$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/1fe8fbbb-e271-3bae-8bcc-88d82c6bca9b.roa File: 1fe8fbbb-e271-3bae-8bcc-88d82c6bca9b.roa (raw, json) Hash identifier: bDqtCy9uT1T/d4HpbLe7ts3SAQ5zdtXy3tHAaEt++6Y= Subject key identifier: 46:C9:02:E6:90:52:33:53:2A:39:69:A8:3C:F9:2C:83:7C:AA:23:54 Certificate issuer: /CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5 Certificate serial: 010D0C9F4328584C8741733E07DBDC1D7CAABB70 Authority key identifier: 91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/1fe8fbbb-e271-3bae-8bcc-88d82c6bca9b.roa Signing time: Thu 15 Jan 2026 02:00:31 +0000 ROA not before: Thu 15 Jan 2026 02:00:31 +0000 ROA not after: Wed 15 Apr 2026 01:00:31 +0000 asID: 32762 IP address blocks: 199.71.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:87:41:73:3e:07:db:dc:1d:7c:aa:bb:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5 Validity Not Before: Jan 15 02:00:31 2026 GMT Not After : Apr 15 01:00:31 2026 GMT Subject: CN=6d47839e-72fb-4117-938b-cfa159647299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0b:23:91:60:06:5a:bc:33:23:26:16:43:80: 5f:8f:4a:8d:13:b3:02:71:8b:6f:7b:be:8d:6e:6c: ae:07:76:3e:4f:7d:63:a6:4d:4e:19:f4:a4:11:e9: bf:43:81:2f:0a:d4:12:75:81:ef:d4:85:d7:4a:62: 1c:8e:54:c9:99:06:80:68:78:b0:36:3a:f6:d5:63: b5:8b:9d:ed:66:97:94:0a:1e:e3:4a:13:5f:49:d0: 66:c0:fe:f9:1b:49:3a:74:a4:e9:f0:51:dd:02:9d: 06:50:5e:53:51:43:9f:4c:6e:19:5d:ba:38:dd:53: 8b:b3:6b:35:6a:4f:c5:63:cc:c8:ca:2e:f7:22:f5: d8:c6:1e:ff:78:65:0c:53:56:2c:70:13:22:d4:d5: 55:52:a5:f6:4e:37:7e:95:50:46:02:5b:1f:8f:a9: 4d:be:06:15:c0:2b:15:28:7d:70:bc:a8:9c:cc:4a: d5:ce:a2:3e:b3:b8:ff:5a:30:52:c3:6e:c9:19:10: b5:7f:52:07:9c:10:18:fb:67:ee:6c:01:3f:4d:68: 17:a6:35:b5:e5:67:c1:ee:c0:09:0a:9a:b6:a6:d6: f1:76:e1:e0:bd:b9:93:b4:cf:15:19:6a:41:de:b8: f9:70:58:62:3b:37:7f:c2:d0:81:cf:7f:0f:99:f3: 76:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C9:02:E6:90:52:33:53:2A:39:69:A8:3C:F9:2C:83:7C:AA:23:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/1fe8fbbb-e271-3bae-8bcc-88d82c6bca9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.crl X509v3 Authority Key Identifier: keyid:91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer sbgp-ipAddrBlock: critical IPv4: 199.71.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:ad:fa:07:12:10:71:a0:fc:1a:5b:33:97:e3:ba:d7:9f:83: 73:d4:7f:97:07:0d:2b:a2:95:96:bc:6e:51:f1:ff:74:ca:3b: 3c:7d:86:e0:b6:7d:bf:f7:68:2e:b3:6f:4b:ee:13:e8:fb:ad: a9:fe:41:eb:5a:8e:6b:f6:9a:50:91:56:b7:c5:2b:53:2a:8c: 1c:94:bf:82:e9:04:5a:83:80:14:18:74:ad:58:0f:58:3b:8d: dc:b2:56:91:6f:a0:5b:7a:d0:13:bd:66:69:15:70:3f:42:f3: 95:fd:87:d9:3c:a0:a2:b4:4c:83:21:f4:65:95:be:dd:a9:21: 03:aa:a6:a4:c7:ac:55:62:43:4f:fc:c1:1e:47:71:0b:dc:89: dc:9e:57:5a:c1:db:6d:72:bc:5e:d5:92:89:29:80:5e:e4:5a: be:49:f7:8b:f6:0f:e1:ef:87:ba:2b:b2:5a:49:14:10:4f:d8: 86:69:85:b8:ae:b7:f4:b9:35:1b:c9:68:22:97:8c:7f:b4:cb: 59:85:5f:7a:0c:4d:7b:c3:38:e0:b3:55:36:fe:d9:bc:4f:0b: 0a:ff:b7:d1:94:c9:88:0f:b9:83:a7:18:3e:27:75:80:cb:03: 6a:b9:26:ce:dc:e0:45:d8:4c:6a:c5:dc:98:de:97:57:bd:01: a3:dd:a2:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyHQXM+B9vcHXyqu3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE1NzAzZmMtYjBlMi00ZGQzLWFiYmMtNzFkMDhlMWM2 N2M1MB4XDTI2MDExNTAyMDAzMVoXDTI2MDQxNTAxMDAzMVowLzEtMCsGA1UEAxMk NmQ0NzgzOWUtNzJmYi00MTE3LTkzOGItY2ZhMTU5NjQ3Mjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwsjkWAGWrwzIyYWQ4Bfj0qNE7MCcYtve76N bmyuB3Y+T31jpk1OGfSkEem/Q4EvCtQSdYHv1IXXSmIcjlTJmQaAaHiwNjr21WO1 i53tZpeUCh7jShNfSdBmwP75G0k6dKTp8FHdAp0GUF5TUUOfTG4ZXbo43VOLs2s1 ak/FY8zIyi73IvXYxh7/eGUMU1YscBMi1NVVUqX2Tjd+lVBGAlsfj6lNvgYVwCsV KH1wvKiczErVzqI+s7j/WjBSw27JGRC1f1IHnBAY+2fubAE/TWgXpjW15WfB7sAJ Cpq2ptbxduHgvbmTtM8VGWpB3rj5cFhiOzd/wtCBz38PmfN2OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbJAuaQUjNTKjlpqDz5LIN8qiNUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iYTU3 MDNmYy1iMGUyLTRkZDMtYWJiYy03MWQwOGUxYzY3YzUvMWZlOGZiYmItZTI3MS0z YmFlLThiY2MtODhkODJjNmJjYTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmE1NzAzZmMtYjBlMi00ZGQzLWFi YmMtNzFkMDhlMWM2N2M1L2JhNTcwM2ZjLWIwZTItNGRkMy1hYmJjLTcxZDA4ZTFj NjdjNS5jcmwwHwYDVR0jBBgwFoAUkaMiLb6LWI+0+yzNjJHeFoQNiAswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iYTU3MDNmYy1iMGUyLTRkZDMtYWJiYy03MWQw OGUxYzY3YzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx0dgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKet+gcSEHGg/BpbM5fjutefg3PUf5cHDSuilZa8blHx/3TKOzx9huC2 fb/3aC6zb0vuE+j7ran+Qetajmv2mlCRVrfFK1MqjByUv4LpBFqDgBQYdK1YD1g7 jdyyVpFvoFt60BO9ZmkVcD9C85X9h9k8oKK0TIMh9GWVvt2pIQOqpqTHrFViQ0/8 wR5HcQvcidyeV1rB221yvF7VkokpgF7kWr5J94v2D+Hvh7orslpJFBBP2IZphbiu t/S5NRvJaCKXjH+0y1mFX3oMTXvDOOCzVTb+2bxPCwr/t9GUyYgPuYOnGD4ndYDL A2q5Js7c4EXYTGrF3Jjel1e9AaPdoqA= -----END CERTIFICATE-----Generated at Sun Feb 22 19:17:17 2026 by rpki-client