$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/ba687bac-932b-3035-a3bd-b7f3d9c0eee0.roa File: ba687bac-932b-3035-a3bd-b7f3d9c0eee0.roa (raw, json) Hash identifier: gP8NapsZnJ2MDSR7wykxXvTm0ppfZvs/dHFc8lIsHcU= Subject key identifier: 5C:29:7E:FE:49:D0:D1:08:5F:FC:D4:51:53:53:46:E4:01:A4:24:F0 Certificate issuer: /CN=b71f9e4f-426c-4d5a-90cb-5ecf436fd773 Certificate serial: 010D0C9F4328584D0F6D70BD2FB46253B84DF680 Authority key identifier: EB:E9:57:1A:5D:A9:42:DA:51:B2:D4:8A:80:7A:FA:5B:51:DA:52:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/ba687bac-932b-3035-a3bd-b7f3d9c0eee0.roa Signing time: Wed 04 Mar 2026 20:39:13 +0000 ROA not before: Wed 04 Mar 2026 20:39:13 +0000 ROA not after: Tue 02 Jun 2026 19:39:13 +0000 asID: 14791 IP address blocks: 72.59.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0f:6d:70:bd:2f:b4:62:53:b8:4d:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b71f9e4f-426c-4d5a-90cb-5ecf436fd773 Validity Not Before: Mar 4 20:39:13 2026 GMT Not After : Jun 2 19:39:13 2026 GMT Subject: CN=f98a03df-53b9-4c22-ae9a-b47bd615708f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ea:19:35:96:06:c8:ff:b1:84:15:56:a9:5b: 56:94:eb:48:d9:5b:c5:e4:92:84:5c:87:34:64:7f: b9:b7:07:61:d0:ae:84:d8:8b:7e:72:15:df:36:14: 5f:82:97:57:65:3b:37:02:88:da:32:8d:71:7c:68: c1:93:ac:aa:da:c7:77:04:5c:67:89:27:79:ff:a6: 68:bd:26:6d:c7:2b:30:08:a3:ff:ef:be:00:78:4c: be:eb:c3:5e:35:44:d6:45:79:22:c9:19:d3:5a:34: 71:ac:df:fa:16:96:59:91:13:88:c4:f6:18:af:db: 90:48:5a:61:95:ad:02:83:33:ee:89:75:a8:15:eb: 6e:61:78:ef:d7:cc:4e:85:7a:93:69:ac:b0:86:69: e9:af:64:06:a9:c9:c0:5e:50:e2:29:c3:d7:e2:4c: 5e:e8:4a:60:57:96:e4:99:ec:62:a0:36:89:98:12: e2:2d:03:20:f8:b3:c4:dc:d6:5d:ae:bb:91:3a:2f: 73:d2:40:c6:6c:7d:6e:a7:9c:56:e9:4c:00:80:0d: 7b:dc:cc:c9:83:e2:20:fb:26:38:04:d6:0a:ee:e6: 94:e5:b3:a6:12:b2:2a:c6:c6:b5:62:84:9f:a4:61: 13:b3:1e:fd:98:67:3c:be:da:6a:da:3e:ac:c7:65: ca:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:29:7E:FE:49:D0:D1:08:5F:FC:D4:51:53:53:46:E4:01:A4:24:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/ba687bac-932b-3035-a3bd-b7f3d9c0eee0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.crl X509v3 Authority Key Identifier: keyid:EB:E9:57:1A:5D:A9:42:DA:51:B2:D4:8A:80:7A:FA:5B:51:DA:52:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer sbgp-ipAddrBlock: critical IPv4: 72.59.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:39:a8:87:40:1e:a7:bd:57:d6:e4:8e:e7:49:96:44:df:71: a5:e2:c1:42:30:ba:af:20:91:b1:87:c6:b7:bb:19:ae:7a:ac: 6d:f8:a4:e7:12:98:4a:b3:f9:b0:31:b4:d6:92:89:3e:ee:fa: e9:63:96:47:c8:f9:0b:d8:3f:d0:60:43:d2:23:2d:54:2d:a0: d6:72:92:fd:93:b1:45:74:c7:ae:a8:fe:ae:c2:15:e3:60:36: 29:27:71:08:ea:05:1a:3d:ec:03:ad:af:04:c2:4e:56:df:63: fe:9a:d0:71:49:76:7b:38:a4:56:2d:85:49:10:ae:25:e3:a9: 7d:12:fb:17:02:7a:dc:fb:4f:1c:f1:5e:9b:d8:68:1f:2c:00: b3:c9:f7:8e:e1:bd:bb:8e:54:80:b2:9d:62:79:21:23:6a:b1: 1f:f5:3d:e7:62:e2:ba:e2:02:58:db:4b:74:be:0f:2b:88:fd: 6d:56:99:ed:81:f7:d0:2b:bd:de:f0:e2:59:d9:0e:61:cf:4e: 96:d0:49:2e:54:ff:dd:bd:d1:60:c5:e0:6b:6c:d2:65:c9:65: 21:97:fb:5c:7b:02:2c:19:8a:51:9f:50:3b:64:38:2f:d9:9c: d6:53:a0:86:d7:e8:05:49:4a:38:64:e6:a2:53:d9:29:4c:7c: bf:28:9c:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0PbXC9L7RiU7hN9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjcxZjllNGYtNDI2Yy00ZDVhLTkwY2ItNWVjZjQzNmZk NzczMB4XDTI2MDMwNDIwMzkxM1oXDTI2MDYwMjE5MzkxM1owLzEtMCsGA1UEAxMk Zjk4YTAzZGYtNTNiOS00YzIyLWFlOWEtYjQ3YmQ2MTU3MDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuoZNZYGyP+xhBVWqVtWlOtI2VvF5JKEXIc0 ZH+5twdh0K6E2It+chXfNhRfgpdXZTs3AojaMo1xfGjBk6yq2sd3BFxniSd5/6Zo vSZtxyswCKP/774AeEy+68NeNUTWRXkiyRnTWjRxrN/6FpZZkROIxPYYr9uQSFph la0CgzPuiXWoFetuYXjv18xOhXqTaaywhmnpr2QGqcnAXlDiKcPX4kxe6EpgV5bk mexioDaJmBLiLQMg+LPE3NZdrruROi9z0kDGbH1up5xW6UwAgA173MzJg+Ig+yY4 BNYK7uaU5bOmErIqxsa1YoSfpGETsx79mGc8vtpq2j6sx2XK6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwpfv5J0NEIX/zUUVNTRuQBpCTwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNzFm OWU0Zi00MjZjLTRkNWEtOTBjYi01ZWNmNDM2ZmQ3NzMvYmE2ODdiYWMtOTMyYi0z MDM1LWEzYmQtYjdmM2Q5YzBlZWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjcxZjllNGYtNDI2Yy00ZDVhLTkw Y2ItNWVjZjQzNmZkNzczL2I3MWY5ZTRmLTQyNmMtNGQ1YS05MGNiLTVlY2Y0MzZm ZDc3My5jcmwwHwYDVR0jBBgwFoAU6+lXGl2pQtpRstSKgHr6W1HaUuIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNzFmOWU0Zi00MjZjLTRkNWEtOTBjYi01ZWNm NDM2ZmQ3NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSDv4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD45qIdAHqe9V9bkjudJlkTfcaXiwUIwuq8gkbGHxre7Ga56rG34pOcS mEqz+bAxtNaSiT7u+uljlkfI+QvYP9BgQ9IjLVQtoNZykv2TsUV0x66o/q7CFeNg NikncQjqBRo97AOtrwTCTlbfY/6a0HFJdns4pFYthUkQriXjqX0S+xcCetz7Txzx XpvYaB8sALPJ947hvbuOVICynWJ5ISNqsR/1Pedi4rriAljbS3S+DyuI/W1Wme2B 99Arvd7w4lnZDmHPTpbQSS5U/9290WDF4Gts0mXJZSGX+1x7AiwZilGfUDtkOC/Z nNZToIbX6AVJSjhk5qJT2SlMfL8onEc= -----END CERTIFICATE-----Generated at Thu Mar 26 03:22:46 2026 by rpki-client