$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/baba0dac-331b-3027-9ddc-06e0a9f9e1c4.roa File: baba0dac-331b-3027-9ddc-06e0a9f9e1c4.roa (raw, json) Hash identifier: M/bfqUvt4NEo1/LqD/BH6brPNm67v81oI203hrkLBP8= Subject key identifier: CE:32:C5:D8:20:5D:CB:67:6A:BE:5F:04:65:B7:92:78:A1:0C:7F:D1 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584D117262920C5D0ED9B3DD8740 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/baba0dac-331b-3027-9ddc-06e0a9f9e1c4.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 3356 IP address blocks: 75.156.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:62:92:0c:5d:0e:d9:b3:dd:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=3be96603-027b-4071-be04-aa8c8d4ab9c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7a:62:e1:5f:2a:1a:5a:98:32:e5:c2:1d:00: 3e:e0:6d:62:db:fd:a0:a9:92:41:21:a4:77:0e:1c: 62:a0:24:df:3b:3d:91:10:21:93:60:f5:6c:a2:bf: e5:d0:3b:92:40:9a:30:75:07:21:5f:0c:a8:06:43: 78:57:7b:32:6c:4c:1c:dc:5f:1d:71:44:18:59:ed: 31:cf:b2:81:d6:c7:a0:8e:55:8c:06:a0:29:c3:ec: 25:2b:a9:90:b9:3c:4e:89:66:8d:77:0d:22:d0:17: c1:e9:04:1d:24:c2:f2:11:5d:62:0a:e9:dd:fe:47: 06:3b:b6:4e:5d:98:bc:f1:3a:4c:c3:48:21:2f:ad: d3:3f:0b:fd:16:65:bd:e2:07:1b:b7:2b:7d:f9:75: ee:ac:92:79:ac:ee:c8:62:2a:73:4f:48:b6:d9:53: c6:52:5e:0b:00:9d:f3:d1:4a:79:a1:6e:05:26:e1: fa:d7:57:03:03:55:4a:30:8f:ab:21:28:b7:b3:81: 2b:e6:d4:46:8a:54:31:48:cc:8c:32:12:84:46:f2: b4:da:87:85:cd:17:4b:44:4c:cd:99:a3:73:a9:bf: 62:8c:66:f0:27:81:f1:e2:4a:4b:5f:3a:19:e5:61: 43:8a:9f:5a:91:8f:25:12:e4:78:16:ac:a7:43:de: c4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:32:C5:D8:20:5D:CB:67:6A:BE:5F:04:65:B7:92:78:A1:0C:7F:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/baba0dac-331b-3027-9ddc-06e0a9f9e1c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 75.156.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:f9:25:a8:88:d8:f5:8c:88:f1:9f:e4:1e:e0:50:7e:dc:3a: 0e:ec:83:54:1b:52:05:a0:b4:b8:67:82:49:c6:ef:69:d4:be: 4e:e2:b6:bb:4a:ea:81:ed:8f:d5:69:7b:b3:31:e1:f4:be:75: c0:91:8b:96:39:72:83:f0:23:f2:a0:de:34:82:58:65:36:b9: 42:ab:64:e4:17:e5:17:57:76:6c:01:bd:d5:8c:35:fc:b9:4b: 25:16:a0:45:07:89:58:ec:9a:a4:b5:b9:d8:01:40:ff:25:ee: 58:52:a9:fd:2e:5d:80:f8:57:70:dd:86:2e:05:e7:a8:1d:53: 7b:91:ce:ca:c9:4a:fb:79:b4:69:69:b8:cb:80:ac:a6:c8:2b: 06:eb:70:2c:f4:50:66:48:04:24:a1:87:66:dc:1c:62:17:07: 41:65:ee:b3:8f:ee:4b:6f:a0:05:23:39:fb:f6:7c:83:84:2e: 08:3a:43:07:03:67:a5:85:60:41:dd:65:4b:74:da:45:b3:e2: ac:ca:95:a2:5b:2e:12:f0:03:ee:70:ae:b2:f5:d4:30:cc:37: d0:73:bb:c0:9b:c5:76:a5:37:b3:08:0a:19:c4:c5:5f:93:d1: 99:6b:7d:3c:8c:f8:87:27:2e:b3:59:f7:58:9e:e2:5b:d0:9d: e5:5a:1d:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RcmKSDF0O2bPdh0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk M2JlOTY2MDMtMDI3Yi00MDcxLWJlMDQtYWE4YzhkNGFiOWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHpi4V8qGlqYMuXCHQA+4G1i2/2gqZJBIaR3 DhxioCTfOz2RECGTYPVsor/l0DuSQJowdQchXwyoBkN4V3sybEwc3F8dcUQYWe0x z7KB1segjlWMBqApw+wlK6mQuTxOiWaNdw0i0BfB6QQdJMLyEV1iCund/kcGO7ZO XZi88TpMw0ghL63TPwv9FmW94gcbtyt9+XXurJJ5rO7IYipzT0i22VPGUl4LAJ3z 0Up5oW4FJuH611cDA1VKMI+rISi3s4Er5tRGilQxSMyMMhKERvK02oeFzRdLREzN maNzqb9ijGbwJ4Hx4kpLXzoZ5WFDip9akY8lEuR4FqynQ97EzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4yxdggXctnar5fBGW3knihDH/RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYmFiYTBkYWMtMzMxYi0z MDI3LTlkZGMtMDZlMGE5ZjllMWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS5zzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMr5JaiI2PWMiPGf5B7gUH7cOg7sg1QbUgWgtLhngknG72nUvk7itrtK 6oHtj9Vpe7Mx4fS+dcCRi5Y5coPwI/Kg3jSCWGU2uUKrZOQX5RdXdmwBvdWMNfy5 SyUWoEUHiVjsmqS1udgBQP8l7lhSqf0uXYD4V3Ddhi4F56gdU3uRzsrJSvt5tGlp uMuArKbIKwbrcCz0UGZIBCShh2bcHGIXB0Fl7rOP7ktvoAUjOfv2fIOELgg6QwcD Z6WFYEHdZUt02kWz4qzKlaJbLhLwA+5wrrL11DDMN9Bzu8CbxXalN7MIChnExV+T 0ZlrfTyM+IcnLrNZ91ie4lvQneVaHfk= -----END CERTIFICATE-----Generated at Fri Mar 13 23:52:40 2026 by rpki-client