$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ba248b55-8db3-4d72-9e7f-59e5f287b112/330424b7-2db1-33ca-bb68-90d47c822aaf.roa File: 330424b7-2db1-33ca-bb68-90d47c822aaf.roa (raw, json) Hash identifier: +fZuTzJvsWTN7BiaAEacJO4RVdgFG1t7OWvGr0yD4RE= Subject key identifier: F4:0B:79:E7:34:46:BE:AF:9D:1D:D3:EF:C4:AB:45:2A:36:88:96:46 Certificate issuer: /CN=ba248b55-8db3-4d72-9e7f-59e5f287b112 Certificate serial: 010D0C9F4328584F6CE76F4F309763B4C2B4E300 Authority key identifier: 9B:CD:0B:51:7E:41:E6:02:04:E5:14:B6:B2:62:2E:C0:45:6D:F6:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ba248b55-8db3-4d72-9e7f-59e5f287b112.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ba248b55-8db3-4d72-9e7f-59e5f287b112/330424b7-2db1-33ca-bb68-90d47c822aaf.roa Signing time: Wed 07 Oct 2026 17:49:04 +0000 ROA not before: Wed 07 Oct 2026 17:49:04 +0000 ROA not after: Tue 05 Jan 2027 18:49:04 +0000 asID: 402307 IP address blocks: 198.28.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ba248b55-8db3-4d72-9e7f-59e5f287b112/ba248b55-8db3-4d72-9e7f-59e5f287b112.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ba248b55-8db3-4d72-9e7f-59e5f287b112/ba248b55-8db3-4d72-9e7f-59e5f287b112.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ba248b55-8db3-4d72-9e7f-59e5f287b112.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:e7:6f:4f:30:97:63:b4:c2:b4:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba248b55-8db3-4d72-9e7f-59e5f287b112 Validity Not Before: Oct 7 17:49:04 2026 GMT Not After : Jan 5 18:49:04 2027 GMT Subject: CN=da418dc2-b916-4fc0-8c31-9f4556d7c8b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:25:fc:85:f1:a2:21:27:d7:1c:08:3b:75:a9: b0:69:7c:8c:e8:8a:2d:69:fd:97:cf:ff:fd:83:ad: 47:7a:7f:73:36:df:eb:b5:ec:e9:59:2b:39:a5:a0: 83:b7:8c:5d:2f:02:5d:75:3c:b9:4c:a8:57:5c:1f: 4f:73:7e:19:56:54:fc:5c:ea:43:90:9d:14:78:62: c9:c1:78:fe:11:fa:7a:9a:84:a5:f1:c8:66:e8:0f: ee:80:e4:a0:49:0c:76:54:fa:fd:ec:3b:d6:9d:b9: 80:1c:53:1d:be:73:af:2c:77:94:2e:27:0f:8f:44: 37:8b:bb:e7:c8:64:bc:9b:a3:12:fc:04:f9:ac:1c: 29:de:37:06:fd:1b:10:cc:3b:bc:95:ab:a9:83:7a: b8:40:e2:5b:5d:99:99:97:ea:82:9b:be:bf:8a:23: c9:f3:25:11:14:90:cf:cc:04:42:0a:9c:7e:5c:96: 9b:26:17:3d:41:cc:d6:9d:69:ce:42:57:d3:67:62: a1:b7:09:01:18:37:b4:af:5d:9a:7c:37:4f:20:df: 26:f3:9d:2c:58:d4:8e:fd:72:b5:81:b4:3a:57:ee: 58:d7:fb:c7:2d:35:4e:29:d4:47:4f:5c:b0:5e:9d: c8:c6:ed:d3:c7:23:85:22:25:ab:1b:97:18:5c:06: 84:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:0B:79:E7:34:46:BE:AF:9D:1D:D3:EF:C4:AB:45:2A:36:88:96:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ba248b55-8db3-4d72-9e7f-59e5f287b112/330424b7-2db1-33ca-bb68-90d47c822aaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ba248b55-8db3-4d72-9e7f-59e5f287b112/ba248b55-8db3-4d72-9e7f-59e5f287b112.crl X509v3 Authority Key Identifier: keyid:9B:CD:0B:51:7E:41:E6:02:04:E5:14:B6:B2:62:2E:C0:45:6D:F6:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ba248b55-8db3-4d72-9e7f-59e5f287b112.cer sbgp-ipAddrBlock: critical IPv4: 198.28.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:d6:0f:c3:fe:6f:e2:3d:f1:91:85:fa:a4:b7:70:31:8e:7c: 6f:3f:6d:9a:1d:8a:15:76:b3:3f:df:c5:d2:e5:8f:a4:59:43: 40:a0:a9:ef:a3:7f:0c:d9:02:d2:76:ed:93:3e:d4:c6:17:97: 31:48:5c:bd:7a:d4:87:79:cd:60:a1:4b:ca:41:80:85:c9:c2: 5b:57:63:3b:50:42:41:ce:2b:3d:f6:b3:da:98:c2:90:ba:b6: f9:d5:b6:65:1a:e3:83:f1:6e:62:0d:76:ed:74:d9:1a:86:85: 55:73:c7:74:c9:32:21:cb:be:6a:62:4a:81:de:7a:e2:4f:8d: d2:18:ca:5f:9d:be:3d:b8:48:ff:46:fd:88:ca:11:53:16:fb: 3a:04:b2:6f:4b:af:6d:f9:5d:b6:be:ca:8f:4b:24:34:88:05: d2:3e:a9:8c:f2:06:60:01:77:77:3d:d6:d3:5b:3b:b0:47:0b: 97:d1:47:0b:79:35:18:ef:7f:7d:2c:f3:92:51:ba:8a:4b:1d: 64:7f:72:7b:f2:54:6f:22:be:ba:78:95:5a:26:a4:ad:8e:96: 7d:31:41:d7:1c:8f:37:0a:cc:ce:09:85:eb:9a:a0:87:bf:e0: 71:89:bb:53:fe:52:41:60:b0:5a:a4:eb:6f:e7:9c:73:3e:ca: 17:66:bd:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9s529PMJdjtMK04wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEyNDhiNTUtOGRiMy00ZDcyLTllN2YtNTllNWYyODdi MTEyMB4XDTI2MTAwNzE3NDkwNFoXDTI3MDEwNTE4NDkwNFowLzEtMCsGA1UEAxMk ZGE0MThkYzItYjkxNi00ZmMwLThjMzEtOWY0NTU2ZDdjOGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCX8hfGiISfXHAg7damwaXyM6Iotaf2Xz//9 g61Hen9zNt/rtezpWSs5paCDt4xdLwJddTy5TKhXXB9Pc34ZVlT8XOpDkJ0UeGLJ wXj+Efp6moSl8chm6A/ugOSgSQx2VPr97DvWnbmAHFMdvnOvLHeULicPj0Q3i7vn yGS8m6MS/AT5rBwp3jcG/RsQzDu8laupg3q4QOJbXZmZl+qCm76/iiPJ8yURFJDP zARCCpx+XJabJhc9QczWnWnOQlfTZ2KhtwkBGDe0r12afDdPIN8m850sWNSO/XK1 gbQ6V+5Y1/vHLTVOKdRHT1ywXp3Ixu3TxyOFIiWrG5cYXAaEmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQLeec0Rr6vnR3T78SrRSo2iJZGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9iYTI0 OGI1NS04ZGIzLTRkNzItOWU3Zi01OWU1ZjI4N2IxMTIvMzMwNDI0YjctMmRiMS0z M2NhLWJiNjgtOTBkNDdjODIyYWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvYmEyNDhiNTUtOGRiMy00ZDcyLTll N2YtNTllNWYyODdiMTEyL2JhMjQ4YjU1LThkYjMtNGQ3Mi05ZTdmLTU5ZTVmMjg3 YjExMi5jcmwwHwYDVR0jBBgwFoAUm80LUX5B5gIE5RS2smIuwEVt9q4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9iYTI0OGI1NS04ZGIzLTRkNzItOWU3Zi01OWU1 ZjI4N2IxMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhwMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfWD8P+b+I98ZGF+qS3cDGOfG8/bZodihV2sz/fxdLlj6RZQ0Cgqe+j fwzZAtJ27ZM+1MYXlzFIXL161Id5zWChS8pBgIXJwltXYztQQkHOKz32s9qYwpC6 tvnVtmUa44PxbmINdu102RqGhVVzx3TJMiHLvmpiSoHeeuJPjdIYyl+dvj24SP9G /YjKEVMW+zoEsm9Lr235Xba+yo9LJDSIBdI+qYzyBmABd3c91tNbO7BHC5fRRwt5 NRjvf30s85JRuopLHWR/cnvyVG8ivrp4lVompK2Oln0xQdccjzcKzM4JheuaoIe/ 4HGJu1P+UkFgsFqk62/nnHM+yhdmvQg= -----END CERTIFICATE-----Generated at Sun Nov 1 14:44:45 2026 by rpki-client