$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/baa68c67-2eff-30bf-976e-892fa383dd82.roa File: baa68c67-2eff-30bf-976e-892fa383dd82.roa (raw, json) Hash identifier: c1QMI/SGGSdjOoB5qF2VMNxa4iZc9//kf3CC6e88Cwg= Subject key identifier: 8C:2A:8F:CB:43:B1:C1:A4:C4:29:05:2C:5B:DB:A2:A9:48:E0:7C:DC Certificate issuer: /CN=1bd97e7a-c31d-417a-bc07-1ecdb96be09f Certificate serial: 010D0C9F4328584D6AAAA86214B3736314B74900 Authority key identifier: E0:BC:46:6D:8F:5F:DC:23:84:62:42:1C:22:C8:6C:C1:EE:EB:CB:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/baa68c67-2eff-30bf-976e-892fa383dd82.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 40605 IP address blocks: 173.0.96.0/24 maxlen: 24 173.0.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:a8:62:14:b3:73:63:14:b7:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bd97e7a-c31d-417a-bc07-1ecdb96be09f Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=bf0fb560-25a7-4817-aab6-e17c12a664cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b0:7c:d7:8e:ad:2a:c5:42:d8:03:b3:0c:95: 24:e1:0e:8c:b0:b2:27:4e:8b:ee:33:ff:58:87:07: 68:57:ed:35:38:4d:4d:e2:5c:2c:c3:b9:1c:fe:bc: 22:f0:2b:3c:a6:d4:e9:2d:e7:9f:da:5b:3b:68:81: 69:ac:96:2a:42:1a:71:a1:dc:40:3f:c9:70:9a:13: d3:fd:f5:07:a2:1a:40:d7:01:90:d1:1d:66:09:d8: 43:23:9a:ee:4c:df:94:5c:f0:37:4a:57:8c:67:3c: fa:77:4f:4c:37:ea:79:91:43:13:99:d8:ad:48:19: 3b:e2:ee:41:7e:ae:32:27:cf:41:2b:22:a4:42:4f: 02:49:49:da:0b:48:d8:c4:42:82:54:80:ca:77:9e: 2c:e3:59:91:b7:e0:82:a2:c0:2e:6f:c5:ff:cd:56: be:e0:ee:87:cd:e1:7b:6e:65:66:0d:76:27:3f:3b: 3d:16:6d:f7:f2:23:c4:af:b6:ab:d5:f4:22:73:ce: 3c:55:20:d9:2b:cc:b2:5a:cb:24:2d:d5:0c:bf:d5: f1:0d:51:5c:72:02:0e:6f:44:d6:b4:64:41:fe:c8: 07:73:23:db:37:3b:1a:fa:e4:91:73:91:c9:db:a0: 50:f5:87:27:e7:77:6b:75:e7:8c:6e:fa:b3:67:3d: 8c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:2A:8F:CB:43:B1:C1:A4:C4:29:05:2C:5B:DB:A2:A9:48:E0:7C:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/baa68c67-2eff-30bf-976e-892fa383dd82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.crl X509v3 Authority Key Identifier: keyid:E0:BC:46:6D:8F:5F:DC:23:84:62:42:1C:22:C8:6C:C1:EE:EB:CB:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer sbgp-ipAddrBlock: critical IPv4: 173.0.96.0/24 173.0.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:94:76:0c:0b:95:be:79:04:3e:e8:c0:d7:ad:e3:3f:1b:54: 80:4d:d6:ac:52:5f:79:e2:d5:a1:ee:87:0d:a3:d5:7c:aa:97: a3:41:f9:00:69:31:ef:80:a5:79:86:03:53:aa:a6:cc:ef:cc: 04:53:59:1e:f1:5c:f1:af:8c:7a:19:c5:9c:1d:0e:7f:bb:4e: b6:d0:57:4f:38:77:6f:1c:56:38:3a:8d:0e:77:32:eb:fa:92: c6:c3:01:4c:bd:eb:80:02:64:9b:77:92:bf:ff:76:e6:de:41: f2:5b:b1:96:b3:12:e9:f9:a3:f2:5b:e3:b1:21:ba:cf:1d:3f: 6c:f6:93:dc:f5:24:c5:92:59:30:ec:c5:dc:30:45:48:01:9e: a1:2f:fc:6e:fa:cd:ea:0c:1a:b6:17:97:4e:d0:4b:84:b3:1c: 2b:be:08:ef:a6:0e:c3:81:56:60:9b:f2:9e:ee:10:33:4c:73: e9:e0:49:3e:16:53:9c:7f:16:9a:31:0a:66:e2:07:c1:8a:08: 35:c7:26:61:ea:21:3c:05:6a:27:74:d2:85:a3:a2:29:81:3d: 17:a2:62:d5:d3:4b:3b:1e:f4:6e:4e:d9:d1:b2:18:42:04:6a: d7:d9:9a:b0:8c:e4:c0:79:f0:45:80:5b:a7:de:d4:4f:af:f6: 48:76:26:f8 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE1qqqhiFLNzYxS3SQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWJkOTdlN2EtYzMxZC00MTdhLWJjMDctMWVjZGI5NmJl MDlmMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk YmYwZmI1NjAtMjVhNy00ODE3LWFhYjYtZTE3YzEyYTY2NGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7B8146tKsVC2AOzDJUk4Q6MsLInTovuM/9Y hwdoV+01OE1N4lwsw7kc/rwi8Cs8ptTpLeef2ls7aIFprJYqQhpxodxAP8lwmhPT /fUHohpA1wGQ0R1mCdhDI5ruTN+UXPA3SleMZzz6d09MN+p5kUMTmditSBk74u5B fq4yJ89BKyKkQk8CSUnaC0jYxEKCVIDKd54s41mRt+CCosAub8X/zVa+4O6HzeF7 bmVmDXYnPzs9Fm338iPEr7ar1fQic848VSDZK8yyWsskLdUMv9XxDVFccgIOb0TW tGRB/sgHcyPbNzsa+uSRc5HJ26BQ9Ycn53drdeeMbvqzZz2MBwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFIwqj8tDscGkxCkFLFvboqlI4HzcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xYmQ5 N2U3YS1jMzFkLTQxN2EtYmMwNy0xZWNkYjk2YmUwOWYvYmFhNjhjNjctMmVmZi0z MGJmLTk3NmUtODkyZmEzODNkZDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWJkOTdlN2EtYzMxZC00MTdhLWJj MDctMWVjZGI5NmJlMDlmLzFiZDk3ZTdhLWMzMWQtNDE3YS1iYzA3LTFlY2RiOTZi ZTA5Zi5jcmwwHwYDVR0jBBgwFoAU4LxGbY9f3COEYkIcIshswe7ry44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xYmQ5N2U3YS1jMzFkLTQxN2EtYmMwNy0xZWNk Yjk2YmUwOWYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQArQBgAwQA rQBrMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADKUdgwLlb55BD7owNet4z8bVIBN1qxSX3ni1aHuhw2j1Xyq l6NB+QBpMe+ApXmGA1OqpszvzARTWR7xXPGvjHoZxZwdDn+7TrbQV084d28cVjg6 jQ53Muv6ksbDAUy964ACZJt3kr//dubeQfJbsZazEun5o/Jb47Ehus8dP2z2k9z1 JMWSWTDsxdwwRUgBnqEv/G76zeoMGrYXl07QS4SzHCu+CO+mDsOBVmCb8p7uEDNM c+ngST4WU5x/FpoxCmbiB8GKCDXHJmHqITwFaid00oWjoimBPReiYtXTSzse9G5O 2dGyGEIEatfZmrCM5MB58EWAW6fe1E+v9kh2Jvg= -----END CERTIFICATE-----Generated at Sat Apr 18 19:40:27 2026 by rpki-client