$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/db7ea2c9-a7e1-3bc0-b383-2006c725b890.roa File: db7ea2c9-a7e1-3bc0-b383-2006c725b890.roa (raw, json) Hash identifier: 1dJey9e7W07etBznsqbZI+UfuHikL2urE7jaGDDK5Ns= Subject key identifier: 49:F4:D3:EC:C1:12:71:CD:DA:30:36:23:45:4B:D3:FF:88:05:26:14 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584E7634DA9C616C949E5E9A9700 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/db7ea2c9-a7e1-3bc0-b383-2006c725b890.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 36511 IP address blocks: 192.149.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:da:9c:61:6c:94:9e:5e:9a:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=d1ad4298-2eac-4489-83ea-37b36f5c6201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:56:6c:6a:fd:fe:d9:8f:cd:4a:87:92:d9:e3: 30:7b:77:6e:a9:32:d2:61:26:d9:35:c5:8a:3b:4c: 80:71:c9:81:ff:cb:98:d0:1d:a4:58:82:3e:bd:27: 53:10:31:5c:5f:60:33:4f:ac:2b:6c:43:84:00:24: 88:a1:ca:18:45:78:46:df:25:80:5b:52:9e:49:8d: 52:25:4d:e2:1a:38:68:72:a4:87:b9:11:48:21:ef: 8b:14:2f:0a:35:64:20:e3:86:e0:e0:c1:dd:6e:ed: 12:eb:23:31:d0:36:67:01:48:32:fd:6c:6f:12:63: 6a:bc:0c:a8:8b:32:63:ea:e5:dc:73:ce:31:69:a8: 0e:05:a6:93:b3:24:31:e5:e8:13:2f:1b:58:30:4d: 0f:b0:bb:f4:f4:e5:d0:b2:e6:48:1b:d4:e7:69:18: 34:bc:fa:2b:10:fe:73:c8:76:a4:ed:4d:ae:55:31: 82:8f:54:a6:54:30:91:44:6d:8c:1a:c3:13:0c:df: 7c:13:a5:51:1e:c7:c2:b9:3b:2d:f3:b2:de:ef:87: 4a:91:5f:de:ce:f7:24:31:65:62:dd:81:33:9d:fd: c0:f6:f6:97:14:9b:a9:19:df:e2:51:ad:ed:1b:e7: b4:2e:c0:82:39:9a:2a:4f:fa:97:6a:c0:10:92:ae: 61:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:F4:D3:EC:C1:12:71:CD:DA:30:36:23:45:4B:D3:FF:88:05:26:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/db7ea2c9-a7e1-3bc0-b383-2006c725b890.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 192.149.44.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:a6:dc:b9:13:85:94:b9:69:3a:aa:e7:03:12:47:4d:c8:fc: 59:35:7f:1a:c0:90:65:f0:e6:1d:4a:04:61:bd:a8:62:c8:2d: ed:7c:db:4e:68:85:45:2a:90:82:29:07:ce:7c:d3:75:2e:4a: da:00:f5:70:3d:c0:36:33:25:49:6b:0e:e0:9c:fc:7b:b7:01: a3:86:af:fe:17:7a:c4:35:d7:1d:e6:b5:ac:20:86:39:6b:4d: 3a:b3:f7:a7:8b:10:71:06:0c:98:ee:e3:dc:2b:75:d9:6e:76: b6:4a:58:b7:e6:79:35:b6:30:c7:ce:d4:4c:47:8e:74:19:39: 4e:dd:97:f0:7d:24:1d:49:e4:4a:5b:9b:b1:be:93:2c:73:bb: 2d:e8:02:1e:ea:ea:29:1c:94:30:0d:b2:0a:83:b9:dd:11:6d: a7:a6:20:7c:de:60:0f:92:f0:7b:e0:af:03:d0:92:b7:14:67: 2c:64:bd:76:68:85:35:15:12:8c:29:ee:44:f6:50:f1:be:62: 1b:53:b7:48:b0:8a:bb:86:69:27:68:b2:47:73:41:f0:4c:69: 2b:77:ad:d8:4c:30:da:3c:fe:91:cf:d6:f5:19:74:73:c5:85: e9:f2:5c:b1:91:f3:12:d8:d4:01:bf:93:d7:75:f4:6d:48:cd: 60:ba:68:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NNqcYWyUnl6alwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk ZDFhZDQyOTgtMmVhYy00NDg5LTgzZWEtMzdiMzZmNWM2MjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VZsav3+2Y/NSoeS2eMwe3duqTLSYSbZNcWK O0yAccmB/8uY0B2kWII+vSdTEDFcX2AzT6wrbEOEACSIocoYRXhG3yWAW1KeSY1S JU3iGjhocqSHuRFIIe+LFC8KNWQg44bg4MHdbu0S6yMx0DZnAUgy/WxvEmNqvAyo izJj6uXcc84xaagOBaaTsyQx5egTLxtYME0PsLv09OXQsuZIG9TnaRg0vPorEP5z yHak7U2uVTGCj1SmVDCRRG2MGsMTDN98E6VRHsfCuTst87Le74dKkV/ezvckMWVi 3YEznf3A9vaXFJupGd/iUa3tG+e0LsCCOZoqT/qXasAQkq5hSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEn00+zBEnHN2jA2I0VL0/+IBSYUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvZGI3ZWEyYzktYTdlMS0z YmMwLWIzODMtMjAwNmM3MjViODkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwJUsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmm3LkThZS5aTqq5wMSR03I/Fk1fxrAkGXw5h1KBGG9qGLILe18205o hUUqkIIpB85803UuStoA9XA9wDYzJUlrDuCc/Hu3AaOGr/4XesQ11x3mtawghjlr TTqz96eLEHEGDJju49wrddludrZKWLfmeTW2MMfO1ExHjnQZOU7dl/B9JB1J5Epb m7G+kyxzuy3oAh7q6ikclDANsgqDud0RbaemIHzeYA+S8HvgrwPQkrcUZyxkvXZo hTUVEowp7kT2UPG+YhtTt0iwiruGaSdoskdzQfBMaSt3rdhMMNo8/pHP1vUZdHPF henyXLGR8xLY1AG/k9d19G1IzWC6aOo= -----END CERTIFICATE-----Generated at Sat Jul 18 05:04:56 2026 by rpki-client