$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/9db44533-de07-3bd6-a689-efec080bd048.roa File: 9db44533-de07-3bd6-a689-efec080bd048.roa (raw, json) Hash identifier: s5wSX9mV2gV78at0KUZcmhSFqe/z9cF9FmF8LaLaF60= Subject key identifier: 6B:B6:DE:E9:09:42:34:A6:29:08:CA:75:85:8B:42:5F:8F:96:E2:1D Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584F1897A65A96221FF085685E80 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/9db44533-de07-3bd6-a689-efec080bd048.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 36511 IP address blocks: 208.103.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:a6:5a:96:22:1f:f0:85:68:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=bbc0f743-5806-4e43-b538-3d59d7589fd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:be:68:be:a7:2a:07:4a:1e:d5:8d:07:fc:51: af:68:b3:43:39:86:19:01:08:d6:2a:aa:01:9d:54: 75:80:a5:2b:24:1d:65:9a:da:78:1d:6f:12:64:e1: 44:36:d3:e5:95:59:dc:2e:24:1b:16:4a:31:44:cf: 20:a3:6b:65:17:3c:67:d9:3d:9c:30:7d:63:b3:78: 08:4e:c4:40:90:81:58:6d:b2:ff:c0:8a:29:aa:61: 12:bb:ab:45:46:da:45:62:43:12:cc:93:55:1e:ed: 64:58:b2:b4:ac:39:ef:08:3d:cb:21:e5:47:48:ec: 3d:fa:3b:ec:0b:b8:0e:f4:49:f0:1a:37:65:ce:e1: d6:78:1e:5b:35:f8:53:92:54:3f:e3:91:c4:eb:51: 5d:a0:22:ff:d7:08:41:8d:5f:4c:6c:66:2b:70:01: 67:d8:4e:54:2c:da:70:c1:2f:45:e7:1c:1f:41:7d: 9c:13:1c:b3:42:04:cc:6e:9b:87:c6:6d:85:bc:e5: 0d:bf:c6:50:6b:14:58:d5:fd:32:14:08:29:f9:2d: 1d:39:46:c6:9f:e2:e9:20:56:22:36:ca:9c:4c:38: 7f:46:6f:2c:5b:4c:0a:bc:11:cb:65:54:4b:3e:b2: d7:09:11:4f:18:8d:24:06:20:9d:db:2d:25:9c:90: c8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B6:DE:E9:09:42:34:A6:29:08:CA:75:85:8B:42:5F:8F:96:E2:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/9db44533-de07-3bd6-a689-efec080bd048.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 208.103.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:d9:ff:6b:c7:02:8e:3d:e8:77:cd:f8:23:0d:44:31:39:96: 82:d1:b3:b7:23:75:64:51:2f:74:72:84:54:23:2a:db:c0:ca: 77:89:0f:3a:3a:0d:a0:c1:f3:ec:57:23:56:79:47:2e:b6:64: 03:78:dd:8e:74:2c:84:5b:e9:3d:bc:f5:1a:dc:7c:ac:47:f4: dc:f9:14:3f:24:db:f7:f7:d8:b8:40:33:e5:9f:05:a8:e3:d4: 17:b2:bc:47:64:09:dc:4b:24:1e:96:16:0e:16:b4:50:59:f5: c6:a6:b8:8b:68:91:1c:70:0c:8a:a6:c6:0b:4a:62:d9:ef:59: 84:38:dd:f5:95:a5:7d:fc:3f:16:9c:6e:e4:a5:1e:f8:f8:52: 0b:ff:2e:80:ae:57:d6:3b:37:4d:3b:89:ce:fa:40:da:7a:19: ec:42:39:46:0c:8c:5f:5a:db:0b:45:58:77:b4:6d:e1:ad:df: 9e:9c:8f:28:88:ec:b5:09:c2:79:d8:60:5b:cb:1d:ca:ee:ef: ef:a4:e5:be:8d:b4:32:40:6f:08:a8:d7:30:3e:61:5d:97:14: ed:84:97:8c:a8:65:b1:99:d8:87:65:19:a8:2e:7a:08:21:2e: 31:06:62:17:01:7f:93:98:16:d3:b7:4d:82:39:13:b6:a5:76: 5d:42:a2:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl6ZaliIf8IVoXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk YmJjMGY3NDMtNTgwNi00ZTQzLWI1MzgtM2Q1OWQ3NTg5ZmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjL5ovqcqB0oe1Y0H/FGvaLNDOYYZAQjWKqoB nVR1gKUrJB1lmtp4HW8SZOFENtPllVncLiQbFkoxRM8go2tlFzxn2T2cMH1js3gI TsRAkIFYbbL/wIopqmESu6tFRtpFYkMSzJNVHu1kWLK0rDnvCD3LIeVHSOw9+jvs C7gO9EnwGjdlzuHWeB5bNfhTklQ/45HE61FdoCL/1whBjV9MbGYrcAFn2E5ULNpw wS9F5xwfQX2cExyzQgTMbpuHxm2FvOUNv8ZQaxRY1f0yFAgp+S0dOUbGn+LpIFYi NsqcTDh/Rm8sW0wKvBHLZVRLPrLXCRFPGI0kBiCd2y0lnJDICQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGu23ukJQjSmKQjKdYWLQl+PluIdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvOWRiNDQ1MzMtZGUwNy0z YmQ2LWE2ODktZWZlYzA4MGJkMDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0GeVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrZ/2vHAo496HfN+CMNRDE5loLRs7cjdWRRL3RyhFQjKtvAyneJDzo6 DaDB8+xXI1Z5Ry62ZAN43Y50LIRb6T289RrcfKxH9Nz5FD8k2/f32LhAM+WfBajj 1BeyvEdkCdxLJB6WFg4WtFBZ9camuItokRxwDIqmxgtKYtnvWYQ43fWVpX38Pxac buSlHvj4Ugv/LoCuV9Y7N007ic76QNp6GexCOUYMjF9a2wtFWHe0beGt356cjyiI 7LUJwnnYYFvLHcru7++k5b6NtDJAbwio1zA+YV2XFO2El4yoZbGZ2IdlGagueggh LjEGYhcBf5OYFtO3TYI5E7aldl1Col4= -----END CERTIFICATE-----Generated at Wed Sep 23 10:46:26 2026 by rpki-client