$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/db7ea2c9-a7e1-3bc0-b383-2006c725b890.roa File: db7ea2c9-a7e1-3bc0-b383-2006c725b890.roa (raw, json) Hash identifier: QdQYohjALBn5f5QEnaxPldMsQUwn28C6yIwzPThbQwQ= Subject key identifier: DD:65:C1:0E:CB:65:6D:23:29:97:00:B0:39:A3:1C:AB:12:F7:9E:8A Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584F1897A5CAF055134CD2D65300 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/db7ea2c9-a7e1-3bc0-b383-2006c725b890.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 36511 IP address blocks: 192.149.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:a5:ca:f0:55:13:4c:d2:d6:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=87d7ba18-a98d-4f95-837d-8016e034d4c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:aa:2b:20:d4:2d:4a:4a:02:55:59:9c:49:9a: 36:de:e2:37:2a:11:cc:63:74:87:e7:2e:cf:85:5d: 74:30:df:e4:52:21:d3:e6:8f:02:96:ea:89:31:e8: 4a:dd:2c:79:69:be:83:6b:9a:51:cd:1a:fd:7a:de: 6b:66:3f:ec:f7:3a:e7:2e:4b:63:6c:77:ce:00:64: bd:55:a2:7f:36:bc:08:03:98:32:0e:a5:40:ba:1b: f9:82:ac:20:0d:eb:e7:36:51:7d:14:68:d1:38:76: 62:e5:51:ba:e3:d2:0a:68:8f:c2:85:36:7a:b3:24: 34:50:33:ee:6d:87:1a:f6:de:24:95:ce:17:45:81: af:f2:33:3c:90:fb:f7:29:3e:e4:4f:c0:12:a0:e8: dc:6c:25:eb:70:39:70:d6:32:33:e5:17:0c:6b:4f: fd:fe:e2:19:47:0e:ce:e8:50:77:07:b6:36:01:4e: ed:34:d9:8f:2c:9c:12:91:9e:76:1c:a5:9d:65:ef: 7e:0e:2e:f9:f2:ae:52:72:d8:86:ce:b8:dd:39:c2: bf:15:e1:8a:7f:03:bc:0a:5f:da:8c:2b:5b:36:52: cc:82:80:ba:d2:ae:a7:fe:8a:0c:81:76:bb:6a:26: 50:44:a7:06:5e:d5:9a:c9:62:bd:c1:ad:9c:82:2d: 64:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:65:C1:0E:CB:65:6D:23:29:97:00:B0:39:A3:1C:AB:12:F7:9E:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/db7ea2c9-a7e1-3bc0-b383-2006c725b890.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 192.149.44.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:bd:eb:36:b9:fb:47:e0:a6:62:93:32:54:d7:83:a0:a6:27: bf:48:1a:d7:9f:1b:8c:00:dc:20:26:78:c5:bc:92:cf:67:f7: b7:00:cb:3f:d4:75:fc:9b:29:dd:1e:c1:a5:d0:06:c6:8d:f3: 54:40:51:f9:02:15:73:d7:72:7d:95:96:9b:03:09:92:87:10: 4a:6d:93:2a:48:e0:11:39:24:8b:4d:99:64:89:c7:fb:18:43: 1c:5a:f0:a5:3f:97:f4:a1:69:17:7b:4f:17:38:85:91:22:fa: d0:8a:a1:02:af:4c:69:aa:bd:42:bd:b7:56:b8:44:c6:99:e1: 8e:65:dd:1c:87:e0:5b:0e:27:a0:7c:c0:0c:50:be:47:c8:15: 96:d4:b6:67:e0:c6:58:f3:ad:88:79:e2:15:62:1f:dc:ff:f0: ba:49:d7:f4:10:ca:ea:12:68:bc:2c:98:e4:c5:c9:aa:33:e2: 53:bf:82:63:e2:5c:ee:b2:82:ed:a7:e8:39:32:3a:dd:ee:2a: cd:31:f2:48:90:0f:dd:0f:5c:ec:6d:1b:aa:0a:61:34:f9:2e: fc:f0:40:3d:0b:b5:00:49:72:b5:8f:4c:26:9b:e4:1f:6d:97: 8c:35:d0:4c:19:6b:db:9b:99:c8:7f:5c:6b:d4:04:9e:d3:00: 6f:bd:5e:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl6XK8FUTTNLWUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk ODdkN2JhMTgtYTk4ZC00Zjk1LTgzN2QtODAxNmUwMzRkNGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6orINQtSkoCVVmcSZo23uI3KhHMY3SH5y7P hV10MN/kUiHT5o8CluqJMehK3Sx5ab6Da5pRzRr9et5rZj/s9zrnLktjbHfOAGS9 VaJ/NrwIA5gyDqVAuhv5gqwgDevnNlF9FGjROHZi5VG649IKaI/ChTZ6syQ0UDPu bYca9t4klc4XRYGv8jM8kPv3KT7kT8ASoOjcbCXrcDlw1jIz5RcMa0/9/uIZRw7O 6FB3B7Y2AU7tNNmPLJwSkZ52HKWdZe9+Di758q5SctiGzrjdOcK/FeGKfwO8Cl/a jCtbNlLMgoC60q6n/ooMgXa7aiZQRKcGXtWayWK9wa2cgi1kqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1lwQ7LZW0jKZcAsDmjHKsS956KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvZGI3ZWEyYzktYTdlMS0z YmMwLWIzODMtMjAwNmM3MjViODkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwJUsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAq96za5+0fgpmKTMlTXg6CmJ79IGtefG4wA3CAmeMW8ks9n97cAyz/U dfybKd0ewaXQBsaN81RAUfkCFXPXcn2VlpsDCZKHEEptkypI4BE5JItNmWSJx/sY Qxxa8KU/l/ShaRd7Txc4hZEi+tCKoQKvTGmqvUK9t1a4RMaZ4Y5l3RyH4FsOJ6B8 wAxQvkfIFZbUtmfgxljzrYh54hViH9z/8LpJ1/QQyuoSaLwsmOTFyaoz4lO/gmPi XO6ygu2n6DkyOt3uKs0x8kiQD90PXOxtG6oKYTT5LvzwQD0LtQBJcrWPTCab5B9t l4w10EwZa9ubmch/XGvUBJ7TAG+9Xo8= -----END CERTIFICATE-----Generated at Thu Sep 24 23:38:11 2026 by rpki-client