$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/e68d7bd5-9d30-30b1-a76b-98ef9aeaf8f6.roa File: e68d7bd5-9d30-30b1-a76b-98ef9aeaf8f6.roa (raw, json) Hash identifier: 2UKJnmlfiA0oFr5HB8kT/gjM8hTZwul3qJ752mY2hFs= Subject key identifier: AB:AC:30:3D:53:76:04:FA:F5:68:F5:C7:20:70:2B:8D:D5:BF:59:A3 Certificate issuer: /CN=bad5af20-8385-44d4-815f-bb83497d4a0e Certificate serial: 010D0C9F4328584B2A2C327954D690311BBB3080 Authority key identifier: 11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/e68d7bd5-9d30-30b1-a76b-98ef9aeaf8f6.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 21777 IP address blocks: 206.168.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:32:79:54:d6:90:31:1b:bb:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bad5af20-8385-44d4-815f-bb83497d4a0e Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=53a23bc6-5652-47a8-bc2f-3a1f3c4b0498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:23:9c:37:ce:83:df:62:56:5f:d6:0d:cc:a7: 1f:63:32:c0:67:2a:92:cd:c8:f1:61:e2:29:85:14: af:d3:30:32:74:dd:e9:74:81:03:f3:55:53:ab:8e: 12:65:75:8d:e7:2b:9c:88:4b:df:6e:fd:e1:de:75: d8:4d:43:6b:b5:63:0c:2f:09:81:b9:c0:46:db:57: d2:67:aa:a7:52:01:7a:26:14:87:05:4b:32:a5:d8: 49:37:a7:6b:9e:83:9c:0b:a7:c1:2a:6f:ee:3f:31: 32:b4:97:7c:89:12:d9:df:a0:53:04:14:df:8e:d9: 46:c7:ff:32:ab:6d:dc:65:13:65:29:3f:3a:45:85: 9e:37:17:de:fc:08:88:09:c5:c4:37:ad:59:c1:a9: 28:9e:db:6d:3d:7d:c4:2d:aa:bd:2c:a2:ee:88:27: 25:b2:5f:f2:ad:fb:3d:93:18:fa:ab:46:06:08:c8: f5:f8:0c:74:ca:4e:43:e3:57:a4:16:cd:6a:c3:f9: 8e:95:d7:1a:01:96:8c:c4:9b:0c:0f:86:cd:71:98: 23:64:9c:13:fa:2e:08:ee:30:b9:b5:62:e1:96:ca: 10:2b:9f:78:33:4c:27:1f:1e:6b:f4:11:c4:c1:62: 4f:30:d4:1f:b6:aa:55:74:a5:6f:2e:f4:7e:c6:18: 68:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:AC:30:3D:53:76:04:FA:F5:68:F5:C7:20:70:2B:8D:D5:BF:59:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/e68d7bd5-9d30-30b1-a76b-98ef9aeaf8f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl X509v3 Authority Key Identifier: keyid:11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer sbgp-ipAddrBlock: critical IPv4: 206.168.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:a5:22:cf:26:96:13:37:b5:54:8f:de:4b:b9:ab:aa:7d:d8: 1b:72:44:d7:23:3e:ad:01:17:60:a9:c1:6c:e5:aa:c5:c8:e2: fc:4b:70:c6:95:f8:9e:9e:a3:a1:bd:05:5b:7d:2a:de:f9:db: c8:aa:85:c6:49:d8:9e:70:19:97:11:b0:57:85:7c:61:08:76: 6d:8b:bd:4c:fc:e0:f6:02:d9:cb:6d:79:0b:c8:dd:71:4e:66: 68:25:1c:d5:43:2d:e5:6a:e4:36:1d:e7:02:7f:4f:25:cb:3b: e9:5a:29:3b:7d:88:86:0e:bd:06:60:95:fa:3c:7d:86:94:84: 10:ae:02:70:bb:63:7b:ef:04:31:ec:f6:df:18:77:62:f1:cc: 7a:e0:89:53:cf:c2:05:ee:3b:2a:a4:0b:c2:14:d8:a4:85:71: 20:20:a8:fa:56:81:91:00:1c:93:f7:d9:18:2e:f4:0b:9e:09: 18:f9:f2:9f:73:c7:54:82:f0:58:cb:70:68:04:5c:06:41:6d: 5a:ae:01:9e:a0:30:6e:0e:b1:fb:a9:94:d0:a8:39:03:81:a3: cc:1d:e1:d2:fd:70:ad:cd:e5:de:4b:e3:97:6d:31:40:3c:c8: 1e:c6:98:98:e5:1c:54:1c:9c:58:94:05:bb:b0:4a:9a:d7:d3: 40:56:16:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLDJ5VNaQMRu7MIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFkNWFmMjAtODM4NS00NGQ0LTgxNWYtYmI4MzQ5N2Q0 YTBlMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk NTNhMjNiYzYtNTY1Mi00N2E4LWJjMmYtM2ExZjNjNGIwNDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyOcN86D32JWX9YNzKcfYzLAZyqSzcjxYeIp hRSv0zAydN3pdIED81VTq44SZXWN5yuciEvfbv3h3nXYTUNrtWMMLwmBucBG21fS Z6qnUgF6JhSHBUsypdhJN6drnoOcC6fBKm/uPzEytJd8iRLZ36BTBBTfjtlGx/8y q23cZRNlKT86RYWeNxfe/AiICcXEN61ZwakontttPX3ELaq9LKLuiCclsl/yrfs9 kxj6q0YGCMj1+Ax0yk5D41ekFs1qw/mOldcaAZaMxJsMD4bNcZgjZJwT+i4I7jC5 tWLhlsoQK594M0wnHx5r9BHEwWJPMNQftqpVdKVvLvR+xhhoiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKusMD1TdgT69Wj1xyBwK43Vv1mjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1 YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgzNDk3ZDRhMGUvZTY4ZDdiZDUtOWQzMC0z MGIxLWE3NmItOThlZjlhZWFmOGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmFkNWFmMjAtODM4NS00NGQ0LTgx NWYtYmI4MzQ5N2Q0YTBlL2JhZDVhZjIwLTgzODUtNDRkNC04MTVmLWJiODM0OTdk NGEwZS5jcmwwHwYDVR0jBBgwFoAUEapw8wRQo6yCOXMUtq3WNdHdOZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgz NDk3ZDRhMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqhhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADelIs8mlhM3tVSP3ku5q6p92BtyRNcjPq0BF2CpwWzlqsXI4vxLcMaV +J6eo6G9BVt9Kt7528iqhcZJ2J5wGZcRsFeFfGEIdm2LvUz84PYC2ctteQvI3XFO ZmglHNVDLeVq5DYd5wJ/TyXLO+laKTt9iIYOvQZglfo8fYaUhBCuAnC7Y3vvBDHs 9t8Yd2LxzHrgiVPPwgXuOyqkC8IU2KSFcSAgqPpWgZEAHJP32Rgu9AueCRj58p9z x1SC8FjLcGgEXAZBbVquAZ6gMG4OsfuplNCoOQOBo8wd4dL9cK3N5d5L45dtMUA8 yB7GmJjlHFQcnFiUBbuwSprX00BWFmU= -----END CERTIFICATE-----Generated at Sat Oct 11 07:25:29 2025 by rpki-client