$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba097dde-442b-3ae4-95b0-305919764851.roa File: ba097dde-442b-3ae4-95b0-305919764851.roa (raw, json) Hash identifier: MzHJwkAGF2j9VhzgMD/DOz/zWFYW0r7ADcFo74cNymM= Subject key identifier: E8:ED:A2:DF:30:B9:20:7E:F8:CD:30:F3:E1:F3:98:9E:A3:E0:D6:06 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B6A61FDE89CC5D45E64D22C40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba097dde-442b-3ae4-95b0-305919764851.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 397209 IP address blocks: 192.58.128.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:61:fd:e8:9c:c5:d4:5e:64:d2:2c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=d3c76666-5569-4179-9253-f839dcf62cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3b:5a:ea:16:4d:97:eb:d1:e2:dc:2b:34:21: ce:ad:b4:4c:60:34:a6:10:3c:9b:4f:ee:b5:7a:b1: f2:81:c5:6e:5c:54:e2:c6:29:6d:f2:a7:a1:6a:4c: fb:09:41:68:ba:dd:78:01:3a:5d:b2:4a:95:aa:b9: 73:8a:54:c2:27:cc:ff:67:49:f8:34:fb:d5:91:40: 01:b8:46:71:a8:1a:33:2b:ef:e1:e5:86:35:68:e7: 07:f8:af:00:a1:d8:1f:4c:2b:d8:07:29:10:9b:14: 44:5d:28:32:ab:bb:16:47:a8:3d:e7:b3:51:db:43: b3:58:8c:16:4d:1f:a1:2c:ad:12:31:36:82:7e:b4: 95:4d:e6:65:de:05:84:b9:2a:3d:ee:d7:f8:04:c3: 98:5b:87:05:92:3d:41:7a:79:6d:f6:82:a2:d4:ea: f7:3a:a9:e1:18:87:dc:38:cc:00:d9:07:25:b4:44: 24:4f:ef:b6:04:98:5c:e2:8a:8b:42:35:97:6a:26: e8:0d:52:77:46:5e:42:7a:27:95:f7:c4:54:d0:a3: 66:00:dc:49:ef:85:0e:a7:5a:46:2a:ac:a8:64:ea: d4:29:6f:2e:d9:c9:1b:fe:aa:61:90:d8:88:67:e3: 1d:ce:b2:68:4d:37:71:4d:6b:f7:1d:4e:fa:51:de: dd:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:ED:A2:DF:30:B9:20:7E:F8:CD:30:F3:E1:F3:98:9E:A3:E0:D6:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba097dde-442b-3ae4-95b0-305919764851.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:2c:fa:e2:e0:0c:f0:16:c8:c5:57:51:90:ab:58:3b:b6:72: 85:e8:43:e1:78:9a:66:66:e7:e9:90:d7:c9:30:1a:6b:43:49: e4:3b:dd:fd:17:4a:93:80:cd:1a:09:40:f3:51:92:14:1c:e4: 91:b6:6a:90:42:63:0d:90:d1:3a:22:ed:38:77:9a:62:15:3f: 1c:58:c5:90:69:0e:64:68:cb:11:88:7e:62:96:34:48:4e:9d: d5:1d:75:f0:37:77:45:5b:4b:3f:af:96:07:0b:60:16:77:d6: 8e:75:58:9a:a4:59:00:ac:36:e2:84:88:d4:81:89:59:08:4b: 83:c0:67:e2:de:51:e4:80:2a:71:7b:e2:c9:e5:47:95:cc:e4: 80:c5:50:f2:5c:ff:b9:b7:60:23:2a:59:a9:2d:98:c7:5c:af: 8f:5e:d6:9f:66:c7:98:28:7d:4b:e0:a4:07:69:c3:2e:d1:9c: d6:45:de:07:dc:b4:b6:8c:7d:3e:99:2e:e1:e1:6d:30:c4:bb: 6f:ee:e9:20:78:36:a0:f5:65:58:b3:b2:cc:26:16:e6:47:ac: a0:32:d9:b7:37:f4:9b:1e:87:80:99:c4:c2:ff:d3:98:54:82: 0b:8f:2b:46:57:ee:30:ec:b4:00:2b:a4:84:4f:ce:96:9d:3a: 03:3a:2e:e6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtqYf3onMXUXmTSLEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk ZDNjNzY2NjYtNTU2OS00MTc5LTkyNTMtZjgzOWRjZjYyY2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijta6hZNl+vR4twrNCHOrbRMYDSmEDybT+61 erHygcVuXFTixilt8qehakz7CUFout14ATpdskqVqrlzilTCJ8z/Z0n4NPvVkUAB uEZxqBozK+/h5YY1aOcH+K8AodgfTCvYBykQmxREXSgyq7sWR6g957NR20OzWIwW TR+hLK0SMTaCfrSVTeZl3gWEuSo97tf4BMOYW4cFkj1Benlt9oKi1Or3OqnhGIfc OMwA2QcltEQkT++2BJhc4oqLQjWXaiboDVJ3Rl5CeieV98RU0KNmANxJ74UOp1pG KqyoZOrUKW8u2ckb/qphkNiIZ+MdzrJoTTdxTWv3HU76Ud7dRwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOjtot8wuSB++M0w8+HzmJ6j4NYGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmEwOTdkZGUtNDQyYi0z YWU0LTk1YjAtMzA1OTE5NzY0ODUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQByLPri4AzwFsjFV1GQq1g7tnKF6EPheJpmZufpkNfJMBprQ0nkO939 F0qTgM0aCUDzUZIUHOSRtmqQQmMNkNE6Iu04d5piFT8cWMWQaQ5kaMsRiH5iljRI Tp3VHXXwN3dFW0s/r5YHC2AWd9aOdViapFkArDbihIjUgYlZCEuDwGfi3lHkgCpx e+LJ5UeVzOSAxVDyXP+5t2AjKlmpLZjHXK+PXtafZseYKH1L4KQHacMu0ZzWRd4H 3LS2jH0+mS7h4W0wxLtv7ukgeDag9WVYs7LMJhbmR6ygMtm3N/SbHoeAmcTC/9OY VIILjytGV+4w7LQAK6SET86WnToDOi7m -----END CERTIFICATE-----Generated at Wed Oct 29 07:04:46 2025 by rpki-client