$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/baa68c67-2eff-30bf-976e-892fa383dd82.roa File: baa68c67-2eff-30bf-976e-892fa383dd82.roa (raw, json) Hash identifier: 0Z00p5PCN/p8/x5cRNsZb8UgJouW0Fj5NCNg8JEoWXk= Subject key identifier: B5:C5:20:90:42:37:C2:C2:3B:6F:C1:2C:CD:52:09:33:39:E9:1C:78 Certificate issuer: /CN=1bd97e7a-c31d-417a-bc07-1ecdb96be09f Certificate serial: 010D0C9F4328584E4AEF6ACE30DB4F60019EDC40 Authority key identifier: E0:BC:46:6D:8F:5F:DC:23:84:62:42:1C:22:C8:6C:C1:EE:EB:CB:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/baa68c67-2eff-30bf-976e-892fa383dd82.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 40605 IP address blocks: 173.0.96.0/24 maxlen: 24 173.0.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:6a:ce:30:db:4f:60:01:9e:dc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bd97e7a-c31d-417a-bc07-1ecdb96be09f Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=2a2c09a2-9fb6-439e-9f58-8ad92879951a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0e:f3:99:2b:6a:11:62:05:3a:26:61:73:cc: dc:f1:0c:fa:be:b1:62:3e:3a:64:69:2f:c2:7c:3f: f4:3b:e2:96:8f:7d:05:e9:b7:39:5f:6b:5c:1b:60: cc:70:32:1c:7e:f4:4c:dd:3d:21:3f:b9:94:84:61: 5e:90:4c:2a:df:8e:27:38:77:8b:2d:b9:76:2a:35: f2:72:1d:6b:fb:aa:c7:44:46:14:6a:6a:f5:df:7d: e3:f0:ea:dd:48:b6:3b:01:c3:aa:5f:99:50:ac:96: 0a:d8:67:d6:6a:21:6f:38:f7:94:57:9f:51:f8:c6: 96:54:46:2d:f4:1f:96:42:e3:e0:8e:cf:84:86:4c: cb:c6:55:17:a2:20:3b:13:2d:38:60:ac:41:c5:76: b6:d7:79:6c:b4:5b:37:f1:8c:78:20:3d:1c:56:6b: 1b:89:6f:04:f6:95:42:ce:1c:9e:57:3f:9f:16:17: 5e:15:51:49:3c:bd:83:9d:83:61:67:c7:5d:8a:fa: a0:e1:80:ef:b8:73:40:7f:4a:f4:b2:ec:b9:1b:3d: de:de:3e:e9:e2:79:d3:36:4b:e7:65:0f:3a:fd:b8: ed:3c:b8:9b:d9:0d:d1:1a:29:dc:48:da:7b:e3:9c: b9:e8:8b:31:1a:a6:45:2e:c6:bc:77:96:7f:a3:4a: dd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:C5:20:90:42:37:C2:C2:3B:6F:C1:2C:CD:52:09:33:39:E9:1C:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/baa68c67-2eff-30bf-976e-892fa383dd82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.crl X509v3 Authority Key Identifier: keyid:E0:BC:46:6D:8F:5F:DC:23:84:62:42:1C:22:C8:6C:C1:EE:EB:CB:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer sbgp-ipAddrBlock: critical IPv4: 173.0.96.0/24 173.0.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:a5:4e:ba:df:9a:60:73:44:2a:75:11:1e:3b:41:12:2c:91: 4f:4e:e4:ac:80:e6:c9:85:c7:41:38:c0:d3:4f:b2:e4:85:17: 38:fc:69:fd:ac:92:74:7a:87:bb:f5:9f:35:f5:a0:12:54:d0: bc:dd:b4:cd:8d:25:2f:6e:98:31:53:f8:9a:5d:74:9a:10:2a: fd:2d:c8:a5:9b:83:a8:08:f2:c4:48:42:37:93:e2:f1:74:a9: 2a:b8:26:01:b8:11:8b:4e:eb:23:a6:1e:0e:65:35:c1:c4:6e: 18:3e:4d:38:93:24:ce:76:34:e5:b0:85:60:2b:a0:89:51:33: bf:32:33:9a:c1:04:77:58:2a:7d:d4:ec:e4:c1:2b:da:e5:4f: 68:0d:d1:d6:cd:06:31:55:6c:70:2f:72:1b:2a:46:43:e6:c4: 24:bb:72:77:73:4c:3a:78:63:a9:89:fd:90:11:0b:08:dc:fb: 21:fd:78:68:26:cf:f9:f5:89:96:57:f3:43:54:22:56:7a:33: 19:69:69:2b:07:2f:d9:9a:4c:e2:63:72:b1:90:12:d8:3c:f0: 16:7f:b2:51:3c:e6:7f:44:5c:ae:95:65:e3:f8:28:34:75:39: 51:ad:82:ff:6f:8f:18:3a:d3:f5:76:40:d0:3f:38:28:50:7d: eb:f5:da:e0 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE5K72rOMNtPYAGe3EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWJkOTdlN2EtYzMxZC00MTdhLWJjMDctMWVjZGI5NmJl MDlmMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk MmEyYzA5YTItOWZiNi00MzllLTlmNTgtOGFkOTI4Nzk5NTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzA7zmStqEWIFOiZhc8zc8Qz6vrFiPjpkaS/C fD/0O+KWj30F6bc5X2tcG2DMcDIcfvRM3T0hP7mUhGFekEwq344nOHeLLbl2KjXy ch1r+6rHREYUamr1333j8OrdSLY7AcOqX5lQrJYK2GfWaiFvOPeUV59R+MaWVEYt 9B+WQuPgjs+EhkzLxlUXoiA7Ey04YKxBxXa213lstFs38Yx4ID0cVmsbiW8E9pVC zhyeVz+fFhdeFVFJPL2DnYNhZ8ddivqg4YDvuHNAf0r0suy5Gz3e3j7p4nnTNkvn ZQ86/bjtPLib2Q3RGincSNp745y56IsxGqZFLsa8d5Z/o0rdyQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLXFIJBCN8LCO2/BLM1SCTM56Rx4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xYmQ5 N2U3YS1jMzFkLTQxN2EtYmMwNy0xZWNkYjk2YmUwOWYvYmFhNjhjNjctMmVmZi0z MGJmLTk3NmUtODkyZmEzODNkZDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWJkOTdlN2EtYzMxZC00MTdhLWJj MDctMWVjZGI5NmJlMDlmLzFiZDk3ZTdhLWMzMWQtNDE3YS1iYzA3LTFlY2RiOTZi ZTA5Zi5jcmwwHwYDVR0jBBgwFoAU4LxGbY9f3COEYkIcIshswe7ry44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xYmQ5N2U3YS1jMzFkLTQxN2EtYmMwNy0xZWNk Yjk2YmUwOWYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQArQBgAwQA rQBrMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAG6lTrrfmmBzRCp1ER47QRIskU9O5KyA5smFx0E4wNNPsuSF Fzj8af2sknR6h7v1nzX1oBJU0LzdtM2NJS9umDFT+JpddJoQKv0tyKWbg6gI8sRI QjeT4vF0qSq4JgG4EYtO6yOmHg5lNcHEbhg+TTiTJM52NOWwhWAroIlRM78yM5rB BHdYKn3U7OTBK9rlT2gN0dbNBjFVbHAvchsqRkPmxCS7cndzTDp4Y6mJ/ZARCwjc +yH9eGgmz/n1iZZX80NUIlZ6MxlpaSsHL9maTOJjcrGQEtg88BZ/slE85n9EXK6V ZeP4KDR1OVGtgv9vjxg60/V2QNA/OChQfev12uA= -----END CERTIFICATE-----Generated at Sat Jul 18 02:19:06 2026 by rpki-client