$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bf6d3f93-c0b9-383a-b50b-8df33b8a1878.roa File: bf6d3f93-c0b9-383a-b50b-8df33b8a1878.roa (raw, json) Hash identifier: A7ZvIaMsmyb58YgIKBcRhWFT31vlIEwHXvZqngcrnIo= Subject key identifier: D3:CD:E6:FA:AC:0D:AD:2E:17:0C:BF:81:C8:69:7D:F4:5D:D9:F3:5D Certificate issuer: /CN=bad5af20-8385-44d4-815f-bb83497d4a0e Certificate serial: 010D0C9F4328584B2A2C328F8EB6100DD61785C0 Authority key identifier: 11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bf6d3f93-c0b9-383a-b50b-8df33b8a1878.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 25779 IP address blocks: 206.168.9.0/24 maxlen: 24 207.174.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:32:8f:8e:b6:10:0d:d6:17:85:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bad5af20-8385-44d4-815f-bb83497d4a0e Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=cdb24c4d-334b-4a8a-b0ad-5bc91b48d339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:12:2a:95:1c:7d:f9:d0:94:19:bd:87:5c:b6: f7:ca:e3:de:23:cb:7d:4a:81:5d:73:fd:85:7a:ee: 59:f3:61:8d:6d:13:7c:3b:31:c7:8f:31:9f:9d:6b: 80:73:a4:53:42:f4:81:a2:a0:1f:78:66:8c:c4:db: 58:c7:2f:fe:6a:78:22:bc:d7:0d:f5:2a:d6:4c:8d: 52:6f:2b:60:fa:6b:71:da:e0:3a:4a:78:c0:4b:af: 0c:4c:65:f5:3a:14:40:8c:e5:df:5a:64:95:91:57: 2e:75:49:2b:49:fe:9c:17:d1:95:86:b2:7b:13:8f: ab:8f:b3:13:2b:b1:27:7b:4a:37:a5:7a:64:80:1c: 1c:be:be:8b:46:de:77:75:a3:21:93:45:44:66:61: dc:88:00:94:f7:26:cb:6e:10:2f:6a:7e:6f:ac:2a: 78:a5:63:5b:7c:75:c1:e0:b8:31:af:27:ba:e7:71: 10:a3:27:61:79:58:0d:e1:e5:e4:0e:d6:d3:c8:34: 3d:fd:3b:fd:a5:b1:a7:bb:32:5f:be:c4:30:9a:07: 94:d5:cf:84:c5:16:b7:a2:a6:1b:97:39:de:56:05: a3:be:79:32:12:77:be:2e:80:6f:f2:60:d2:41:e7: 8d:da:44:bf:60:bd:86:f3:e3:a6:c2:01:b1:77:f8: 8b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:CD:E6:FA:AC:0D:AD:2E:17:0C:BF:81:C8:69:7D:F4:5D:D9:F3:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bf6d3f93-c0b9-383a-b50b-8df33b8a1878.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl X509v3 Authority Key Identifier: keyid:11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer sbgp-ipAddrBlock: critical IPv4: 206.168.9.0/24 207.174.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:7f:55:3d:f1:00:d3:e3:fe:5a:84:bc:ce:d8:5a:5d:49:e3: 47:b6:53:3d:d8:8f:40:e9:4a:4c:82:5a:b3:4b:10:8c:47:b2: 0f:ac:70:ab:25:85:bd:4e:d4:d6:a2:23:5c:cd:b5:ae:98:1c: 02:16:4c:5a:33:5a:cd:16:e8:63:fe:dd:25:16:62:d1:28:11: c6:01:f4:35:71:95:e5:24:26:54:a4:2f:68:10:64:c7:c4:3b: 98:6b:bd:91:dd:37:ad:e2:d1:24:46:99:00:41:4d:b7:d2:e9: 43:15:ee:91:c8:66:89:9f:4a:d2:81:e5:15:fe:41:3e:0e:63: 03:2a:7a:59:e0:68:19:10:81:d9:44:c4:dd:b5:1f:74:ac:67: 9d:64:45:bb:19:0e:9b:ab:82:31:c9:75:ab:3d:8f:e9:d9:48: 5b:ae:fd:a5:1a:fb:8b:b1:62:86:76:dd:7e:65:c5:bf:ae:90: f2:d1:03:82:56:0e:1d:a0:ef:2a:a1:d7:db:5b:24:46:68:e0: 7a:11:a5:2e:0c:ca:ba:b9:8d:84:9e:0a:d5:37:e9:63:8a:6f: 49:65:51:94:15:a5:4c:d4:12:86:94:93:ef:a3:0e:b7:40:6d: 14:84:9c:cc:b4:86:25:54:09:d0:98:d5:73:d0:b0:b5:f1:0c: 29:6b:3f:f0 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEsqLDKPjrYQDdYXhcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFkNWFmMjAtODM4NS00NGQ0LTgxNWYtYmI4MzQ5N2Q0 YTBlMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk Y2RiMjRjNGQtMzM0Yi00YThhLWIwYWQtNWJjOTFiNDhkMzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBIqlRx9+dCUGb2HXLb3yuPeI8t9SoFdc/2F eu5Z82GNbRN8OzHHjzGfnWuAc6RTQvSBoqAfeGaMxNtYxy/+angivNcN9SrWTI1S bytg+mtx2uA6SnjAS68MTGX1OhRAjOXfWmSVkVcudUkrSf6cF9GVhrJ7E4+rj7MT K7Ene0o3pXpkgBwcvr6LRt53daMhk0VEZmHciACU9ybLbhAvan5vrCp4pWNbfHXB 4Lgxrye653EQoydheVgN4eXkDtbTyDQ9/Tv9pbGnuzJfvsQwmgeU1c+ExRa3oqYb lzneVgWjvnkyEne+LoBv8mDSQeeN2kS/YL2G8+OmwgGxd/iLGwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNPN5vqsDa0uFwy/gchpffRd2fNdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1 YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgzNDk3ZDRhMGUvYmY2ZDNmOTMtYzBiOS0z ODNhLWI1MGItOGRmMzNiOGExODc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmFkNWFmMjAtODM4NS00NGQ0LTgx NWYtYmI4MzQ5N2Q0YTBlL2JhZDVhZjIwLTgzODUtNDRkNC04MTVmLWJiODM0OTdk NGEwZS5jcmwwHwYDVR0jBBgwFoAUEapw8wRQo6yCOXMUtq3WNdHdOZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgz NDk3ZDRhMGUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAzqgJAwQA z67KMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAJ/VT3xANPj/lqEvM7YWl1J40e2Uz3Yj0DpSkyCWrNLEIxH sg+scKslhb1O1NaiI1zNta6YHAIWTFozWs0W6GP+3SUWYtEoEcYB9DVxleUkJlSk L2gQZMfEO5hrvZHdN63i0SRGmQBBTbfS6UMV7pHIZomfStKB5RX+QT4OYwMqelng aBkQgdlExN21H3SsZ51kRbsZDpurgjHJdas9j+nZSFuu/aUa+4uxYoZ23X5lxb+u kPLRA4JWDh2g7yqh19tbJEZo4HoRpS4Myrq5jYSeCtU36WOKb0llUZQVpUzUEoaU k++jDrdAbRSEnMy0hiVUCdCY1XPQsLXxDClrP/A= -----END CERTIFICATE-----Generated at Sat Oct 11 07:28:51 2025 by rpki-client