$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/29cf5bff-91e4-3cf7-ad96-22dc1c2fcf34.roa File: 29cf5bff-91e4-3cf7-ad96-22dc1c2fcf34.roa (raw, json) Hash identifier: +UxI4z87Et7Obc0OHzsxQesHVGnIknA6HnA8nCVAFjw= Subject key identifier: C8:83:34:40:8E:50:7B:19:2E:94:25:9E:16:FE:C8:DD:A3:79:BF:DF Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584F23C25E3D6DBA286775878480 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/29cf5bff-91e4-3cf7-ad96-22dc1c2fcf34.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 33392 IP address blocks: 137.83.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:5e:3d:6d:ba:28:67:75:87:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=ea20c24f-72fa-48d9-b48a-1b8bb12aaa0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f2:c7:21:a6:c1:60:a0:69:9e:4c:d8:a7:f0: 72:d0:65:b3:48:b7:c0:2a:a3:f9:9c:39:b8:78:ee: c6:18:3f:aa:31:87:9d:a0:e8:92:ff:1f:1b:a0:30: cd:c6:a8:ee:1b:a0:dd:09:78:c9:33:97:7a:d3:af: ba:53:3b:9f:63:4a:fe:35:5c:3f:34:c3:18:34:5a: b4:40:17:11:32:27:45:be:45:cf:1f:33:05:c8:ba: 9e:d0:fa:ba:1d:08:3f:22:f5:b2:e4:11:41:02:c6: 70:7b:d1:c3:6b:4d:8a:d4:a8:ed:b3:bd:c3:dc:19: ff:31:8c:70:6a:28:df:9b:f8:23:ce:b1:45:be:2e: 1f:b9:a0:22:1d:ad:e5:6c:69:75:c8:6b:b4:85:d7: c8:d5:66:ce:47:c3:e8:56:f6:1b:18:74:cf:34:17: 6c:af:3f:aa:24:43:12:73:b1:f1:3d:0c:49:85:a5: 5b:83:dc:c6:94:70:35:c4:ad:09:87:e2:64:cf:03: 5a:dc:20:af:a6:f4:58:9a:4f:23:c4:69:ce:45:6d: d0:69:24:7d:1a:7c:f0:2f:93:05:f5:44:88:9c:70: 1f:85:ad:57:5c:1e:41:90:96:1d:53:19:ed:cd:6e: ab:a6:69:78:7c:2c:45:9b:29:7c:11:bb:b1:02:61: b3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:83:34:40:8E:50:7B:19:2E:94:25:9E:16:FE:C8:DD:A3:79:BF:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/29cf5bff-91e4-3cf7-ad96-22dc1c2fcf34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 137.83.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:e7:26:05:a7:4b:9d:9f:e5:69:b2:8d:04:72:b4:02:2b:4d: 45:09:e0:c6:0f:1f:33:9c:3e:55:79:1e:8b:9a:c1:c2:a5:4d: 10:26:1d:b1:4c:9f:7a:56:35:0b:c8:2f:f4:ef:4e:46:dc:34: a6:27:ca:a3:ff:d2:53:28:b5:a8:33:ad:0f:98:74:43:d6:e1: 77:93:84:57:03:04:4c:6e:b8:c6:d2:be:fc:47:30:7a:0d:39: 90:21:bf:b9:c3:8d:eb:42:82:49:d8:02:86:42:08:2e:cf:bc: d5:2c:3f:eb:d8:34:d4:75:c9:e5:37:03:ce:2f:7e:d5:61:18: 41:6f:e7:df:b1:8b:43:b1:2d:72:11:68:8d:5c:95:3a:44:be: e8:28:0e:96:7e:e0:c5:0d:f9:3c:70:8d:23:8f:fa:b0:67:14: 7d:b5:7a:37:d3:4d:93:79:46:ba:bb:99:d7:bc:13:5b:fc:df: a2:64:81:ef:55:48:9f:d1:9e:00:7a:ed:b8:c5:a9:23:5f:7e: 82:46:2f:6e:6e:b0:a1:be:d1:37:4c:47:b1:70:89:45:0e:21: 16:c9:af:3c:b0:54:f6:7e:d6:82:97:9a:5e:a1:f7:1a:24:f3: 6c:8b:b7:18:53:e9:12:da:0e:8a:a5:de:38:c5:62:93:e5:8c: 72:e1:87:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8jwl49bbooZ3WHhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk ZWEyMGMyNGYtNzJmYS00OGQ5LWI0OGEtMWI4YmIxMmFhYTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvLHIabBYKBpnkzYp/By0GWzSLfAKqP5nDm4 eO7GGD+qMYedoOiS/x8boDDNxqjuG6DdCXjJM5d606+6UzufY0r+NVw/NMMYNFq0 QBcRMidFvkXPHzMFyLqe0Pq6HQg/IvWy5BFBAsZwe9HDa02K1Kjts73D3Bn/MYxw aijfm/gjzrFFvi4fuaAiHa3lbGl1yGu0hdfI1WbOR8PoVvYbGHTPNBdsrz+qJEMS c7HxPQxJhaVbg9zGlHA1xK0Jh+JkzwNa3CCvpvRYmk8jxGnORW3QaSR9GnzwL5MF 9USInHAfha1XXB5BkJYdUxntzW6rpml4fCxFmyl8EbuxAmGzvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMiDNECOUHsZLpQlnhb+yN2jeb/fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvMjljZjViZmYtOTFlNC0z Y2Y3LWFkOTYtMjJkYzFjMmZjZjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiVNmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDnJgWnS52f5WmyjQRytAIrTUUJ4MYPHzOcPlV5HouawcKlTRAmHbFM n3pWNQvIL/TvTkbcNKYnyqP/0lMotagzrQ+YdEPW4XeThFcDBExuuMbSvvxHMHoN OZAhv7nDjetCgknYAoZCCC7PvNUsP+vYNNR1yeU3A84vftVhGEFv59+xi0OxLXIR aI1clTpEvugoDpZ+4MUN+TxwjSOP+rBnFH21ejfTTZN5Rrq7mde8E1v836Jkge9V SJ/RngB67bjFqSNffoJGL25usKG+0TdMR7FwiUUOIRbJrzywVPZ+1oKXml6h9xok 82yLtxhT6RLaDoql3jjFYpPljHLhh6o= -----END CERTIFICATE-----Generated at Fri Sep 25 20:48:45 2026 by rpki-client