$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/a973be6d-e115-33cf-9248-c6c35ab8897d.roa File: a973be6d-e115-33cf-9248-c6c35ab8897d.roa (raw, json) Hash identifier: ol9EdpufrR79SvfXoX6Dc5EKdGKVu+VmIOdBKz2sU6Y= Subject key identifier: 0C:9B:CC:4C:B9:2F:62:3C:48:E3:60:00:AA:93:4C:A0:27:41:68:E6 Certificate issuer: /CN=ba461ed6-9748-4005-b669-8946003e1ae1 Certificate serial: 010D0C9F4328584B7F520EF1191699E6302D2540 Authority key identifier: 86:FF:2D:22:FE:C4:48:05:84:E8:92:00:D8:2D:7A:2E:A3:82:9E:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/a973be6d-e115-33cf-9248-c6c35ab8897d.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 4246 IP address blocks: 128.235.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:0e:f1:19:16:99:e6:30:2d:25:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba461ed6-9748-4005-b669-8946003e1ae1 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=0c934558-8317-4864-96aa-ec025ac8b477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4e:00:43:05:89:c4:d9:43:6c:92:17:03:96: 62:6c:ef:a5:0a:67:43:bb:95:fe:3a:8c:76:3c:07: bf:d9:8f:60:af:ce:dc:6b:ee:02:22:13:4d:fc:17: 70:cf:c7:62:77:ed:2c:84:02:cc:1f:b6:77:68:c4: d0:1c:a8:75:0d:e0:89:d8:5a:9c:5a:81:1a:ee:3a: fb:c0:09:03:a7:51:a1:6c:1f:11:6b:fd:2e:b1:dc: 3e:09:bc:d8:30:49:da:21:91:8f:a3:52:9f:72:f8: 07:d0:b6:e4:e5:77:71:a5:ed:78:c1:a2:f1:07:e6: 38:55:b5:38:f4:54:0a:dc:70:33:27:42:4e:2d:3f: 35:02:c5:1d:b9:51:02:4e:a5:b4:3e:91:8f:69:c9: 2d:3d:d3:57:c5:51:2b:1a:9f:77:92:c0:ec:5c:54: 65:26:d6:ce:ed:d0:19:0d:40:b3:04:27:f1:b3:f1: ce:b9:97:61:15:2a:ed:11:18:00:93:13:ec:ee:46: b3:bc:3a:49:89:85:d8:50:50:d2:07:0f:a4:64:f0: eb:86:47:fe:f5:96:2a:79:e6:b1:dd:2d:aa:06:33: e3:cb:26:38:ad:08:e2:32:bb:4e:63:d6:64:f5:24: 39:9c:34:96:ac:84:26:e6:10:f8:8b:5c:e2:b7:06: 8b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:9B:CC:4C:B9:2F:62:3C:48:E3:60:00:AA:93:4C:A0:27:41:68:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/a973be6d-e115-33cf-9248-c6c35ab8897d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.crl X509v3 Authority Key Identifier: keyid:86:FF:2D:22:FE:C4:48:05:84:E8:92:00:D8:2D:7A:2E:A3:82:9E:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer sbgp-ipAddrBlock: critical IPv4: 128.235.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:4c:2d:1f:35:36:6f:2d:9e:8e:52:7d:e3:34:77:7d:2b:9a: 19:3d:0a:7b:1c:de:55:36:8a:14:87:61:5a:e4:e1:d6:d0:12: a8:48:c8:d9:63:17:66:4d:b1:9f:72:be:cb:07:cc:65:ae:68: a5:3b:e5:ba:0b:ee:f2:ed:01:5a:3b:b6:ab:39:46:90:02:22: 05:cd:11:2e:6e:b5:e0:7c:1a:1c:43:11:a1:6f:ba:69:91:f5: cc:eb:b7:9a:1b:86:b0:f4:e2:df:c6:ec:1a:14:5a:a4:fa:df: f7:5b:58:bb:ad:96:00:a0:c7:85:9a:04:b0:32:71:21:23:15: 94:66:9c:17:3e:cf:79:c3:c5:34:91:f8:04:ef:d3:b5:52:ac: 5f:b3:57:a1:06:f8:74:17:ce:30:12:b0:a6:14:b2:89:32:f8: 77:35:d4:94:0f:a1:83:0f:f1:f3:c1:bb:32:c6:07:f3:9f:05: 67:ff:15:19:e8:9b:02:94:8c:32:ab:f2:c9:b2:2d:cf:91:fa: fa:da:a5:09:61:35:32:79:97:e9:ec:9e:59:3a:f6:4c:24:42: a4:39:0e:bd:17:a6:e8:35:fe:08:9b:7d:87:cd:d1:f0:5a:f9: 80:a4:08:af:c1:47:e3:4e:84:19:25:c7:0f:7d:98:ad:3e:93: ec:4c:5e:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/Ug7xGRaZ5jAtJUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE0NjFlZDYtOTc0OC00MDA1LWI2NjktODk0NjAwM2Ux YWUxMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MGM5MzQ1NTgtODMxNy00ODY0LTk2YWEtZWMwMjVhYzhiNDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtE4AQwWJxNlDbJIXA5ZibO+lCmdDu5X+Oox2 PAe/2Y9gr87ca+4CIhNN/Bdwz8did+0shALMH7Z3aMTQHKh1DeCJ2FqcWoEa7jr7 wAkDp1GhbB8Ra/0usdw+CbzYMEnaIZGPo1KfcvgH0Lbk5Xdxpe14waLxB+Y4VbU4 9FQK3HAzJ0JOLT81AsUduVECTqW0PpGPacktPdNXxVErGp93ksDsXFRlJtbO7dAZ DUCzBCfxs/HOuZdhFSrtERgAkxPs7kazvDpJiYXYUFDSBw+kZPDrhkf+9ZYqeeax 3S2qBjPjyyY4rQjiMrtOY9Zk9SQ5nDSWrIQm5hD4i1zitwaL9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAybzEy5L2I8SONgAKqTTKAnQWjmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iYTQ2 MWVkNi05NzQ4LTQwMDUtYjY2OS04OTQ2MDAzZTFhZTEvYTk3M2JlNmQtZTExNS0z M2NmLTkyNDgtYzZjMzVhYjg4OTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmE0NjFlZDYtOTc0OC00MDA1LWI2 NjktODk0NjAwM2UxYWUxL2JhNDYxZWQ2LTk3NDgtNDAwNS1iNjY5LTg5NDYwMDNl MWFlMS5jcmwwHwYDVR0jBBgwFoAUhv8tIv7ESAWE6JIA2C16LqOCnnUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iYTQ2MWVkNi05NzQ4LTQwMDUtYjY2OS04OTQ2 MDAzZTFhZTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgOvEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlMLR81Nm8tno5SfeM0d30rmhk9Cnsc3lU2ihSHYVrk4dbQEqhIyNlj F2ZNsZ9yvssHzGWuaKU75boL7vLtAVo7tqs5RpACIgXNES5uteB8GhxDEaFvummR 9czrt5obhrD04t/G7BoUWqT63/dbWLutlgCgx4WaBLAycSEjFZRmnBc+z3nDxTSR +ATv07VSrF+zV6EG+HQXzjASsKYUsoky+Hc11JQPoYMP8fPBuzLGB/OfBWf/FRno mwKUjDKr8smyLc+R+vrapQlhNTJ5l+nsnlk69kwkQqQ5Dr0Xpug1/gibfYfN0fBa +YCkCK/BR+NOhBklxw99mK0+k+xMXnA= -----END CERTIFICATE-----Generated at Wed Oct 22 00:42:13 2025 by rpki-client