$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/2a622dab-3a0e-3d38-8261-020cde7acaa2.roa File: 2a622dab-3a0e-3d38-8261-020cde7acaa2.roa (raw, json) Hash identifier: ld15nSBQVRQXhXTLoLh4i87rYud5kD247fzZG35IGJE= Subject key identifier: 4A:71:74:93:B2:1E:06:9B:5E:7C:68:5F:3B:55:3F:F9:93:A1:01:C3 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584AF52146E7C1283C9AF262A877 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/2a622dab-3a0e-3d38-8261-020cde7acaa2.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 33392 IP address blocks: 192.149.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:46:e7:c1:28:3c:9a:f2:62:a8:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=8db2b5ff-8b6f-4e55-9953-ef1766a583b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9c:f1:6f:ea:e2:d0:e8:3d:10:77:35:33:6c: b4:b8:2d:06:25:d4:0f:d3:ec:4a:14:5f:a1:cd:00: b8:34:ad:16:d1:34:d9:d0:99:ed:2c:3d:b6:c9:4f: f3:51:ba:dc:b9:a8:d5:24:1e:e5:d8:d3:e6:83:df: f2:4c:68:5d:2b:f6:fa:1d:92:d4:33:7e:7b:fd:90: 31:bf:a6:e1:f4:1b:06:9d:25:76:8f:06:14:b2:94: a5:90:c8:04:1a:a2:4e:d2:9c:54:20:21:9c:ab:d1: d6:3b:10:bf:b5:75:4a:4d:1a:94:fa:dc:a7:d0:d4: cc:91:eb:46:5b:b3:b7:4c:7b:b1:e5:44:e1:61:7e: 4f:e3:8e:fd:24:54:55:d4:e6:30:84:35:b9:ab:cc: a7:86:26:d5:7c:83:03:18:d1:28:d4:1e:6f:57:e2: f6:03:d1:e9:d7:0c:1b:9d:08:38:bd:e6:fc:48:05: 63:89:f5:1f:bd:dc:a5:78:25:cd:2f:29:2b:2b:da: 04:07:e9:3c:31:d9:41:72:e9:a3:f6:f8:42:8a:c4: 92:57:4a:36:7f:b2:6d:69:eb:26:45:7a:12:2d:4c: 41:9c:4d:1e:ec:24:de:1c:3d:c2:02:ab:c3:25:ba: 41:b6:16:22:d2:16:9c:66:b0:f0:3c:21:a7:04:c4: af:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:71:74:93:B2:1E:06:9B:5E:7C:68:5F:3B:55:3F:F9:93:A1:01:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/2a622dab-3a0e-3d38-8261-020cde7acaa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 192.149.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:1d:d7:02:1b:f2:de:00:60:49:79:bc:6d:6e:0e:11:c3:0f: 6c:6c:97:3f:5c:e3:b7:fa:3b:06:6f:e0:d6:ca:60:21:05:e6: 42:12:e8:8c:35:3c:76:24:e9:f5:86:30:37:83:4a:21:5d:e4: 64:ac:33:47:53:66:f0:4c:1b:e0:3f:ce:f7:ee:d8:d5:63:6e: cb:e6:0b:ee:00:e8:d5:39:0e:1e:7b:44:c6:60:0b:01:64:3d: df:31:b8:77:f8:a0:1f:ab:53:87:7d:c4:8b:19:36:be:ca:29: 5a:7e:04:22:8b:08:eb:9b:d8:57:68:76:69:e9:c1:6b:13:a7: 02:f5:3d:7e:4c:3e:2d:04:08:6f:5d:3c:ee:c0:be:a4:1a:38: d9:9f:73:83:f7:e5:ac:81:a9:7a:ca:80:98:9d:ad:0e:14:4f: 4c:24:00:0b:55:c8:8b:f9:f6:39:71:4d:55:65:c6:42:f9:55: 3f:db:07:cc:ef:22:8b:b2:80:ce:a6:20:52:d5:b0:0b:af:23: 79:e8:dd:6b:a1:01:4a:80:7f:a4:5b:05:e5:8f:bd:35:dd:8b: 2a:51:1d:32:5e:f9:53:2d:0b:24:a7:bc:7e:f5:f4:3a:20:d7: ba:b7:48:c0:74:93:24:e0:1b:de:64:47:2b:1d:9b:34:72:e1: f1:6a:84:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IUbnwSg8mvJiqHcwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk OGRiMmI1ZmYtOGI2Zi00ZTU1LTk5NTMtZWYxNzY2YTU4M2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpzxb+ri0Og9EHc1M2y0uC0GJdQP0+xKFF+h zQC4NK0W0TTZ0JntLD22yU/zUbrcuajVJB7l2NPmg9/yTGhdK/b6HZLUM357/ZAx v6bh9BsGnSV2jwYUspSlkMgEGqJO0pxUICGcq9HWOxC/tXVKTRqU+tyn0NTMketG W7O3THux5UThYX5P4479JFRV1OYwhDW5q8ynhibVfIMDGNEo1B5vV+L2A9Hp1wwb nQg4veb8SAVjifUfvdyleCXNLykrK9oEB+k8MdlBcumj9vhCisSSV0o2f7Jtaesm RXoSLUxBnE0e7CTeHD3CAqvDJbpBthYi0hacZrDwPCGnBMSvfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpxdJOyHgabXnxoXztVP/mToQHDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvMmE2MjJkYWItM2EwZS0z ZDM4LTgyNjEtMDIwY2RlN2FjYWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJUuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQd1wIb8t4AYEl5vG1uDhHDD2xslz9c47f6OwZv4NbKYCEF5kIS6Iw1 PHYk6fWGMDeDSiFd5GSsM0dTZvBMG+A/zvfu2NVjbsvmC+4A6NU5Dh57RMZgCwFk Pd8xuHf4oB+rU4d9xIsZNr7KKVp+BCKLCOub2FdodmnpwWsTpwL1PX5MPi0ECG9d PO7AvqQaONmfc4P35ayBqXrKgJidrQ4UT0wkAAtVyIv59jlxTVVlxkL5VT/bB8zv IouygM6mIFLVsAuvI3no3WuhAUqAf6RbBeWPvTXdiypRHTJe+VMtCySnvH719Dog 17q3SMB0kyTgG95kRysdmzRy4fFqhM0= -----END CERTIFICATE-----Generated at Wed Nov 5 12:12:32 2025 by rpki-client