$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/ba09dfad-31a3-31a1-8d98-b0cec5949829.roa File: ba09dfad-31a3-31a1-8d98-b0cec5949829.roa (raw, json) Hash identifier: mvnYnof/3U+nKoL9DkxQvtzdQqbXaHh1sbFyqHag9dA= Subject key identifier: 53:DD:D9:70:E6:F7:21:38:33:B7:6C:51:28:FC:FA:BE:21:3E:3A:32 Certificate issuer: /CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343 Certificate serial: 010D0C9F4328584D9A200B882B3D1102C75D6240 Authority key identifier: B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/ba09dfad-31a3-31a1-8d98-b0cec5949829.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 30041 IP address blocks: 66.218.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:0b:88:2b:3d:11:02:c7:5d:62:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343 Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=cc2e99ad-5c9c-49ab-8e28-0ed99b1cff90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:67:50:1b:a2:4a:c8:6c:91:2f:c7:14:e6:c3: 62:c8:46:94:47:05:39:28:95:3d:d4:d1:65:fa:d6: 1f:82:51:d5:76:6f:76:2b:d6:d6:b2:e0:02:71:63: 59:f0:d9:c4:56:32:fe:ec:ac:1d:30:cb:44:71:f7: 8c:23:ac:0e:93:d6:c7:4d:ae:17:5f:2a:d8:ff:89: 33:a7:eb:a1:aa:f1:30:59:e9:ce:2a:52:1e:da:fe: 65:56:4c:76:e9:23:7f:b6:36:22:53:e2:71:d6:51: 1f:b6:ce:d9:7f:2f:a8:b4:bc:01:4b:da:6c:63:b4: 5e:ca:6f:de:d0:74:0f:c0:b9:f4:fa:a7:77:b0:ae: 2d:8d:57:28:57:e5:96:98:81:fd:0e:24:a2:a2:a8: 13:f5:c8:ea:02:15:4c:cd:36:69:31:35:ec:df:65: 55:23:db:77:b8:94:c5:ca:8c:0f:ca:b4:9c:fb:a9: b2:64:74:40:7f:e6:4c:46:5f:30:5f:28:fb:ce:62: 7e:4b:01:49:04:5c:97:53:91:bd:98:39:a5:96:ff: 95:f8:46:09:d6:f5:d4:f4:29:26:5e:4e:7e:e8:68: af:fc:6f:08:6a:30:e9:d2:f6:26:73:66:7a:2e:2e: e4:e7:72:6e:64:ef:f8:27:3d:00:c6:42:f4:20:44: 37:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:DD:D9:70:E6:F7:21:38:33:B7:6C:51:28:FC:FA:BE:21:3E:3A:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/ba09dfad-31a3-31a1-8d98-b0cec5949829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl X509v3 Authority Key Identifier: keyid:B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer sbgp-ipAddrBlock: critical IPv4: 66.218.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:aa:b6:c1:d2:90:9e:9e:15:4c:cd:78:9e:3d:67:97:fb:b1: 44:96:fd:66:21:00:bb:04:e4:b2:47:65:f7:d7:fc:27:6f:b8: 0e:2a:1f:9d:69:71:87:b3:87:9a:5e:9b:98:ff:23:d0:02:50: a1:69:12:f2:62:10:0a:52:6f:2b:05:32:ed:22:24:a7:bd:b8: ae:dd:b1:61:66:50:93:20:cb:55:98:f4:50:30:c0:6a:51:cb: 24:09:c1:ed:01:ca:a0:2b:1e:26:9e:e2:d0:1e:95:fe:41:35: 12:63:8e:1f:bb:a8:30:09:f9:9d:41:f0:f0:d9:73:52:e5:4b: 35:af:a5:41:ac:ee:d0:be:dd:8d:d0:99:37:37:26:51:3a:2f: 74:85:6b:5f:ce:7b:b8:7a:a5:a7:9b:60:96:6a:04:b4:2c:ce: d0:b3:8f:95:3c:5c:3d:0f:58:e8:da:ff:c7:3d:a6:42:d7:5b: 82:ad:ab:79:50:09:37:61:f8:26:65:c3:f7:9f:5a:26:de:df: 3a:59:cd:43:73:0e:00:9c:16:c4:d2:87:e7:09:36:18:46:90: 8d:8d:6c:7d:c6:72:31:54:04:27:d0:42:8f:4f:bc:b6:6f:80: 69:77:d2:cb:f4:be:d7:b9:9c:7a:ed:63:ed:e5:0b:1c:52:13: 74:55:f2:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aIAuIKz0RAsddYkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJhOGJkZDAtNmM3Zi00N2I3LWI0MjctNmUyYjQ1NGZh MzQzMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk Y2MyZTk5YWQtNWM5Yy00OWFiLThlMjgtMGVkOTliMWNmZjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmdQG6JKyGyRL8cU5sNiyEaURwU5KJU91NFl +tYfglHVdm92K9bWsuACcWNZ8NnEVjL+7KwdMMtEcfeMI6wOk9bHTa4XXyrY/4kz p+uhqvEwWenOKlIe2v5lVkx26SN/tjYiU+Jx1lEfts7Zfy+otLwBS9psY7Reym/e 0HQPwLn0+qd3sK4tjVcoV+WWmIH9DiSioqgT9cjqAhVMzTZpMTXs32VVI9t3uJTF yowPyrSc+6myZHRAf+ZMRl8wXyj7zmJ+SwFJBFyXU5G9mDmllv+V+EYJ1vXU9Ckm Xk5+6Giv/G8IajDp0vYmc2Z6Li7k53JuZO/4Jz0AxkL0IEQ3VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFPd2XDm9yE4M7dsUSj8+r4hPjoyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85YmE4 YmRkMC02YzdmLTQ3YjctYjQyNy02ZTJiNDU0ZmEzNDMvYmEwOWRmYWQtMzFhMy0z MWExLThkOTgtYjBjZWM1OTQ5ODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOWJhOGJkZDAtNmM3Zi00N2I3LWI0 MjctNmUyYjQ1NGZhMzQzLzliYThiZGQwLTZjN2YtNDdiNy1iNDI3LTZlMmI0NTRm YTM0My5jcmwwHwYDVR0jBBgwFoAUsWj3t9BOo5ekclbjM5CgXUrxK0AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85YmE4YmRkMC02YzdmLTQ3YjctYjQyNy02ZTJi NDU0ZmEzNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQtogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ+qtsHSkJ6eFUzNeJ49Z5f7sUSW/WYhALsE5LJHZffX/CdvuA4qH51p cYezh5pem5j/I9ACUKFpEvJiEApSbysFMu0iJKe9uK7dsWFmUJMgy1WY9FAwwGpR yyQJwe0ByqArHiae4tAelf5BNRJjjh+7qDAJ+Z1B8PDZc1LlSzWvpUGs7tC+3Y3Q mTc3JlE6L3SFa1/Oe7h6paebYJZqBLQsztCzj5U8XD0PWOja/8c9pkLXW4Ktq3lQ CTdh+CZlw/efWibe3zpZzUNzDgCcFsTSh+cJNhhGkI2NbH3GcjFUBCfQQo9PvLZv gGl30sv0vte5nHrtY+3lCxxSE3RV8jw= -----END CERTIFICATE-----Generated at Wed May 13 14:00:23 2026 by rpki-client