$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/ba5ee86f-ee01-3881-91fb-3459183d215d.roa File: ba5ee86f-ee01-3881-91fb-3459183d215d.roa (raw, json) Hash identifier: laQNfLEPYLsiSjs7yCzch+Tk/Q/mFsaevNKaHR/QJ6A= Subject key identifier: EA:3D:C4:DF:1A:FD:95:48:0A:C1:D0:BD:E6:8F:99:1D:BC:CC:93:4B Certificate issuer: /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Certificate serial: 010D0C9F4328584D75D530B55276F005AE80DC80 Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/ba5ee86f-ee01-3881-91fb-3459183d215d.roa Signing time: Fri 10 Apr 2026 13:00:31 +0000 ROA not before: Fri 10 Apr 2026 13:00:31 +0000 ROA not after: Thu 09 Jul 2026 13:00:31 +0000 asID: 32181 IP address blocks: 199.168.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:75:d5:30:b5:52:76:f0:05:ae:80:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Validity Not Before: Apr 10 13:00:31 2026 GMT Not After : Jul 9 13:00:31 2026 GMT Subject: CN=489e759b-bd06-40e5-9990-dba27192012e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:19:ae:af:99:05:93:40:c3:a1:b2:33:cc:fd: 71:97:43:18:fc:ab:8d:10:29:cc:af:8f:a4:2d:a8: 2f:71:21:e1:01:ee:e7:79:8a:b3:48:25:7d:79:3e: b4:c3:fc:d2:4d:b1:fc:30:55:4e:18:26:b6:55:d3: 28:c9:a3:99:d6:74:c9:46:7f:96:43:be:11:2d:e8: 2c:ad:e8:b8:b9:68:d3:cb:d1:4e:88:cd:84:c1:1d: 3a:38:23:78:9b:60:2a:db:7c:7d:4a:80:2a:31:45: a3:1d:a2:2f:09:ec:88:ef:cd:27:3d:0b:a0:cf:6f: f3:50:3a:63:cc:ec:b0:1c:1d:1e:d6:1b:2f:12:bf: cd:11:9d:27:64:16:25:f4:dc:47:32:c9:3b:a1:88: 4a:ca:be:64:f8:12:9d:72:ba:85:33:03:4d:36:27: 91:23:ae:63:1a:49:c6:ae:ff:f1:3e:83:b8:ca:93: 69:22:7e:56:af:c1:7b:b8:03:c9:6b:52:54:80:78: 5a:5b:d8:21:89:09:fc:e7:d2:ca:3a:49:27:e9:43: f1:2b:5f:4b:ca:80:92:05:0a:84:ea:2f:7e:dc:f7: 78:fe:f7:31:7d:49:ee:51:45:8c:74:aa:9a:4d:95: 68:13:33:6f:17:2d:b2:63:59:b5:4b:93:61:2f:3b: a8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:3D:C4:DF:1A:FD:95:48:0A:C1:D0:BD:E6:8F:99:1D:BC:CC:93:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/ba5ee86f-ee01-3881-91fb-3459183d215d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl X509v3 Authority Key Identifier: keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer sbgp-ipAddrBlock: critical IPv4: 199.168.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:8c:c8:7e:71:67:66:4e:17:91:3e:f4:11:01:f6:6b:14:67: 8c:da:54:36:1d:55:13:7c:ad:4e:fe:d1:04:f4:da:bd:f2:70: 15:f2:c8:e3:f5:1c:53:dc:28:0c:ba:88:04:5c:54:db:eb:86: e1:5c:6c:aa:e4:90:db:57:4f:1a:c4:c2:8e:5c:b0:5d:2a:7b: e2:08:2a:a0:93:1e:75:f2:3f:37:14:4a:d6:3e:07:ae:71:25: bc:5d:aa:ea:b2:76:ae:b3:46:4e:76:45:bb:33:60:07:e1:67: 43:3e:0f:4d:0c:8d:30:3a:2b:84:89:a4:42:0a:aa:3f:aa:a8: df:90:d1:15:69:2b:72:80:7d:8d:b9:41:e3:02:37:bc:d2:76: b9:04:6a:85:1d:2b:0a:06:f9:df:71:34:a9:dd:90:1f:fb:f8: d1:86:2d:14:9a:d8:fe:da:16:fc:1a:60:a3:e5:9d:74:6a:26: 60:c9:0c:5b:d1:2d:e2:dd:bc:00:33:88:a4:4a:c7:c1:97:fd: 85:5f:f1:39:45:29:06:66:91:e8:7f:72:cc:1b:5d:9e:4c:01: 51:6c:94:ea:ec:27:90:4b:62:85:e5:33:ba:26:9d:41:22:28: e4:74:9c:e4:b3:eb:f9:32:a9:36:56:8b:71:4a:74:bd:97:25: 0d:6c:70:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE111TC1UnbwBa6A3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDZmOGMtODVlOS00YTQ3LTk3YzktZGJjMTFjMTIy MTBjMB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk NDg5ZTc1OWItYmQwNi00MGU1LTk5OTAtZGJhMjcxOTIwMTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRmur5kFk0DDobIzzP1xl0MY/KuNECnMr4+k LagvcSHhAe7neYqzSCV9eT60w/zSTbH8MFVOGCa2VdMoyaOZ1nTJRn+WQ74RLegs rei4uWjTy9FOiM2EwR06OCN4m2Aq23x9SoAqMUWjHaIvCeyI780nPQugz2/zUDpj zOywHB0e1hsvEr/NEZ0nZBYl9NxHMsk7oYhKyr5k+BKdcrqFMwNNNieRI65jGknG rv/xPoO4ypNpIn5Wr8F7uAPJa1JUgHhaW9ghiQn859LKOkkn6UPxK19LyoCSBQqE 6i9+3Pd4/vcxfUnuUUWMdKqaTZVoEzNvFy2yY1m1S5NhLzuonQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOo9xN8a/ZVICsHQveaPmR28zJNLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk NmY4Yy04NWU5LTRhNDctOTdjOS1kYmMxMWMxMjIxMGMvYmE1ZWU4NmYtZWUwMS0z ODgxLTkxZmItMzQ1OTE4M2QyMTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDZmOGMtODVlOS00YTQ3LTk3 YzktZGJjMTFjMTIyMTBjL2Q0NGQ2ZjhjLTg1ZTktNGE0Ny05N2M5LWRiYzExYzEy MjEwYy5jcmwwHwYDVR0jBBgwFoAU0rkksb0h0dn/8sdeo3qMSJ2QuRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkNmY4Yy04NWU5LTRhNDctOTdjOS1kYmMx MWMxMjIxMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx6hwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGMyH5xZ2ZOF5E+9BEB9msUZ4zaVDYdVRN8rU7+0QT02r3ycBXyyOP1 HFPcKAy6iARcVNvrhuFcbKrkkNtXTxrEwo5csF0qe+IIKqCTHnXyPzcUStY+B65x Jbxdquqydq6zRk52RbszYAfhZ0M+D00MjTA6K4SJpEIKqj+qqN+Q0RVpK3KAfY25 QeMCN7zSdrkEaoUdKwoG+d9xNKndkB/7+NGGLRSa2P7aFvwaYKPlnXRqJmDJDFvR LeLdvAAziKRKx8GX/YVf8TlFKQZmkeh/cswbXZ5MAVFslOrsJ5BLYoXlM7omnUEi KOR0nOSz6/kyqTZWi3FKdL2XJQ1scGs= -----END CERTIFICATE-----Generated at Fri Apr 17 19:28:32 2026 by rpki-client