$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/db7ea2c9-a7e1-3bc0-b383-2006c725b890.roa File: db7ea2c9-a7e1-3bc0-b383-2006c725b890.roa (raw, json) Hash identifier: PgbGaT2EmU2sLTRcIiK9ieU1PnkMzz4r1MTDiwQ+C+U= Subject key identifier: 88:C8:58:92:FA:B7:CB:AC:5D:31:44:7A:7E:B9:BF:F1:46:35:7A:10 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584AF52146B18E66E0F3605052E0 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/db7ea2c9-a7e1-3bc0-b383-2006c725b890.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 36511 IP address blocks: 192.149.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:46:b1:8e:66:e0:f3:60:50:52:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=c967febc-6e34-4ec7-a99a-6b62b88f5f4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:69:97:e6:7f:0a:20:6b:eb:ce:d7:24:56:2e: 8f:70:53:8d:21:b6:22:6a:28:0e:44:2a:0f:35:c0: 5f:23:39:4d:db:bb:e4:f4:5d:e4:b5:2b:6b:c2:67: 60:fb:d2:f7:c4:55:c6:94:b6:fc:f8:ed:c4:7a:19: ea:60:7b:25:1f:5f:5b:45:d9:13:10:39:ac:d7:7d: 6c:8c:53:bf:2b:25:06:2e:98:a8:7b:b0:44:4e:b5: 25:e7:b5:c4:90:46:f0:33:e8:5f:5f:bf:05:5d:da: 50:ac:80:19:e5:ca:ac:29:4a:2b:dd:17:3f:30:10: 14:62:2e:99:8c:f6:b6:ba:04:bd:7a:ac:30:5e:46: 64:9d:3b:bf:be:68:34:87:b2:6a:04:94:8b:75:87: f2:7e:4c:c6:ad:f6:6c:26:da:86:09:64:4d:a1:2c: 37:3a:16:92:64:64:70:49:5d:f3:b1:1d:36:31:e9: 73:dc:b1:6f:fd:8d:4d:d4:8a:bf:29:ca:8a:68:9d: 26:29:0a:77:12:7b:0a:70:e0:21:ae:ec:b6:0b:1b: 36:39:4c:34:c4:aa:77:9a:f7:50:3f:b4:2f:b7:d0: b1:79:67:7e:25:65:19:af:33:04:40:bb:32:aa:e4: 3b:31:54:f2:68:08:42:34:0f:f4:0b:50:bd:27:1e: 2e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C8:58:92:FA:B7:CB:AC:5D:31:44:7A:7E:B9:BF:F1:46:35:7A:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/db7ea2c9-a7e1-3bc0-b383-2006c725b890.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 192.149.44.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:a6:f7:82:89:1d:c9:23:ac:0f:94:1f:ae:81:41:5c:77:c0: fa:36:35:2b:3b:c2:51:32:58:d0:fb:76:e6:e7:4d:3f:d4:08: 0b:da:da:88:ce:93:f7:4f:4e:68:ba:51:30:4d:a9:8a:a0:99: ef:19:68:58:4f:9f:2c:d2:49:8c:c9:f5:03:f0:0b:16:f3:d3: e5:d2:ad:5f:7e:e3:5d:0f:e2:d9:80:f6:9a:a2:5a:de:1a:41: 4f:08:94:33:84:21:07:06:4e:58:e1:01:bd:20:ca:8e:f0:69: a2:1b:5a:6e:bd:9b:a3:3f:2b:f9:31:e5:02:1e:ec:a8:97:5d: be:06:48:0d:c6:48:72:1e:02:c2:9b:45:ec:1a:da:64:95:31: ee:69:d0:98:2f:49:11:ab:a1:43:81:5f:02:d4:1c:29:e7:d7: 58:85:ab:4f:00:32:0a:02:b6:bd:24:a9:7a:37:f5:59:eb:ae: 3d:57:a5:37:98:f8:6c:f5:39:b4:21:27:96:58:48:d7:0c:8e: ee:6c:9d:87:c4:2d:a6:3e:e4:4b:20:a8:d2:26:e1:07:f1:2c: 00:a2:6b:b1:e1:0e:df:30:85:38:7b:33:4f:34:97:fd:5a:f7: 3c:8c:97:b1:7f:e5:06:04:d2:83:e0:3e:c9:a1:6b:11:b1:d6: b3:70:b6:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IUaxjmbg82BQUuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk Yzk2N2ZlYmMtNmUzNC00ZWM3LWE5OWEtNmI2MmI4OGY1ZjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGmX5n8KIGvrztckVi6PcFONIbYiaigORCoP NcBfIzlN27vk9F3ktStrwmdg+9L3xFXGlLb8+O3EehnqYHslH19bRdkTEDms131s jFO/KyUGLpioe7BETrUl57XEkEbwM+hfX78FXdpQrIAZ5cqsKUor3Rc/MBAUYi6Z jPa2ugS9eqwwXkZknTu/vmg0h7JqBJSLdYfyfkzGrfZsJtqGCWRNoSw3OhaSZGRw SV3zsR02Melz3LFv/Y1N1Iq/KcqKaJ0mKQp3EnsKcOAhruy2Cxs2OUw0xKp3mvdQ P7Qvt9CxeWd+JWUZrzMEQLsyquQ7MVTyaAhCNA/0C1C9Jx4u/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjIWJL6t8usXTFEen65v/FGNXoQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvZGI3ZWEyYzktYTdlMS0z YmMwLWIzODMtMjAwNmM3MjViODkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwJUsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+m94KJHckjrA+UH66BQVx3wPo2NSs7wlEyWND7dubnTT/UCAva2ojO k/dPTmi6UTBNqYqgme8ZaFhPnyzSSYzJ9QPwCxbz0+XSrV9+410P4tmA9pqiWt4a QU8IlDOEIQcGTljhAb0gyo7waaIbWm69m6M/K/kx5QIe7KiXXb4GSA3GSHIeAsKb Rewa2mSVMe5p0JgvSRGroUOBXwLUHCnn11iFq08AMgoCtr0kqXo39Vnrrj1XpTeY +Gz1ObQhJ5ZYSNcMju5snYfELaY+5EsgqNIm4QfxLACia7HhDt8whTh7M080l/1a 9zyMl7F/5QYE0oPgPsmhaxGx1rNwtok= -----END CERTIFICATE-----Generated at Wed Nov 5 11:32:52 2025 by rpki-client