$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/baface79-bb4a-3656-935e-24442566c2d3.roa File: baface79-bb4a-3656-935e-24442566c2d3.roa (raw, json) Hash identifier: QkBfmE2lnxebS06xTa2haBtng61r1vXTprllBe0d5Ng= Subject key identifier: 18:1F:B2:3E:62:3E:43:83:0F:DE:D3:B6:3D:FE:F9:F6:F2:33:0D:4C Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584EB982B5E77DE53A89B0A5D120 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/baface79-bb4a-3656-935e-24442566c2d3.roa Signing time: Tue 04 Aug 2026 11:36:25 +0000 ROA not before: Tue 04 Aug 2026 11:36:25 +0000 ROA not after: Mon 02 Nov 2026 12:36:25 +0000 asID: 7203 IP address blocks: 147.255.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b9:82:b5:e7:7d:e5:3a:89:b0:a5:d1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 4 11:36:25 2026 GMT Not After : Nov 2 12:36:25 2026 GMT Subject: CN=22b11963-eca5-40ba-907d-be1f0eb3eccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6b:6d:c8:6d:91:63:0e:27:a1:b9:4d:7c:5e: f6:8b:06:de:38:c6:49:95:8c:58:2e:cf:b4:a8:fa: e1:2a:b5:3e:8b:22:52:80:e1:bd:bc:9b:92:0c:1a: 99:ae:8a:17:b2:a0:a9:75:14:34:68:d0:c2:ba:78: 20:df:6a:9c:b0:dc:2b:38:a1:df:28:d0:89:ec:2d: 9a:b4:99:c6:6f:36:01:0c:69:90:ca:05:29:ad:ea: ec:a6:73:d1:8a:81:55:21:6f:04:bf:a7:31:14:72: f5:a7:14:0e:d3:50:e5:fc:d0:05:00:6d:2c:cd:b4: aa:e1:f4:df:3d:f7:ca:63:7c:11:f3:f2:d1:4a:c5: 8c:90:c6:c2:4d:7f:c7:00:a9:4b:53:66:21:98:e8: bc:57:83:99:5c:d2:c0:15:55:b3:29:f6:31:8d:d0: 78:b3:a3:3d:63:d8:cd:e6:87:42:3c:85:8a:40:36: b7:bf:e2:f8:36:37:8e:8e:7a:7d:09:66:e8:6f:1f: 3d:03:59:b4:45:22:bb:74:c1:44:48:54:1c:64:e1: 48:8d:b6:43:d3:e3:c8:77:c2:c7:e8:21:57:f3:a8: 1f:a1:46:7f:87:6f:38:12:e9:d1:0e:1b:8c:8e:2c: 6e:21:ba:15:ca:46:60:80:89:3a:a0:36:40:52:74: 1f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:1F:B2:3E:62:3E:43:83:0F:DE:D3:B6:3D:FE:F9:F6:F2:33:0D:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/baface79-bb4a-3656-935e-24442566c2d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 147.255.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:75:2e:3f:1f:26:25:8f:fa:33:ef:7e:a5:11:91:e6:7a:1b: 39:69:21:fb:7c:63:2a:30:1c:92:78:3e:3b:31:d5:ad:d2:e4: 5a:30:8d:0c:86:25:78:f5:1b:28:be:6a:11:28:07:b3:7f:ac: d1:d5:bf:e2:4e:b4:e4:56:57:b6:a0:bb:77:71:80:91:cd:d5: 37:83:5f:8a:80:19:e2:f9:c9:de:f7:e1:27:e1:63:d6:9e:ef: c9:8a:6f:33:34:cd:a6:84:7f:7f:6c:5b:be:1d:ee:fa:ac:7b: 4a:db:64:6c:96:e7:db:9c:95:68:62:f6:1b:46:2c:a2:0d:ee: 81:78:e0:42:6b:ad:a3:c1:6d:12:34:88:33:2c:4b:bb:07:f8: 84:53:74:27:35:ec:b9:b3:ae:79:8b:1a:2b:38:c7:6f:6e:f2: c8:a2:96:54:b4:21:20:ba:87:d4:4d:5c:45:82:41:79:2e:70: a9:c1:66:64:fb:a4:19:71:46:5d:37:49:07:6d:3d:71:15:f0: 34:da:de:7e:08:7a:86:ed:be:c8:1f:8f:98:87:73:8b:d4:09: a7:a6:0f:fb:7b:7c:3f:4c:a9:e9:65:86:41:cc:62:57:d6:16: bb:45:78:2d:d7:be:65:4a:83:4b:78:e2:80:27:73:5d:ae:69: 5a:ca:8f:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE65grXnfeU6ibCl0SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgwNDExMzYyNVoXDTI2MTEwMjEyMzYyNVowLzEtMCsGA1UEAxMk MjJiMTE5NjMtZWNhNS00MGJhLTkwN2QtYmUxZjBlYjNlY2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWttyG2RYw4noblNfF72iwbeOMZJlYxYLs+0 qPrhKrU+iyJSgOG9vJuSDBqZrooXsqCpdRQ0aNDCungg32qcsNwrOKHfKNCJ7C2a tJnGbzYBDGmQygUprerspnPRioFVIW8Ev6cxFHL1pxQO01Dl/NAFAG0szbSq4fTf PffKY3wR8/LRSsWMkMbCTX/HAKlLU2YhmOi8V4OZXNLAFVWzKfYxjdB4s6M9Y9jN 5odCPIWKQDa3v+L4NjeOjnp9CWbobx89A1m0RSK7dMFESFQcZOFIjbZD0+PId8LH 6CFX86gfoUZ/h284EunRDhuMjixuIboVykZggIk6oDZAUnQfAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBgfsj5iPkODD97Ttj3++fbyMw1MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYmFmYWNlNzktYmI0YS0z NjU2LTkzNWUtMjQ0NDI1NjZjMmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCk/+4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJV1Lj8fJiWP+jPvfqURkeZ6GzlpIft8YyowHJJ4Pjsx1a3S5FowjQyG JXj1Gyi+ahEoB7N/rNHVv+JOtORWV7agu3dxgJHN1TeDX4qAGeL5yd734SfhY9ae 78mKbzM0zaaEf39sW74d7vqse0rbZGyW59uclWhi9htGLKIN7oF44EJrraPBbRI0 iDMsS7sH+IRTdCc17LmzrnmLGis4x29u8siillS0ISC6h9RNXEWCQXkucKnBZmT7 pBlxRl03SQdtPXEV8DTa3n4Ieobtvsgfj5iHc4vUCaemD/t7fD9MqellhkHMYlfW FrtFeC3XvmVKg0t44oAnc12uaVrKj44= -----END CERTIFICATE-----Generated at Thu Aug 27 17:38:47 2026 by rpki-client