$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/ba5ee86f-ee01-3881-91fb-3459183d215d.roa File: ba5ee86f-ee01-3881-91fb-3459183d215d.roa (raw, json) Hash identifier: x3V5/bM6Q2XMDVDUWYTtLSYSxu4fAONWy02ZgBi+Yzg= Subject key identifier: C7:CD:91:EE:74:7A:66:A2:9D:F0:9A:51:53:D9:10:EA:5F:60:F5:F9 Certificate issuer: /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Certificate serial: 010D0C9F4328584EF87CC471ECE0EED914EF6F80 Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/ba5ee86f-ee01-3881-91fb-3459183d215d.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 32181 IP address blocks: 199.168.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:c4:71:ec:e0:ee:d9:14:ef:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=c9dc1641-84a6-4a85-876b-f18d5330418e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:dd:95:a2:67:bc:ba:a9:65:50:c9:96:a3:b5: 79:3c:1c:cc:10:dd:81:dd:ec:e5:6c:5a:81:7a:c2: d4:2b:e9:e3:f5:50:ee:ce:b1:26:99:4c:5e:c3:d7: 87:bb:ab:e6:46:44:5b:db:fa:ea:3b:d4:9c:b7:c0: d7:b6:d0:f3:13:68:f2:71:e5:7e:45:14:38:d7:05: cd:df:11:e8:33:33:11:94:af:23:c1:dc:29:e5:55: da:ae:8c:67:3e:e7:e7:27:1f:ee:94:b4:e1:8b:d5: 23:e0:50:61:59:e5:4a:05:98:0f:5c:06:e5:5e:4e: 7b:ed:84:38:19:d7:08:27:23:6e:1f:57:6b:e8:56: 5f:1a:c7:c2:25:17:50:79:a4:b3:c9:94:f6:e6:57: 4e:c9:0a:0e:36:e2:91:3d:d9:88:92:e9:3a:4c:1d: 2e:32:d1:2a:5d:fb:59:08:85:92:4f:7e:a1:c2:b1: 97:40:22:e8:73:34:20:ca:1f:6b:f0:03:b0:b8:46: 10:9d:9c:6a:26:df:2c:df:ce:8e:9d:76:c6:dd:59: 11:8d:a7:67:99:15:1c:97:62:38:3a:5f:9d:2b:76: 19:da:f4:aa:f3:73:12:e8:fd:88:44:cb:c9:8a:13: 4d:1f:f3:9b:f8:06:be:72:ae:d6:bc:bc:0d:0f:42: 00:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:CD:91:EE:74:7A:66:A2:9D:F0:9A:51:53:D9:10:EA:5F:60:F5:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/ba5ee86f-ee01-3881-91fb-3459183d215d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl X509v3 Authority Key Identifier: keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer sbgp-ipAddrBlock: critical IPv4: 199.168.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:bc:43:a8:b1:28:9e:b3:e5:a0:cc:14:2a:be:c0:39:96:5f: 9e:97:37:87:46:91:54:9f:06:e8:1b:5b:4f:5b:42:85:50:31: 81:5f:9e:32:90:60:6d:79:e6:b2:03:9f:e7:70:17:76:38:a2: d2:cc:c4:42:57:49:43:df:c3:98:d9:91:cd:30:75:e9:3e:b5: cb:0b:1a:ef:65:7c:fb:e3:2f:c8:d9:86:ce:1b:dd:0e:d8:9d: fe:94:1b:70:40:26:07:5d:ea:71:4f:72:b9:fb:c8:f3:d9:eb: 80:0a:47:17:6f:92:bf:74:84:e7:ab:72:18:48:19:75:c2:aa: 3f:b5:14:58:8b:b4:3b:2b:e8:cb:89:1f:58:db:d8:83:e4:22: 09:f0:b3:08:16:ad:7c:48:b7:31:54:c7:46:32:cb:3e:f1:fc: f8:27:0a:a9:de:a6:1f:7b:ec:85:c4:66:b9:5b:a0:ee:a1:de: cf:2e:12:1e:ce:27:55:9b:61:a2:1c:10:72:0e:98:7c:67:97: 01:d2:57:82:82:7d:48:be:3a:f7:f9:92:89:35:36:a8:b7:d1: e8:9b:de:b2:01:49:11:76:92:17:38:0d:66:47:92:0f:24:be: 45:e3:bd:0b:2d:94:4d:f6:f3:f2:d0:7d:61:74:3d:73:a0:2b: 05:16:1b:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fMRx7ODu2RTvb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDZmOGMtODVlOS00YTQ3LTk3YzktZGJjMTFjMTIy MTBjMB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk YzlkYzE2NDEtODRhNi00YTg1LTg3NmItZjE4ZDUzMzA0MThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd2Vome8uqllUMmWo7V5PBzMEN2B3ezlbFqB esLUK+nj9VDuzrEmmUxew9eHu6vmRkRb2/rqO9Sct8DXttDzE2jyceV+RRQ41wXN 3xHoMzMRlK8jwdwp5VXaroxnPufnJx/ulLThi9Uj4FBhWeVKBZgPXAblXk577YQ4 GdcIJyNuH1dr6FZfGsfCJRdQeaSzyZT25ldOyQoONuKRPdmIkuk6TB0uMtEqXftZ CIWST36hwrGXQCLoczQgyh9r8AOwuEYQnZxqJt8s386OnXbG3VkRjadnmRUcl2I4 Ol+dK3YZ2vSq83MS6P2IRMvJihNNH/Ob+Aa+cq7WvLwND0IALwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfNke50emainfCaUVPZEOpfYPX5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk NmY4Yy04NWU5LTRhNDctOTdjOS1kYmMxMWMxMjIxMGMvYmE1ZWU4NmYtZWUwMS0z ODgxLTkxZmItMzQ1OTE4M2QyMTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDZmOGMtODVlOS00YTQ3LTk3 YzktZGJjMTFjMTIyMTBjL2Q0NGQ2ZjhjLTg1ZTktNGE0Ny05N2M5LWRiYzExYzEy MjEwYy5jcmwwHwYDVR0jBBgwFoAU0rkksb0h0dn/8sdeo3qMSJ2QuRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkNmY4Yy04NWU5LTRhNDctOTdjOS1kYmMx MWMxMjIxMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx6hwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ28Q6ixKJ6z5aDMFCq+wDmWX56XN4dGkVSfBugbW09bQoVQMYFfnjKQ YG155rIDn+dwF3Y4otLMxEJXSUPfw5jZkc0wdek+tcsLGu9lfPvjL8jZhs4b3Q7Y nf6UG3BAJgdd6nFPcrn7yPPZ64AKRxdvkr90hOerchhIGXXCqj+1FFiLtDsr6MuJ H1jb2IPkIgnwswgWrXxItzFUx0Yyyz7x/PgnCqneph977IXEZrlboO6h3s8uEh7O J1WbYaIcEHIOmHxnlwHSV4KCfUi+Ovf5kok1Nqi30eib3rIBSRF2khc4DWZHkg8k vkXjvQstlE328/LQfWF0PXOgKwUWG4U= -----END CERTIFICATE-----Generated at Thu Sep 10 10:11:16 2026 by rpki-client