$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098/ba50671d-5d04-3117-96b8-c41c4c1e09ea.roa File: ba50671d-5d04-3117-96b8-c41c4c1e09ea.roa (raw, json) Hash identifier: 8sG7QR7JxZZuXkBLxGe+TlSHSzgWdhDcIbwW6HOEUMM= Subject key identifier: 09:B7:37:16:C9:73:33:06:D5:3F:49:15:02:F4:2F:27:58:FF:1A:63 Certificate issuer: /CN=dfc88768-1b58-474d-a340-376827992098 Certificate serial: 010D0C9F4328584B27617E4A43DD3B6CD2082780 Authority key identifier: F5:46:A9:11:86:D2:32:49:64:CE:BB:C0:06:FE:B1:E4:46:07:6A:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098/ba50671d-5d04-3117-96b8-c41c4c1e09ea.roa Signing time: Thu 11 Sep 2025 01:00:33 +0000 ROA not before: Thu 11 Sep 2025 01:00:33 +0000 ROA not after: Wed 10 Dec 2025 02:00:33 +0000 asID: 401387 IP address blocks: 192.149.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098/dfc88768-1b58-474d-a340-376827992098.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098/dfc88768-1b58-474d-a340-376827992098.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:27:61:7e:4a:43:dd:3b:6c:d2:08:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfc88768-1b58-474d-a340-376827992098 Validity Not Before: Sep 11 01:00:33 2025 GMT Not After : Dec 10 02:00:33 2025 GMT Subject: CN=a500947d-1696-4491-b5a7-0a4bc7afa547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:21:63:3d:4d:7f:16:ef:6d:af:b7:ee:41:3b: ed:ff:29:6b:e2:86:29:1e:24:d7:56:0b:e9:92:30: 24:2a:11:05:2a:24:45:f3:48:b1:c1:91:9d:51:07: c7:87:96:70:29:76:56:ad:2a:37:ef:0c:a8:47:e2: 7d:bd:bb:66:ab:6c:a1:f9:f1:0b:19:6c:5c:0d:c9: 59:b8:e5:cc:8f:82:c9:d9:34:65:59:52:7b:f7:f8: 72:7a:f4:35:ff:a3:8a:9c:9c:dd:cf:d2:14:88:1b: 41:e4:fc:72:23:b9:10:54:a9:b5:b7:5d:9f:5f:ce: bd:2f:1c:91:a5:d8:67:f3:30:ab:56:1b:72:07:fa: e9:8d:0f:1a:8e:59:1d:7e:55:d7:92:68:96:22:03: c8:1a:92:0b:98:8d:f8:6a:9a:b9:be:8b:62:02:7e: 7b:7b:bc:ab:02:d2:23:d1:4c:67:28:b1:41:d7:0e: 3b:eb:66:79:4a:be:66:f4:b3:b2:b2:02:ea:4c:37: 03:59:76:65:5d:a3:bb:5a:a8:86:6d:4b:c7:69:77: 95:42:87:4f:4e:09:ca:06:b7:d9:8f:9b:a4:cd:1f: d6:18:e4:9d:d3:af:2d:b3:11:6b:3f:30:43:62:33: 97:36:5d:2e:7b:6a:30:d1:c5:96:33:de:b9:9d:62: fa:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B7:37:16:C9:73:33:06:D5:3F:49:15:02:F4:2F:27:58:FF:1A:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098/ba50671d-5d04-3117-96b8-c41c4c1e09ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098/dfc88768-1b58-474d-a340-376827992098.crl X509v3 Authority Key Identifier: keyid:F5:46:A9:11:86:D2:32:49:64:CE:BB:C0:06:FE:B1:E4:46:07:6A:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098.cer sbgp-ipAddrBlock: critical IPv4: 192.149.83.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:cb:69:c1:bf:30:58:b5:36:ec:80:7c:03:88:44:9c:8b:47: 0c:ce:e7:44:4a:42:91:71:67:a1:31:bd:2b:64:dd:74:5c:6c: af:3c:08:08:c3:27:f6:57:91:ca:10:ed:6e:d1:e1:d4:b8:4d: 35:19:f5:79:06:45:a4:74:75:ac:1d:e1:9f:39:29:80:b2:39: a3:d2:b4:48:86:10:df:c8:9c:f6:f3:78:51:30:e8:df:75:ef: 77:2d:34:60:2a:35:a1:b5:5d:81:44:e7:3d:8c:8c:9b:83:79: 08:92:6c:03:ba:5d:8b:27:c0:2a:9d:88:57:9d:c5:05:f2:2a: a6:ff:d7:3f:46:8b:b1:2b:72:b6:88:e5:5d:35:06:d5:01:bd: f9:d0:f3:22:5c:fa:3c:8b:48:d5:92:19:55:de:6f:3d:28:68: 86:12:7d:9d:c5:6d:a6:ab:c7:46:08:bf:dd:df:43:81:b6:45: 4e:78:a7:bc:a8:f8:7b:f2:e7:bf:da:5e:cd:1f:b7:5f:0a:6a: 83:a4:4b:79:d5:09:67:32:be:13:e7:b2:61:8b:32:0a:a4:3b: d5:5e:6f:77:bb:aa:8c:eb:9e:b0:ca:28:ca:54:cd:ed:ee:53: 93:e3:e5:4b:94:31:17:31:b7:30:a5:0f:f8:d3:9b:40:ad:74: 4d:87:c6:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsnYX5KQ907bNIIJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZjODg3NjgtMWI1OC00NzRkLWEzNDAtMzc2ODI3OTky MDk4MB4XDTI1MDkxMTAxMDAzM1oXDTI1MTIxMDAyMDAzM1owLzEtMCsGA1UEAxMk YTUwMDk0N2QtMTY5Ni00NDkxLWI1YTctMGE0YmM3YWZhNTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiFjPU1/Fu9tr7fuQTvt/ylr4oYpHiTXVgvp kjAkKhEFKiRF80ixwZGdUQfHh5ZwKXZWrSo37wyoR+J9vbtmq2yh+fELGWxcDclZ uOXMj4LJ2TRlWVJ79/hyevQ1/6OKnJzdz9IUiBtB5PxyI7kQVKm1t12fX869LxyR pdhn8zCrVhtyB/rpjQ8ajlkdflXXkmiWIgPIGpILmI34apq5votiAn57e7yrAtIj 0UxnKLFB1w4762Z5Sr5m9LOysgLqTDcDWXZlXaO7WqiGbUvHaXeVQodPTgnKBrfZ j5ukzR/WGOSd068tsxFrPzBDYjOXNl0ue2ow0cWWM965nWL6xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAm3NxbJczMG1T9JFQL0LydY/xpjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kZmM4 ODc2OC0xYjU4LTQ3NGQtYTM0MC0zNzY4Mjc5OTIwOTgvYmE1MDY3MWQtNWQwNC0z MTE3LTk2YjgtYzQxYzRjMWUwOWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGZjODg3NjgtMWI1OC00NzRkLWEz NDAtMzc2ODI3OTkyMDk4L2RmYzg4NzY4LTFiNTgtNDc0ZC1hMzQwLTM3NjgyNzk5 MjA5OC5jcmwwHwYDVR0jBBgwFoAU9UapEYbSMklkzrvABv6x5EYHaoIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kZmM4ODc2OC0xYjU4LTQ3NGQtYTM0MC0zNzY4 Mjc5OTIwOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJVTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbLacG/MFi1NuyAfAOIRJyLRwzO50RKQpFxZ6ExvStk3XRcbK88CAjD J/ZXkcoQ7W7R4dS4TTUZ9XkGRaR0dawd4Z85KYCyOaPStEiGEN/InPbzeFEw6N91 73ctNGAqNaG1XYFE5z2MjJuDeQiSbAO6XYsnwCqdiFedxQXyKqb/1z9Gi7ErcraI 5V01BtUBvfnQ8yJc+jyLSNWSGVXebz0oaIYSfZ3Fbaarx0YIv93fQ4G2RU54p7yo +Hvy57/aXs0ft18KaoOkS3nVCWcyvhPnsmGLMgqkO9Veb3e7qozrnrDKKMpUze3u U5Pj5UuUMRcxtzClD/jTm0CtdE2HxtU= -----END CERTIFICATE-----Generated at Mon Oct 20 13:53:50 2025 by rpki-client