3x1jpf7eCfVa/lSoyHvBLBG0rYnQ= -----END CERTIFICATE-----Generated at Sun Nov 15 17:21:14 2026 by rpki-client