$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/bde1949e-0125-3cca-b3f6-350aaa861a6e.roa File: bde1949e-0125-3cca-b3f6-350aaa861a6e.roa (raw, json) Hash identifier: 92TN0LIZNZNnJTD7uwXB+glrHOtlnGLvLI8DN/GNaQs= Subject key identifier: 01:DC:DE:6E:4E:AB:C2:C9:07:65:4E:CF:2A:9B:B0:9E:8E:C5:EE:C0 Certificate issuer: /CN=ba6a95b3-dd3c-40de-9bd2-84357b74f801 Certificate serial: 010D0C9F4328584D19B49F7DA3CC683B2CE1DF80 Authority key identifier: 56:83:39:F0:DF:32:B7:60:C5:65:26:B1:9D:69:1F:6F:6C:44:A1:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/bde1949e-0125-3cca-b3f6-350aaa861a6e.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 14618 IP address blocks: 23.189.120.0/24 maxlen: 24 2602:f805::/48 maxlen: 48 2602:f805:900::/48 maxlen: 48 2602:f805:c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:9f:7d:a3:cc:68:3b:2c:e1:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6a95b3-dd3c-40de-9bd2-84357b74f801 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=ac9d2bfb-ed40-4083-b376-82b6e4e76cfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:98:37:ac:75:f3:98:64:24:33:c9:57:1c:57: 2c:3c:37:50:58:31:fe:72:a5:0a:d4:b4:e3:b5:62: 85:40:f0:c0:a2:5d:94:af:be:35:fc:f5:b4:2f:b3: 50:2f:f2:78:db:c3:e7:3b:6b:7a:26:e5:a0:ca:f0: bd:12:d9:29:2c:50:ad:b8:63:e8:e1:87:2e:ef:8e: 80:92:8d:18:d6:27:54:fb:4c:1f:41:36:2a:85:3e: 94:0a:ca:b7:b2:7b:39:f7:38:1e:79:f6:f1:40:87: 19:74:8b:d6:59:82:87:92:52:e5:8f:9e:af:65:89: 62:60:a4:09:df:63:ad:76:9c:0e:b9:38:21:95:db: 90:c2:fe:7f:03:77:6b:61:8a:ba:0b:49:ec:c7:b5: 82:b7:99:a3:75:93:ed:a8:b7:7e:3f:35:ff:c0:0f: 2d:1b:1e:79:ea:7c:5b:ac:cc:09:b6:f4:6d:95:ee: 00:c8:ba:9a:6c:53:08:c9:39:c6:d9:8f:f6:f7:80: 33:88:ff:38:e7:90:84:18:f7:d9:0d:98:79:c1:7a: ca:e1:97:ca:92:af:f1:16:9c:16:a0:07:b7:d8:22: c5:8d:ac:34:80:e2:47:5e:f2:60:2d:66:52:7c:2f: f6:74:c7:24:1a:0e:44:56:46:94:65:c8:f1:96:cf: f5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:DC:DE:6E:4E:AB:C2:C9:07:65:4E:CF:2A:9B:B0:9E:8E:C5:EE:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/bde1949e-0125-3cca-b3f6-350aaa861a6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.crl X509v3 Authority Key Identifier: keyid:56:83:39:F0:DF:32:B7:60:C5:65:26:B1:9D:69:1F:6F:6C:44:A1:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer sbgp-ipAddrBlock: critical IPv4: 23.189.120.0/24 IPv6: 2602:f805::/48 2602:f805:900::/48 2602:f805:c00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:60:91:93:b7:da:a4:7b:89:76:70:4f:78:08:eb:19:53:72: 9a:b1:cf:ce:ea:f4:37:21:44:1a:6e:02:a1:26:42:88:5e:f4: d6:54:74:ff:55:bb:58:49:81:f7:1e:1b:95:73:75:43:e0:43: 36:09:67:3f:cc:22:5e:d3:1a:77:6d:13:5f:41:81:ee:c6:dd: 95:ee:75:39:6b:30:4c:56:e6:5f:8e:0c:5b:c0:d3:18:f5:64: 1a:78:63:b4:f9:01:32:26:86:eb:9d:ad:a1:e2:f0:c5:87:36: 33:06:99:bc:e7:e3:63:06:05:a5:4b:29:bf:0c:dc:52:68:1a: 38:fc:90:2f:6f:92:69:42:f8:b6:23:89:b6:08:29:3e:a2:63: 63:f1:9e:f6:df:14:59:67:f3:d0:97:ff:51:29:d3:35:47:f3: 53:f1:31:73:aa:94:a4:88:c3:34:52:f5:1e:9e:d7:b5:6c:fc: a2:d1:5b:8f:ea:08:e5:09:72:e1:5e:d7:84:24:e4:7f:4b:99: ad:ac:a0:94:0e:31:5e:8a:0b:98:3f:ba:c6:46:41:3d:64:e1: 91:9b:a0:b7:d9:ec:e1:25:65:c9:e8:21:f7:7b:3c:13:74:63: 55:f6:e0:44:ce:c9:cb:1d:7b:d6:3d:7b:33:db:ee:91:32:d0: ef:af:1a:11 -----BEGIN CERTIFICATE----- MIIGZjCCBU6gAwIBAgIUAQ0Mn0MoWE0ZtJ99o8xoOyzh34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE2YTk1YjMtZGQzYy00MGRlLTliZDItODQzNTdiNzRm ODAxMB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk YWM5ZDJiZmItZWQ0MC00MDgzLWIzNzYtODJiNmU0ZTc2Y2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5g3rHXzmGQkM8lXHFcsPDdQWDH+cqUK1LTj tWKFQPDAol2Ur741/PW0L7NQL/J428PnO2t6JuWgyvC9EtkpLFCtuGPo4Ycu746A ko0Y1idU+0wfQTYqhT6UCsq3sns59zgeefbxQIcZdIvWWYKHklLlj56vZYliYKQJ 32OtdpwOuTghlduQwv5/A3drYYq6C0nsx7WCt5mjdZPtqLd+PzX/wA8tGx556nxb rMwJtvRtle4AyLqabFMIyTnG2Y/294AziP8455CEGPfZDZh5wXrK4ZfKkq/xFpwW oAe32CLFjaw0gOJHXvJgLWZSfC/2dMckGg5EVkaUZcjxls/1TQIDAQABo4IDeDCC A3QwHQYDVR0OBBYEFAHc3m5Oq8LJB2VOzyqbsJ6Oxe7AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iYTZh OTViMy1kZDNjLTQwZGUtOWJkMi04NDM1N2I3NGY4MDEvYmRlMTk0OWUtMDEyNS0z Y2NhLWIzZjYtMzUwYWFhODYxYTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYmE2YTk1YjMtZGQzYy00MGRlLTli ZDItODQzNTdiNzRmODAxL2JhNmE5NWIzLWRkM2MtNDBkZS05YmQyLTg0MzU3Yjc0 ZjgwMS5jcmwwHwYDVR0jBBgwFoAUVoM58N8yt2DFZSaxnWkfb2xEoXMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iYTZhOTViMy1kZDNjLTQwZGUtOWJkMi04NDM1 N2I3NGY4MDEuY2VyMEIGCCsGAQUFBwEHAQH/BDMwMTAMBAIAATAGAwQAF714MCEE AgACMBsDBwAmAvgFAAADBwAmAvgFCQADBwAmAvgFDAAwVAYDVR0gAQH/BEowSDBG BggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9y ZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAmWCRk7fa pHuJdnBPeAjrGVNymrHPzur0NyFEGm4CoSZCiF701lR0/1W7WEmB9x4blXN1Q+BD NglnP8wiXtMad20TX0GB7sbdle51OWswTFbmX44MW8DTGPVkGnhjtPkBMiaG652t oeLwxYc2MwaZvOfjYwYFpUspvwzcUmgaOPyQL2+SaUL4tiOJtggpPqJjY/Ge9t8U WWfz0Jf/USnTNUfzU/Exc6qUpIjDNFL1Hp7XtWz8otFbj+oI5Qly4V7XhCTkf0uZ rayglA4xXooLmD+6xkZBPWThkZugt9ns4SVlyegh93s8E3RjVfbgRM7Jyx171j17 M9vukTLQ768aEQ== -----END CERTIFICATE-----Generated at Sun Mar 22 09:58:20 2026 by rpki-client