$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/72bbd88d-151d-39cf-9d65-955b5c8b2da0.roa File: 72bbd88d-151d-39cf-9d65-955b5c8b2da0.roa (raw, json) Hash identifier: KJ5cD7QJ0DfOq4JM7KQsRd11+AdrweGOWcZYGfXECPY= Subject key identifier: FD:2E:63:BF:8A:F7:A8:6E:90:58:C5:A4:8F:BC:69:8A:B4:61:60:5F Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584FBAA11F36D3038E23712E8C00 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/72bbd88d-151d-39cf-9d65-955b5c8b2da0.roa Signing time: Wed 04 Nov 2026 14:00:13 +0000 ROA not before: Wed 04 Nov 2026 14:00:13 +0000 ROA not after: Tue 02 Feb 2027 14:00:13 +0000 asID: 33392 IP address blocks: 192.149.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ba:a1:1f:36:d3:03:8e:23:71:2e:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Nov 4 14:00:13 2026 GMT Not After : Feb 2 14:00:13 2027 GMT Subject: CN=455c97f8-eab2-4177-9211-e22b88e821ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d1:4e:d2:b9:71:9c:ba:17:e8:1d:66:ed:b2: 8b:05:a9:5c:02:78:70:1c:0c:c5:5c:4d:94:19:b6: 19:d9:be:66:01:60:e1:f4:92:31:5b:4b:90:24:c2: 14:72:c6:1e:55:a8:12:0b:93:83:b9:9d:e3:c4:f4: de:a5:b1:b8:92:21:49:d2:a8:7d:7f:13:39:cf:a8: 1f:c2:65:11:9f:75:0c:20:9d:ac:71:10:d4:e4:1a: a2:86:52:ca:b3:6e:e3:11:1b:86:34:7e:79:24:db: d1:c6:ee:aa:8c:78:b7:09:09:bd:41:ce:d8:6e:47: b6:72:7d:da:53:18:43:af:47:e7:6d:a9:c4:0f:43: ce:57:59:19:66:cd:7a:57:0c:03:01:27:d4:7f:f4: 6b:5b:11:f1:71:26:78:d1:54:69:98:99:fa:4c:0c: 93:f5:2c:b6:1a:9f:31:6d:70:09:1c:8b:bc:3f:2b: a0:d9:be:37:1b:a1:0b:55:50:7c:73:43:b7:ee:c6: fe:37:3a:4a:ce:9d:36:1f:cc:e9:67:d4:21:89:85: ce:5e:13:9d:04:f4:83:96:2d:a8:7f:8f:1d:a3:94: 04:d2:71:e0:23:30:2f:d1:4c:be:af:54:57:c8:71: f6:7a:3d:13:e2:19:84:a9:9b:83:ce:39:f7:9b:e0: 99:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:2E:63:BF:8A:F7:A8:6E:90:58:C5:A4:8F:BC:69:8A:B4:61:60:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/72bbd88d-151d-39cf-9d65-955b5c8b2da0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 192.149.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:b7:60:ea:d0:01:eb:f0:fc:88:5e:c7:0b:b4:36:4b:2c:b9: 90:04:f2:eb:ab:a3:ed:fe:c8:58:73:29:3b:28:30:73:f5:67: c1:df:cb:fe:d5:f8:a5:19:2e:b5:e0:1e:cf:32:bd:ef:69:32: 5b:37:09:4f:9a:13:c6:c0:d8:c0:76:77:28:7c:f7:0a:31:a7: 79:47:ee:c5:83:b0:33:34:bf:39:8e:d8:f2:80:12:9c:a5:aa: b6:1f:41:f2:a3:20:fc:e0:d4:d3:f1:44:da:21:a4:f2:bd:8b: e9:b9:77:b0:08:65:b8:5c:5c:2b:d4:67:e2:b3:03:d4:42:c3: 02:df:59:88:29:6a:80:91:0e:11:d6:cf:d6:e0:fe:14:09:d4: 29:7e:cb:cf:a7:5c:41:09:08:49:5f:54:11:0c:e0:84:2f:79: 1a:f1:4a:74:ec:37:02:f9:07:50:e9:bf:48:02:d5:c5:73:c7: 7d:e5:24:6c:46:cf:23:87:7f:a2:e7:1c:29:3b:59:50:85:71: 6d:90:b2:84:9d:aa:c7:c3:a3:68:2b:fb:cb:b8:0b:50:b3:02: 78:30:22:73:59:a1:a8:54:40:26:05:e9:4b:d1:49:a1:86:42: 35:18:b0:79:3f:01:82:fb:1b:1d:d1:33:a8:0b:6a:08:07:15: 48:95:ab:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+6oR820wOOI3EujAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI2MTEwNDE0MDAxM1oXDTI3MDIwMjE0MDAxM1owLzEtMCsGA1UEAxMk NDU1Yzk3ZjgtZWFiMi00MTc3LTkyMTEtZTIyYjg4ZTgyMWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNFO0rlxnLoX6B1m7bKLBalcAnhwHAzFXE2U GbYZ2b5mAWDh9JIxW0uQJMIUcsYeVagSC5ODuZ3jxPTepbG4kiFJ0qh9fxM5z6gf wmURn3UMIJ2scRDU5BqihlLKs27jERuGNH55JNvRxu6qjHi3CQm9Qc7Ybke2cn3a UxhDr0fnbanED0POV1kZZs16VwwDASfUf/RrWxHxcSZ40VRpmJn6TAyT9Sy2Gp8x bXAJHIu8Pyug2b43G6ELVVB8c0O37sb+NzpKzp02H8zpZ9QhiYXOXhOdBPSDli2o f48do5QE0nHgIzAv0Uy+r1RXyHH2ej0T4hmEqZuDzjn3m+CZdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0uY7+K96hukFjFpI+8aYq0YWBfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvNzJiYmQ4OGQtMTUxZC0z OWNmLTlkNjUtOTU1YjVjOGIyZGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJUvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH63YOrQAevw/Ihexwu0NkssuZAE8uuro+3+yFhzKTsoMHP1Z8Hfy/7V +KUZLrXgHs8yve9pMls3CU+aE8bA2MB2dyh89woxp3lH7sWDsDM0vzmO2PKAEpyl qrYfQfKjIPzg1NPxRNohpPK9i+m5d7AIZbhcXCvUZ+KzA9RCwwLfWYgpaoCRDhHW z9bg/hQJ1Cl+y8+nXEEJCElfVBEM4IQveRrxSnTsNwL5B1Dpv0gC1cVzx33lJGxG zyOHf6LnHCk7WVCFcW2QsoSdqsfDo2gr+8u4C1CzAngwInNZoahUQCYF6UvRSaGG QjUYsHk/AYL7Gx3RM6gLaggHFUiVq1k= -----END CERTIFICATE-----Generated at Sun Nov 15 13:26:00 2026 by rpki-client