$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/badaea97-a20a-3ae2-9d3b-b1f6549d00ba.roa File: badaea97-a20a-3ae2-9d3b-b1f6549d00ba.roa (raw, json) Hash identifier: holUMrBQ9H4VBgoOfhJ5ZVAHVEpkN0KfZBgqQ0tD6C8= Subject key identifier: 40:44:DB:DD:C9:FF:84:17:65:D6:AB:A2:A1:7A:B1:DA:95:45:4F:DD Certificate issuer: /CN=6528c9ac-3735-430d-99f2-7ac01944d688 Certificate serial: 010D0C9F4328584B785745EB23157A2F9E584F00 Authority key identifier: 64:79:50:96:C9:A4:0D:34:86:46:BD:1D:64:20:0D:DB:7C:9D:BA:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/badaea97-a20a-3ae2-9d3b-b1f6549d00ba.roa Signing time: Fri 10 Oct 2025 01:00:30 +0000 ROA not before: Fri 10 Oct 2025 01:00:30 +0000 ROA not after: Thu 08 Jan 2026 02:00:30 +0000 asID: 54696 IP address blocks: 216.181.164.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:78:57:45:eb:23:15:7a:2f:9e:58:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6528c9ac-3735-430d-99f2-7ac01944d688 Validity Not Before: Oct 10 01:00:30 2025 GMT Not After : Jan 8 02:00:30 2026 GMT Subject: CN=854b6060-0574-4333-8cba-96f4d05e779d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:42:ef:9b:92:9f:8a:1f:7b:0f:d7:2e:96:4b: d8:c3:af:af:ac:8e:62:e4:58:78:87:f7:c4:d1:4b: c3:ca:c6:18:08:c2:04:cb:bc:ef:b7:ed:ec:c0:4c: 21:8c:08:a8:97:f6:8b:7a:b8:52:1a:f5:ee:7e:e8: 18:6b:c6:3f:78:4e:c7:b4:ea:6b:3d:90:8f:56:1b: a4:a3:1c:e5:64:29:cc:2b:92:25:9b:30:df:05:74: 2b:1d:83:56:bf:0f:19:3a:79:d3:6b:34:51:b2:f2: e3:de:c1:00:8a:dc:b3:1b:09:9c:a3:c6:20:f7:b4: 65:de:c3:95:72:f3:57:7a:0c:dd:7b:6c:70:c2:c9: 32:69:f5:93:40:76:83:59:07:3c:37:c7:c5:0f:bd: 18:f2:4b:f6:06:a4:a1:b5:89:3a:a1:fb:4d:17:db: f8:7b:df:b7:ae:f0:ee:15:00:c1:c3:53:90:8d:27: 4f:7a:c9:a7:14:3d:14:d0:04:82:55:0e:e6:6b:0c: 16:34:8d:cb:30:bc:07:e0:02:c5:7f:b7:c9:3a:da: 6b:9f:a5:8d:d0:5c:91:0b:83:47:1b:bd:ad:6a:fc: 17:dc:16:cb:3b:f7:ab:9c:24:13:0c:07:c4:74:3f: f3:50:06:08:17:38:83:e8:13:8f:de:c8:be:5f:ee: 54:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:44:DB:DD:C9:FF:84:17:65:D6:AB:A2:A1:7A:B1:DA:95:45:4F:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/badaea97-a20a-3ae2-9d3b-b1f6549d00ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.crl X509v3 Authority Key Identifier: keyid:64:79:50:96:C9:A4:0D:34:86:46:BD:1D:64:20:0D:DB:7C:9D:BA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer sbgp-ipAddrBlock: critical IPv4: 216.181.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:fd:69:74:04:53:83:03:08:d1:61:9a:7a:22:60:85:78:45: ea:7e:d0:c2:e5:c9:da:c4:96:2c:43:ed:7f:c5:40:69:02:b0: b1:c5:02:4b:28:2c:23:b5:d9:f1:71:1b:a0:78:04:2d:c3:fa: 37:55:a6:67:c3:63:46:4c:b7:84:d4:dd:b3:3a:5f:6b:d2:c2: f2:2d:27:f7:9e:7b:55:c6:0e:ad:5a:ae:f8:da:b2:75:c8:3b: 13:19:47:05:66:e1:69:02:97:e4:bd:e1:a8:c7:14:03:ef:0a: 81:39:12:95:b6:16:d7:6e:03:21:95:b6:ec:74:8e:b6:58:d5: 2a:48:ca:c8:4c:03:53:de:aa:7d:4a:17:77:9f:2b:a2:5a:f8: 9b:28:5b:bf:e9:2b:ef:93:4f:47:f1:c7:d4:29:ff:ee:74:48: 3c:5e:1d:50:0a:55:f7:d0:d4:dc:22:11:21:3b:ae:6e:cb:7c: 18:35:83:97:d3:3b:5a:ec:d6:88:27:76:e6:7c:0a:86:e9:c4: bb:d2:db:eb:d4:15:b6:25:5f:6e:38:18:73:3a:d1:89:bf:29: 7e:58:d6:be:06:45:b1:2c:15:c9:b8:d5:55:10:db:94:e5:d3: 6f:a9:a7:88:2c:37:20:0f:64:33:ac:d7:44:d6:5b:a7:45:1e: 1c:6d:59:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt4V0XrIxV6L55YTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjUyOGM5YWMtMzczNS00MzBkLTk5ZjItN2FjMDE5NDRk Njg4MB4XDTI1MTAxMDAxMDAzMFoXDTI2MDEwODAyMDAzMFowLzEtMCsGA1UEAxMk ODU0YjYwNjAtMDU3NC00MzMzLThjYmEtOTZmNGQwNWU3NzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkLvm5Kfih97D9culkvYw6+vrI5i5Fh4h/fE 0UvDysYYCMIEy7zvt+3swEwhjAiol/aLerhSGvXufugYa8Y/eE7HtOprPZCPVhuk oxzlZCnMK5IlmzDfBXQrHYNWvw8ZOnnTazRRsvLj3sEAityzGwmco8Yg97Rl3sOV cvNXegzde2xwwskyafWTQHaDWQc8N8fFD70Y8kv2BqShtYk6oftNF9v4e9+3rvDu FQDBw1OQjSdPesmnFD0U0ASCVQ7mawwWNI3LMLwH4ALFf7fJOtprn6WN0FyRC4NH G72tavwX3BbLO/ernCQTDAfEdD/zUAYIFziD6BOP3si+X+5ULQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBE293J/4QXZdaroqF6sdqVRU/dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NTI4 YzlhYy0zNzM1LTQzMGQtOTlmMi03YWMwMTk0NGQ2ODgvYmFkYWVhOTctYTIwYS0z YWUyLTlkM2ItYjFmNjU0OWQwMGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjUyOGM5YWMtMzczNS00MzBkLTk5 ZjItN2FjMDE5NDRkNjg4LzY1MjhjOWFjLTM3MzUtNDMwZC05OWYyLTdhYzAxOTQ0 ZDY4OC5jcmwwHwYDVR0jBBgwFoAUZHlQlsmkDTSGRr0dZCAN23yduvgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82NTI4YzlhYy0zNzM1LTQzMGQtOTlmMi03YWMw MTk0NGQ2ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2LWkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGv9aXQEU4MDCNFhmnoiYIV4Rep+0MLlydrElixD7X/FQGkCsLHFAkso LCO12fFxG6B4BC3D+jdVpmfDY0ZMt4TU3bM6X2vSwvItJ/eee1XGDq1arvjasnXI OxMZRwVm4WkCl+S94ajHFAPvCoE5EpW2FtduAyGVtux0jrZY1SpIyshMA1Peqn1K F3efK6Ja+JsoW7/pK++TT0fxx9Qp/+50SDxeHVAKVffQ1NwiESE7rm7LfBg1g5fT O1rs1ognduZ8CobpxLvS2+vUFbYlX244GHM60Ym/KX5Y1r4GRbEsFcm41VUQ25Tl 02+pp4gsNyAPZDOs10TWW6dFHhxtWXg= -----END CERTIFICATE-----Generated at Wed Oct 22 00:42:13 2025 by rpki-client