$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/2a622dab-3a0e-3d38-8261-020cde7acaa2.roa File: 2a622dab-3a0e-3d38-8261-020cde7acaa2.roa (raw, json) Hash identifier: 0usowG8wxMTxZdknebYRzSw6mj6D3nNpZQy/+2K3x4Q= Subject key identifier: 22:12:1C:F3:EE:D0:FF:0D:EB:CE:14:9B:4F:15:B1:9A:04:78:6F:3B Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584E7634DABE02F24D0E50EEFAC0 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/2a622dab-3a0e-3d38-8261-020cde7acaa2.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 33392 IP address blocks: 192.149.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:da:be:02:f2:4d:0e:50:ee:fa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=1df13e87-af10-4436-8b9c-d0b218199a9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:35:2a:3c:9c:b9:bb:72:2d:3e:e3:91:e6:b9: ca:47:a5:44:61:e0:40:aa:fe:1e:25:6c:b9:3c:b3: c2:1f:48:e4:5c:71:15:d1:8b:64:8d:a2:bc:0f:8e: 80:0d:02:db:96:f7:e6:c6:cd:0d:79:0f:4e:5f:e2: f5:31:d6:7e:82:ac:e1:58:9b:be:d1:6c:36:df:f5: b7:d1:8b:2c:4a:cd:4e:17:7f:6c:52:33:a5:c2:75: 8c:fe:bf:43:bf:05:de:68:96:49:95:69:35:91:db: 0a:9c:58:bd:8c:59:e4:26:61:f0:52:fc:5b:9e:a6: 11:6c:d3:36:a4:f4:18:71:75:1f:34:a8:9d:74:d9: ef:cc:ba:28:51:ff:2f:10:7a:01:45:2e:d0:40:c8: c9:c3:07:ff:aa:2f:33:b6:64:a2:a0:1d:1e:78:3e: 2b:ae:77:96:5a:e8:ec:8a:e3:96:6f:6b:aa:10:47: 73:d0:b0:df:d3:ca:18:13:e6:87:3a:a6:83:52:73: 72:74:69:78:30:3d:f9:7d:bc:30:bf:02:ff:d2:ba: b0:50:66:86:a9:a6:cc:61:98:db:2b:57:eb:0e:fb: f7:8e:dd:a8:4d:60:73:c8:dd:02:b4:5d:a7:50:9f: 40:1a:58:77:f1:74:95:19:6d:de:24:d3:68:cb:6b: 63:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:12:1C:F3:EE:D0:FF:0D:EB:CE:14:9B:4F:15:B1:9A:04:78:6F:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/2a622dab-3a0e-3d38-8261-020cde7acaa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 192.149.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:70:3e:b4:95:d2:21:e5:46:4c:2c:08:53:22:44:b2:26:86: 72:7b:58:05:9a:c7:b9:91:82:6a:30:90:e9:7a:9d:b0:fa:a4: 8d:d4:d0:b1:93:99:c2:08:54:d9:eb:6c:1a:52:81:49:0d:29: 79:8d:68:cc:e4:60:c1:3a:62:66:4a:bc:bb:f8:f0:38:e3:e3: 57:a0:ca:19:15:02:19:08:6c:ed:64:8b:27:90:20:a0:52:e7: 64:ed:3b:32:b2:a8:41:cf:5e:08:97:69:68:96:c9:59:86:a0: 49:71:1d:54:02:5d:b4:2b:7b:33:de:83:a1:ba:d2:c1:43:0e: a2:ee:62:8e:4f:bd:91:3a:26:f6:f5:23:b4:55:0c:79:15:a1: 5a:6f:4a:8f:db:26:6a:1e:a1:c8:66:e9:72:4e:cd:9a:f0:52: 00:6d:51:08:b1:5d:00:79:85:25:8f:70:a3:13:96:b6:6a:9d: ff:00:63:e1:fd:0a:ba:6a:58:bb:87:d9:0b:92:2f:74:75:0a: 0a:69:45:c0:6b:f5:ce:4a:d8:83:02:89:6a:f6:70:20:ae:98: 57:fe:31:cf:ae:00:c2:f5:29:f7:12:3b:63:ec:60:10:3b:90: 01:c9:fc:1a:94:d2:90:7d:94:cd:57:53:91:95:42:22:4f:50: bc:eb:07:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NNq+AvJNDlDu+sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk MWRmMTNlODctYWYxMC00NDM2LThiOWMtZDBiMjE4MTk5YTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTUqPJy5u3ItPuOR5rnKR6VEYeBAqv4eJWy5 PLPCH0jkXHEV0YtkjaK8D46ADQLblvfmxs0NeQ9OX+L1MdZ+gqzhWJu+0Ww23/W3 0YssSs1OF39sUjOlwnWM/r9DvwXeaJZJlWk1kdsKnFi9jFnkJmHwUvxbnqYRbNM2 pPQYcXUfNKiddNnvzLooUf8vEHoBRS7QQMjJwwf/qi8ztmSioB0eeD4rrneWWujs iuOWb2uqEEdz0LDf08oYE+aHOqaDUnNydGl4MD35fbwwvwL/0rqwUGaGqabMYZjb K1frDvv3jt2oTWBzyN0CtF2nUJ9AGlh38XSVGW3eJNNoy2tjbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCISHPPu0P8N684Um08VsZoEeG87MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvMmE2MjJkYWItM2EwZS0z ZDM4LTgyNjEtMDIwY2RlN2FjYWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJUuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1wPrSV0iHlRkwsCFMiRLImhnJ7WAWax7mRgmowkOl6nbD6pI3U0LGT mcIIVNnrbBpSgUkNKXmNaMzkYME6YmZKvLv48Djj41egyhkVAhkIbO1kiyeQIKBS 52TtOzKyqEHPXgiXaWiWyVmGoElxHVQCXbQrezPeg6G60sFDDqLuYo5PvZE6Jvb1 I7RVDHkVoVpvSo/bJmoeochm6XJOzZrwUgBtUQixXQB5hSWPcKMTlrZqnf8AY+H9 CrpqWLuH2QuSL3R1CgppRcBr9c5K2IMCiWr2cCCumFf+Mc+uAML1KfcSO2PsYBA7 kAHJ/BqU0pB9lM1XU5GVQiJPULzrBzI= -----END CERTIFICATE-----Generated at Sat Jul 18 05:04:48 2026 by rpki-client