$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/2a622dab-3a0e-3d38-8261-020cde7acaa2.roa File: 2a622dab-3a0e-3d38-8261-020cde7acaa2.roa (raw, json) Hash identifier: xaoWQwSQ4mrDFfUyKhwBMOTyctnGcoEIBeIt8+3UE08= Subject key identifier: 60:B4:2F:11:D6:EF:3C:06:42:60:EC:D0:75:F0:5A:0A:25:42:81:E0 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584F1897A5EEB395B323987F8580 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/2a622dab-3a0e-3d38-8261-020cde7acaa2.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 33392 IP address blocks: 192.149.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:a5:ee:b3:95:b3:23:98:7f:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=99972e2e-497d-4018-9bce-a5ec3f8a2be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ee:7c:50:20:dd:d3:99:c6:dc:2c:60:5c:55: e0:d8:97:75:8d:d9:46:14:5a:ef:db:ac:cf:80:db: fd:ae:01:13:17:07:cd:f9:ac:ab:a9:23:ee:55:9c: 9d:0d:c6:e7:db:e0:dc:e9:1e:ca:d6:04:1a:a1:49: 04:5e:01:47:a0:8b:5b:55:92:00:13:42:50:98:f4: f8:7a:8b:c4:cd:7c:9b:cc:ee:b4:c5:10:62:6f:f0: 36:15:6f:8a:b3:11:ee:46:ff:12:82:e2:a6:dc:80: 75:82:7e:e6:60:5b:c6:97:fb:a5:a7:59:fa:31:c1: 85:78:65:e6:15:4c:27:9f:f3:23:ff:da:bb:8d:d7: aa:8c:22:05:2f:20:9e:97:21:bd:83:23:2d:8b:21: db:27:24:42:0e:31:6a:48:66:e5:9b:cb:76:63:a8: 27:08:75:b2:54:78:cc:ca:38:81:08:f1:a7:9c:c7: 5e:d1:60:db:97:5a:dd:5d:db:16:fe:85:c9:f9:de: 3f:93:45:d9:84:2c:58:0f:9d:ab:cb:6b:34:04:c0: 63:76:f8:af:ef:79:40:b8:7a:44:28:fd:90:38:27: 0b:8e:28:50:ae:4f:45:7b:62:86:ba:82:b4:1e:90: 8f:b8:af:0c:4b:ad:6b:20:a1:0b:92:55:ba:e6:eb: 09:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B4:2F:11:D6:EF:3C:06:42:60:EC:D0:75:F0:5A:0A:25:42:81:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/2a622dab-3a0e-3d38-8261-020cde7acaa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 192.149.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:22:a6:49:d5:24:e0:93:d1:e8:be:11:c9:57:83:29:8e:d6: 2b:37:3e:76:f9:fa:d0:4c:b3:32:c0:9b:2b:e6:1c:a4:6e:f6: ee:e7:8f:7e:d2:2a:57:1d:ee:8b:7d:4c:ec:ba:0d:b7:35:59: 51:a8:27:de:0e:80:90:22:a6:b9:97:bb:e2:ac:56:17:07:4c: 64:d7:08:9f:da:51:de:1c:d5:c4:1b:34:2b:75:fe:dd:43:90: 49:50:96:19:d1:0f:4c:42:01:52:68:56:3f:9c:08:4c:b7:ad: f6:00:3d:e1:7c:21:34:e3:41:e8:7c:e5:4a:1f:41:18:87:ae: 10:90:d1:1d:40:08:e2:07:39:15:4b:65:d1:78:52:cf:4f:8d: 75:34:3a:cd:f3:24:38:d7:91:a7:eb:ff:8b:0a:7c:33:e9:af: 95:29:d5:16:a8:7a:87:64:78:fd:eb:ac:f3:6a:6a:2c:56:fe: 40:04:b9:64:d1:cf:32:78:66:9b:38:4c:df:55:3b:50:ca:b6: d0:39:e6:ff:db:a1:32:a6:ab:0b:e1:52:8a:61:22:0b:ff:15: 8c:57:84:1a:3a:f7:bd:8d:1a:f0:ad:f9:d1:9a:ce:0a:92:86: 7d:e4:a3:84:18:bb:16:14:45:c7:2d:66:d8:60:31:5e:e4:6c: 96:a5:30:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl6Xus5WzI5h/hYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk OTk5NzJlMmUtNDk3ZC00MDE4LTliY2UtYTVlYzNmOGEyYmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+58UCDd05nG3CxgXFXg2Jd1jdlGFFrv26zP gNv9rgETFwfN+ayrqSPuVZydDcbn2+Dc6R7K1gQaoUkEXgFHoItbVZIAE0JQmPT4 eovEzXybzO60xRBib/A2FW+KsxHuRv8SguKm3IB1gn7mYFvGl/ulp1n6McGFeGXm FUwnn/Mj/9q7jdeqjCIFLyCelyG9gyMtiyHbJyRCDjFqSGblm8t2Y6gnCHWyVHjM yjiBCPGnnMde0WDbl1rdXdsW/oXJ+d4/k0XZhCxYD52ry2s0BMBjdviv73lAuHpE KP2QOCcLjihQrk9Fe2KGuoK0HpCPuK8MS61rIKELklW65usJqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGC0LxHW7zwGQmDs0HXwWgolQoHgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvMmE2MjJkYWItM2EwZS0z ZDM4LTgyNjEtMDIwY2RlN2FjYWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJUuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJMipknVJOCT0ei+EclXgymO1is3Pnb5+tBMszLAmyvmHKRu9u7nj37S Klcd7ot9TOy6Dbc1WVGoJ94OgJAiprmXu+KsVhcHTGTXCJ/aUd4c1cQbNCt1/t1D kElQlhnRD0xCAVJoVj+cCEy3rfYAPeF8ITTjQeh85UofQRiHrhCQ0R1ACOIHORVL ZdF4Us9PjXU0Os3zJDjXkafr/4sKfDPpr5Up1RaoeodkeP3rrPNqaixW/kAEuWTR zzJ4Zps4TN9VO1DKttA55v/boTKmqwvhUophIgv/FYxXhBo6972NGvCt+dGazgqS hn3ko4QYuxYURcctZthgMV7kbJalMKg= -----END CERTIFICATE-----Generated at Thu Sep 24 09:06:36 2026 by rpki-client