$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/903f8e05-f3a5-4300-8c04-39c3103ddccb/baa67771-dc3e-3be1-a4f0-fa51b81508c7.roa File: baa67771-dc3e-3be1-a4f0-fa51b81508c7.roa (raw, json) Hash identifier: O350YOc0MEefDGaK30C9uOQMZuugyMwgT+T/wE3QRGo= Subject key identifier: 59:51:4B:4E:AD:2F:FB:AF:45:5A:2E:CB:9F:D8:29:36:12:F4:B1:4D Certificate issuer: /CN=903f8e05-f3a5-4300-8c04-39c3103ddccb Certificate serial: 010D0C9F4328584B27617572F8026AA2E1F51F00 Authority key identifier: 5E:D8:BC:5A:D1:72:8D:9B:80:AE:17:1A:F1:02:3C:5E:0D:E1:71:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/903f8e05-f3a5-4300-8c04-39c3103ddccb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/903f8e05-f3a5-4300-8c04-39c3103ddccb/baa67771-dc3e-3be1-a4f0-fa51b81508c7.roa Signing time: Thu 11 Sep 2025 01:00:33 +0000 ROA not before: Thu 11 Sep 2025 01:00:33 +0000 ROA not after: Wed 10 Dec 2025 02:00:33 +0000 asID: 32281 IP address blocks: 136.175.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/903f8e05-f3a5-4300-8c04-39c3103ddccb/903f8e05-f3a5-4300-8c04-39c3103ddccb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/903f8e05-f3a5-4300-8c04-39c3103ddccb/903f8e05-f3a5-4300-8c04-39c3103ddccb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/903f8e05-f3a5-4300-8c04-39c3103ddccb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:27:61:75:72:f8:02:6a:a2:e1:f5:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=903f8e05-f3a5-4300-8c04-39c3103ddccb Validity Not Before: Sep 11 01:00:33 2025 GMT Not After : Dec 10 02:00:33 2025 GMT Subject: CN=2fc48c39-ddfa-4a63-9f65-15d73c87e514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1d:32:a6:fb:77:83:39:d1:b5:29:03:e4:81: f7:d2:0f:ed:74:2f:b5:78:65:ba:7a:91:09:75:ca: 1d:1c:ed:ea:6b:51:db:14:28:21:52:f1:f5:d0:c3: 7e:34:61:51:28:17:ba:77:a3:f7:98:9e:0b:34:d2: b1:4c:b1:1a:de:1e:f3:9d:86:45:a1:db:1e:40:55: 36:1c:95:4e:54:7f:33:45:c3:0c:e4:81:c0:34:8a: 92:79:2e:77:8f:27:40:8a:41:d9:76:d7:64:80:40: 00:62:de:cb:3f:8d:15:02:0a:3b:10:6b:30:57:5e: d1:96:d6:98:df:b9:ad:7e:a3:47:8a:46:0c:04:b4: 09:27:fa:ab:cf:08:4a:87:6e:0e:1f:97:2c:7c:07: aa:f8:fd:0b:01:f9:f3:89:2a:53:77:ef:70:8a:3c: 33:74:5b:53:26:fe:d2:af:3f:d1:d0:86:19:25:e3: c3:c3:49:8c:5b:5a:4e:36:79:66:54:f2:44:12:ae: df:ee:73:57:7d:c8:19:24:53:39:dd:ab:0f:1b:2e: 26:e4:1f:90:e3:12:33:d1:fe:bf:07:c9:4c:51:e0: b0:e7:6a:05:ee:29:96:0d:00:8e:f1:8e:20:c5:7a: 8a:8d:c3:67:fd:6f:e7:5f:b9:d7:3b:cb:ec:6d:4b: 55:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:51:4B:4E:AD:2F:FB:AF:45:5A:2E:CB:9F:D8:29:36:12:F4:B1:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/903f8e05-f3a5-4300-8c04-39c3103ddccb/baa67771-dc3e-3be1-a4f0-fa51b81508c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/903f8e05-f3a5-4300-8c04-39c3103ddccb/903f8e05-f3a5-4300-8c04-39c3103ddccb.crl X509v3 Authority Key Identifier: keyid:5E:D8:BC:5A:D1:72:8D:9B:80:AE:17:1A:F1:02:3C:5E:0D:E1:71:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/903f8e05-f3a5-4300-8c04-39c3103ddccb.cer sbgp-ipAddrBlock: critical IPv4: 136.175.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:1e:ff:12:32:c4:02:3e:02:69:78:e6:82:3b:be:53:22:3a: fc:e4:09:a1:9e:de:95:e2:54:ac:d1:48:54:73:b1:6c:e1:43: 33:58:7e:91:50:b7:7d:55:24:3a:6e:0e:87:a1:42:18:d6:74: 37:08:0e:db:85:12:ea:42:03:88:64:4a:2c:c7:d8:dd:58:b8: dd:63:50:5d:03:fb:5e:b7:96:4a:0d:54:45:3a:48:45:3b:f8: 7a:3c:cc:ed:8e:97:67:8e:c7:c7:de:08:77:1b:7c:1b:fc:ed: 8c:7b:b6:23:cc:6f:c5:19:af:74:71:53:78:a3:f5:34:39:fb: e9:e7:ba:ac:23:a1:52:05:f9:ab:02:4d:a5:0b:37:1a:75:6d: 84:b1:c1:9d:23:da:9e:f7:bf:61:94:62:5f:81:b0:c4:57:73: 94:5a:9a:4c:75:1b:42:80:ec:e7:56:f5:55:11:14:33:37:73: d4:88:fb:f6:bd:56:2c:85:87:e3:b2:c8:4e:ae:1a:09:72:8f: 13:87:6b:93:22:11:46:b7:74:92:27:ff:df:04:d6:cc:b1:97: 67:d7:14:fe:da:87:50:8e:00:6b:b2:eb:0d:36:7e:e2:dd:b8: 1d:1c:8a:4a:54:a4:b7:ae:bd:bc:9c:44:3f:24:9a:bc:89:53: 02:7d:57:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsnYXVy+AJqouH1HwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAzZjhlMDUtZjNhNS00MzAwLThjMDQtMzljMzEwM2Rk Y2NiMB4XDTI1MDkxMTAxMDAzM1oXDTI1MTIxMDAyMDAzM1owLzEtMCsGA1UEAxMk MmZjNDhjMzktZGRmYS00YTYzLTlmNjUtMTVkNzNjODdlNTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnB0ypvt3gznRtSkD5IH30g/tdC+1eGW6epEJ dcodHO3qa1HbFCghUvH10MN+NGFRKBe6d6P3mJ4LNNKxTLEa3h7znYZFodseQFU2 HJVOVH8zRcMM5IHANIqSeS53jydAikHZdtdkgEAAYt7LP40VAgo7EGswV17RltaY 37mtfqNHikYMBLQJJ/qrzwhKh24OH5csfAeq+P0LAfnziSpTd+9wijwzdFtTJv7S rz/R0IYZJePDw0mMW1pONnlmVPJEEq7f7nNXfcgZJFM53asPGy4m5B+Q4xIz0f6/ B8lMUeCw52oF7imWDQCO8Y4gxXqKjcNn/W/nX7nXO8vsbUtV3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlRS06tL/uvRVouy5/YKTYS9LFNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MDNm OGUwNS1mM2E1LTQzMDAtOGMwNC0zOWMzMTAzZGRjY2IvYmFhNjc3NzEtZGMzZS0z YmUxLWE0ZjAtZmE1MWI4MTUwOGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTAzZjhlMDUtZjNhNS00MzAwLThj MDQtMzljMzEwM2RkY2NiLzkwM2Y4ZTA1LWYzYTUtNDMwMC04YzA0LTM5YzMxMDNk ZGNjYi5jcmwwHwYDVR0jBBgwFoAUXti8WtFyjZuArhca8QI8Xg3hcWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85MDNmOGUwNS1mM2E1LTQzMDAtOGMwNC0zOWMz MTAzZGRjY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiK/kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIke/xIyxAI+Aml45oI7vlMiOvzkCaGe3pXiVKzRSFRzsWzhQzNYfpFQ t31VJDpuDoehQhjWdDcIDtuFEupCA4hkSizH2N1YuN1jUF0D+163lkoNVEU6SEU7 +Ho8zO2Ol2eOx8feCHcbfBv87Yx7tiPMb8UZr3RxU3ij9TQ5++nnuqwjoVIF+asC TaULNxp1bYSxwZ0j2p73v2GUYl+BsMRXc5Ramkx1G0KA7OdW9VURFDM3c9SI+/a9 ViyFh+OyyE6uGglyjxOHa5MiEUa3dJIn/98E1syxl2fXFP7ah1COAGuy6w02fuLd uB0cikpUpLeuvbycRD8kmryJUwJ9VwU= -----END CERTIFICATE-----Generated at Fri Oct 10 14:15:07 2025 by rpki-client