$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bba9411a-2230-3b21-9d16-d2a0bd16a2a7.roa File: bba9411a-2230-3b21-9d16-d2a0bd16a2a7.roa (raw, json) Hash identifier: /f0RS519A6SmfWbqIcke8CmPgzB6Tz7pyZ0hR8eZvUU= Subject key identifier: A1:78:DC:81:F5:43:C9:1F:5B:23:FB:CE:85:43:1B:97:CC:4B:B4:51 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D1C7F4D810B5E8FD166C8A080 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bba9411a-2230-3b21-9d16-d2a0bd16a2a7.roa Signing time: Mon 09 Mar 2026 13:00:40 +0000 ROA not before: Mon 09 Mar 2026 13:00:40 +0000 ROA not after: Sun 07 Jun 2026 13:00:40 +0000 asID: 153383 IP address blocks: 69.33.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1c:7f:4d:81:0b:5e:8f:d1:66:c8:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 9 13:00:40 2026 GMT Not After : Jun 7 13:00:40 2026 GMT Subject: CN=528f2acb-cefe-4e04-97b9-cf590bf407cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:14:52:97:9f:ba:32:72:ee:49:04:62:18:2e: 80:80:31:06:97:b7:b9:56:35:9f:fe:52:3d:30:3c: ce:68:92:de:2d:3b:0e:50:d9:f2:ba:57:45:a0:51: c1:ef:6f:6f:d3:29:4b:e4:b0:6f:54:2e:07:be:54: 8b:3f:bb:91:cf:5c:7d:52:a3:35:8a:bb:40:d8:91: c9:80:77:c3:13:f8:e1:ae:97:a1:1e:83:50:80:cb: 3a:c3:c9:1c:5f:9e:91:88:9a:da:d3:a0:1f:56:38: 28:75:e2:1c:e7:80:bf:b3:7b:2e:94:b9:3b:d5:8e: 9f:24:33:d0:ef:b9:b8:1f:cd:11:53:03:5d:a0:e7: 84:c6:67:42:7c:e1:fb:0e:c8:64:74:38:96:46:bf: c6:4a:28:c0:b7:72:73:34:0e:d3:0c:d7:75:2f:81: bc:1e:e1:e9:f7:75:8a:16:b3:3b:06:d6:9c:16:46: f4:15:27:6d:06:cd:ea:43:80:b9:e3:04:fe:54:c8: 38:9f:12:86:e3:91:03:68:45:d4:ab:2e:ba:70:ab: 58:e8:e5:ee:b7:74:7c:96:ac:43:3f:0b:8b:4a:35: af:cf:c9:e0:4b:5d:c5:4e:54:1b:3a:19:ab:0e:ab: 88:42:4d:d6:8c:d5:95:6d:92:a3:03:33:06:f8:e7: 04:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:78:DC:81:F5:43:C9:1F:5B:23:FB:CE:85:43:1B:97:CC:4B:B4:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bba9411a-2230-3b21-9d16-d2a0bd16a2a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 69.33.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:61:02:e0:be:e8:bc:d6:68:8f:47:d3:c0:e4:e0:83:48:89: 90:46:2b:f9:72:53:2c:52:17:98:56:c1:08:af:be:9b:9f:eb: 25:4e:e9:98:ea:6b:41:10:33:34:0b:72:f0:b2:80:b8:d7:ab: 1b:a0:69:3e:16:e0:ed:e2:db:e3:b0:ce:ba:c1:71:2a:89:1b: 27:22:25:75:02:72:b6:a3:0e:59:79:a7:15:0a:35:b3:f4:0e: ed:94:3d:91:10:5d:f2:66:b5:a0:83:6a:ce:cd:58:90:12:67: 53:78:32:d2:d6:06:77:c0:b4:d7:69:03:af:90:f0:45:b0:96: 72:d5:76:3e:96:1f:10:1d:01:76:14:f1:74:c8:f3:85:89:37: 1f:11:75:13:1c:f8:26:d5:ec:e7:ed:06:5f:9f:5a:a9:ca:c1: bb:dd:89:5a:2a:16:24:73:ea:ec:99:e6:65:6c:18:7a:6d:03: 05:0c:d9:04:5d:0e:63:bd:6a:9b:97:25:77:f6:c1:f7:1e:9d: 02:41:67:73:81:04:cc:8f:8a:99:45:11:41:ea:2d:bf:d3:b6: 71:44:44:07:68:f0:35:dc:f3:d3:34:3d:7e:c0:01:67:57:66: 2c:64:2f:d6:11:47:15:93:c5:57:9d:3a:ea:72:74:e8:7b:1d: f8:57:63:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0cf02BC16P0WbIoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMwOTEzMDA0MFoXDTI2MDYwNzEzMDA0MFowLzEtMCsGA1UEAxMk NTI4ZjJhY2ItY2VmZS00ZTA0LTk3YjktY2Y1OTBiZjQwN2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BRSl5+6MnLuSQRiGC6AgDEGl7e5VjWf/lI9 MDzOaJLeLTsOUNnyuldFoFHB729v0ylL5LBvVC4HvlSLP7uRz1x9UqM1irtA2JHJ gHfDE/jhrpehHoNQgMs6w8kcX56RiJra06AfVjgodeIc54C/s3sulLk71Y6fJDPQ 77m4H80RUwNdoOeExmdCfOH7DshkdDiWRr/GSijAt3JzNA7TDNd1L4G8HuHp93WK FrM7BtacFkb0FSdtBs3qQ4C54wT+VMg4nxKG45EDaEXUqy66cKtY6OXut3R8lqxD PwuLSjWvz8ngS13FTlQbOhmrDquIQk3WjNWVbZKjAzMG+OcEPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKF43IH1Q8kfWyP7zoVDG5fMS7RRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYmJhOTQxMWEtMjIzMC0z YjIxLTlkMTYtZDJhMGJkMTZhMmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRSFEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhhAuC+6LzWaI9H08Dk4INIiZBGK/lyUyxSF5hWwQivvpuf6yVO6Zjq a0EQMzQLcvCygLjXqxugaT4W4O3i2+OwzrrBcSqJGyciJXUCcrajDll5pxUKNbP0 Du2UPZEQXfJmtaCDas7NWJASZ1N4MtLWBnfAtNdpA6+Q8EWwlnLVdj6WHxAdAXYU 8XTI84WJNx8RdRMc+CbV7OftBl+fWqnKwbvdiVoqFiRz6uyZ5mVsGHptAwUM2QRd DmO9apuXJXf2wfcenQJBZ3OBBMyPiplFEUHqLb/TtnFERAdo8DXc89M0PX7AAWdX ZixkL9YRRxWTxVedOupydOh7HfhXY04= -----END CERTIFICATE-----Generated at Thu Mar 26 19:31:16 2026 by rpki-client