$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/2a622dab-3a0e-3d38-8261-020cde7acaa2.roa File: 2a622dab-3a0e-3d38-8261-020cde7acaa2.roa (raw, json) Hash identifier: LORLsvq0LlAZRz/qmv4ZrnpPi/PTh335yCoaHkfvsdI= Subject key identifier: 81:73:6E:1B:4B:77:94:1D:71:0B:FB:23:CB:D7:92:B2:74:CD:E7:02 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584FBAA11F1C43EA1F2AE072FE00 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/2a622dab-3a0e-3d38-8261-020cde7acaa2.roa Signing time: Wed 04 Nov 2026 14:00:13 +0000 ROA not before: Wed 04 Nov 2026 14:00:13 +0000 ROA not after: Tue 02 Feb 2027 14:00:13 +0000 asID: 33392 IP address blocks: 192.149.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ba:a1:1f:1c:43:ea:1f:2a:e0:72:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Nov 4 14:00:13 2026 GMT Not After : Feb 2 14:00:13 2027 GMT Subject: CN=f4614991-17b5-45ad-9146-2d77d82bd322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d4:bc:9c:9f:4d:9a:6c:b1:3c:5b:4d:1b:4c: 42:61:0c:19:d5:bd:1a:47:f9:ab:6a:c4:4a:a6:ca: d6:9a:64:3b:57:c2:88:11:e1:40:1d:a2:95:58:ab: 47:43:ae:80:f2:9a:83:33:9c:e5:d1:f6:95:ff:c9: ae:fb:6b:a8:38:0b:fb:1a:23:be:c3:e0:57:3c:fa: fa:a1:de:73:4d:ce:14:3b:81:3e:8e:a2:db:76:92: 10:52:df:00:d6:dc:01:32:9b:15:bb:af:bc:a9:9d: dd:f9:d3:cb:53:02:62:e4:38:0c:0f:29:c7:b4:5e: a5:50:2c:c9:1d:aa:6d:5d:f0:62:90:b8:20:16:8f: 1a:e7:d1:2a:ec:fc:d5:da:95:ee:67:3f:97:e1:ab: 73:44:d7:ca:84:9e:30:46:34:45:f7:3a:89:d0:6b: 1a:20:95:1f:56:4d:25:7a:5e:31:32:d3:55:1b:e7: 23:cf:2c:10:4e:1e:7a:c8:6e:21:7b:58:5c:4d:0c: fc:dd:39:68:15:55:1c:6a:eb:52:8b:8f:4d:43:dc: 3c:47:2e:c2:1f:91:2e:5e:56:77:f6:66:4e:36:a9: 94:91:44:ce:96:c7:a3:91:d3:29:f9:a5:bb:0e:51: 3e:90:10:38:55:95:6a:ce:7c:32:8d:43:26:da:8f: 25:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:73:6E:1B:4B:77:94:1D:71:0B:FB:23:CB:D7:92:B2:74:CD:E7:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/2a622dab-3a0e-3d38-8261-020cde7acaa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 192.149.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:74:4c:55:1f:4f:b4:be:cb:0c:e2:71:c1:b4:fe:a4:6b:4d: d7:56:0d:c1:6e:7f:72:92:20:61:09:76:fb:7e:54:00:5d:a6: 22:7a:39:83:ad:36:56:14:4d:a4:45:10:80:c0:a1:2e:2c:64: e5:aa:92:e3:e8:cd:03:f4:82:15:35:aa:b0:36:cc:84:99:eb: 99:69:95:86:24:7f:18:c1:1f:c2:87:ce:b0:b4:85:2b:1a:d6: 10:a2:bc:06:d3:b3:36:22:1b:40:3a:b9:cc:14:5d:78:3f:d5: c5:6a:af:bd:bb:6e:8d:e1:76:47:b5:62:f9:b5:a2:a2:95:26: f9:45:5a:39:47:9d:4e:98:04:16:b2:74:01:6e:c8:80:89:c0: 1c:4f:96:c5:33:a8:3b:a9:1d:46:30:0a:24:94:35:2d:0d:c0: 5f:ac:41:69:f5:f7:15:f1:d9:e6:7a:af:e1:21:15:7f:7e:d3: 7c:f4:bd:57:6a:8d:02:bb:e7:a5:15:06:b0:d6:86:b3:49:ee: 2a:c3:f0:15:a0:73:8c:bc:55:14:0b:64:8c:79:d0:a2:05:79: 04:02:f6:5d:bf:66:5c:34:b5:fb:45:74:a6:13:67:0d:c9:29: 1a:92:e8:88:29:fe:99:be:34:05:60:d1:b4:2f:66:34:5c:b5: d5:1b:cc:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+6oR8cQ+ofKuBy/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI2MTEwNDE0MDAxM1oXDTI3MDIwMjE0MDAxM1owLzEtMCsGA1UEAxMk ZjQ2MTQ5OTEtMTdiNS00NWFkLTkxNDYtMmQ3N2Q4MmJkMzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNS8nJ9NmmyxPFtNG0xCYQwZ1b0aR/mrasRK psrWmmQ7V8KIEeFAHaKVWKtHQ66A8pqDM5zl0faV/8mu+2uoOAv7GiO+w+BXPPr6 od5zTc4UO4E+jqLbdpIQUt8A1twBMpsVu6+8qZ3d+dPLUwJi5DgMDynHtF6lUCzJ HaptXfBikLggFo8a59Eq7PzV2pXuZz+X4atzRNfKhJ4wRjRF9zqJ0GsaIJUfVk0l el4xMtNVG+cjzywQTh56yG4he1hcTQz83TloFVUcautSi49NQ9w8Ry7CH5EuXlZ3 9mZONqmUkUTOlsejkdMp+aW7DlE+kBA4VZVqznwyjUMm2o8lLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIFzbhtLd5QdcQv7I8vXkrJ0zecCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvMmE2MjJkYWItM2EwZS0z ZDM4LTgyNjEtMDIwY2RlN2FjYWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJUuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJB0TFUfT7S+ywziccG0/qRrTddWDcFuf3KSIGEJdvt+VABdpiJ6OYOt NlYUTaRFEIDAoS4sZOWqkuPozQP0ghU1qrA2zISZ65lplYYkfxjBH8KHzrC0hSsa 1hCivAbTszYiG0A6ucwUXXg/1cVqr727bo3hdke1Yvm1oqKVJvlFWjlHnU6YBBay dAFuyICJwBxPlsUzqDupHUYwCiSUNS0NwF+sQWn19xXx2eZ6r+EhFX9+03z0vVdq jQK756UVBrDWhrNJ7irD8BWgc4y8VRQLZIx50KIFeQQC9l2/Zlw0tftFdKYTZw3J KRqS6Igp/pm+NAVg0bQvZjRctdUbzPA= -----END CERTIFICATE-----Generated at Sun Nov 15 17:41:36 2026 by rpki-client