$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/bde1949e-0125-3cca-b3f6-350aaa861a6e.roa File: bde1949e-0125-3cca-b3f6-350aaa861a6e.roa (raw, json) Hash identifier: E8cvqF1PPHXNaXDPlNrVYCllc0qAQ1FI4OSYGLmsxr4= Subject key identifier: 16:5C:89:92:88:89:4F:F5:10:85:E9:20:65:50:25:D5:F8:CC:77:04 Certificate issuer: /CN=ba6a95b3-dd3c-40de-9bd2-84357b74f801 Certificate serial: 010D0C9F4328584B583CAB74F511D8BF0F5A5980 Authority key identifier: 56:83:39:F0:DF:32:B7:60:C5:65:26:B1:9D:69:1F:6F:6C:44:A1:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/bde1949e-0125-3cca-b3f6-350aaa861a6e.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 14618 IP address blocks: 23.189.120.0/24 maxlen: 24 2602:f805::/48 maxlen: 48 2602:f805:900::/48 maxlen: 48 2602:f805:c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:ab:74:f5:11:d8:bf:0f:5a:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6a95b3-dd3c-40de-9bd2-84357b74f801 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=ab7cdae7-7915-4153-8bbd-900e4f897268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a1:46:01:b7:21:bd:c6:1b:0d:11:10:f5:58: 2c:d3:89:28:df:d8:ea:d4:91:d1:38:85:c2:96:f7: 06:ab:a1:11:e1:89:e8:0a:23:c3:a8:7b:a3:43:43: 49:19:48:d4:46:2c:32:a5:96:c3:8d:92:e3:55:b0: c9:91:c7:dc:f9:36:11:7f:a8:f4:4c:fc:ed:7d:9f: a3:f7:01:74:a4:c9:60:1e:20:ad:89:af:dc:5f:1c: 9d:90:f5:ba:8d:b6:e1:a4:7e:44:c9:c3:7d:b6:de: f5:39:cb:1d:dc:ce:48:73:e9:d7:de:5b:aa:07:6b: 77:f7:75:31:17:ef:dc:55:a1:3f:77:3b:4f:94:c2: f2:85:5a:8f:f3:c8:05:4b:50:42:9e:36:b4:97:59: 09:26:78:34:24:31:b1:83:1f:cb:a7:33:9c:ca:d6: 25:58:68:80:43:99:15:97:b2:f0:94:cf:5d:0f:16: 5d:28:18:7a:14:78:7a:45:4d:01:87:6f:ba:91:e7: cf:79:f2:46:4b:07:d7:fa:74:6a:c1:46:e1:7c:aa: 9e:c1:df:d5:e9:0b:48:57:d8:dc:ce:ed:b8:09:64: d2:4c:6a:af:cd:27:2b:4e:2f:82:de:ce:7a:89:74: 0d:ec:d6:58:f0:e9:5f:08:b4:e5:ae:c2:e3:d9:45: 28:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:5C:89:92:88:89:4F:F5:10:85:E9:20:65:50:25:D5:F8:CC:77:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/bde1949e-0125-3cca-b3f6-350aaa861a6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.crl X509v3 Authority Key Identifier: keyid:56:83:39:F0:DF:32:B7:60:C5:65:26:B1:9D:69:1F:6F:6C:44:A1:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer sbgp-ipAddrBlock: critical IPv4: 23.189.120.0/24 IPv6: 2602:f805::/48 2602:f805:900::/48 2602:f805:c00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:a2:fa:36:f7:65:83:1c:57:9b:2a:66:10:fb:ff:b2:1e:98: a6:a4:6f:4c:c3:ac:68:40:b3:d2:d3:48:2e:08:96:4a:44:d4: 43:40:07:17:ff:68:35:03:5e:2d:d0:72:6b:72:44:0e:11:71: 57:e0:80:25:2b:5c:c4:f9:5b:c3:1e:c5:ff:d0:f3:23:ee:9f: 2a:83:3c:4f:47:8c:c1:f6:b7:76:21:a7:68:b5:1a:67:7b:8b: 4b:f4:9d:cd:90:8c:87:4b:bb:46:ec:f0:08:53:4e:be:44:76: 31:70:bf:59:18:ee:71:a1:cb:d8:cf:73:1d:26:60:f9:c7:c0: 29:14:f4:a0:06:3b:42:fb:25:06:e8:71:26:4e:6f:2d:3c:f6: eb:cc:c4:58:d6:99:58:f5:c1:61:4f:e7:fd:70:3a:18:0a:b8: 72:28:ad:ff:c0:ac:57:f2:d9:ae:a5:6c:4a:d8:2b:4c:20:fc: 13:84:3b:b0:4f:a3:d3:a4:09:68:38:64:d4:57:e4:54:79:45: cb:7f:3f:8b:d7:2e:24:cb:50:60:59:a8:64:16:a1:11:d9:22: 85:4a:43:2d:e0:8a:ea:c4:2f:0d:8d:b3:5b:dc:69:c8:95:f8: 0a:a8:f7:72:03:da:48:d4:a3:8a:c8:8d:9f:5f:89:82:03:d9: b2:c3:9d:c1 -----BEGIN CERTIFICATE----- MIIGZjCCBU6gAwIBAgIUAQ0Mn0MoWEtYPKt09RHYvw9aWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE2YTk1YjMtZGQzYy00MGRlLTliZDItODQzNTdiNzRm ODAxMB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk YWI3Y2RhZTctNzkxNS00MTUzLThiYmQtOTAwZTRmODk3MjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaFGAbchvcYbDREQ9Vgs04ko39jq1JHROIXC lvcGq6ER4YnoCiPDqHujQ0NJGUjURiwypZbDjZLjVbDJkcfc+TYRf6j0TPztfZ+j 9wF0pMlgHiCtia/cXxydkPW6jbbhpH5EycN9tt71Ocsd3M5Ic+nX3luqB2t393Ux F+/cVaE/dztPlMLyhVqP88gFS1BCnja0l1kJJng0JDGxgx/LpzOcytYlWGiAQ5kV l7LwlM9dDxZdKBh6FHh6RU0Bh2+6kefPefJGSwfX+nRqwUbhfKqewd/V6QtIV9jc zu24CWTSTGqvzScrTi+C3s56iXQN7NZY8OlfCLTlrsLj2UUoEQIDAQABo4IDeDCC A3QwHQYDVR0OBBYEFBZciZKIiU/1EIXpIGVQJdX4zHcEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iYTZh OTViMy1kZDNjLTQwZGUtOWJkMi04NDM1N2I3NGY4MDEvYmRlMTk0OWUtMDEyNS0z Y2NhLWIzZjYtMzUwYWFhODYxYTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYmE2YTk1YjMtZGQzYy00MGRlLTli ZDItODQzNTdiNzRmODAxL2JhNmE5NWIzLWRkM2MtNDBkZS05YmQyLTg0MzU3Yjc0 ZjgwMS5jcmwwHwYDVR0jBBgwFoAUVoM58N8yt2DFZSaxnWkfb2xEoXMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iYTZhOTViMy1kZDNjLTQwZGUtOWJkMi04NDM1 N2I3NGY4MDEuY2VyMEIGCCsGAQUFBwEHAQH/BDMwMTAMBAIAATAGAwQAF714MCEE AgACMBsDBwAmAvgFAAADBwAmAvgFCQADBwAmAvgFDAAwVAYDVR0gAQH/BEowSDBG BggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9y ZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAYKL6Nvdl gxxXmypmEPv/sh6YpqRvTMOsaECz0tNILgiWSkTUQ0AHF/9oNQNeLdBya3JEDhFx V+CAJStcxPlbwx7F/9DzI+6fKoM8T0eMwfa3diGnaLUaZ3uLS/SdzZCMh0u7Ruzw CFNOvkR2MXC/WRjucaHL2M9zHSZg+cfAKRT0oAY7QvslBuhxJk5vLTz268zEWNaZ WPXBYU/n/XA6GAq4ciit/8CsV/LZrqVsStgrTCD8E4Q7sE+j06QJaDhk1FfkVHlF y38/i9cuJMtQYFmoZBahEdkihUpDLeCK6sQvDY2zW9xpyJX4Cqj3cgPaSNSjisiN n1+JggPZssOdwQ== -----END CERTIFICATE-----Generated at Sun Oct 19 23:20:44 2025 by rpki-client