$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ba0ea17e-dac9-3ee8-a70a-dc8aebab6e54.roa File: ba0ea17e-dac9-3ee8-a70a-dc8aebab6e54.roa (raw, json) Hash identifier: EBRJfMKksBFQToQaehvYhDjiBIUaQAGzFufZ161U0hw= Subject key identifier: 4B:41:EE:33:51:83:9F:B0:6F:FE:97:94:40:1C:B8:1C:94:78:E8:36 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AE2FBC7606978D1B8E7E35580 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ba0ea17e-dac9-3ee8-a70a-dc8aebab6e54.roa Signing time: Sun 17 Aug 2025 13:00:41 +0000 ROA not before: Sun 17 Aug 2025 13:00:41 +0000 ROA not after: Sat 15 Nov 2025 14:00:41 +0000 asID: 134578 IP address blocks: 206.54.11.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e2:fb:c7:60:69:78:d1:b8:e7:e3:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 17 13:00:41 2025 GMT Not After : Nov 15 14:00:41 2025 GMT Subject: CN=e323a30d-1748-4707-9db2-443f93e5851e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:70:6f:62:8d:bc:da:15:d5:58:4a:23:cd:fb: a3:5f:0e:12:17:d2:cd:a8:4d:32:eb:1c:b4:2e:10: 32:ed:95:37:00:9b:c4:cd:b3:7e:94:04:60:4d:1a: f4:70:b1:76:a5:78:1e:2e:3e:24:e3:4f:cf:13:d1: 94:d9:75:b6:0e:4e:2e:d7:32:c3:ff:1c:47:e7:96: 76:84:f6:0d:1a:eb:56:a2:20:5e:1d:00:d2:1d:d5: 0d:bf:b0:52:31:8a:0f:85:6d:7c:42:7d:5a:ac:15: 5c:b1:a9:fc:b8:b8:a4:88:dd:91:fe:e8:31:5b:fd: 72:16:cd:45:0f:9a:b6:40:9a:ae:10:2c:29:ea:40: 62:4b:43:5d:ba:c1:38:53:c8:cb:5c:e4:2f:83:8e: 7e:88:63:79:c8:a4:8b:52:d2:4b:62:99:ec:a3:d8: b8:37:6e:65:b0:98:7f:0d:40:53:8f:92:e3:33:06: 19:5a:91:52:e5:45:cb:28:b1:bb:7a:19:15:94:74: 4a:be:73:0c:93:8d:7f:e8:b0:cb:4f:3f:f1:a7:f0: 58:c0:7b:93:8f:e3:10:6b:f9:98:0d:36:34:8a:3c: 22:4e:5d:d4:bd:16:5b:53:01:c2:27:b8:03:eb:8f: 1c:2e:24:19:2f:b9:67:33:54:18:a9:bf:3c:27:14: 1a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:41:EE:33:51:83:9F:B0:6F:FE:97:94:40:1C:B8:1C:94:78:E8:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ba0ea17e-dac9-3ee8-a70a-dc8aebab6e54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 206.54.11.0/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:77:ac:36:30:97:2c:52:70:40:b9:0a:11:b1:c1:ac:85:9b: fc:d5:5d:3b:20:00:64:44:06:6b:d3:bf:6f:9d:be:bb:bd:e5: 38:cd:ae:59:36:bf:58:6b:b6:70:f4:c8:fd:f3:79:4e:a4:35: 6c:8d:dd:32:b4:e9:78:ac:f2:de:a4:f4:a4:f6:c3:35:56:be: 11:cd:8c:23:5f:69:45:a0:17:10:7d:74:d8:73:f9:20:1d:59: b9:45:c0:fc:0e:99:8b:d6:9b:e3:2c:a2:2b:b2:d7:b0:5d:ec: 58:ab:e9:b9:98:fb:09:53:a9:c0:bb:8c:07:02:80:f2:cc:97: a7:ff:28:8e:e3:3e:d6:9f:cc:9c:06:3b:ea:8f:e8:98:f4:02: 82:43:54:c9:6a:c2:07:05:79:1e:69:52:0d:e0:9e:58:3a:5f: 9e:0c:0a:6d:8a:ba:74:66:a9:dc:ee:e7:9e:c5:fe:52:d9:9d: c0:15:f5:38:cc:c2:7d:b4:5f:6f:46:e5:d0:c4:1d:47:93:59: 25:de:f7:d5:79:fe:24:11:f2:27:ec:ee:d7:d2:d8:4a:4b:6a: 6c:e3:72:cb:c2:69:25:7d:f3:bb:52:86:7e:c7:3b:fb:5d:e8: 77:2c:9a:a1:56:2c:82:e2:4e:a7:de:ac:e3:12:9b:26:ed:c6: df:9a:cf:a3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEri+8dgaXjRuOfjVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgxNzEzMDA0MVoXDTI1MTExNTE0MDA0MVowLzEtMCsGA1UEAxMk ZTMyM2EzMGQtMTc0OC00NzA3LTlkYjItNDQzZjkzZTU4NTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33BvYo282hXVWEojzfujXw4SF9LNqE0y6xy0 LhAy7ZU3AJvEzbN+lARgTRr0cLF2pXgeLj4k40/PE9GU2XW2Dk4u1zLD/xxH55Z2 hPYNGutWoiBeHQDSHdUNv7BSMYoPhW18Qn1arBVcsan8uLikiN2R/ugxW/1yFs1F D5q2QJquECwp6kBiS0NdusE4U8jLXOQvg45+iGN5yKSLUtJLYpnso9i4N25lsJh/ DUBTj5LjMwYZWpFS5UXLKLG7ehkVlHRKvnMMk41/6LDLTz/xp/BYwHuTj+MQa/mY DTY0ijwiTl3UvRZbUwHCJ7gD648cLiQZL7lnM1QYqb88JxQabwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEtB7jNRg5+wb/6XlEAcuByUeOg2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYmEwZWExN2UtZGFjOS0z ZWU4LWE3MGEtZGM4YWViYWI2ZTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHzjYLADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB9d6w2MJcsUnBAuQoRscGshZv81V07IABkRAZr079vnb67veU4za5Z Nr9Ya7Zw9Mj983lOpDVsjd0ytOl4rPLepPSk9sM1Vr4RzYwjX2lFoBcQfXTYc/kg HVm5RcD8DpmL1pvjLKIrstewXexYq+m5mPsJU6nAu4wHAoDyzJen/yiO4z7Wn8yc Bjvqj+iY9AKCQ1TJasIHBXkeaVIN4J5YOl+eDAptirp0Zqnc7ueexf5S2Z3AFfU4 zMJ9tF9vRuXQxB1Hk1kl3vfVef4kEfIn7O7X0thKS2ps43LLwmklffO7UoZ+xzv7 Xeh3LJqhViyC4k6n3qzjEpsm7cbfms+j -----END CERTIFICATE-----Generated at Sat Aug 23 14:52:01 2025 by rpki-client