$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/ba5ee86f-ee01-3881-91fb-3459183d215d.roa File: ba5ee86f-ee01-3881-91fb-3459183d215d.roa (raw, json) Hash identifier: lA+t3ll7katre2DfrrQTkbavwYSTHQ2qHm2W0KhiHqA= Subject key identifier: 2C:55:E1:60:C2:A1:0F:D8:16:23:09:C9:E0:4F:80:E3:66:86:81:A2 Certificate issuer: /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Certificate serial: 010D0C9F4328584C9536E2F099D52A4B3720DF00 Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/ba5ee86f-ee01-3881-91fb-3459183d215d.roa Signing time: Tue 20 Jan 2026 02:00:29 +0000 ROA not before: Tue 20 Jan 2026 02:00:29 +0000 ROA not after: Mon 20 Apr 2026 01:00:29 +0000 asID: 32181 IP address blocks: 199.168.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:95:36:e2:f0:99:d5:2a:4b:37:20:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Validity Not Before: Jan 20 02:00:29 2026 GMT Not After : Apr 20 01:00:29 2026 GMT Subject: CN=47b9cc87-e8cc-42aa-9fb6-76df0c81772e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4a:82:69:68:24:4d:09:db:23:68:b8:94:2e: d7:c5:f6:87:20:73:02:db:06:4b:87:c4:76:a8:dd: 85:b1:38:93:d3:1a:fb:e8:42:d0:27:98:ba:4b:f0: 95:27:30:f7:0c:7b:7e:70:da:26:60:ce:b4:fd:3d: 4b:34:a9:fa:3e:ca:d6:b9:7d:33:27:78:cd:a5:81: aa:69:24:64:0b:ac:eb:24:00:9e:ab:2f:87:d2:ac: 95:4b:47:57:d2:a5:f5:90:21:89:e7:82:14:3a:36: 1d:1d:a5:c2:0f:2a:0f:ed:28:7d:f0:1a:68:fc:b7: cc:78:e7:5f:3c:b9:f2:ce:e8:c5:22:c5:b0:f8:2f: f2:3f:7a:22:ee:68:04:83:70:b8:6c:a6:e6:52:6a: c5:88:06:8d:e1:61:26:45:3d:a2:11:c5:9f:61:94: 10:be:c9:c2:ec:8c:1c:8b:0b:44:05:55:37:31:0b: de:49:aa:1e:9f:f7:2e:27:d9:48:68:01:6d:48:3d: 7b:a0:4b:f2:ea:c9:9f:a7:4a:64:10:4a:1d:f8:7e: b0:73:82:8b:fb:19:84:e2:83:c8:33:6b:92:ab:60: 57:19:fb:52:2e:e4:c6:c8:36:58:2e:3f:73:fc:19: 4c:62:d6:99:fb:9b:b4:6e:f8:e5:29:d9:fc:4c:0a: 5c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:55:E1:60:C2:A1:0F:D8:16:23:09:C9:E0:4F:80:E3:66:86:81:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/ba5ee86f-ee01-3881-91fb-3459183d215d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl X509v3 Authority Key Identifier: keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer sbgp-ipAddrBlock: critical IPv4: 199.168.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:de:e2:4b:5c:d8:60:73:cf:df:a9:2b:63:d8:e4:83:d6:d2: b9:6f:6a:4a:11:0e:4f:22:a2:a8:5a:bc:e7:a0:1a:9d:a4:f2: 8c:39:98:fe:ab:ab:eb:f6:78:11:9d:9a:83:d4:17:08:bc:a4: ff:f8:4b:a3:bc:23:ad:98:1f:06:05:0d:f1:a7:0a:f0:cb:58: c6:bd:10:6b:81:53:62:9a:55:df:32:6f:bc:22:b1:ab:76:f6: dd:49:78:8d:c4:f7:e4:92:35:8d:ac:d2:41:75:41:2e:39:81: a8:13:7b:87:6b:aa:e5:5b:6c:c6:30:9b:80:8b:29:ec:8c:0d: 72:a2:96:2f:de:2e:2c:d0:00:35:68:17:11:99:91:de:1b:7e: 02:dd:b9:0a:f9:5d:13:58:18:3b:45:33:b5:af:4f:42:8a:c7: a1:7b:9e:f8:7f:6c:8b:00:94:9b:3e:e5:06:1e:51:b1:a5:a5: a0:c4:4d:e5:4c:c5:80:63:a6:e2:f9:20:3e:a4:12:cd:d6:25: 02:48:aa:50:21:36:3f:18:1a:25:97:49:8f:c8:06:ce:e2:ee: 46:1e:60:88:8c:57:b6:43:5a:f5:44:48:a7:88:64:59:22:24: a3:02:d0:e4:97:0f:7a:32:d5:a6:d2:b5:eb:b2:f9:0b:36:54: 8c:e7:39:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyVNuLwmdUqSzcg3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDZmOGMtODVlOS00YTQ3LTk3YzktZGJjMTFjMTIy MTBjMB4XDTI2MDEyMDAyMDAyOVoXDTI2MDQyMDAxMDAyOVowLzEtMCsGA1UEAxMk NDdiOWNjODctZThjYy00MmFhLTlmYjYtNzZkZjBjODE3NzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0qCaWgkTQnbI2i4lC7XxfaHIHMC2wZLh8R2 qN2FsTiT0xr76ELQJ5i6S/CVJzD3DHt+cNomYM60/T1LNKn6PsrWuX0zJ3jNpYGq aSRkC6zrJACeqy+H0qyVS0dX0qX1kCGJ54IUOjYdHaXCDyoP7Sh98Bpo/LfMeOdf PLnyzujFIsWw+C/yP3oi7mgEg3C4bKbmUmrFiAaN4WEmRT2iEcWfYZQQvsnC7Iwc iwtEBVU3MQveSaoen/cuJ9lIaAFtSD17oEvy6smfp0pkEEod+H6wc4KL+xmE4oPI M2uSq2BXGftSLuTGyDZYLj9z/BlMYtaZ+5u0bvjlKdn8TApc+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCxV4WDCoQ/YFiMJyeBPgONmhoGiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk NmY4Yy04NWU5LTRhNDctOTdjOS1kYmMxMWMxMjIxMGMvYmE1ZWU4NmYtZWUwMS0z ODgxLTkxZmItMzQ1OTE4M2QyMTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDZmOGMtODVlOS00YTQ3LTk3 YzktZGJjMTFjMTIyMTBjL2Q0NGQ2ZjhjLTg1ZTktNGE0Ny05N2M5LWRiYzExYzEy MjEwYy5jcmwwHwYDVR0jBBgwFoAU0rkksb0h0dn/8sdeo3qMSJ2QuRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkNmY4Yy04NWU5LTRhNDctOTdjOS1kYmMx MWMxMjIxMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx6hwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABre4ktc2GBzz9+pK2PY5IPW0rlvakoRDk8ioqhavOegGp2k8ow5mP6r q+v2eBGdmoPUFwi8pP/4S6O8I62YHwYFDfGnCvDLWMa9EGuBU2KaVd8yb7wisat2 9t1JeI3E9+SSNY2s0kF1QS45gagTe4drquVbbMYwm4CLKeyMDXKili/eLizQADVo FxGZkd4bfgLduQr5XRNYGDtFM7WvT0KKx6F7nvh/bIsAlJs+5QYeUbGlpaDETeVM xYBjpuL5ID6kEs3WJQJIqlAhNj8YGiWXSY/IBs7i7kYeYIiMV7ZDWvVESKeIZFki JKMC0OSXD3oy1abSteuy+Qs2VIznOfE= -----END CERTIFICATE-----Generated at Mon Mar 2 11:40:05 2026 by rpki-client