$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/0987dcfd-f8fa-3254-8afc-0968ccd1701b.roa File: 0987dcfd-f8fa-3254-8afc-0968ccd1701b.roa (raw, json) Hash identifier: ZFY0jVl7naB5+kMQ1IwMDg7qhFxcYzsGWJ/X+9uoxDY= Subject key identifier: 44:BC:FA:97:E5:A2:21:7A:E7:72:08:D6:18:D0:32:76:7B:76:06:21 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584F1897A64EA162931DF2F40678 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/0987dcfd-f8fa-3254-8afc-0968ccd1701b.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 33392 IP address blocks: 208.103.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:a6:4e:a1:62:93:1d:f2:f4:06:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=3abf1a39-0476-4df6-afab-5f904dd01148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8b:b3:40:2f:ea:0e:16:80:a6:7c:69:52:bd: 50:7f:06:88:be:89:aa:80:ea:a3:43:db:f8:ba:82: 62:a6:6a:42:13:35:94:32:d6:49:65:a0:d3:8a:c3: 9d:3a:7d:5d:c9:9d:19:5a:1c:60:67:e5:23:ea:de: a3:04:9e:de:9a:70:ab:77:a2:eb:02:b2:dc:2d:2c: 86:5b:d3:e0:13:3c:00:83:1a:74:b0:2e:05:b5:b7: 91:49:0e:f0:7e:7a:b9:4d:c8:07:bc:b2:15:88:3f: 8d:07:79:16:3a:cb:69:d0:a8:22:21:f2:b8:54:93: 82:a8:08:a4:32:05:86:8e:04:1a:db:6b:f7:26:7c: 13:52:4d:1c:0c:34:08:69:e6:98:d5:1d:e9:99:9c: 51:7f:fb:f7:a8:c3:02:8a:76:b0:bc:13:70:80:10: 76:99:24:5d:a1:1a:ab:17:b8:ad:14:07:44:31:87: 58:4f:1b:60:da:3c:98:56:da:7c:67:2e:83:b5:12: 43:f7:28:df:67:fa:bd:2d:15:f0:5b:06:a6:2b:71: aa:05:b4:64:e5:23:08:6d:9e:f5:f7:c3:d2:32:be: 01:34:0b:46:0b:07:7f:4e:89:48:03:e4:69:f1:03: 74:be:7c:6a:2a:28:b3:68:e2:11:8c:5c:93:aa:b0: 1d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:BC:FA:97:E5:A2:21:7A:E7:72:08:D6:18:D0:32:76:7B:76:06:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/0987dcfd-f8fa-3254-8afc-0968ccd1701b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 208.103.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:93:90:bd:a0:17:10:af:f5:5d:26:75:2d:0e:24:c6:8a:3b: d6:ba:ba:9b:a3:fa:81:b3:ef:7f:f9:af:4f:b8:55:4f:7e:c7: 74:24:31:d1:56:de:cb:a6:c6:2f:72:a6:94:39:8f:ac:48:03: d8:83:55:6a:ae:92:63:41:db:4d:be:9b:58:83:6b:91:a2:56: 24:e0:24:a6:89:56:c5:ba:64:61:c0:0c:2d:2d:ed:76:f6:72: c8:a3:f1:de:a1:68:56:00:a2:2a:ec:a1:83:68:53:fa:98:dc: 31:f3:d2:b8:34:be:b7:c7:22:f9:d5:e4:55:e9:ef:1a:52:32: a7:b7:04:2d:dc:9d:c5:77:e0:d3:a5:06:22:28:71:66:6d:e8: 14:89:94:70:a0:50:96:41:7e:e7:2c:2e:91:dd:91:87:30:b7: 31:c5:20:75:9e:df:ce:b0:57:47:c3:a6:6d:42:3c:61:b9:01: c2:f4:07:d6:30:65:f9:71:f0:af:df:f9:2a:25:33:c1:c1:e2: a2:e4:e3:fe:f8:67:34:ce:57:7f:a1:e6:f6:ff:d1:5f:30:43: 19:3f:41:f8:36:65:a0:04:55:c7:07:03:38:e2:af:51:4a:83: f4:f9:4e:1b:6f:e8:89:e3:bc:98:fb:56:32:c4:a1:28:ba:0f: 56:73:67:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl6ZOoWKTHfL0BngwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk M2FiZjFhMzktMDQ3Ni00ZGY2LWFmYWItNWY5MDRkZDAxMTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApouzQC/qDhaApnxpUr1QfwaIvomqgOqjQ9v4 uoJipmpCEzWUMtZJZaDTisOdOn1dyZ0ZWhxgZ+Uj6t6jBJ7emnCrd6LrArLcLSyG W9PgEzwAgxp0sC4FtbeRSQ7wfnq5TcgHvLIViD+NB3kWOstp0KgiIfK4VJOCqAik MgWGjgQa22v3JnwTUk0cDDQIaeaY1R3pmZxRf/v3qMMCinawvBNwgBB2mSRdoRqr F7itFAdEMYdYTxtg2jyYVtp8Zy6DtRJD9yjfZ/q9LRXwWwamK3GqBbRk5SMIbZ71 98PSMr4BNAtGCwd/TolIA+Rp8QN0vnxqKiizaOIRjFyTqrAdGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFES8+pfloiF653II1hjQMnZ7dgYhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvMDk4N2RjZmQtZjhmYS0z MjU0LThhZmMtMDk2OGNjZDE3MDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0GeUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKTkL2gFxCv9V0mdS0OJMaKO9a6upuj+oGz73/5r0+4VU9+x3QkMdFW 3sumxi9yppQ5j6xIA9iDVWqukmNB202+m1iDa5GiViTgJKaJVsW6ZGHADC0t7Xb2 csij8d6haFYAoirsoYNoU/qY3DHz0rg0vrfHIvnV5FXp7xpSMqe3BC3cncV34NOl BiIocWZt6BSJlHCgUJZBfucsLpHdkYcwtzHFIHWe386wV0fDpm1CPGG5AcL0B9Yw Zflx8K/f+SolM8HB4qLk4/74ZzTOV3+h5vb/0V8wQxk/Qfg2ZaAEVccHAzjir1FK g/T5Thtv6InjvJj7VjLEoSi6D1ZzZ0Y= -----END CERTIFICATE-----Generated at Sat Sep 26 07:19:44 2026 by rpki-client