$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ba5f6972-6e3a-3d8f-a3b7-c6b488cd5a1a.roa File: ba5f6972-6e3a-3d8f-a3b7-c6b488cd5a1a.roa (raw, json) Hash identifier: QoFvczdFKh1/p6xhB3m/+Yl926EbJtITM2d5MdFnyqU= Subject key identifier: 2C:9A:85:8A:1F:0F:F1:27:A5:C1:DF:3B:31:03:74:42:A3:D5:14:AE Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B0746B89F0638E632DA9A8420 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ba5f6972-6e3a-3d8f-a3b7-c6b488cd5a1a.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 203 IP address blocks: 192.25.56.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:b8:9f:06:38:e6:32:da:9a:84:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=9448ecb7-3203-48a2-9ee0-8b9514454dcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:77:07:c2:b9:8e:a7:b5:c7:16:93:37:8c:a7: 13:ed:90:06:5c:e7:28:3b:33:f9:bf:7b:0a:e3:37: 5a:d3:15:cd:43:84:31:85:c8:98:7c:82:86:da:7f: 95:2f:53:22:e2:ec:f5:cb:21:89:d2:40:a9:0d:45: 9a:5f:ac:20:1b:8b:2e:a8:16:23:33:64:84:83:9d: 73:22:27:cd:89:d4:dc:ec:d3:19:e1:a5:f7:55:11: 3d:d3:99:ff:53:c2:fe:9e:57:c8:fb:20:df:0d:19: eb:1c:3f:2a:26:25:bb:5c:85:8d:f4:87:9f:e9:39: 9a:54:ad:5b:80:b2:2e:6f:5d:a7:8e:f0:1e:56:dc: 0b:5d:48:68:39:61:86:aa:02:9b:0d:ff:10:bb:f4: 59:4d:86:10:75:cf:1b:85:8e:83:6a:5a:7f:e7:01: 5f:26:38:10:e1:d0:56:65:e5:a5:e6:f3:12:24:31: 5e:e0:43:0e:20:b4:26:d9:02:20:2e:be:1f:e8:74: b7:13:27:33:78:52:59:21:f5:0e:aa:64:65:20:3a: f1:29:8a:79:ce:1c:a4:19:42:46:27:14:52:9b:4f: ab:dc:ac:03:fe:ca:61:89:5b:c7:f7:79:72:2d:fb: 84:7c:00:96:3f:48:bb:68:11:16:73:23:55:88:f3: 2d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:9A:85:8A:1F:0F:F1:27:A5:C1:DF:3B:31:03:74:42:A3:D5:14:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ba5f6972-6e3a-3d8f-a3b7-c6b488cd5a1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 192.25.56.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:73:f4:be:60:c3:e9:06:a0:f6:60:e7:4d:83:07:e8:0b:b7: 89:d8:6e:ce:54:1a:88:09:2f:54:5b:1d:e1:6f:82:c3:01:47: 6f:1a:aa:81:4d:79:3e:a3:2c:f2:86:bb:f9:c9:cb:df:cd:73: 57:d0:0f:84:de:81:4d:96:5d:e8:5f:d2:ec:41:84:e6:c5:f5: 41:fe:d5:5e:a5:70:08:7d:ee:5c:18:d9:0e:c3:16:0b:fd:f3: 61:40:72:5b:49:7c:6e:b6:f7:22:ce:52:1d:ef:7a:8a:df:47: 81:3a:27:c9:1e:92:d1:55:82:48:2c:3b:e8:b1:ab:18:2b:af: 44:8e:c0:56:35:52:06:1d:cf:1a:04:25:a0:af:a7:8b:26:27: 91:75:d1:82:eb:e9:f9:eb:d5:86:d1:c7:28:2b:2a:d6:3c:5d: 54:1a:b4:78:63:1f:ad:7c:e7:1a:fb:c0:42:d4:a6:ab:92:d3: 98:15:00:df:45:50:f4:56:4b:68:ff:0c:5f:dd:a0:46:2d:37: 92:b9:33:8b:ce:3c:4d:86:be:ad:54:89:15:60:63:44:28:49: 53:c8:d1:6e:91:ad:1b:c1:54:ed:a0:91:74:93:e5:da:b2:a7: 1f:90:cd:c1:35:8b:18:b1:46:27:a0:b7:ca:0d:95:56:85:99: 43:0d:3d:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRrifBjjmMtqahCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk OTQ0OGVjYjctMzIwMy00OGEyLTllZTAtOGI5NTE0NDU0ZGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHcHwrmOp7XHFpM3jKcT7ZAGXOcoOzP5v3sK 4zda0xXNQ4QxhciYfIKG2n+VL1Mi4uz1yyGJ0kCpDUWaX6wgG4suqBYjM2SEg51z IifNidTc7NMZ4aX3VRE905n/U8L+nlfI+yDfDRnrHD8qJiW7XIWN9Ief6TmaVK1b gLIub12njvAeVtwLXUhoOWGGqgKbDf8Qu/RZTYYQdc8bhY6Dalp/5wFfJjgQ4dBW ZeWl5vMSJDFe4EMOILQm2QIgLr4f6HS3EyczeFJZIfUOqmRlIDrxKYp5zhykGUJG JxRSm0+r3KwD/sphiVvH93lyLfuEfACWP0i7aBEWcyNViPMt8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCyahYofD/EnpcHfOzEDdEKj1RSuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYmE1ZjY5NzItNmUzYS0z ZDhmLWEzYjctYzZiNDg4Y2Q1YTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwBk4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5z9L5gw+kGoPZg502DB+gLt4nYbs5UGogJL1RbHeFvgsMBR28aqoFN eT6jLPKGu/nJy9/Nc1fQD4TegU2WXehf0uxBhObF9UH+1V6lcAh97lwY2Q7DFgv9 82FAcltJfG629yLOUh3veorfR4E6J8kektFVgkgsO+ixqxgrr0SOwFY1UgYdzxoE JaCvp4smJ5F10YLr6fnr1YbRxygrKtY8XVQatHhjH6185xr7wELUpquS05gVAN9F UPRWS2j/DF/doEYtN5K5M4vOPE2Gvq1UiRVgY0QoSVPI0W6RrRvBVO2gkXST5dqy px+QzcE1ixixRiegt8oNlVaFmUMNPZg= -----END CERTIFICATE-----Generated at Mon Oct 20 01:59:33 2025 by rpki-client