$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba321e18-86bd-46af-83a2-478b4fd1fa97/ef9c95ce-12ab-3c5b-9dcb-aefe2dcb1ac2.roa File: ef9c95ce-12ab-3c5b-9dcb-aefe2dcb1ac2.roa (raw, json) Hash identifier: 25w5H0dKiziAgeejeo0TQmYzS7PuDQglI9EQmw/rxpM= Subject key identifier: 6D:6C:FC:FB:69:F1:BC:1F:13:A4:61:E5:FE:5A:54:76:CF:80:95:A7 Certificate issuer: /CN=ba321e18-86bd-46af-83a2-478b4fd1fa97 Certificate serial: 010D0C9F4328584D65153E6D4C790092B546F400 Authority key identifier: 5C:70:00:42:A7:CC:07:80:1A:06:BF:41:D4:F2:01:DB:FC:8D:2A:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba321e18-86bd-46af-83a2-478b4fd1fa97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba321e18-86bd-46af-83a2-478b4fd1fa97/ef9c95ce-12ab-3c5b-9dcb-aefe2dcb1ac2.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 396264 IP address blocks: 158.51.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba321e18-86bd-46af-83a2-478b4fd1fa97/ba321e18-86bd-46af-83a2-478b4fd1fa97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba321e18-86bd-46af-83a2-478b4fd1fa97/ba321e18-86bd-46af-83a2-478b4fd1fa97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba321e18-86bd-46af-83a2-478b4fd1fa97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:3e:6d:4c:79:00:92:b5:46:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba321e18-86bd-46af-83a2-478b4fd1fa97 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=af270624-60ac-4463-b0af-ec29dc19be56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:16:32:71:6e:f9:33:f8:a9:20:3a:66:14:cb: df:ad:5e:d0:7d:5a:fa:00:2d:3a:75:93:20:82:20: 89:c4:56:40:b3:cc:c1:50:3d:61:dc:ca:71:3a:c9: d6:6f:af:e1:9a:dc:18:d2:95:a3:4d:0a:cc:0e:37: dd:c2:2a:6e:10:bf:ec:63:02:a6:df:22:a8:2a:0c: f3:9b:18:0e:bf:18:7c:70:2f:81:ba:71:d0:ad:83: 1e:e5:e0:dc:f8:95:9e:d5:48:d8:7b:76:4d:53:8e: 3d:57:52:2b:cf:7f:64:a4:32:d0:5f:47:51:fd:37: b7:ea:3d:7e:60:cf:f1:fc:82:eb:a2:59:46:3e:be: 4d:34:94:29:38:40:ec:7f:ef:c9:b7:54:ee:a7:43: d5:1a:79:12:d0:3b:d0:4d:26:bb:bb:f1:f9:9c:c3: 1a:a4:db:57:f6:ca:bc:67:0f:74:cb:e5:48:76:77: 19:21:41:52:64:3e:36:1f:33:e6:bb:eb:77:64:52: 48:3a:78:f6:6a:ea:be:8b:42:80:24:a5:5e:1f:a4: 20:79:d6:18:c2:29:d9:59:85:9a:26:eb:5f:a3:63: b7:b6:83:0c:89:4c:97:48:db:79:ca:b3:9f:8e:dc: a4:97:da:4b:03:39:86:6c:4a:37:db:e8:12:a0:d4: 07:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:6C:FC:FB:69:F1:BC:1F:13:A4:61:E5:FE:5A:54:76:CF:80:95:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba321e18-86bd-46af-83a2-478b4fd1fa97/ef9c95ce-12ab-3c5b-9dcb-aefe2dcb1ac2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba321e18-86bd-46af-83a2-478b4fd1fa97/ba321e18-86bd-46af-83a2-478b4fd1fa97.crl X509v3 Authority Key Identifier: keyid:5C:70:00:42:A7:CC:07:80:1A:06:BF:41:D4:F2:01:DB:FC:8D:2A:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba321e18-86bd-46af-83a2-478b4fd1fa97.cer sbgp-ipAddrBlock: critical IPv4: 158.51.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:b3:e0:38:24:83:27:eb:17:fd:e5:2d:96:8a:11:83:22:74: 1d:6f:aa:5e:a3:56:b4:ce:bb:d8:1c:e0:5e:12:16:b8:d6:a4: d6:53:c7:9a:19:18:c5:8c:af:83:ca:66:41:aa:79:b3:68:c9: ed:c1:e7:16:b3:94:71:46:bf:d1:8d:82:5c:b8:5f:20:7b:72: e1:bb:32:47:f2:ae:e8:25:e3:d0:ae:4b:08:21:28:90:09:04: d3:23:8c:6f:38:02:ea:8d:4d:8e:66:39:b6:76:d2:26:7f:2d: ac:24:2d:0b:60:70:b7:7e:de:09:e0:33:f6:ba:40:37:d0:dc: 13:3b:29:14:4c:2c:79:f3:12:a7:f1:49:b5:1e:eb:42:0b:7c: 63:ce:e8:22:60:b1:18:70:fe:11:5c:49:ff:f6:12:42:77:9c: 9f:7f:db:1b:23:95:2a:b6:36:0e:5c:ae:d4:56:7e:87:e5:2e: ea:30:37:d1:b2:51:c3:e8:d9:72:02:ed:49:8d:58:c9:78:9c: c1:cc:8d:3c:5b:6f:83:b1:88:46:49:0d:86:18:21:7c:65:95: 83:4a:fc:fe:fc:21:67:05:23:27:dc:8b:8f:ba:f0:93:ee:17: 01:08:a9:af:21:32:64:cd:b7:41:d8:8f:5a:4b:41:b3:dd:17: 59:cc:8c:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFT5tTHkAkrVG9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEzMjFlMTgtODZiZC00NmFmLTgzYTItNDc4YjRmZDFm YTk3MB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk YWYyNzA2MjQtNjBhYy00NDYzLWIwYWYtZWMyOWRjMTliZTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxYycW75M/ipIDpmFMvfrV7QfVr6AC06dZMg giCJxFZAs8zBUD1h3MpxOsnWb6/hmtwY0pWjTQrMDjfdwipuEL/sYwKm3yKoKgzz mxgOvxh8cC+BunHQrYMe5eDc+JWe1UjYe3ZNU449V1Irz39kpDLQX0dR/Te36j1+ YM/x/ILrollGPr5NNJQpOEDsf+/Jt1Tup0PVGnkS0DvQTSa7u/H5nMMapNtX9sq8 Zw90y+VIdncZIUFSZD42HzPmu+t3ZFJIOnj2auq+i0KAJKVeH6QgedYYwinZWYWa Jutfo2O3toMMiUyXSNt5yrOfjtykl9pLAzmGbEo32+gSoNQHAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1s/Ptp8bwfE6Rh5f5aVHbPgJWnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iYTMy MWUxOC04NmJkLTQ2YWYtODNhMi00NzhiNGZkMWZhOTcvZWY5Yzk1Y2UtMTJhYi0z YzViLTlkY2ItYWVmZTJkY2IxYWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYmEzMjFlMTgtODZiZC00NmFmLTgz YTItNDc4YjRmZDFmYTk3L2JhMzIxZTE4LTg2YmQtNDZhZi04M2EyLTQ3OGI0ZmQx ZmE5Ny5jcmwwHwYDVR0jBBgwFoAUXHAAQqfMB4AaBr9B1PIB2/yNKtUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9iYTMyMWUxOC04NmJkLTQ2YWYtODNhMi00Nzhi NGZkMWZhOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnjMYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALyz4DgkgyfrF/3lLZaKEYMidB1vql6jVrTOu9gc4F4SFrjWpNZTx5oZ GMWMr4PKZkGqebNoye3B5xazlHFGv9GNgly4XyB7cuG7Mkfyrugl49CuSwghKJAJ BNMjjG84AuqNTY5mObZ20iZ/LawkLQtgcLd+3gngM/a6QDfQ3BM7KRRMLHnzEqfx SbUe60ILfGPO6CJgsRhw/hFcSf/2EkJ3nJ9/2xsjlSq2Ng5crtRWfoflLuowN9Gy UcPo2XIC7UmNWMl4nMHMjTxbb4OxiEZJDYYYIXxllYNK/P78IWcFIyfci4+68JPu FwEIqa8hMmTNt0HYj1pLQbPdF1nMjFc= -----END CERTIFICATE-----Generated at Mon Apr 13 11:57:31 2026 by rpki-client