$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/d9adc3c9-9f0c-3314-b2aa-0f1b44c205e1.roa File: d9adc3c9-9f0c-3314-b2aa-0f1b44c205e1.roa (raw, json) Hash identifier: BAg6KgY0Nxj4nWAJz4S6w5JgkCLvLR63Q4kfk8NuVA8= Subject key identifier: 41:F5:D7:FA:97:2F:B5:97:39:9F:7A:A2:91:01:9F:A7:A6:C4:B9:3A Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584AF52146C5151D8B6BD7C0E980 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/d9adc3c9-9f0c-3314-b2aa-0f1b44c205e1.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 33392 IP address blocks: 192.149.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:46:c5:15:1d:8b:6b:d7:c0:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=b8d1214b-b3f5-42fb-89f3-75350b3a97bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:10:72:ae:e2:7f:ce:b8:bc:80:95:3f:39:da: 71:1b:1f:8d:48:94:fc:c5:88:cd:1a:d7:0c:48:0c: 3d:76:46:78:ca:da:a5:8e:e7:c3:27:37:8c:0e:b5: a7:a8:7b:97:c1:16:f3:9c:11:7e:59:46:2d:34:68: f3:bd:c7:72:e0:34:d4:b9:a2:94:43:fc:76:23:1e: f2:39:50:5e:a4:cc:e2:37:94:51:1d:52:6c:f1:d0: 01:9d:87:73:99:de:77:81:45:ce:9c:26:d0:3e:76: 25:84:55:2a:4e:63:61:5a:c5:1a:77:48:24:d5:b3: 73:69:cd:ee:f8:2e:b4:9c:44:cf:59:3e:5b:02:63: 9d:a6:d7:c7:48:bb:f8:48:25:1c:91:9b:62:2d:d3: ae:b4:4f:08:a3:a2:ae:41:e0:af:84:50:8d:7a:2d: 58:7e:00:4f:81:18:71:0b:80:8c:d5:12:ed:f5:a2: b9:c8:17:0f:60:9c:e6:ff:5f:70:23:14:22:7d:83: 84:0f:cd:a3:d2:73:e1:f5:70:a2:4d:5d:83:da:01: d8:fd:a3:31:9d:66:35:ad:fc:89:7f:fd:72:43:bb: d7:1d:16:7b:f3:3c:00:80:b7:0f:59:e3:c8:c3:1a: f8:35:dc:fd:ad:8b:f6:34:2d:c5:7b:ec:b1:61:83: a2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F5:D7:FA:97:2F:B5:97:39:9F:7A:A2:91:01:9F:A7:A6:C4:B9:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/d9adc3c9-9f0c-3314-b2aa-0f1b44c205e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 192.149.44.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:28:cf:79:a9:11:a4:2d:88:42:d8:12:52:e3:38:8e:b0:9e: 7e:60:17:0f:07:10:bf:2a:92:1b:b4:0b:cf:e1:71:73:f5:f9: 93:9b:35:b6:74:ce:ea:97:03:95:2c:83:f9:fc:77:6b:e1:f2: ec:17:11:24:80:5b:9e:8f:78:ef:f6:98:44:6b:d7:92:8a:e9: eb:23:d5:04:2d:3e:02:bc:62:57:5e:03:c3:8d:1e:b7:10:4b: 58:9d:60:18:66:d6:22:37:5d:df:5c:fd:4a:f3:d7:af:b4:34: cb:07:fd:7c:94:bf:ed:a3:1c:66:29:84:ec:0b:65:2e:1c:a5: 94:b3:a0:20:18:50:5a:70:49:df:f4:44:03:4b:09:f7:67:9f: 26:eb:40:34:04:91:2a:c0:14:fb:14:70:83:cf:60:38:82:0f: 81:ea:1d:1a:ea:b2:a4:77:09:2d:e0:2e:d0:42:7a:54:25:3e: 7c:80:10:53:4d:92:02:5d:db:94:03:60:44:9c:da:e9:41:3c: 9b:0c:76:75:c2:90:73:e9:c7:87:0e:a0:e6:8c:06:b3:07:77: 6d:20:72:85:4b:fa:cb:1a:83:74:b6:ed:33:96:10:5c:01:3d: af:21:ec:f9:c3:e0:5a:34:05:55:2c:44:a5:b1:b3:9d:fd:a2: b6:05:30:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IUbFFR2La9fA6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk YjhkMTIxNGItYjNmNS00MmZiLTg5ZjMtNzUzNTBiM2E5N2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxByruJ/zri8gJU/OdpxGx+NSJT8xYjNGtcM SAw9dkZ4ytqljufDJzeMDrWnqHuXwRbznBF+WUYtNGjzvcdy4DTUuaKUQ/x2Ix7y OVBepMziN5RRHVJs8dABnYdzmd53gUXOnCbQPnYlhFUqTmNhWsUad0gk1bNzac3u +C60nETPWT5bAmOdptfHSLv4SCUckZtiLdOutE8Io6KuQeCvhFCNei1YfgBPgRhx C4CM1RLt9aK5yBcPYJzm/19wIxQifYOED82j0nPh9XCiTV2D2gHY/aMxnWY1rfyJ f/1yQ7vXHRZ78zwAgLcPWePIwxr4Ndz9rYv2NC3Fe+yxYYOibQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEH11/qXL7WXOZ96opEBn6emxLk6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvZDlhZGMzYzktOWYwYy0z MzE0LWIyYWEtMGYxYjQ0YzIwNWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwJUsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYoz3mpEaQtiELYElLjOI6wnn5gFw8HEL8qkhu0C8/hcXP1+ZObNbZ0 zuqXA5Usg/n8d2vh8uwXESSAW56PeO/2mERr15KK6esj1QQtPgK8YldeA8ONHrcQ S1idYBhm1iI3Xd9c/Urz16+0NMsH/XyUv+2jHGYphOwLZS4cpZSzoCAYUFpwSd/0 RANLCfdnnybrQDQEkSrAFPsUcIPPYDiCD4HqHRrqsqR3CS3gLtBCelQlPnyAEFNN kgJd25QDYESc2ulBPJsMdnXCkHPpx4cOoOaMBrMHd20gcoVL+ssag3S27TOWEFwB Pa8h7PnD4Fo0BVUsRKWxs539orYFMH4= -----END CERTIFICATE-----Generated at Sun Aug 24 02:52:48 2025 by rpki-client