$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/1fe8fbbb-e271-3bae-8bcc-88d82c6bca9b.roa File: 1fe8fbbb-e271-3bae-8bcc-88d82c6bca9b.roa (raw, json) Hash identifier: y5k4sPdmWcKGDR3Eid60wyKSf3X93z1c1DNa0L2k7q4= Subject key identifier: 4D:DA:76:5F:27:D6:23:7E:68:6A:3F:EE:0A:AC:A7:1A:4B:0E:CB:42 Certificate issuer: /CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5 Certificate serial: 010D0C9F4328584E48248B557A159280119CA480 Authority key identifier: 91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/1fe8fbbb-e271-3bae-8bcc-88d82c6bca9b.roa Signing time: Wed 24 Jun 2026 21:00:12 +0000 ROA not before: Wed 24 Jun 2026 21:00:12 +0000 ROA not after: Tue 22 Sep 2026 21:00:12 +0000 asID: 32762 IP address blocks: 199.71.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:48:24:8b:55:7a:15:92:80:11:9c:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5 Validity Not Before: Jun 24 21:00:12 2026 GMT Not After : Sep 22 21:00:12 2026 GMT Subject: CN=14c71920-0a39-494a-8f85-db03042fa94b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9d:8c:87:75:1f:40:44:d1:98:42:f0:7e:9e: 13:39:c9:56:54:a7:4a:ad:3c:1a:6e:15:54:3f:66: 4a:a0:6b:1d:25:f0:03:93:d9:d7:a1:f5:30:c6:1e: 58:ff:0a:76:90:20:a1:3d:32:ff:bb:66:57:68:63: 63:e0:96:3b:ac:e6:27:26:0c:79:d6:5c:44:cb:00: 55:72:be:cc:92:d5:84:5b:0a:ab:91:9e:a4:b6:3e: dc:3e:a2:49:e5:25:f5:ec:a1:af:2f:d3:65:45:f0: 4e:28:f6:68:50:7c:3e:7c:02:0d:7a:2f:26:7e:d5: 2c:84:06:63:a7:fc:7f:f2:0b:44:00:2b:c7:f3:3d: bf:3c:f7:29:9e:34:4e:01:e2:48:3e:e9:ad:e3:ce: 0b:ce:dd:16:3d:03:42:48:e0:a2:ec:78:89:54:e1: d7:aa:d8:3a:02:ea:83:dc:76:0b:54:0e:d9:4d:fc: fb:43:40:c2:25:bb:e3:8d:bb:ca:44:7b:fc:51:d9: b0:5b:76:df:3a:8e:e5:01:6e:20:74:bd:0c:32:92: 25:c6:3e:f4:3c:1a:c8:68:2e:a2:b5:1a:ec:ad:9b: 3e:9c:ca:a9:af:ee:b5:09:13:3c:1c:a4:f1:31:ea: 99:bb:b2:bd:5a:ea:6a:58:16:fe:31:21:68:19:75: df:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:DA:76:5F:27:D6:23:7E:68:6A:3F:EE:0A:AC:A7:1A:4B:0E:CB:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/1fe8fbbb-e271-3bae-8bcc-88d82c6bca9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.crl X509v3 Authority Key Identifier: keyid:91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer sbgp-ipAddrBlock: critical IPv4: 199.71.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:ee:15:1b:e0:1c:6d:87:9d:d4:1e:f5:d4:94:6e:3e:39:8b: 0a:0c:63:7f:8c:16:75:1a:dd:b8:1b:62:e6:17:03:64:dc:90: a2:b5:8e:fc:eb:06:71:91:87:07:b2:f7:cd:01:9f:26:1c:a9: 14:5c:32:59:46:a4:50:f3:42:58:07:1e:2a:73:b5:89:e2:3c: 97:22:7d:a4:3d:48:a5:da:22:13:ad:23:4a:82:2e:b1:b8:41: b8:9f:8b:50:6c:fd:2e:c6:56:a7:64:7c:a2:71:c6:3a:be:2d: 5e:7b:00:b8:4e:60:77:73:a5:53:52:d2:ee:cb:ba:09:91:e9: 29:1e:74:a7:bd:f7:ea:e0:c5:55:ae:26:ba:8b:d5:f3:c2:ec: 05:c8:d1:68:15:0b:ca:20:5d:d8:87:79:f5:14:b5:d5:b4:e8: 04:a2:bb:5d:b3:27:56:0d:1d:ff:dc:77:37:8a:ce:85:8a:fa: 2c:19:ab:56:91:5e:e9:74:30:a2:5b:33:da:a7:ed:1f:66:7e: 2c:bc:26:f6:bc:27:97:67:41:7c:1a:c3:23:e4:62:be:cb:80: f3:4a:9f:bb:0a:ca:2b:93:1a:70:a2:f5:f2:c5:af:d4:8c:a8: 51:ec:9b:aa:4d:cc:5a:e2:e7:74:71:20:18:ae:ce:cd:c1:e2: c4:51:1b:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJItVehWSgBGcpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE1NzAzZmMtYjBlMi00ZGQzLWFiYmMtNzFkMDhlMWM2 N2M1MB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk MTRjNzE5MjAtMGEzOS00OTRhLThmODUtZGIwMzA0MmZhOTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwp2Mh3UfQETRmELwfp4TOclWVKdKrTwabhVU P2ZKoGsdJfADk9nXofUwxh5Y/wp2kCChPTL/u2ZXaGNj4JY7rOYnJgx51lxEywBV cr7MktWEWwqrkZ6ktj7cPqJJ5SX17KGvL9NlRfBOKPZoUHw+fAINei8mftUshAZj p/x/8gtEACvH8z2/PPcpnjROAeJIPumt484Lzt0WPQNCSOCi7HiJVOHXqtg6AuqD 3HYLVA7ZTfz7Q0DCJbvjjbvKRHv8UdmwW3bfOo7lAW4gdL0MMpIlxj70PBrIaC6i tRrsrZs+nMqpr+61CRM8HKTxMeqZu7K9WupqWBb+MSFoGXXfjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3adl8n1iN+aGo/7gqspxpLDstCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iYTU3 MDNmYy1iMGUyLTRkZDMtYWJiYy03MWQwOGUxYzY3YzUvMWZlOGZiYmItZTI3MS0z YmFlLThiY2MtODhkODJjNmJjYTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmE1NzAzZmMtYjBlMi00ZGQzLWFi YmMtNzFkMDhlMWM2N2M1L2JhNTcwM2ZjLWIwZTItNGRkMy1hYmJjLTcxZDA4ZTFj NjdjNS5jcmwwHwYDVR0jBBgwFoAUkaMiLb6LWI+0+yzNjJHeFoQNiAswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iYTU3MDNmYy1iMGUyLTRkZDMtYWJiYy03MWQw OGUxYzY3YzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx0dgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALLuFRvgHG2HndQe9dSUbj45iwoMY3+MFnUa3bgbYuYXA2TckKK1jvzr BnGRhwey980BnyYcqRRcMllGpFDzQlgHHipztYniPJcifaQ9SKXaIhOtI0qCLrG4 Qbifi1Bs/S7GVqdkfKJxxjq+LV57ALhOYHdzpVNS0u7LugmR6SkedKe99+rgxVWu JrqL1fPC7AXI0WgVC8ogXdiHefUUtdW06ASiu12zJ1YNHf/cdzeKzoWK+iwZq1aR Xul0MKJbM9qn7R9mfiy8Jva8J5dnQXwawyPkYr7LgPNKn7sKyiuTGnCi9fLFr9SM qFHsm6pNzFri53RxIBiuzs3B4sRRG/E= -----END CERTIFICATE-----Generated at Wed Jul 8 20:06:23 2026 by rpki-client