$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/ba2a23ca-935e-30b5-b145-3d3bb372b2ae.roa File: ba2a23ca-935e-30b5-b145-3d3bb372b2ae.roa (raw, json) Hash identifier: iyBrrDfrKwYSHdDops8iEfFZqsVHJtL2AIUSf/THhYM= Subject key identifier: AC:BF:68:3B:EF:86:E8:CB:88:9C:9F:C2:B4:B3:FA:6B:3A:20:44:1B Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584F63F82E5D709A2D0DC55CE6C0 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/ba2a23ca-935e-30b5-b145-3d3bb372b2ae.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 55081 IP address blocks: 192.119.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:2e:5d:70:9a:2d:0d:c5:5c:e6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=95c07ef6-140e-4a14-91a7-09ed6cbd0ea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:74:fc:3d:26:ad:67:06:cd:b0:b6:c4:87:43: 85:60:26:a8:49:45:82:9d:df:5a:d6:1e:a5:f9:fa: 55:f4:b9:b9:61:1c:71:c2:53:cc:c0:e5:98:f7:eb: 1c:32:01:b3:81:d6:b5:b6:79:bc:a8:fa:96:ee:e3: 6f:70:cb:b7:31:18:69:80:d4:9b:a4:8b:61:52:60: 78:c2:6d:ec:c3:16:57:61:c0:b0:b3:27:bb:71:9e: bf:b4:ba:ec:b9:8a:48:d0:c2:55:2f:83:ee:42:6b: 13:92:94:ed:0a:58:29:7e:88:c8:d8:6e:e1:15:c0: 0c:2a:a2:d2:ac:1d:36:7d:ad:a5:f2:06:a2:69:48: 91:64:c2:09:13:aa:1d:27:0c:ab:d5:72:1a:c4:5f: c7:cf:ca:7d:03:58:2a:48:90:64:01:f1:4b:80:64: e0:7d:d7:a6:31:25:37:27:ac:84:f4:29:9f:f8:a5: a1:c8:4a:db:72:6f:8d:8b:0d:97:58:35:12:ff:ad: dc:12:99:e0:6d:30:68:90:a2:93:8a:7d:6e:fc:d6: 37:3c:b3:81:c8:58:1f:e0:0f:b8:b6:91:f0:4f:30: 84:38:db:c9:93:fa:00:44:d0:6b:42:4a:8a:c4:0b: bc:9e:e9:1b:15:38:45:54:c3:5d:bd:4e:c4:69:a2: 26:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:BF:68:3B:EF:86:E8:CB:88:9C:9F:C2:B4:B3:FA:6B:3A:20:44:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/ba2a23ca-935e-30b5-b145-3d3bb372b2ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 192.119.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:d2:b1:2f:41:75:4c:8a:ef:74:80:aa:45:72:5a:42:4b:91: 6e:87:2a:a6:e0:e3:53:4e:75:dc:b1:97:6c:58:15:95:42:a6: c5:8f:0d:43:2e:b7:af:4c:ee:09:65:5e:fc:fa:1f:72:6e:8a: 79:2f:bd:7f:65:34:64:ef:e8:b9:0e:8a:2a:b3:8c:26:5c:af: ba:a9:fe:25:a1:57:11:44:1e:b2:96:b1:8f:ff:05:f1:1a:31: a5:68:14:1b:f8:c9:cc:70:dd:20:0b:42:b6:28:9c:7d:a9:ec: b3:28:39:b7:91:3a:6b:f7:82:4c:e1:47:a5:a4:3a:d5:42:83: de:48:24:4e:36:41:ba:cb:1c:09:ee:75:30:4c:a0:5e:76:06: d8:c6:ed:04:a7:e4:30:d7:6e:48:18:26:1d:c8:a4:08:68:08: 98:5d:66:11:de:e5:bf:01:a3:aa:0d:bd:72:95:73:ed:a7:ca: c2:8e:6c:fa:31:65:9f:8f:cf:49:8d:1c:25:e7:cd:0a:d3:af: f1:74:bf:a3:f4:ce:fb:32:8e:d8:00:ce:6e:d9:61:96:ad:13: 6a:0d:ac:e9:65:5e:8b:69:94:3d:23:1f:05:ae:54:72:d3:0f: a5:b7:37:62:b2:f0:9d:82:5b:bd:f1:21:75:82:b4:ca:ab:41: 69:f5:df:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9j+C5dcJotDcVc5sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk OTVjMDdlZjYtMTQwZS00YTE0LTkxYTctMDllZDZjYmQwZWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HT8PSatZwbNsLbEh0OFYCaoSUWCnd9a1h6l +fpV9Lm5YRxxwlPMwOWY9+scMgGzgda1tnm8qPqW7uNvcMu3MRhpgNSbpIthUmB4 wm3swxZXYcCwsye7cZ6/tLrsuYpI0MJVL4PuQmsTkpTtClgpfojI2G7hFcAMKqLS rB02fa2l8gaiaUiRZMIJE6odJwyr1XIaxF/Hz8p9A1gqSJBkAfFLgGTgfdemMSU3 J6yE9Cmf+KWhyErbcm+Niw2XWDUS/63cEpngbTBokKKTin1u/NY3PLOByFgf4A+4 tpHwTzCEONvJk/oARNBrQkqKxAu8nukbFThFVMNdvU7EaaImNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKy/aDvvhujLiJyfwrSz+ms6IEQbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvYmEyYTIzY2EtOTM1ZS0z MGI1LWIxNDUtM2QzYmIzNzJiMmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHcPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDSsS9BdUyK73SAqkVyWkJLkW6HKqbg41NOddyxl2xYFZVCpsWPDUMu t69M7gllXvz6H3JuinkvvX9lNGTv6LkOiiqzjCZcr7qp/iWhVxFEHrKWsY//BfEa MaVoFBv4ycxw3SALQrYonH2p7LMoObeROmv3gkzhR6WkOtVCg95IJE42QbrLHAnu dTBMoF52BtjG7QSn5DDXbkgYJh3IpAhoCJhdZhHe5b8Bo6oNvXKVc+2nysKObPox ZZ+Pz0mNHCXnzQrTr/F0v6P0zvsyjtgAzm7ZYZatE2oNrOllXotplD0jHwWuVHLT D6W3N2Ky8J2CW73xIXWCtMqrQWn137k= -----END CERTIFICATE-----Generated at Wed Oct 14 10:07:42 2026 by rpki-client