$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/acb1cfa6-ba72-3f9c-a10d-430c59209c15.roa File: acb1cfa6-ba72-3f9c-a10d-430c59209c15.roa (raw, json) Hash identifier: dRpEXnAtOidf7x5Z5f7ARYyA0OclXfmTz1NC8xTuNtI= Subject key identifier: 5B:AC:42:EE:85:7E:BB:1A:2F:C2:92:DC:13:26:CF:0E:F5:14:D4:6F Certificate issuer: /CN=ba6a95b3-dd3c-40de-9bd2-84357b74f801 Certificate serial: 010D0C9F4328584B87B23EC4164E51BD4A943600 Authority key identifier: 56:83:39:F0:DF:32:B7:60:C5:65:26:B1:9D:69:1F:6F:6C:44:A1:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/acb1cfa6-ba72-3f9c-a10d-430c59209c15.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 19814 IP address blocks: 23.189.120.0/24 maxlen: 24 2602:f805::/48 maxlen: 48 2602:f805:800::/48 maxlen: 48 2602:f805:900::/48 maxlen: 48 2602:f805:a00::/48 maxlen: 48 2602:f805:b00::/48 maxlen: 48 2602:f805:c00::/48 maxlen: 48 2602:f805:d00::/48 maxlen: 48 2602:f805:e00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:3e:c4:16:4e:51:bd:4a:94:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6a95b3-dd3c-40de-9bd2-84357b74f801 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=45356743-b2f3-4a8c-a9dc-8d51b989b3b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:26:3c:41:1d:8d:dc:e9:c8:a6:d5:6c:df:ed: d1:da:99:b0:72:1d:a9:9f:13:a9:2b:79:93:0b:cd: ad:81:16:21:1e:74:e8:78:a0:96:80:73:30:76:86: d5:6b:b7:3b:d5:45:f6:1f:ee:08:12:f8:5b:db:af: d2:99:98:da:5a:35:fa:82:de:9f:92:1e:dc:fe:5b: b0:6f:19:36:b6:93:fe:cc:c8:d9:3e:a0:d3:14:86: 8a:60:5f:bb:f6:12:6f:f2:90:12:47:0a:cb:42:8d: 7c:8f:c2:37:b7:b5:dd:b2:8a:84:68:40:ca:91:5a: d6:c1:1a:aa:14:b1:42:7b:19:33:18:e3:70:15:55: d2:b7:dc:c7:27:e6:76:3b:81:7a:73:c0:93:05:77: cf:5d:2a:3e:e8:d9:f7:c4:a5:42:e4:7c:b8:f7:a2: 5e:3a:1d:da:91:0c:77:85:58:ec:50:58:97:dd:9d: b0:64:21:46:c0:0c:a9:aa:33:36:84:3a:33:3c:59: 34:50:a8:23:b6:c7:bb:5c:1f:97:e3:cb:c7:f3:c6: ae:28:17:1d:3a:7e:fa:9e:ca:f3:98:d1:a6:cd:77: 57:9a:f8:99:6f:f3:48:b2:96:ac:e1:e1:b3:a7:9b: 04:2d:a5:97:1c:5c:96:36:eb:cd:5a:53:0f:ad:30: 15:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:AC:42:EE:85:7E:BB:1A:2F:C2:92:DC:13:26:CF:0E:F5:14:D4:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/acb1cfa6-ba72-3f9c-a10d-430c59209c15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.crl X509v3 Authority Key Identifier: keyid:56:83:39:F0:DF:32:B7:60:C5:65:26:B1:9D:69:1F:6F:6C:44:A1:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer sbgp-ipAddrBlock: critical IPv4: 23.189.120.0/24 IPv6: 2602:f805::/48 2602:f805:800::/48 2602:f805:900::/48 2602:f805:a00::/48 2602:f805:b00::/48 2602:f805:c00::/48 2602:f805:d00::/48 2602:f805:e00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:26:10:ac:b0:39:56:d3:7b:11:41:eb:6a:2b:2c:d1:2e:e4: a8:10:47:5d:29:88:e2:48:87:5f:06:f5:53:43:0e:42:29:8c: 58:27:eb:56:d8:f0:b8:74:ab:d6:db:4e:f1:44:0e:82:76:65: e2:92:c9:06:cd:2e:72:eb:f1:96:ee:af:90:29:d7:13:3a:b8: 71:a0:2f:a9:df:4d:48:91:cf:b3:f1:32:14:17:57:07:6f:17: 46:9a:fe:74:bc:79:4d:fe:40:a4:a2:a0:d4:80:95:7f:ae:66: 70:f0:41:68:3d:ca:d1:3a:b8:52:06:e8:a4:30:58:27:01:57: 50:d3:0a:21:b4:2f:68:25:ea:f1:6b:e0:0e:0e:8d:24:75:7d: c6:b8:8e:6c:a2:cf:b2:d7:05:cf:12:09:6c:b3:ed:96:ff:d1: ad:f7:97:91:ec:43:15:5e:99:ce:07:64:e2:9b:cb:e9:b8:d5: af:9d:07:dd:d9:18:09:fd:ae:c7:6e:ba:e1:b5:3e:f0:34:22: 15:30:97:50:1b:0b:ca:c4:38:ad:2d:96:e9:e0:9b:59:ea:c3: 91:ad:95:aa:4f:d6:d7:19:58:0b:1b:f8:c8:56:17:d9:3e:34: c5:51:41:6d:ba:ce:28:15:d5:ef:a7:00:7c:7f:1f:47:ce:99: 22:e3:21:20 -----BEGIN CERTIFICATE----- MIIGkzCCBXugAwIBAgIUAQ0Mn0MoWEuHsj7EFk5RvUqUNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE2YTk1YjMtZGQzYy00MGRlLTliZDItODQzNTdiNzRm ODAxMB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk NDUzNTY3NDMtYjJmMy00YThjLWE5ZGMtOGQ1MWI5ODliM2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCY8QR2N3OnIptVs3+3R2pmwch2pnxOpK3mT C82tgRYhHnToeKCWgHMwdobVa7c71UX2H+4IEvhb26/SmZjaWjX6gt6fkh7c/luw bxk2tpP+zMjZPqDTFIaKYF+79hJv8pASRwrLQo18j8I3t7XdsoqEaEDKkVrWwRqq FLFCexkzGONwFVXSt9zHJ+Z2O4F6c8CTBXfPXSo+6Nn3xKVC5Hy496JeOh3akQx3 hVjsUFiX3Z2wZCFGwAypqjM2hDozPFk0UKgjtse7XB+X48vH88auKBcdOn76nsrz mNGmzXdXmviZb/NIspas4eGzp5sELaWXHFyWNuvNWlMPrTAVbwIDAQABo4IDpTCC A6EwHQYDVR0OBBYEFFusQu6FfrsaL8KS3BMmzw71FNRvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iYTZh OTViMy1kZDNjLTQwZGUtOWJkMi04NDM1N2I3NGY4MDEvYWNiMWNmYTYtYmE3Mi0z ZjljLWExMGQtNDMwYzU5MjA5YzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYmE2YTk1YjMtZGQzYy00MGRlLTli ZDItODQzNTdiNzRmODAxL2JhNmE5NWIzLWRkM2MtNDBkZS05YmQyLTg0MzU3Yjc0 ZjgwMS5jcmwwHwYDVR0jBBgwFoAUVoM58N8yt2DFZSaxnWkfb2xEoXMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iYTZhOTViMy1kZDNjLTQwZGUtOWJkMi04NDM1 N2I3NGY4MDEuY2VyMG8GCCsGAQUFBwEHAQH/BGAwXjAMBAIAATAGAwQAF714ME4E AgACMEgDBwAmAvgFAAADBwAmAvgFCAADBwAmAvgFCQADBwAmAvgFCgADBwAmAvgF CwADBwAmAvgFDAADBwAmAvgFDQADBwAmAvgFDgAwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAbSYQrLA5VtN7 EUHraiss0S7kqBBHXSmI4kiHXwb1U0MOQimMWCfrVtjwuHSr1ttO8UQOgnZl4pLJ Bs0ucuvxlu6vkCnXEzq4caAvqd9NSJHPs/EyFBdXB28XRpr+dLx5Tf5ApKKg1ICV f65mcPBBaD3K0Tq4UgbopDBYJwFXUNMKIbQvaCXq8WvgDg6NJHV9xriObKLPstcF zxIJbLPtlv/RrfeXkexDFV6Zzgdk4pvL6bjVr50H3dkYCf2ux2664bU+8DQiFTCX UBsLysQ4rS2W6eCbWerDka2Vqk/W1xlYCxv4yFYX2T40xVFBbbrOKBXV76cAfH8f R86ZIuMhIA== -----END CERTIFICATE-----Generated at Mon Oct 20 18:16:18 2025 by rpki-client