$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/a1b1d79c-ab46-35ce-8c97-2053ed447262.roa File: a1b1d79c-ab46-35ce-8c97-2053ed447262.roa (raw, json) Hash identifier: yU38PocxeTycCtsuni2bMyqymAYWgDRsRYmoM4p5W3s= Subject key identifier: 19:15:1D:89:E9:DF:DC:73:57:4C:24:E1:58:D4:5A:B6:53:D2:0F:8C Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584D95F0038A3801D1EC6F79EA00 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/a1b1d79c-ab46-35ce-8c97-2053ed447262.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 36511 IP address blocks: 192.149.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:03:8a:38:01:d1:ec:6f:79:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=9c3b4e24-23ad-4c61-960f-33fe9c343d81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:63:fc:1c:2b:b3:c7:aa:3c:93:94:44:7b:1d: c2:f4:73:03:cf:84:c1:71:6b:d3:a5:e1:6f:19:40: 71:98:7b:e1:11:db:cf:19:9e:78:c9:0b:28:3f:91: 36:4d:0e:a7:cf:dc:12:02:4b:96:a5:bb:e2:ba:46: 40:e7:b2:fe:f4:40:44:50:4f:7a:a4:ec:ef:0b:db: 96:c7:e5:3e:3e:7a:d8:fb:50:80:e6:55:19:5b:60: 5c:9a:d8:57:9b:86:22:61:c8:fc:9b:dc:99:04:1c: 86:11:26:1c:30:6e:b1:e9:f8:41:4a:4c:b9:d2:3c: c5:25:15:d3:c8:80:da:5d:c9:25:31:ff:15:f3:75: 7b:bb:5f:04:0f:35:d1:8f:e8:da:88:5e:6c:94:cd: c1:b6:3d:c8:db:5f:8d:ea:b9:ae:24:35:31:99:9c: 92:9e:85:75:8b:e7:da:8f:f2:cc:d8:d9:1e:20:3e: 89:ae:40:78:ef:7a:fd:b7:cf:e2:48:28:34:d2:bc: 4f:3e:50:3b:a7:ef:49:b7:f2:7d:46:3a:96:14:02: 85:98:91:00:07:bf:5c:de:f0:1f:50:0c:1d:b6:26: 53:fe:2b:ab:ec:5c:3f:9f:c0:42:ea:91:85:31:e9: e8:25:99:6c:59:94:da:d8:5a:0c:1c:8d:ff:21:4a: 42:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:15:1D:89:E9:DF:DC:73:57:4C:24:E1:58:D4:5A:B6:53:D2:0F:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/a1b1d79c-ab46-35ce-8c97-2053ed447262.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 192.149.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:1b:7f:9c:3d:fc:74:f5:24:3a:5e:09:1f:9a:4f:23:3f:4b: 5b:60:9d:eb:c8:58:4f:0d:e7:21:25:1d:98:bd:f2:11:8c:7c: 75:d3:3b:11:82:ab:c0:92:80:23:33:3a:5e:93:8d:2f:b9:2d: 2a:e2:c5:77:0b:1a:49:35:02:3f:02:6b:3e:1b:83:f4:c4:61: 9c:bd:d5:de:8f:a4:05:f3:ab:76:dc:01:ce:ff:9c:a5:a6:19: 63:14:2e:d1:1f:c3:18:22:c6:65:3a:9b:d7:e9:8e:8d:17:c4: ba:c7:1d:a5:56:6f:66:36:f0:dd:60:69:b4:37:dd:62:1a:51: 53:c3:7f:c5:d5:7d:20:68:5c:30:74:99:44:b6:78:88:db:02: 12:6a:a2:58:63:a2:3c:21:03:46:d1:33:6f:c6:60:f8:f9:63: 0d:c4:e9:6a:37:1f:32:4d:03:2a:94:27:c6:dd:d5:68:51:54: 33:5f:6d:7e:bd:9a:dd:58:ea:5e:63:7e:70:8e:7b:8d:e9:c3: 71:fd:7d:b3:7c:f1:ea:36:5c:b8:a5:c7:46:70:54:98:95:28: 04:01:86:9c:09:49:03:15:64:0d:5b:c9:05:f2:81:78:73:a3: ab:46:d4:c6:2f:a0:f0:84:f8:61:23:fa:06:39:58:e1:2c:4a: 9e:21:5e:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V8AOKOAHR7G956gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk OWMzYjRlMjQtMjNhZC00YzYxLTk2MGYtMzNmZTljMzQzZDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2P8HCuzx6o8k5REex3C9HMDz4TBcWvTpeFv GUBxmHvhEdvPGZ54yQsoP5E2TQ6nz9wSAkuWpbviukZA57L+9EBEUE96pOzvC9uW x+U+PnrY+1CA5lUZW2BcmthXm4YiYcj8m9yZBByGESYcMG6x6fhBSky50jzFJRXT yIDaXcklMf8V83V7u18EDzXRj+jaiF5slM3Btj3I21+N6rmuJDUxmZySnoV1i+fa j/LM2NkeID6JrkB473r9t8/iSCg00rxPPlA7p+9Jt/J9RjqWFAKFmJEAB79c3vAf UAwdtiZT/iur7Fw/n8BC6pGFMenoJZlsWZTa2FoMHI3/IUpCzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkVHYnp39xzV0wk4VjUWrZT0g+MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvYTFiMWQ3OWMtYWI0Ni0z NWNlLThjOTctMjA1M2VkNDQ3MjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJUuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4bf5w9/HT1JDpeCR+aTyM/S1tgnevIWE8N5yElHZi98hGMfHXTOxGC q8CSgCMzOl6TjS+5LSrixXcLGkk1Aj8Caz4bg/TEYZy91d6PpAXzq3bcAc7/nKWm GWMULtEfwxgixmU6m9fpjo0XxLrHHaVWb2Y28N1gabQ33WIaUVPDf8XVfSBoXDB0 mUS2eIjbAhJqolhjojwhA0bRM2/GYPj5Yw3E6Wo3HzJNAyqUJ8bd1WhRVDNfbX69 mt1Y6l5jfnCOe43pw3H9fbN88eo2XLilx0ZwVJiVKAQBhpwJSQMVZA1byQXygXhz o6tG1MYvoPCE+GEj+gY5WOEsSp4hXhQ= -----END CERTIFICATE-----Generated at Wed May 13 08:20:06 2026 by rpki-client