$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/db7ea2c9-a7e1-3bc0-b383-2006c725b890.roa File: db7ea2c9-a7e1-3bc0-b383-2006c725b890.roa (raw, json) Hash identifier: N96CK3avhHKDJyCDmOe2g7kOGz3bz50eDw54pPwItFE= Subject key identifier: 35:7B:9D:B7:7D:18:8D:DF:06:91:4D:D0:94:F0:59:CF:22:C9:39:13 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584FBAA11EF6D24602D9C3B44FF8 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/db7ea2c9-a7e1-3bc0-b383-2006c725b890.roa Signing time: Wed 04 Nov 2026 14:00:13 +0000 ROA not before: Wed 04 Nov 2026 14:00:13 +0000 ROA not after: Tue 02 Feb 2027 14:00:13 +0000 asID: 36511 IP address blocks: 192.149.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ba:a1:1e:f6:d2:46:02:d9:c3:b4:4f:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Nov 4 14:00:13 2026 GMT Not After : Feb 2 14:00:13 2027 GMT Subject: CN=efabe5d9-4010-4da9-bcc4-70d6162af72e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:97:31:17:75:f0:9f:59:44:31:79:96:43:e5: 80:39:26:c3:17:d2:13:2d:02:02:26:2f:f8:0a:c6: 59:fd:17:47:8d:d4:0d:f0:40:de:fb:8a:e0:ca:fe: 8a:39:ff:cd:6b:8d:3b:0b:1b:9b:ce:37:15:e2:5f: 22:8f:b3:b3:d0:80:9e:bf:9d:f8:06:2c:b6:00:f3: 83:38:88:46:0c:92:e0:d9:04:03:74:d4:37:0c:0c: 24:de:a1:21:c0:77:6d:3b:3e:53:dd:0a:a9:4e:29: d6:f2:df:9b:e9:d5:71:0f:f5:79:e2:54:60:d6:09: 8a:25:7c:56:81:d2:77:c2:3e:ed:cf:6a:e6:3a:19: b1:cb:31:60:dd:99:0b:ce:c1:b5:24:e4:f5:96:13: 84:23:7b:68:5a:dc:e4:f4:11:df:ec:67:65:25:dc: 72:ca:44:d6:06:cf:e5:4f:4d:79:23:40:5d:22:bc: 6a:2d:65:dd:23:61:6b:62:67:7c:2b:53:68:ae:a1: 02:d3:18:96:81:10:b3:97:85:2f:a6:8d:93:ba:af: f1:23:62:88:11:7a:c4:c4:ca:b4:22:dd:02:d0:e2: 54:63:1e:bd:33:7c:89:40:43:cf:01:a8:00:6f:c1: 49:8e:df:f8:7d:b4:a7:e7:a6:df:13:a5:44:08:5b: fa:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:7B:9D:B7:7D:18:8D:DF:06:91:4D:D0:94:F0:59:CF:22:C9:39:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/db7ea2c9-a7e1-3bc0-b383-2006c725b890.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 192.149.44.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:41:b7:a7:8a:a0:02:06:72:77:dd:70:dd:a5:ea:bb:7b:ff: 10:2c:da:8c:6e:23:d8:bf:94:0c:52:b1:dd:8f:e4:9e:c3:67: bd:ec:d0:71:46:3d:66:47:2e:b9:f1:f8:2d:6c:60:3a:f2:23: 42:60:60:b6:3e:b3:7b:6d:b3:2f:67:68:b8:96:ea:af:7c:0b: 74:98:0d:2a:2d:8e:03:de:bc:21:c3:71:18:a0:47:65:60:25: 99:2f:95:64:c8:76:3c:53:1d:2b:76:40:6e:02:98:a4:43:9e: c2:a3:24:d4:5c:a8:ff:83:d6:6a:d9:ae:03:13:63:4a:17:18: 0b:61:18:c5:b4:5a:b4:75:4f:21:5a:08:30:3a:66:d0:2d:86: 8b:90:6b:d2:e8:19:b7:b5:b5:3a:0a:e6:9f:86:d1:ff:4e:d4: 29:ad:e1:02:4d:6f:8b:fd:85:b2:06:89:72:0f:eb:21:dc:08: fc:d9:0f:10:67:f5:7b:66:73:ac:6b:55:20:c3:c2:30:15:54: 3f:4c:8d:32:99:06:f5:21:91:c8:52:04:d5:c2:37:9b:67:66: 91:8c:9f:7a:89:5a:07:eb:35:a2:c1:61:45:31:75:f3:7f:03: de:06:7e:20:72:e2:88:4f:d7:23:da:f4:5d:b5:bc:c1:b5:f9: ad:9f:89:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+6oR720kYC2cO0T/gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI2MTEwNDE0MDAxM1oXDTI3MDIwMjE0MDAxM1owLzEtMCsGA1UEAxMk ZWZhYmU1ZDktNDAxMC00ZGE5LWJjYzQtNzBkNjE2MmFmNzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZcxF3Xwn1lEMXmWQ+WAOSbDF9ITLQICJi/4 CsZZ/RdHjdQN8EDe+4rgyv6KOf/Na407CxubzjcV4l8ij7Oz0ICev534Biy2APOD OIhGDJLg2QQDdNQ3DAwk3qEhwHdtOz5T3QqpTinW8t+b6dVxD/V54lRg1gmKJXxW gdJ3wj7tz2rmOhmxyzFg3ZkLzsG1JOT1lhOEI3toWtzk9BHf7GdlJdxyykTWBs/l T015I0BdIrxqLWXdI2FrYmd8K1NorqEC0xiWgRCzl4Uvpo2Tuq/xI2KIEXrExMq0 It0C0OJUYx69M3yJQEPPAagAb8FJjt/4fbSn56bfE6VECFv6yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDV7nbd9GI3fBpFN0JTwWc8iyTkTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvZGI3ZWEyYzktYTdlMS0z YmMwLWIzODMtMjAwNmM3MjViODkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwJUsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtBt6eKoAIGcnfdcN2l6rt7/xAs2oxuI9i/lAxSsd2P5J7DZ73s0HFG PWZHLrnx+C1sYDryI0JgYLY+s3ttsy9naLiW6q98C3SYDSotjgPevCHDcRigR2Vg JZkvlWTIdjxTHSt2QG4CmKRDnsKjJNRcqP+D1mrZrgMTY0oXGAthGMW0WrR1TyFa CDA6ZtAthouQa9LoGbe1tToK5p+G0f9O1Cmt4QJNb4v9hbIGiXIP6yHcCPzZDxBn 9Xtmc6xrVSDDwjAVVD9MjTKZBvUhkchSBNXCN5tnZpGMn3qJWgfrNaLBYUUxdfN/ A94GfiBy4ohP1yPa9F21vMG1+a2fiaY= -----END CERTIFICATE-----Generated at Sun Nov 15 17:54:09 2026 by rpki-client