$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/ba5ee86f-ee01-3881-91fb-3459183d215d.roa File: ba5ee86f-ee01-3881-91fb-3459183d215d.roa (raw, json) Hash identifier: OYa5BJASOvudeU3PVjyYiJmnCKV3O4tJnepjFMCxzgs= Subject key identifier: 28:82:8B:D7:C5:8D:86:91:57:C5:96:56:8D:08:F2:5E:16:9C:84:AB Certificate issuer: /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Certificate serial: 010D0C9F4328584BB45D1C71527A73269F26FD00 Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/ba5ee86f-ee01-3881-91fb-3459183d215d.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 32181 IP address blocks: 199.168.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:1c:71:52:7a:73:26:9f:26:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=404cb845-cc90-4d5a-bd51-30549d33a4ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:6c:cf:9d:49:cd:d8:c1:c1:ed:39:71:29:64: 1c:8c:1a:3b:8e:9e:d2:b5:26:ba:00:ff:92:d8:b7: 4d:f0:bd:d7:bb:34:74:84:f5:b7:8e:f3:43:af:35: ca:78:15:1c:ce:f9:d4:63:06:e0:74:b3:5f:cd:21: e7:b2:13:0a:4d:d6:ae:ca:92:7a:d6:5b:fc:29:4e: aa:82:d7:0d:33:35:15:48:78:f9:4a:46:9e:6b:e9: bf:fe:31:37:f1:d7:54:79:10:d5:92:f5:d1:bb:5c: 9d:c6:84:b8:9a:f4:d6:03:cf:e0:0f:7d:43:e6:f1: d6:cf:1c:76:4e:4e:a8:1d:ed:06:9b:f8:cf:d4:96: 40:9d:0f:b2:fb:91:9c:87:76:cb:c6:c7:36:ff:79: 60:2f:cd:8b:fb:6b:1b:c5:9b:f2:24:85:27:e4:6f: c8:09:b3:7a:45:52:69:1c:5b:29:36:cc:46:70:e2: 13:ec:0c:9f:e8:2d:9d:28:28:82:95:b5:f0:ad:bc: bd:a7:78:77:fa:6d:b3:c7:e1:1e:39:f5:42:79:40: 09:05:89:3c:7e:63:bb:a0:83:ba:4f:7a:c4:0f:bd: 05:87:ba:68:03:d9:00:76:a2:39:29:4e:1c:b6:64: 6f:e5:5f:4d:32:d1:4d:f5:51:10:34:f4:00:0f:e6: ee:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:82:8B:D7:C5:8D:86:91:57:C5:96:56:8D:08:F2:5E:16:9C:84:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/ba5ee86f-ee01-3881-91fb-3459183d215d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl X509v3 Authority Key Identifier: keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer sbgp-ipAddrBlock: critical IPv4: 199.168.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:cb:cd:e3:0c:0b:4c:8b:d0:5a:c7:09:68:44:cf:ff:2b:8d: 64:14:66:56:94:60:11:fd:da:2f:15:a5:22:cc:44:b2:28:c3: 1e:ac:84:f7:62:3d:88:0b:77:20:a8:23:b6:6f:b8:ed:89:80: f7:0e:56:11:f6:61:23:df:38:13:33:be:c7:bd:80:5a:c8:eb: 01:65:a9:8a:3e:b5:c1:f5:1f:d1:9a:a4:1f:24:bb:6b:d1:78: 5f:36:27:5a:68:1d:b5:6f:04:e7:b3:83:58:29:b0:51:d2:3a: a5:f0:ac:df:d1:8a:58:6d:20:0e:5c:86:43:7d:e5:45:ac:4e: a4:9f:54:a2:9f:e1:4f:89:bc:01:c4:d4:56:0a:68:70:34:fe: 5c:17:d3:6f:2c:bf:c5:99:33:8f:34:5b:25:e4:ee:d5:42:81: c1:18:f1:44:d5:9e:73:9b:47:cd:25:3d:27:b7:0a:9a:4e:26: d0:ab:d0:b0:9c:3e:e0:ac:37:55:63:59:4f:93:37:8e:8a:c6: 92:a9:05:e6:af:0a:83:8b:72:3a:73:30:e3:be:1f:3b:e7:b6: 6e:a1:88:92:54:e5:aa:29:ca:28:09:42:a8:fb:41:fe:a5:da: 36:ba:55:95:96:f9:b6:10:21:e4:94:7d:26:8d:d8:54:ae:46: da:4e:98:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XRxxUnpzJp8m/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDZmOGMtODVlOS00YTQ3LTk3YzktZGJjMTFjMTIy MTBjMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk NDA0Y2I4NDUtY2M5MC00ZDVhLWJkNTEtMzA1NDlkMzNhNGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WzPnUnN2MHB7TlxKWQcjBo7jp7StSa6AP+S 2LdN8L3XuzR0hPW3jvNDrzXKeBUczvnUYwbgdLNfzSHnshMKTdauypJ61lv8KU6q gtcNMzUVSHj5Skaea+m//jE38ddUeRDVkvXRu1ydxoS4mvTWA8/gD31D5vHWzxx2 Tk6oHe0Gm/jP1JZAnQ+y+5Gch3bLxsc2/3lgL82L+2sbxZvyJIUn5G/ICbN6RVJp HFspNsxGcOIT7Ayf6C2dKCiClbXwrby9p3h3+m2zx+EeOfVCeUAJBYk8fmO7oIO6 T3rED70Fh7poA9kAdqI5KU4ctmRv5V9NMtFN9VEQNPQAD+buwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCiCi9fFjYaRV8WWVo0I8l4WnISrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk NmY4Yy04NWU5LTRhNDctOTdjOS1kYmMxMWMxMjIxMGMvYmE1ZWU4NmYtZWUwMS0z ODgxLTkxZmItMzQ1OTE4M2QyMTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDZmOGMtODVlOS00YTQ3LTk3 YzktZGJjMTFjMTIyMTBjL2Q0NGQ2ZjhjLTg1ZTktNGE0Ny05N2M5LWRiYzExYzEy MjEwYy5jcmwwHwYDVR0jBBgwFoAU0rkksb0h0dn/8sdeo3qMSJ2QuRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkNmY4Yy04NWU5LTRhNDctOTdjOS1kYmMx MWMxMjIxMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx6hwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPLzeMMC0yL0FrHCWhEz/8rjWQUZlaUYBH92i8VpSLMRLIowx6shPdi PYgLdyCoI7ZvuO2JgPcOVhH2YSPfOBMzvse9gFrI6wFlqYo+tcH1H9GapB8ku2vR eF82J1poHbVvBOezg1gpsFHSOqXwrN/RilhtIA5chkN95UWsTqSfVKKf4U+JvAHE 1FYKaHA0/lwX028sv8WZM480WyXk7tVCgcEY8UTVnnObR80lPSe3CppOJtCr0LCc PuCsN1VjWU+TN46KxpKpBeavCoOLcjpzMOO+Hzvntm6hiJJU5aopyigJQqj7Qf6l 2ja6VZWW+bYQIeSUfSaN2FSuRtpOmPc= -----END CERTIFICATE-----Generated at Wed Nov 5 06:50:22 2025 by rpki-client