$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/ba2cd280-d2ed-3b00-9c8b-baafbffaa367.roa File: ba2cd280-d2ed-3b00-9c8b-baafbffaa367.roa (raw, json) Hash identifier: XfLljVu4dvQZpnX0F8+K94GsRfKwcAmtYjxNcWfSfgM= Subject key identifier: 85:E1:B8:82:DF:4D:B0:35:49:94:BD:1D:11:D0:AA:38:90:B7:97:92 Certificate issuer: /CN=ae6e260c-421d-48c3-b47d-d76ac074fbba Certificate serial: 010D0C9F4328584D35AF4E61C615896F804A4B80 Authority key identifier: 74:93:60:5C:AC:A5:72:63:1A:BA:B7:95:2E:DD:67:02:83:DE:3C:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/ba2cd280-d2ed-3b00-9c8b-baafbffaa367.roa Signing time: Wed 18 Mar 2026 13:32:38 +0000 ROA not before: Wed 18 Mar 2026 13:32:38 +0000 ROA not after: Tue 16 Jun 2026 13:32:38 +0000 asID: 401764 IP address blocks: 205.215.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/ae6e260c-421d-48c3-b47d-d76ac074fbba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/ae6e260c-421d-48c3-b47d-d76ac074fbba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:af:4e:61:c6:15:89:6f:80:4a:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae6e260c-421d-48c3-b47d-d76ac074fbba Validity Not Before: Mar 18 13:32:38 2026 GMT Not After : Jun 16 13:32:38 2026 GMT Subject: CN=7ba908cc-a655-407d-8ea8-06acfa1fc0a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:47:03:b1:b2:e0:cf:d8:2f:0e:34:81:de:4d: 0e:57:5d:2b:78:99:5d:46:f1:ba:ca:1c:41:b0:c3: 34:32:17:4e:20:3b:8d:a4:e7:b9:a4:67:16:db:e4: 6f:3d:34:66:97:1b:87:8e:4f:7f:a0:0c:b4:d5:81: 94:fd:a8:11:c4:16:13:84:a2:ba:7a:f1:73:fb:ac: 54:ec:bb:3b:0d:b3:64:72:94:b0:42:5b:8a:c2:c3: 30:38:8e:09:60:56:53:e4:cf:84:50:0b:93:b4:df: bb:73:e3:3a:39:a2:bc:4f:dc:f8:28:dc:ae:99:fd: 0b:7e:58:5e:a4:95:7e:09:95:a7:c7:ab:58:69:7e: c7:a1:ee:6d:0e:26:b5:9b:8d:62:8a:c5:bd:87:21: 04:c3:dd:16:c0:98:d7:09:c8:9d:c7:00:7d:d2:ae: 54:1e:47:e7:94:66:16:f8:1e:ea:46:93:09:a3:66: 06:d4:a9:08:51:91:e1:bb:08:e8:6c:99:49:cd:e0: 99:1d:2b:61:31:45:dd:2e:a4:12:55:be:30:21:0f: 55:5b:2e:9e:4e:a6:c6:be:ff:01:49:93:a0:f9:9c: e3:d8:8e:41:28:cb:91:05:4f:2e:f0:82:10:22:01: 56:97:22:8a:5a:ba:d6:a1:c6:4e:54:96:da:34:25: f4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E1:B8:82:DF:4D:B0:35:49:94:BD:1D:11:D0:AA:38:90:B7:97:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/ba2cd280-d2ed-3b00-9c8b-baafbffaa367.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/ae6e260c-421d-48c3-b47d-d76ac074fbba.crl X509v3 Authority Key Identifier: keyid:74:93:60:5C:AC:A5:72:63:1A:BA:B7:95:2E:DD:67:02:83:DE:3C:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba.cer sbgp-ipAddrBlock: critical IPv4: 205.215.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:bb:ab:b2:d9:df:17:c8:b8:50:59:92:7e:e1:a3:68:3d:e9: 92:11:c7:52:72:43:a2:9e:1b:d5:9a:99:cf:87:78:55:76:e3: 7a:ab:75:16:5c:4b:a8:f2:fe:26:6d:c6:18:02:b2:fa:b4:01: 5b:d7:52:63:84:7d:1f:c5:ba:bf:5a:f0:9f:24:91:41:bf:44: 12:9a:67:ed:eb:9c:84:3d:c7:1a:6c:29:06:61:e4:d8:3b:b9: d6:06:a6:b4:b8:d9:85:f4:4d:1c:b9:03:55:d8:28:86:89:d2: a6:69:e8:f4:f9:e9:ec:9f:e6:f0:fc:3b:3c:8b:30:99:64:f1: 29:9f:ce:5b:b9:17:c5:7e:82:84:b5:94:61:c0:ed:9d:b1:01: 23:06:75:3f:59:d7:27:52:c5:d8:e8:dd:35:fa:02:06:5b:ab: 87:2c:ca:a0:5e:9c:35:21:fe:8c:c6:41:50:b6:1e:e9:14:e5: 88:8e:7e:1a:a7:14:ea:6f:25:7f:14:49:47:71:81:a1:f7:46: fb:7a:2d:36:85:76:d5:38:19:7c:01:bf:aa:5c:5a:91:83:d9: 50:0b:38:42:cb:d4:35:dc:33:d8:62:29:18:5e:30:1c:53:bc: 5f:22:91:1d:60:31:d3:22:71:b8:84:4f:21:e2:cb:1f:b4:00: ca:fe:3a:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01r05hxhWJb4BKS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU2ZTI2MGMtNDIxZC00OGMzLWI0N2QtZDc2YWMwNzRm YmJhMB4XDTI2MDMxODEzMzIzOFoXDTI2MDYxNjEzMzIzOFowLzEtMCsGA1UEAxMk N2JhOTA4Y2MtYTY1NS00MDdkLThlYTgtMDZhY2ZhMWZjMGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEcDsbLgz9gvDjSB3k0OV10reJldRvG6yhxB sMM0MhdOIDuNpOe5pGcW2+RvPTRmlxuHjk9/oAy01YGU/agRxBYThKK6evFz+6xU 7Ls7DbNkcpSwQluKwsMwOI4JYFZT5M+EUAuTtN+7c+M6OaK8T9z4KNyumf0Lflhe pJV+CZWnx6tYaX7Hoe5tDia1m41iisW9hyEEw90WwJjXCcidxwB90q5UHkfnlGYW +B7qRpMJo2YG1KkIUZHhuwjobJlJzeCZHSthMUXdLqQSVb4wIQ9VWy6eTqbGvv8B SZOg+Zzj2I5BKMuRBU8u8IIQIgFWlyKKWrrWocZOVJbaNCX0QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXhuILfTbA1SZS9HRHQqjiQt5eSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hZTZl MjYwYy00MjFkLTQ4YzMtYjQ3ZC1kNzZhYzA3NGZiYmEvYmEyY2QyODAtZDJlZC0z YjAwLTljOGItYmFhZmJmZmFhMzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWU2ZTI2MGMtNDIxZC00OGMzLWI0 N2QtZDc2YWMwNzRmYmJhL2FlNmUyNjBjLTQyMWQtNDhjMy1iNDdkLWQ3NmFjMDc0 ZmJiYS5jcmwwHwYDVR0jBBgwFoAUdJNgXKylcmMaureVLt1nAoPePOMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hZTZlMjYwYy00MjFkLTQ4YzMtYjQ3ZC1kNzZh YzA3NGZiYmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGzddAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAG7q7LZ3xfIuFBZkn7ho2g96ZIRx1JyQ6KeG9Wamc+HeFV243qrdRZc S6jy/iZtxhgCsvq0AVvXUmOEfR/Fur9a8J8kkUG/RBKaZ+3rnIQ9xxpsKQZh5Ng7 udYGprS42YX0TRy5A1XYKIaJ0qZp6PT56eyf5vD8OzyLMJlk8Smfzlu5F8V+goS1 lGHA7Z2xASMGdT9Z1ydSxdjo3TX6AgZbq4csyqBenDUh/ozGQVC2HukU5YiOfhqn FOpvJX8USUdxgaH3Rvt6LTaFdtU4GXwBv6pcWpGD2VALOELL1DXcM9hiKRheMBxT vF8ikR1gMdMicbiETyHiyx+0AMr+Onw= -----END CERTIFICATE-----Generated at Sun Mar 22 09:34:12 2026 by rpki-client