$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/baface79-bb4a-3656-935e-24442566c2d3.roa File: baface79-bb4a-3656-935e-24442566c2d3.roa (raw, json) Hash identifier: PwOdVsBNmmLoGJfLt/6jaBPUqC7tVav2xa4fEusRPwg= Subject key identifier: 41:4A:CA:FF:CE:D8:E7:76:D1:46:26:03:6F:02:D5:1C:51:DB:2F:29 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F5B97FB8D8F8F7304879CBAF0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/baface79-bb4a-3656-935e-24442566c2d3.roa Signing time: Thu 01 Oct 2026 13:00:12 +0000 ROA not before: Thu 01 Oct 2026 13:00:12 +0000 ROA not after: Wed 30 Dec 2026 14:00:12 +0000 asID: 7203 IP address blocks: 147.255.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:97:fb:8d:8f:8f:73:04:87:9c:ba:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 1 13:00:12 2026 GMT Not After : Dec 30 14:00:12 2026 GMT Subject: CN=fac6537f-b407-4e51-baa0-8d985c22d7a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:47:d6:3a:42:ed:e9:4c:b4:2e:bc:91:7d:08: f9:e6:46:f5:ad:c2:7f:a7:c5:e0:24:97:28:e2:81: 6d:f3:ab:aa:db:19:53:d9:95:60:2b:8f:a5:f0:1c: 65:65:c4:06:2c:a2:6f:5f:a4:ab:06:11:45:57:9f: 64:dc:af:71:bc:a3:04:10:49:be:4f:28:fa:3a:32: 36:12:9c:51:11:99:96:8f:bd:8f:1a:97:4c:4b:1e: 76:5e:4e:d3:64:17:8e:16:55:d0:2c:6b:47:c9:d9: 26:cf:a8:e0:09:96:d6:19:a9:e5:96:e2:ab:cd:f3: 62:88:62:e8:67:74:db:e9:6a:06:f9:92:6f:4f:6e: 63:7c:db:28:36:37:d0:71:01:ef:7f:55:1f:63:e9: 28:62:24:8c:43:57:24:23:25:e2:c7:bf:3d:8b:a1: 62:88:ed:e4:21:ce:db:5d:31:1e:f1:15:5e:e1:19: d6:87:51:4e:8c:33:5d:da:38:b5:ce:53:c2:4c:fe: 16:32:48:cc:c6:8e:8c:ca:0b:1d:71:a7:10:6a:15: 84:eb:0a:9f:19:72:ae:3c:3a:1c:4c:1b:d0:72:3a: 2e:72:24:33:a6:4f:11:ae:c4:5d:eb:92:75:f8:cb: 74:36:8c:2a:47:31:75:a0:80:a1:03:19:b8:0f:d9: 94:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:4A:CA:FF:CE:D8:E7:76:D1:46:26:03:6F:02:D5:1C:51:DB:2F:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/baface79-bb4a-3656-935e-24442566c2d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 147.255.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:7f:22:82:b0:15:05:3d:10:ae:0f:b5:bd:36:85:5c:1e:d0: 21:6a:58:9c:35:92:db:85:e8:cc:a3:d0:d8:02:83:e6:91:84: a2:ed:04:17:fc:0a:f7:c2:62:b2:68:45:61:12:1f:d9:d0:d7: a9:30:06:9d:65:20:a1:57:ef:4d:cd:d2:29:f5:6b:06:24:5f: 02:2a:3f:71:ea:cd:e5:1b:48:c9:1d:76:3f:60:45:71:3d:a4: 63:d5:9a:01:3d:c5:ba:dc:a6:92:94:81:a7:4b:71:c9:c7:d2: f8:09:09:02:24:0a:9b:3e:13:07:19:7a:54:a8:9a:6c:42:b3: 89:77:d6:03:aa:cd:fc:24:d2:e0:e3:f4:00:28:24:f0:ed:76: ca:a9:9f:51:c8:78:2f:7d:12:37:2d:33:ab:df:a7:df:f9:d8: 15:64:0b:08:c4:77:fc:af:79:ca:b0:cd:fb:26:59:df:41:66: 2f:fa:25:de:68:cc:28:41:b5:52:cc:95:20:c5:7a:33:85:12: c7:35:3e:b0:60:da:b0:40:5d:03:98:0f:7f:9a:6f:06:a9:a2: ed:5a:3b:50:6f:4d:cf:eb:9e:a9:cd:67:ad:d0:1f:a8:a4:61: 64:2c:ec:9e:61:7b:9e:a8:7b:82:a8:6b:9d:b9:d3:ba:2a:e5: 30:4b:d7:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9bl/uNj49zBIecuvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwMTEzMDAxMloXDTI2MTIzMDE0MDAxMlowLzEtMCsGA1UEAxMk ZmFjNjUzN2YtYjQwNy00ZTUxLWJhYTAtOGQ5ODVjMjJkN2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0fWOkLt6Uy0LryRfQj55kb1rcJ/p8XgJJco 4oFt86uq2xlT2ZVgK4+l8BxlZcQGLKJvX6SrBhFFV59k3K9xvKMEEEm+Tyj6OjI2 EpxREZmWj72PGpdMSx52Xk7TZBeOFlXQLGtHydkmz6jgCZbWGanlluKrzfNiiGLo Z3Tb6WoG+ZJvT25jfNsoNjfQcQHvf1UfY+koYiSMQ1ckIyXix789i6FiiO3kIc7b XTEe8RVe4RnWh1FOjDNd2ji1zlPCTP4WMkjMxo6MygsdcacQahWE6wqfGXKuPDoc TBvQcjouciQzpk8RrsRd65J1+Mt0NowqRzF1oIChAxm4D9mUoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFKyv/O2Od20UYmA28C1RxR2y8pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYmFmYWNlNzktYmI0YS0z NjU2LTkzNWUtMjQ0NDI1NjZjMmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCk/+4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAF/IoKwFQU9EK4Ptb02hVwe0CFqWJw1ktuF6Myj0NgCg+aRhKLtBBf8 CvfCYrJoRWESH9nQ16kwBp1lIKFX703N0in1awYkXwIqP3HqzeUbSMkddj9gRXE9 pGPVmgE9xbrcppKUgadLccnH0vgJCQIkCps+EwcZelSommxCs4l31gOqzfwk0uDj 9AAoJPDtdsqpn1HIeC99EjctM6vfp9/52BVkCwjEd/yvecqwzfsmWd9BZi/6Jd5o zChBtVLMlSDFejOFEsc1PrBg2rBAXQOYD3+abwapou1aO1BvTc/rnqnNZ63QH6ik YWQs7J5he56oe4Koa52507oq5TBL16s= -----END CERTIFICATE-----Generated at Wed Oct 14 06:59:35 2026 by rpki-client