$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c/ba884675-a4bc-3586-8ccc-a30e17668325.roa File: ba884675-a4bc-3586-8ccc-a30e17668325.roa (raw, json) Hash identifier: LZkeHDHtrfpEAAeSCP76nzi7GCLBuBChHXJnZlLS8v4= Subject key identifier: C0:4F:DD:C9:E4:61:95:90:E5:AC:BB:69:25:BC:75:51:78:32:A1:E9 Certificate issuer: /CN=cce65795-3b77-4225-98f0-89e8bfcf275c Certificate serial: 010D0C9F4328584B84E77BA248BBA205B3207800 Authority key identifier: 3D:C6:5C:AD:F9:44:55:92:95:C0:A5:6C:92:74:3F:00:6A:72:8B:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c/ba884675-a4bc-3586-8ccc-a30e17668325.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 8070 IP address blocks: 199.15.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c/cce65795-3b77-4225-98f0-89e8bfcf275c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c/cce65795-3b77-4225-98f0-89e8bfcf275c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:7b:a2:48:bb:a2:05:b3:20:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cce65795-3b77-4225-98f0-89e8bfcf275c Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=a5191ec8-9a00-44e3-ac35-a48b51627ccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1a:40:81:c2:89:95:11:58:d5:b1:1f:6c:fe: 66:63:e2:c6:b1:1f:a8:84:42:60:28:1b:ce:c1:a6: 67:4a:79:b6:17:21:31:3b:d3:12:c8:34:23:77:42: 1b:3b:93:6f:b5:0a:3f:18:d1:e8:d7:bc:fb:96:85: c7:3c:78:61:ec:18:9e:60:c5:06:43:a2:a7:89:3d: 16:4c:47:fb:e8:20:62:15:2e:15:b5:98:0d:e3:94: 8b:47:09:47:30:18:87:0d:8f:a4:f2:99:91:39:f9: 2a:d1:55:f8:8a:de:73:b0:ba:a1:bf:08:a8:f7:bc: b0:9d:7c:70:7b:13:22:df:94:35:2f:f4:8b:1f:6b: bb:fb:04:bf:28:fd:44:81:b2:31:5e:49:1a:04:98: 50:02:a4:34:9f:d4:f3:5a:06:4a:aa:d0:94:9d:d3: 05:63:f7:db:71:7a:54:bd:93:3a:ca:8a:5c:4c:a9: 8c:14:ad:ae:b4:a0:2f:0a:5f:48:c9:9b:a5:82:3c: 9a:37:f9:b8:d8:83:3e:6c:97:39:46:ff:ff:93:39: b4:2c:05:2f:fe:ac:2c:49:a0:dd:83:14:58:01:66: fb:62:a6:c1:a4:9a:e9:0d:5f:3e:1f:a0:6d:fe:ea: 6b:59:03:60:56:19:f9:c9:a5:da:b3:e2:fb:29:77: 20:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:4F:DD:C9:E4:61:95:90:E5:AC:BB:69:25:BC:75:51:78:32:A1:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c/ba884675-a4bc-3586-8ccc-a30e17668325.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c/cce65795-3b77-4225-98f0-89e8bfcf275c.crl X509v3 Authority Key Identifier: keyid:3D:C6:5C:AD:F9:44:55:92:95:C0:A5:6C:92:74:3F:00:6A:72:8B:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c.cer sbgp-ipAddrBlock: critical IPv4: 199.15.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:14:92:8a:70:22:14:e3:8f:ef:78:79:7b:38:f0:2a:38:d3: 2e:d4:ea:40:39:0a:fc:1a:68:91:5d:52:0d:21:a1:b8:e9:f4: 50:cc:49:44:5b:42:9b:5e:30:1b:19:e0:90:48:db:c3:92:14: 43:a5:63:9f:cc:9a:d2:7b:82:9b:3c:01:c5:5d:e1:88:9b:68: fc:9f:52:4e:df:f4:a7:36:89:2d:84:d7:a4:61:98:bb:d5:f4: fa:25:06:cb:c4:d0:1f:f7:41:cd:32:55:d7:6e:78:e7:c7:79: 51:63:fd:5c:51:ef:14:42:25:48:30:8d:f3:f2:25:2a:b4:34: a5:97:f7:68:7d:37:73:7d:03:d1:1a:0f:8a:01:8c:5e:05:ad: 95:98:dd:40:21:5c:fe:bc:78:2f:8b:22:e2:a5:6a:20:f4:56: 51:46:63:f7:38:40:a8:ee:c2:45:61:20:86:eb:f5:ac:4d:dd: fc:3d:d0:b0:fa:28:fd:fa:a9:7f:1a:07:a1:a6:28:c0:0b:70: 17:e1:76:22:1d:b3:8c:1c:d0:77:d3:24:79:13:9b:c9:3f:14: 50:e0:b5:6e:70:8d:c4:09:3e:89:bd:c7:e6:ff:7a:c2:82:f1: be:fa:d6:ff:cf:df:29:90:a4:96:b8:f1:5b:cc:11:7f:5d:79: ad:91:dd:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE53uiSLuiBbMgeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2NlNjU3OTUtM2I3Ny00MjI1LTk4ZjAtODllOGJmY2Yy NzVjMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk YTUxOTFlYzgtOWEwMC00NGUzLWFjMzUtYTQ4YjUxNjI3Y2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxpAgcKJlRFY1bEfbP5mY+LGsR+ohEJgKBvO waZnSnm2FyExO9MSyDQjd0IbO5NvtQo/GNHo17z7loXHPHhh7BieYMUGQ6KniT0W TEf76CBiFS4VtZgN45SLRwlHMBiHDY+k8pmROfkq0VX4it5zsLqhvwio97ywnXxw exMi35Q1L/SLH2u7+wS/KP1EgbIxXkkaBJhQAqQ0n9TzWgZKqtCUndMFY/fbcXpU vZM6yopcTKmMFK2utKAvCl9IyZulgjyaN/m42IM+bJc5Rv//kzm0LAUv/qwsSaDd gxRYAWb7YqbBpJrpDV8+H6Bt/uprWQNgVhn5yaXas+L7KXcgpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBP3cnkYZWQ5ay7aSW8dVF4MqHpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jY2U2 NTc5NS0zYjc3LTQyMjUtOThmMC04OWU4YmZjZjI3NWMvYmE4ODQ2NzUtYTRiYy0z NTg2LThjY2MtYTMwZTE3NjY4MzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvY2NlNjU3OTUtM2I3Ny00MjI1LTk4 ZjAtODllOGJmY2YyNzVjL2NjZTY1Nzk1LTNiNzctNDIyNS05OGYwLTg5ZThiZmNm Mjc1Yy5jcmwwHwYDVR0jBBgwFoAUPcZcrflEVZKVwKVsknQ/AGpyi4swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jY2U2NTc5NS0zYjc3LTQyMjUtOThmMC04OWU4 YmZjZjI3NWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxw+KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkUkopwIhTjj+94eXs48Co40y7U6kA5CvwaaJFdUg0hobjp9FDMSURb QpteMBsZ4JBI28OSFEOlY5/MmtJ7gps8AcVd4YibaPyfUk7f9Kc2iS2E16RhmLvV 9PolBsvE0B/3Qc0yVddueOfHeVFj/VxR7xRCJUgwjfPyJSq0NKWX92h9N3N9A9Ea D4oBjF4FrZWY3UAhXP68eC+LIuKlaiD0VlFGY/c4QKjuwkVhIIbr9axN3fw90LD6 KP36qX8aB6GmKMALcBfhdiIds4wc0HfTJHkTm8k/FFDgtW5wjcQJPom9x+b/esKC 8b761v/P3ymQpJa48VvMEX9dea2R3S0= -----END CERTIFICATE-----Generated at Mon Oct 20 08:25:13 2025 by rpki-client