$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/ba5ee86f-ee01-3881-91fb-3459183d215d.roa File: ba5ee86f-ee01-3881-91fb-3459183d215d.roa (raw, json) Hash identifier: 9dUhozDwDdMx5sKUNxIdQA8kVO1m3aVctIWoXnGLCpg= Subject key identifier: 2A:FA:58:A4:28:C1:D6:E0:B0:24:1E:4D:72:3E:A8:D8:51:DA:78:51 Certificate issuer: /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Certificate serial: 010D0C9F4328584F9BCDC7657AEA2254BB746E40 Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/ba5ee86f-ee01-3881-91fb-3459183d215d.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 32181 IP address blocks: 199.168.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:c7:65:7a:ea:22:54:bb:74:6e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=28566d2f-6453-43df-9ff6-0cae7fa4270d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:53:d0:22:6b:10:7c:40:be:1a:e4:67:f6:99: b2:7d:ab:96:22:6a:22:d1:63:bb:ee:56:68:ac:18: 19:b1:3e:f0:f6:af:b5:a6:c8:df:2a:ef:99:8b:b2: 2a:ed:15:1f:51:2d:a7:30:f5:7e:a5:9d:7f:51:3d: 89:6b:e6:a4:3c:f1:af:11:58:de:8d:2e:21:75:dc: 9b:d8:1e:ef:b5:d1:10:cb:d1:9d:2c:09:0d:0c:aa: 20:4d:a5:81:d6:d3:63:0d:4a:af:4e:45:dc:ba:04: c7:df:05:12:c2:ea:9e:d2:a7:7c:92:a7:84:f2:eb: 0c:a0:17:af:2a:c6:17:05:72:d5:49:fd:b0:6a:c8: ec:01:d5:41:86:b4:b5:50:2b:b7:83:fd:30:51:89: 32:c6:79:b4:ae:97:d0:be:40:60:49:45:4e:a1:67: 89:03:a5:93:9d:59:a0:a4:5e:66:cb:30:6b:e3:12: 63:1d:9c:11:97:26:97:58:27:41:64:f0:04:25:5e: 37:a2:68:97:06:1a:a0:db:b1:5d:f4:34:a3:da:12: e2:8d:37:5f:4d:4a:bd:39:17:5f:89:08:f8:90:fc: 3c:10:38:33:32:ed:42:ef:6c:62:f7:aa:9a:48:6e: 02:7d:33:4e:55:81:4f:9e:23:e2:3b:0b:96:58:9f: 88:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:FA:58:A4:28:C1:D6:E0:B0:24:1E:4D:72:3E:A8:D8:51:DA:78:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/ba5ee86f-ee01-3881-91fb-3459183d215d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl X509v3 Authority Key Identifier: keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer sbgp-ipAddrBlock: critical IPv4: 199.168.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:14:53:24:1f:2d:e2:4d:08:ac:4e:08:49:41:4b:17:96:5f: 60:b0:4b:b1:f2:a9:95:7a:9a:80:be:2c:2c:64:b9:18:58:aa: 26:5c:43:0c:f8:9d:96:3e:08:fe:44:fd:0e:65:6e:22:5c:e8: a1:53:08:43:ca:0b:71:73:ea:b1:27:5c:20:79:0c:16:e8:90: c5:80:4a:34:fe:a2:de:44:e7:dc:29:b9:df:29:ce:34:0f:77: 0b:9a:49:6e:09:01:a5:9a:24:70:10:53:45:40:7a:bd:21:c1: 40:c5:0f:8a:de:94:e4:26:e2:50:8e:90:6b:e5:e5:25:01:b6: b5:e8:36:58:21:27:b6:08:5a:38:aa:b8:07:b5:40:56:4c:e7: 2a:45:66:ae:64:f2:fd:2c:80:b8:99:c6:02:9e:b6:2f:82:a8: ee:9f:12:33:aa:08:91:8f:33:ca:44:cf:d7:a8:b8:f5:d7:8b: 60:dc:d0:56:25:01:b9:9b:ed:cf:01:4f:06:d0:4f:d4:ae:1b: e8:4c:33:d9:a9:91:00:70:7e:8d:34:83:65:8a:60:79:63:ae: 0c:55:03:8a:0e:1b:87:4d:6f:a3:ce:9d:73:c8:94:1d:eb:40: 26:f5:72:eb:65:23:8c:2e:20:af:da:e6:16:52:62:84:97:39: cd:34:ba:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzcdleuoiVLt0bkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDZmOGMtODVlOS00YTQ3LTk3YzktZGJjMTFjMTIy MTBjMB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk Mjg1NjZkMmYtNjQ1My00M2RmLTlmZjYtMGNhZTdmYTQyNzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlPQImsQfEC+GuRn9pmyfauWImoi0WO77lZo rBgZsT7w9q+1psjfKu+Zi7Iq7RUfUS2nMPV+pZ1/UT2Ja+akPPGvEVjejS4hddyb 2B7vtdEQy9GdLAkNDKogTaWB1tNjDUqvTkXcugTH3wUSwuqe0qd8kqeE8usMoBev KsYXBXLVSf2wasjsAdVBhrS1UCu3g/0wUYkyxnm0rpfQvkBgSUVOoWeJA6WTnVmg pF5myzBr4xJjHZwRlyaXWCdBZPAEJV43omiXBhqg27Fd9DSj2hLijTdfTUq9ORdf iQj4kPw8EDgzMu1C72xi96qaSG4CfTNOVYFPniPiOwuWWJ+I4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCr6WKQowdbgsCQeTXI+qNhR2nhRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk NmY4Yy04NWU5LTRhNDctOTdjOS1kYmMxMWMxMjIxMGMvYmE1ZWU4NmYtZWUwMS0z ODgxLTkxZmItMzQ1OTE4M2QyMTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDZmOGMtODVlOS00YTQ3LTk3 YzktZGJjMTFjMTIyMTBjL2Q0NGQ2ZjhjLTg1ZTktNGE0Ny05N2M5LWRiYzExYzEy MjEwYy5jcmwwHwYDVR0jBBgwFoAU0rkksb0h0dn/8sdeo3qMSJ2QuRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkNmY4Yy04NWU5LTRhNDctOTdjOS1kYmMx MWMxMjIxMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx6hwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIUUyQfLeJNCKxOCElBSxeWX2CwS7HyqZV6moC+LCxkuRhYqiZcQwz4 nZY+CP5E/Q5lbiJc6KFTCEPKC3Fz6rEnXCB5DBbokMWASjT+ot5E59wpud8pzjQP dwuaSW4JAaWaJHAQU0VAer0hwUDFD4relOQm4lCOkGvl5SUBtrXoNlghJ7YIWjiq uAe1QFZM5ypFZq5k8v0sgLiZxgKeti+CqO6fEjOqCJGPM8pEz9eouPXXi2Dc0FYl Abmb7c8BTwbQT9SuG+hMM9mpkQBwfo00g2WKYHljrgxVA4oOG4dNb6POnXPIlB3r QCb1cutlI4wuIK/a5hZSYoSXOc00us8= -----END CERTIFICATE-----Generated at Tue Oct 27 17:33:06 2026 by rpki-client