$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/8db1943e-17fa-375d-aa4b-b018e52e3c40.roa File: 8db1943e-17fa-375d-aa4b-b018e52e3c40.roa (raw, json) Hash identifier: Q17pv5xBeKEEOHgZyrjXNOfp2aZC6iAci19aRALSpXg= Subject key identifier: 22:4E:78:3A:44:77:68:FC:E2:70:FC:52:C9:EF:43:91:28:B9:B0:E9 Certificate issuer: /CN=bad5af20-8385-44d4-815f-bb83497d4a0e Certificate serial: 010D0C9F4328584B2A2C295FEF37DC6D62C88580 Authority key identifier: 11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/8db1943e-17fa-375d-aa4b-b018e52e3c40.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 21777 IP address blocks: 199.45.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:29:5f:ef:37:dc:6d:62:c8:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bad5af20-8385-44d4-815f-bb83497d4a0e Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=473cb1a1-6975-4c4a-bf1b-048c62324e1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:53:42:3f:87:09:3b:8f:67:9d:1c:4f:ce:37: 0a:0a:57:49:e7:af:fc:e8:b6:f8:ed:de:1b:f8:d5: 3a:c4:95:61:17:d0:b2:c2:08:27:89:5a:b9:ff:85: f3:bb:0d:75:13:be:b7:59:9a:0d:75:37:18:86:c4: 85:41:b6:25:51:fb:ff:94:20:e9:4a:a9:e8:e7:ed: b5:0c:bf:28:99:94:40:69:14:f0:3a:c2:26:64:4f: 76:be:04:44:99:e0:5f:0c:5c:ee:79:ec:04:b6:e1: f3:e4:b5:09:4c:4f:86:5a:dc:8e:1d:74:2d:42:a0: 95:80:e7:ff:ed:d4:c2:f2:40:a0:f8:0e:7c:b1:a5: 50:53:c1:f8:2a:71:a2:b9:dc:49:dd:f5:13:f6:6b: 05:89:0b:05:26:3b:9c:89:67:50:28:8b:35:a3:44: 4c:cc:01:13:1b:31:50:33:f2:1a:e5:bb:8b:47:c8: d0:34:84:fb:07:f2:52:33:a6:81:a6:4f:81:f1:45: f7:88:e8:a9:6d:4d:23:25:26:6c:a6:09:3b:78:53: ff:72:36:d7:17:df:c8:f6:cc:3d:ca:e1:dc:dd:52: 5f:f0:b4:b3:fb:8a:07:32:3c:f0:92:c5:a0:23:dd: 09:33:a1:e6:98:0d:cf:3d:0d:dc:01:9f:b1:e3:b0: a2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:4E:78:3A:44:77:68:FC:E2:70:FC:52:C9:EF:43:91:28:B9:B0:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/8db1943e-17fa-375d-aa4b-b018e52e3c40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl X509v3 Authority Key Identifier: keyid:11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer sbgp-ipAddrBlock: critical IPv4: 199.45.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:ed:99:fb:30:46:a0:ff:04:a4:91:29:b6:ec:fd:52:1c:9a: 76:de:1f:8c:41:29:bd:30:a9:e6:97:f5:f5:d5:d0:eb:06:36: 32:95:b0:4f:24:c1:52:d6:17:c8:83:bf:6b:80:d9:71:d3:11: c4:c2:f6:3a:14:10:4a:58:a1:cc:ab:5c:7e:b7:19:63:38:66: f8:2f:7f:ca:43:38:24:0c:ef:51:65:14:06:30:0e:03:d0:2c: 87:17:72:4a:1b:ec:a8:70:67:e0:ed:88:67:83:07:9d:3a:78: c3:0a:2f:87:3d:bb:5e:d8:6d:91:91:62:b3:b6:39:2b:fd:71: b8:74:8a:e4:c6:8a:67:e9:5e:80:df:73:1c:00:06:5b:20:21: 87:2a:d8:18:31:24:6d:a2:14:d0:6b:45:55:fd:29:70:0d:3f: 11:54:82:09:d3:b5:e4:fa:43:91:1d:9f:58:55:b9:70:b0:a2: fc:25:bd:cb:ed:71:ba:cc:17:fb:3e:12:42:a2:18:fb:22:9c: 0e:0f:06:33:fe:47:0d:a8:ed:11:34:6f:40:1f:66:ab:80:34: f7:48:9d:60:21:b1:4b:2b:81:67:ef:bc:a3:b7:f3:c6:1f:d3: 3c:fa:fb:dc:8a:fa:8c:a7:94:d0:29:04:23:76:e0:72:44:4e: 81:3f:2f:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLClf7zfcbWLIhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFkNWFmMjAtODM4NS00NGQ0LTgxNWYtYmI4MzQ5N2Q0 YTBlMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk NDczY2IxYTEtNjk3NS00YzRhLWJmMWItMDQ4YzYyMzI0ZTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlNCP4cJO49nnRxPzjcKCldJ56/86Lb47d4b +NU6xJVhF9CywggniVq5/4Xzuw11E763WZoNdTcYhsSFQbYlUfv/lCDpSqno5+21 DL8omZRAaRTwOsImZE92vgREmeBfDFzueewEtuHz5LUJTE+GWtyOHXQtQqCVgOf/ 7dTC8kCg+A58saVQU8H4KnGiudxJ3fUT9msFiQsFJjuciWdQKIs1o0RMzAETGzFQ M/Ia5buLR8jQNIT7B/JSM6aBpk+B8UX3iOipbU0jJSZspgk7eFP/cjbXF9/I9sw9 yuHc3VJf8LSz+4oHMjzwksWgI90JM6HmmA3PPQ3cAZ+x47CiZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJOeDpEd2j84nD8UsnvQ5EoubDpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1 YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgzNDk3ZDRhMGUvOGRiMTk0M2UtMTdmYS0z NzVkLWFhNGItYjAxOGU1MmUzYzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmFkNWFmMjAtODM4NS00NGQ0LTgx NWYtYmI4MzQ5N2Q0YTBlL2JhZDVhZjIwLTgzODUtNDRkNC04MTVmLWJiODM0OTdk NGEwZS5jcmwwHwYDVR0jBBgwFoAUEapw8wRQo6yCOXMUtq3WNdHdOZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgz NDk3ZDRhMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy2YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLtmfswRqD/BKSRKbbs/VIcmnbeH4xBKb0wqeaX9fXV0OsGNjKVsE8k wVLWF8iDv2uA2XHTEcTC9joUEEpYocyrXH63GWM4Zvgvf8pDOCQM71FlFAYwDgPQ LIcXckob7KhwZ+DtiGeDB506eMMKL4c9u17YbZGRYrO2OSv9cbh0iuTGimfpXoDf cxwABlsgIYcq2BgxJG2iFNBrRVX9KXANPxFUggnTteT6Q5Edn1hVuXCwovwlvcvt cbrMF/s+EkKiGPsinA4PBjP+Rw2o7RE0b0AfZquANPdInWAhsUsrgWfvvKO388Yf 0zz6+9yK+oynlNApBCN24HJEToE/L90= -----END CERTIFICATE-----Generated at Sat Oct 11 07:31:00 2025 by rpki-client