$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/fdfb5184-61d0-3a3d-93b7-6a34a00328a7.roa File: fdfb5184-61d0-3a3d-93b7-6a34a00328a7.roa (raw, json) Hash identifier: W7BEHCzze85DRi/m/DPFlRWTfZ4myMnAfsL2MiG+5Go= Subject key identifier: AC:21:82:92:48:A5:77:19:DC:C4:4C:8E:D7:5C:2D:1C:33:D9:85:56 Certificate issuer: /CN=bad5af20-8385-44d4-815f-bb83497d4a0e Certificate serial: 010D0C9F4328584B2A2C32A4B5D59D9B1F1C65C0 Authority key identifier: 11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/fdfb5184-61d0-3a3d-93b7-6a34a00328a7.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 21777 IP address blocks: 199.189.28.0/23 maxlen: 24 207.174.110.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:32:a4:b5:d5:9d:9b:1f:1c:65:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bad5af20-8385-44d4-815f-bb83497d4a0e Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=d3cd6422-e5e2-43cc-9ae6-105e7ec07804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c8:35:27:27:b6:37:26:43:7b:7f:56:4e:82: b2:9f:7c:7e:f1:92:b7:c6:3b:ff:8e:79:5a:6a:a2: 71:a7:fb:22:c8:f8:fc:de:d7:df:41:33:cf:06:75: 56:d9:83:47:81:df:12:2a:d2:7f:8c:14:cb:fd:58: 62:24:5b:b1:a3:d7:90:67:05:f4:b7:79:a4:72:52: 00:1f:c3:7a:16:be:3b:5c:88:e6:29:f7:cc:81:07: da:e2:d6:27:0a:7d:37:4f:27:59:63:3d:e4:25:a7: 1b:fb:c7:97:06:56:3a:10:e2:b1:e7:1e:39:1e:cc: d1:f3:ad:8a:e4:c8:56:66:99:42:90:1b:32:05:bc: bb:e3:e1:7a:68:e3:27:ec:8e:e6:d1:97:38:17:f2: 47:28:e0:09:09:98:57:99:4f:b6:1e:58:02:72:02: f9:a5:5c:18:77:7e:07:cb:7b:9f:da:91:f2:34:bb: 4a:22:1e:91:07:dc:27:20:c2:82:5c:60:47:11:14: b5:66:f3:95:09:19:dc:dc:04:10:76:6d:c5:0c:fd: fa:e7:26:10:99:d9:71:0b:bf:c4:66:8f:d0:61:c1: a4:3d:0f:e9:7d:33:43:1a:03:aa:06:98:88:05:fd: 79:02:83:89:15:1b:18:e2:ff:1e:a8:7e:c3:4a:72: aa:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:21:82:92:48:A5:77:19:DC:C4:4C:8E:D7:5C:2D:1C:33:D9:85:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/fdfb5184-61d0-3a3d-93b7-6a34a00328a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl X509v3 Authority Key Identifier: keyid:11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer sbgp-ipAddrBlock: critical IPv4: 199.189.28.0/23 207.174.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:fe:f4:bb:35:af:83:80:66:98:ef:95:fb:c3:65:b8:60:8a: 8b:a9:5b:12:17:92:34:74:27:84:df:f1:c7:4d:2a:6b:cb:d7: 74:51:f0:16:88:f4:31:e2:cc:4c:38:36:a2:82:68:cb:88:29: 5b:15:c4:96:18:8e:87:07:19:5d:cc:f0:8a:ac:a1:b5:db:af: 0a:57:25:0a:d5:48:6c:8f:93:0e:3c:70:a8:b7:e7:a0:0d:bf: c6:ef:85:6e:81:fc:d9:75:fd:b7:d2:8f:7b:c5:f9:76:2c:02: b6:17:e3:44:ad:f1:1a:ac:c4:f5:95:1c:d4:2f:eb:d4:65:73: ca:03:e6:c0:64:51:0a:c2:7a:6e:ec:91:59:1f:ff:85:6d:d4: 6e:43:db:69:39:e8:3e:0c:a3:e4:3b:03:8c:f3:5c:e1:54:72: 3f:93:9f:7b:22:09:6d:bf:f9:2b:fe:a7:6a:c9:bf:4c:56:1b: 9e:34:0c:2b:72:a6:57:c6:4e:0b:39:ce:31:ea:bb:b6:ab:ad: 00:f3:8c:e6:8d:ff:6d:a1:22:f0:c8:52:9c:1a:94:0a:e8:62: 95:32:68:22:2d:f4:b7:db:47:66:19:d6:fb:5e:4c:d6:18:42: ff:4a:a8:d6:26:9a:f3:fd:56:db:1e:1e:a1:47:b2:f6:8a:14: 63:e5:c3:08 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEsqLDKktdWdmx8cZcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFkNWFmMjAtODM4NS00NGQ0LTgxNWYtYmI4MzQ5N2Q0 YTBlMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk ZDNjZDY0MjItZTVlMi00M2NjLTlhZTYtMTA1ZTdlYzA3ODA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsg1Jye2NyZDe39WToKyn3x+8ZK3xjv/jnla aqJxp/siyPj83tffQTPPBnVW2YNHgd8SKtJ/jBTL/VhiJFuxo9eQZwX0t3mkclIA H8N6Fr47XIjmKffMgQfa4tYnCn03TydZYz3kJacb+8eXBlY6EOKx5x45HszR862K 5MhWZplCkBsyBby74+F6aOMn7I7m0Zc4F/JHKOAJCZhXmU+2HlgCcgL5pVwYd34H y3uf2pHyNLtKIh6RB9wnIMKCXGBHERS1ZvOVCRnc3AQQdm3FDP365yYQmdlxC7/E Zo/QYcGkPQ/pfTNDGgOqBpiIBf15AoOJFRsY4v8eqH7DSnKqBQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKwhgpJIpXcZ3MRMjtdcLRwz2YVWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1 YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgzNDk3ZDRhMGUvZmRmYjUxODQtNjFkMC0z YTNkLTkzYjctNmEzNGEwMDMyOGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmFkNWFmMjAtODM4NS00NGQ0LTgx NWYtYmI4MzQ5N2Q0YTBlL2JhZDVhZjIwLTgzODUtNDRkNC04MTVmLWJiODM0OTdk NGEwZS5jcmwwHwYDVR0jBBgwFoAUEapw8wRQo6yCOXMUtq3WNdHdOZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgz NDk3ZDRhMGUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBx70cAwQB z65uMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHf+9Ls1r4OAZpjvlfvDZbhgioupWxIXkjR0J4Tf8cdNKmvL 13RR8BaI9DHizEw4NqKCaMuIKVsVxJYYjocHGV3M8IqsobXbrwpXJQrVSGyPkw48 cKi356ANv8bvhW6B/Nl1/bfSj3vF+XYsArYX40St8RqsxPWVHNQv69Rlc8oD5sBk UQrCem7skVkf/4Vt1G5D22k56D4Mo+Q7A4zzXOFUcj+Tn3siCW2/+Sv+p2rJv0xW G540DCtyplfGTgs5zjHqu7arrQDzjOaN/22hIvDIUpwalAroYpUyaCIt9LfbR2YZ 1vteTNYYQv9KqNYmmvP9VtseHqFHsvaKFGPlwwg= -----END CERTIFICATE-----Generated at Sat Oct 11 07:27:54 2025 by rpki-client