$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/bad0311b-b1a2-37a6-9a54-a4b25e414ba1.roa File: bad0311b-b1a2-37a6-9a54-a4b25e414ba1.roa (raw, json) Hash identifier: lYz8GrBCl1V7t7cgMWMLduirFcPVM97IkCQ8HvqNzd8= Subject key identifier: 9C:B7:36:49:1D:B2:56:E4:5C:BB:CA:CE:A1:DB:1F:59:33:29:AA:F2 Certificate issuer: /CN=e4bb5ad3-d823-4023-aace-329885f50c4b Certificate serial: 010D0C9F4328584B1C36C4857FF84A91D393CB00 Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/bad0311b-b1a2-37a6-9a54-a4b25e414ba1.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 52.129.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:c4:85:7f:f8:4a:91:d3:93:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=b46970a1-3558-4924-a880-92d0b114c161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:50:c7:32:0a:31:53:70:b1:fe:37:dc:98:a8: 44:f9:ae:57:cb:f4:7e:38:e6:62:11:7c:7f:70:d8: 83:46:7f:62:d0:2b:80:6c:f9:6d:a7:ed:e1:b0:51: 3c:52:47:f7:c2:b1:17:a7:5b:1d:4d:db:c0:71:0b: a6:2c:65:60:62:5c:17:82:34:45:21:27:f2:76:07: b5:96:5f:1a:43:88:fd:52:5e:25:fa:f9:95:e5:e0: 42:7c:37:c4:c1:a1:e9:5a:e7:17:51:36:fe:73:f8: 07:c6:7c:06:cd:25:22:c8:fc:46:2c:02:f3:d7:62: d8:3b:76:cb:3c:53:a9:bb:45:dd:de:e6:de:de:14: da:2d:44:5d:f1:05:ab:7b:a9:62:1f:9e:88:08:f9: f4:c3:13:70:42:dc:c1:b3:9b:90:87:e9:b3:c4:e9: 57:8d:58:7c:8f:88:aa:1f:50:39:87:45:80:c0:4d: fc:6c:5d:1c:21:16:c2:5f:f2:61:c8:38:d5:c1:05: 30:5c:c8:c0:86:ff:a4:10:6a:19:8c:a5:84:dc:05: 27:13:d9:63:96:c1:91:84:36:48:db:3f:b3:9a:ba: 99:d4:4d:4b:93:22:f0:7e:6f:a3:be:9b:92:f2:36: ca:2b:cf:2e:d6:6d:79:ae:96:ca:cb:66:d5:c6:17: ba:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B7:36:49:1D:B2:56:E4:5C:BB:CA:CE:A1:DB:1F:59:33:29:AA:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/bad0311b-b1a2-37a6-9a54-a4b25e414ba1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl X509v3 Authority Key Identifier: keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer sbgp-ipAddrBlock: critical IPv4: 52.129.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:70:51:9f:1e:4c:44:b1:01:12:0f:a1:b1:b4:3d:64:ed:3a: b0:a4:3d:01:62:0a:c9:30:bd:d3:5a:ec:21:4b:d3:e6:a8:c7: b8:b2:ce:16:d5:77:45:f1:0f:ef:c4:c8:f2:23:21:70:2a:51: de:f9:76:90:91:ea:89:8b:de:43:07:5f:e3:e1:1e:7c:45:94: e8:fa:33:71:3c:ac:c8:25:61:44:34:b4:68:97:07:ed:30:34: 44:f9:28:3b:2c:76:0f:7c:d1:0d:4e:b6:f4:a8:08:77:6a:9f: 34:65:f7:c3:53:61:b6:9e:95:33:dd:93:0c:98:72:dd:89:84: b3:3c:e2:41:3f:3f:00:bc:87:71:de:f2:32:68:11:b5:39:9e: 61:57:e1:09:ef:7b:ea:02:c8:c2:61:30:6f:aa:97:51:ae:a6: 7b:17:8d:30:21:af:9e:56:aa:3b:56:4c:72:89:5b:4f:42:c5: b0:47:a7:a3:a8:3c:59:aa:93:2f:18:ca:b6:c1:ef:e3:3e:2f: 1f:48:a7:d4:b6:7d:17:df:62:77:f8:22:78:58:93:f7:64:88: 4f:3c:f9:9e:6f:ff:34:de:a4:65:95:58:55:94:9e:2a:6c:ca: 95:39:46:c1:10:c9:cc:9d:77:cb:2c:55:84:0f:42:76:fe:49: 28:87:6e:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNsSFf/hKkdOTywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTRiYjVhZDMtZDgyMy00MDIzLWFhY2UtMzI5ODg1ZjUw YzRiMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk YjQ2OTcwYTEtMzU1OC00OTI0LWE4ODAtOTJkMGIxMTRjMTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVDHMgoxU3Cx/jfcmKhE+a5Xy/R+OOZiEXx/ cNiDRn9i0CuAbPltp+3hsFE8Ukf3wrEXp1sdTdvAcQumLGVgYlwXgjRFISfydge1 ll8aQ4j9Ul4l+vmV5eBCfDfEwaHpWucXUTb+c/gHxnwGzSUiyPxGLALz12LYO3bL PFOpu0Xd3ube3hTaLURd8QWre6liH56ICPn0wxNwQtzBs5uQh+mzxOlXjVh8j4iq H1A5h0WAwE38bF0cIRbCX/JhyDjVwQUwXMjAhv+kEGoZjKWE3AUnE9ljlsGRhDZI 2z+zmrqZ1E1LkyLwfm+jvpuS8jbKK88u1m15rpbKy2bVxhe6+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJy3NkkdslbkXLvKzqHbH1kzKaryMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJi NWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4ODVmNTBjNGIvYmFkMDMxMWItYjFhMi0z N2E2LTlhNTQtYTRiMjVlNDE0YmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTRiYjVhZDMtZDgyMy00MDIzLWFh Y2UtMzI5ODg1ZjUwYzRiL2U0YmI1YWQzLWQ4MjMtNDAyMy1hYWNlLTMyOTg4NWY1 MGM0Yi5jcmwwHwYDVR0jBBgwFoAU3GmquWZXzLwGDI5PbtsBK4FCf7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJiNWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4 ODVmNTBjNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIFvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtwUZ8eTESxARIPobG0PWTtOrCkPQFiCskwvdNa7CFL0+aox7iyzhbV d0XxD+/EyPIjIXAqUd75dpCR6omL3kMHX+PhHnxFlOj6M3E8rMglYUQ0tGiXB+0w NET5KDssdg980Q1OtvSoCHdqnzRl98NTYbaelTPdkwyYct2JhLM84kE/PwC8h3He 8jJoEbU5nmFX4Qnve+oCyMJhMG+ql1GupnsXjTAhr55WqjtWTHKJW09CxbBHp6Oo PFmqky8YyrbB7+M+Lx9Ip9S2fRffYnf4InhYk/dkiE88+Z5v/zTepGWVWFWUnips ypU5RsEQycydd8ssVYQPQnb+SSiHbg8= -----END CERTIFICATE-----Generated at Wed Oct 8 19:44:42 2025 by rpki-client