$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/954c50a4-bd0e-3297-895f-fd6430063eee.roa File: 954c50a4-bd0e-3297-895f-fd6430063eee.roa (raw, json) Hash identifier: mgqMnBYScBaX4c6WhseUEKlRZS8ncE0QaU80f6IVS4c= Subject key identifier: 4D:9D:EA:F3:78:58:03:40:0E:0D:53:7E:78:1C:6B:8F:53:60:82:AB Certificate issuer: /CN=ba6a95b3-dd3c-40de-9bd2-84357b74f801 Certificate serial: 010D0C9F4328584B583CAB8759F61CBA6CBFEBA0 Authority key identifier: 56:83:39:F0:DF:32:B7:60:C5:65:26:B1:9D:69:1F:6F:6C:44:A1:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/954c50a4-bd0e-3297-895f-fd6430063eee.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 16509 IP address blocks: 23.189.120.0/24 maxlen: 24 2602:f805::/48 maxlen: 48 2602:f805:900::/48 maxlen: 48 2602:f805:c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:ab:87:59:f6:1c:ba:6c:bf:eb:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6a95b3-dd3c-40de-9bd2-84357b74f801 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=7f7b03b1-0889-42fa-89aa-2af283581314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:07:cd:5f:41:32:c8:1e:e3:fa:d1:5f:22:72: fb:a9:30:3f:5e:d7:e8:1f:c2:97:a2:b1:da:23:3a: bc:f4:65:ac:b3:46:bf:d8:7c:26:92:a0:18:94:dc: 0c:f7:6d:cc:81:6d:b6:79:f2:8b:5a:93:7c:63:60: 4f:62:3d:43:98:45:20:d3:4c:9a:31:0b:74:80:2f: 95:b3:c7:97:7d:4e:ab:ac:09:5e:3b:ad:6f:00:d2: 0b:f3:2b:cb:c9:72:ed:2a:a0:59:50:77:52:b1:1e: 43:bf:a7:0b:c2:3f:16:4a:72:04:3c:bd:3d:c0:a0: da:b1:1c:cc:db:ba:0a:e6:cd:28:bb:cd:a6:17:1d: 3a:35:4a:14:f8:fe:ae:9d:83:f4:a2:77:dd:58:c8: ed:31:54:fc:5f:d6:8b:89:46:51:67:70:99:10:35: e9:6d:b9:20:6d:91:29:1b:02:b5:70:70:e5:64:4f: 85:4d:66:4b:3b:65:d7:de:03:6e:61:bb:bf:3f:95: 18:64:46:cf:35:97:06:b6:a4:2e:cd:44:09:55:bb: 36:c2:46:96:8c:ae:f3:15:90:ce:c8:d3:61:5e:3b: 22:b7:8c:c9:60:22:2d:d8:a8:be:77:f9:d2:f3:56: b5:c7:33:7e:d3:c5:ba:e9:7f:74:62:72:19:bb:d7: 86:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:9D:EA:F3:78:58:03:40:0E:0D:53:7E:78:1C:6B:8F:53:60:82:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/954c50a4-bd0e-3297-895f-fd6430063eee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.crl X509v3 Authority Key Identifier: keyid:56:83:39:F0:DF:32:B7:60:C5:65:26:B1:9D:69:1F:6F:6C:44:A1:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer sbgp-ipAddrBlock: critical IPv4: 23.189.120.0/24 IPv6: 2602:f805::/48 2602:f805:900::/48 2602:f805:c00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:2e:86:b3:63:7c:63:69:20:45:7e:8f:b3:1b:dd:dd:56:bb: d5:c3:d7:fd:ae:a0:93:68:fd:70:9d:44:16:06:4b:6d:c0:b9: 80:a4:a0:a3:fb:20:31:8a:d4:b6:e4:51:e5:c4:b7:f1:f0:c0: 68:9f:6a:e0:e6:c1:7c:c7:19:0e:10:76:39:53:a7:bb:89:a3: 15:4c:02:63:27:4a:b2:0e:ef:76:d5:41:b1:2d:8a:58:cc:08: f8:2b:9f:22:c6:23:af:48:65:85:1a:ee:80:6c:cb:55:e8:5c: 4b:ed:3d:5e:65:f1:6f:ea:c9:60:f2:b0:80:ca:ac:bc:5c:c8: c7:8e:4f:91:50:6e:12:83:96:31:77:bb:9a:37:02:44:0c:ac: 21:33:5b:b7:b0:1a:28:01:ff:fb:82:2f:e0:61:f2:5c:1e:6a: db:a8:36:ad:b3:7a:7b:ab:95:c2:66:ed:08:a8:8c:5d:37:82: 50:09:ca:39:12:ba:c1:c2:a7:c2:89:13:55:c6:ab:ad:37:54: e3:ba:b1:e6:76:66:cb:1e:5c:68:b0:b8:51:49:96:ff:ff:94: f7:41:53:82:60:ca:3c:30:7e:59:a9:35:74:86:44:ff:e4:3a: ce:fb:9a:88:07:6c:b2:af:6d:55:21:d0:6b:20:5e:e8:df:40: 3a:20:b4:82 -----BEGIN CERTIFICATE----- MIIGZjCCBU6gAwIBAgIUAQ0Mn0MoWEtYPKuHWfYcumy/66AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE2YTk1YjMtZGQzYy00MGRlLTliZDItODQzNTdiNzRm ODAxMB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk N2Y3YjAzYjEtMDg4OS00MmZhLTg5YWEtMmFmMjgzNTgxMzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwfNX0EyyB7j+tFfInL7qTA/XtfoH8KXorHa Izq89GWss0a/2HwmkqAYlNwM923MgW22efKLWpN8Y2BPYj1DmEUg00yaMQt0gC+V s8eXfU6rrAleO61vANIL8yvLyXLtKqBZUHdSsR5Dv6cLwj8WSnIEPL09wKDasRzM 27oK5s0ou82mFx06NUoU+P6unYP0onfdWMjtMVT8X9aLiUZRZ3CZEDXpbbkgbZEp GwK1cHDlZE+FTWZLO2XX3gNuYbu/P5UYZEbPNZcGtqQuzUQJVbs2wkaWjK7zFZDO yNNhXjsit4zJYCIt2Ki+d/nS81a1xzN+08W66X90YnIZu9eGhQIDAQABo4IDeDCC A3QwHQYDVR0OBBYEFE2d6vN4WANADg1Tfngca49TYIKrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iYTZh OTViMy1kZDNjLTQwZGUtOWJkMi04NDM1N2I3NGY4MDEvOTU0YzUwYTQtYmQwZS0z Mjk3LTg5NWYtZmQ2NDMwMDYzZWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYmE2YTk1YjMtZGQzYy00MGRlLTli ZDItODQzNTdiNzRmODAxL2JhNmE5NWIzLWRkM2MtNDBkZS05YmQyLTg0MzU3Yjc0 ZjgwMS5jcmwwHwYDVR0jBBgwFoAUVoM58N8yt2DFZSaxnWkfb2xEoXMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iYTZhOTViMy1kZDNjLTQwZGUtOWJkMi04NDM1 N2I3NGY4MDEuY2VyMEIGCCsGAQUFBwEHAQH/BDMwMTAMBAIAATAGAwQAF714MCEE AgACMBsDBwAmAvgFAAADBwAmAvgFCQADBwAmAvgFDAAwVAYDVR0gAQH/BEowSDBG BggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9y ZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEATS6Gs2N8 Y2kgRX6Psxvd3Va71cPX/a6gk2j9cJ1EFgZLbcC5gKSgo/sgMYrUtuRR5cS38fDA aJ9q4ObBfMcZDhB2OVOnu4mjFUwCYydKsg7vdtVBsS2KWMwI+CufIsYjr0hlhRru gGzLVehcS+09XmXxb+rJYPKwgMqsvFzIx45PkVBuEoOWMXe7mjcCRAysITNbt7Aa KAH/+4Iv4GHyXB5q26g2rbN6e6uVwmbtCKiMXTeCUAnKORK6wcKnwokTVcarrTdU 47qx5nZmyx5caLC4UUmW//+U90FTgmDKPDB+Wak1dIZE/+Q6zvuaiAdssq9tVSHQ ayBe6N9AOiC0gg== -----END CERTIFICATE-----Generated at Mon Oct 20 18:16:13 2025 by rpki-client