$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/1fe8fbbb-e271-3bae-8bcc-88d82c6bca9b.roa File: 1fe8fbbb-e271-3bae-8bcc-88d82c6bca9b.roa (raw, json) Hash identifier: 1A8KMrED6jZFvCAJJnYXMMai0uXOcJmhED+lCTxvxG8= Subject key identifier: 34:A2:E8:44:3E:A7:0A:C1:B8:3D:F1:33:BA:55:F7:CB:C8:B1:6F:EB Certificate issuer: /CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5 Certificate serial: 010D0C9F4328584BA667A954DBE3C72936DC08C0 Authority key identifier: 91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/1fe8fbbb-e271-3bae-8bcc-88d82c6bca9b.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 32762 IP address blocks: 199.71.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:a9:54:db:e3:c7:29:36:dc:08:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=00472387-15cb-4ab6-b7b5-ec6fcff77a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8f:7d:cd:9c:4b:c6:a5:d1:10:1a:8a:4e:ae: 78:bd:ab:81:96:7b:02:f7:1c:7c:06:ef:34:3f:3e: b3:62:5b:c3:f5:20:5c:d2:32:5a:93:68:eb:5d:ff: e6:f7:77:06:cc:fb:35:87:67:1c:27:aa:f4:42:e8: 60:cf:91:68:4f:97:46:1d:3e:3a:e4:9b:9f:76:40: 2d:4e:4c:4f:67:b4:47:b6:f2:4b:23:5b:12:59:2f: c0:28:d7:60:c0:af:1e:04:b3:4c:30:da:4b:39:16: 99:e8:5e:60:d6:a6:58:04:51:5e:b7:ca:18:7c:61: 1a:be:c4:6b:8e:9a:93:d0:f4:ab:ca:ce:06:59:9e: 41:32:20:dd:00:4c:28:42:7d:62:a9:03:43:b7:80: 69:57:98:6e:3b:9f:31:54:c2:dc:30:27:27:25:6f: 56:d7:05:ed:7e:da:6b:17:34:12:08:de:79:5a:48: 7e:ae:f3:0d:1c:3e:5e:80:c8:70:06:31:b2:8b:21: e4:a2:ea:57:9d:af:26:65:fe:83:c4:69:7a:ff:f8: 4d:bb:3f:a7:b5:19:1d:4e:de:4c:08:ca:e4:18:71: 2d:8f:af:c1:02:e5:24:0d:9e:36:7b:76:18:e2:c5: 07:97:9c:df:e6:c3:1f:a6:3e:0e:20:c7:bc:1a:d8: 54:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:A2:E8:44:3E:A7:0A:C1:B8:3D:F1:33:BA:55:F7:CB:C8:B1:6F:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/1fe8fbbb-e271-3bae-8bcc-88d82c6bca9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.crl X509v3 Authority Key Identifier: keyid:91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer sbgp-ipAddrBlock: critical IPv4: 199.71.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:1b:5c:31:6e:13:0e:de:bc:78:d0:05:f1:96:75:2b:c0:47: 61:30:08:8f:12:e5:cc:65:46:f8:50:34:b2:49:2a:f0:83:02: ad:73:86:ee:c4:36:c4:9a:1d:7e:c4:34:0b:7c:1e:d4:89:93: e6:9b:7f:37:e2:36:23:1a:88:6d:e8:6e:05:85:6f:6c:ba:65: 45:6b:48:f6:a5:03:14:7c:e8:ad:74:42:a9:5c:33:ad:fc:e4: 4a:4b:00:94:97:c0:f5:5f:6c:e9:65:22:2a:44:04:a7:b1:22: 84:5f:f8:eb:7e:a7:64:0c:35:6f:12:5f:c5:44:b9:83:dc:11: 69:cb:da:2e:62:bb:b4:93:b3:1f:ba:5f:9c:70:b8:f2:5e:a5: af:4e:93:fa:b8:5b:3d:b2:94:ab:02:ef:7d:b5:bf:99:d7:5c: 90:0f:20:8d:c6:92:53:ab:ff:7c:0d:8f:cd:e6:85:4e:37:35: b5:6e:8f:b8:5f:38:4a:e0:a0:03:3c:a7:03:8a:4f:db:c7:3d: e8:61:34:cb:d9:bc:c8:e8:df:5d:6f:36:34:ae:1d:c5:bc:26: 97:c4:fa:87:3b:20:fe:42:8a:ae:80:23:e9:08:9a:6a:e6:11: 8b:81:df:7f:05:41:7d:53:fa:dd:7f:03:72:96:19:98:fe:d9: 1c:2f:2d:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ6lU2+PHKTbcCMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE1NzAzZmMtYjBlMi00ZGQzLWFiYmMtNzFkMDhlMWM2 N2M1MB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk MDA0NzIzODctMTVjYi00YWI2LWI3YjUtZWM2ZmNmZjc3YThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApo99zZxLxqXREBqKTq54vauBlnsC9xx8Bu80 Pz6zYlvD9SBc0jJak2jrXf/m93cGzPs1h2ccJ6r0Quhgz5FoT5dGHT465JufdkAt TkxPZ7RHtvJLI1sSWS/AKNdgwK8eBLNMMNpLORaZ6F5g1qZYBFFet8oYfGEavsRr jpqT0PSrys4GWZ5BMiDdAEwoQn1iqQNDt4BpV5huO58xVMLcMCcnJW9W1wXtftpr FzQSCN55Wkh+rvMNHD5egMhwBjGyiyHkoupXna8mZf6DxGl6//hNuz+ntRkdTt5M CMrkGHEtj6/BAuUkDZ42e3YY4sUHl5zf5sMfpj4OIMe8GthUXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSi6EQ+pwrBuD3xM7pV98vIsW/rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iYTU3 MDNmYy1iMGUyLTRkZDMtYWJiYy03MWQwOGUxYzY3YzUvMWZlOGZiYmItZTI3MS0z YmFlLThiY2MtODhkODJjNmJjYTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmE1NzAzZmMtYjBlMi00ZGQzLWFi YmMtNzFkMDhlMWM2N2M1L2JhNTcwM2ZjLWIwZTItNGRkMy1hYmJjLTcxZDA4ZTFj NjdjNS5jcmwwHwYDVR0jBBgwFoAUkaMiLb6LWI+0+yzNjJHeFoQNiAswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iYTU3MDNmYy1iMGUyLTRkZDMtYWJiYy03MWQw OGUxYzY3YzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx0dgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIbXDFuEw7evHjQBfGWdSvAR2EwCI8S5cxlRvhQNLJJKvCDAq1zhu7E NsSaHX7ENAt8HtSJk+abfzfiNiMaiG3obgWFb2y6ZUVrSPalAxR86K10QqlcM638 5EpLAJSXwPVfbOllIipEBKexIoRf+Ot+p2QMNW8SX8VEuYPcEWnL2i5iu7STsx+6 X5xwuPJepa9Ok/q4Wz2ylKsC7321v5nXXJAPII3GklOr/3wNj83mhU43NbVuj7hf OErgoAM8pwOKT9vHPehhNMvZvMjo311vNjSuHcW8JpfE+oc7IP5Ciq6AI+kImmrm EYuB338FQX1T+t1/A3KWGZj+2RwvLeM= -----END CERTIFICATE-----Generated at Tue Oct 28 02:19:12 2025 by rpki-client