$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/29cf5bff-91e4-3cf7-ad96-22dc1c2fcf34.roa File: 29cf5bff-91e4-3cf7-ad96-22dc1c2fcf34.roa (raw, json) Hash identifier: lLKzhwhBKpSIud7aciJQ9ruDKKcnCdKMj5yvRfHt2d4= Subject key identifier: 4C:F3:35:22:6D:E3:BD:09:31:55:2E:B1:6C:81:CC:87:4D:43:10:40 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584FC5CBD3A3507F8485CB1F77C0 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/29cf5bff-91e4-3cf7-ad96-22dc1c2fcf34.roa Signing time: Sun 08 Nov 2026 14:00:12 +0000 ROA not before: Sun 08 Nov 2026 14:00:12 +0000 ROA not after: Sat 06 Feb 2027 14:00:12 +0000 asID: 33392 IP address blocks: 137.83.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c5:cb:d3:a3:50:7f:84:85:cb:1f:77:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Nov 8 14:00:12 2026 GMT Not After : Feb 6 14:00:12 2027 GMT Subject: CN=a99d81eb-d21b-4373-8193-b02d575e7e2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3b:fa:4d:f0:39:dd:76:11:e8:0a:75:5d:6e: d1:be:41:80:29:c1:c7:1f:dd:f4:ba:19:6f:32:69: c7:03:07:ef:42:ff:42:d7:6b:4d:1d:c8:be:8c:2d: 7a:a8:e0:d0:ac:11:68:0a:18:51:e4:e3:51:0d:f7: 8f:29:ca:f6:b2:cc:21:10:ad:c1:4d:22:e9:9b:c1: d0:64:88:a1:cf:63:8f:a1:62:24:a6:6d:fd:5a:48: c8:58:5a:6e:df:b7:95:7e:95:6a:d7:05:da:2b:63: 07:d0:1b:44:47:47:cd:2c:b8:f4:bc:9c:8c:47:c3: a0:73:6d:8b:c7:46:b0:30:f8:6b:20:ba:8d:8b:8a: b9:b6:1b:d1:46:38:60:8b:fb:96:0e:98:5b:94:aa: 95:52:62:78:87:aa:7c:db:cd:7a:6a:22:1a:2b:f0: 27:b3:1d:ea:99:9c:0d:1f:c4:91:5c:40:46:50:85: 59:23:b8:60:f2:9c:e3:4c:15:66:29:b2:de:23:03: dc:31:50:c4:a0:f6:ab:f3:f2:97:22:4e:6d:b4:d9: 84:40:0e:46:5b:ca:c3:a1:ea:90:5f:48:f8:32:a5: cf:87:6f:a4:94:bb:95:c8:57:71:3e:b1:72:35:a6: 08:a7:1d:5a:44:84:05:d2:d0:1d:39:be:f1:be:a9: ca:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F3:35:22:6D:E3:BD:09:31:55:2E:B1:6C:81:CC:87:4D:43:10:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/29cf5bff-91e4-3cf7-ad96-22dc1c2fcf34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 137.83.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:10:3a:36:db:d0:c1:ab:f2:35:63:ee:75:99:34:0f:bd:75: 62:a5:52:5c:ea:42:7f:49:45:ee:42:79:32:3c:6e:d1:2a:c4: c7:a3:5b:2a:a7:1a:7c:38:db:b4:fe:d2:82:b5:8f:87:01:e5: f7:64:16:e2:ee:00:6b:6f:66:a8:57:21:3c:e4:67:ed:a8:3f: ba:33:6d:f3:61:90:c7:a2:91:2c:6c:e8:bb:bb:f8:84:a6:25: d0:6b:d3:c3:95:2b:db:3c:98:df:ef:01:28:a9:1d:5a:61:3d: d9:65:df:4f:82:a6:90:eb:14:dd:3c:83:1a:17:3b:74:95:bd: 07:fe:a2:10:2f:61:35:fb:fd:fa:5d:a1:67:b0:54:b3:bf:60: 4d:84:0a:14:7c:4d:86:2c:00:e9:c2:95:9d:53:2b:7a:e0:37: c4:44:79:a8:93:b5:72:f0:92:29:f2:a3:6c:3e:fe:fd:df:2d: 76:50:fb:34:7d:78:eb:bb:2a:7f:fc:fc:a4:5c:0a:25:ee:4c: c4:9e:7a:79:6b:05:e6:78:a7:bc:29:0c:41:12:0b:8d:58:77: 60:41:4d:c2:58:5a:d1:a3:64:84:f0:ae:00:41:2b:fe:a0:ba: 4c:64:6e:8b:aa:06:3f:f3:00:1e:23:8b:fa:18:37:af:66:ab: 8d:5d:aa:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/Fy9OjUH+Ehcsfd8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI2MTEwODE0MDAxMloXDTI3MDIwNjE0MDAxMlowLzEtMCsGA1UEAxMk YTk5ZDgxZWItZDIxYi00MzczLTgxOTMtYjAyZDU3NWU3ZTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzv6TfA53XYR6Ap1XW7RvkGAKcHHH930uhlv MmnHAwfvQv9C12tNHci+jC16qODQrBFoChhR5ONRDfePKcr2sswhEK3BTSLpm8HQ ZIihz2OPoWIkpm39WkjIWFpu37eVfpVq1wXaK2MH0BtER0fNLLj0vJyMR8Ogc22L x0awMPhrILqNi4q5thvRRjhgi/uWDphblKqVUmJ4h6p82816aiIaK/Ansx3qmZwN H8SRXEBGUIVZI7hg8pzjTBVmKbLeIwPcMVDEoPar8/KXIk5ttNmEQA5GW8rDoeqQ X0j4MqXPh2+klLuVyFdxPrFyNaYIpx1aRIQF0tAdOb7xvqnKCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEzzNSJt470JMVUusWyBzIdNQxBAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvMjljZjViZmYtOTFlNC0z Y2Y3LWFkOTYtMjJkYzFjMmZjZjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiVNmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEQOjbb0MGr8jVj7nWZNA+9dWKlUlzqQn9JRe5CeTI8btEqxMejWyqn Gnw427T+0oK1j4cB5fdkFuLuAGtvZqhXITzkZ+2oP7ozbfNhkMeikSxs6Lu7+ISm JdBr08OVK9s8mN/vASipHVphPdll30+CppDrFN08gxoXO3SVvQf+ohAvYTX7/fpd oWewVLO/YE2EChR8TYYsAOnClZ1TK3rgN8REeaiTtXLwkinyo2w+/v3fLXZQ+zR9 eOu7Kn/8/KRcCiXuTMSeenlrBeZ4p7wpDEESC41Yd2BBTcJYWtGjZITwrgBBK/6g ukxkbouqBj/zAB4ji/oYN69mq41dquc= -----END CERTIFICATE-----Generated at Sun Nov 15 18:09:01 2026 by rpki-client