$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/ba10d448-b912-33bc-a392-2588e49baea1.roa File: ba10d448-b912-33bc-a392-2588e49baea1.roa (raw, json) Hash identifier: wIEKn9Yu3Vkl1f3auqKN/vP6D7dR2VjSlPtY1k7jYug= Subject key identifier: 27:21:13:98:32:5D:27:54:02:5F:03:D2:8B:92:0B:AB:00:B9:27:EB Certificate issuer: /CN=6eb23b03-9d1d-412d-a56a-493aeaa5d057 Certificate serial: 010D0C9F4328584B7DECAD274A0FCB135B78BE00 Authority key identifier: 36:34:B6:69:CC:BF:86:C1:CA:BE:06:6D:34:F3:24:A6:86:D3:31:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/ba10d448-b912-33bc-a392-2588e49baea1.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 14977 IP address blocks: 198.99.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/6eb23b03-9d1d-412d-a56a-493aeaa5d057.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/6eb23b03-9d1d-412d-a56a-493aeaa5d057.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:ad:27:4a:0f:cb:13:5b:78:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eb23b03-9d1d-412d-a56a-493aeaa5d057 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=f20409db-5d1a-4f86-a33e-01073269ad6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:16:7e:ec:d3:75:7c:a3:8f:ca:fc:83:51:b0: 94:2f:57:04:5f:04:98:fc:b9:61:49:73:e3:bf:2e: b2:f4:3c:03:bc:ea:f1:0f:ca:00:da:5f:16:88:3e: cf:fb:bc:9a:1a:d8:22:b4:4d:9f:13:31:45:02:61: e6:32:6b:1b:98:b8:a5:d2:32:12:5e:2e:bd:d2:5c: 1a:a7:e3:33:cc:44:6c:4a:1a:6c:f0:84:a2:5f:7a: b5:8f:b2:56:3a:47:06:70:51:d5:74:64:c6:62:86: d1:68:65:64:d5:c0:60:3d:6a:0e:30:91:fb:d2:02: e1:c3:6a:47:af:0a:5f:c9:a2:01:ee:e9:b9:d6:1c: 81:41:62:44:16:e5:64:57:a8:30:a0:db:ad:72:f1: 76:ef:db:00:21:e9:77:1e:ed:0b:9f:55:07:43:5d: 19:ea:9c:02:e3:6d:97:f4:36:f1:28:0b:7a:78:e0: ca:48:88:71:9d:8d:75:2e:d7:2b:8e:d8:24:26:15: 84:a0:44:7d:5c:a2:c2:43:41:ad:cf:76:e4:c7:2f: 25:25:5c:4b:a9:66:b5:69:50:3a:59:3d:5e:2c:52: c7:44:cb:0e:da:60:74:4c:8b:9e:73:28:c4:9f:19: 34:66:6a:a0:40:17:eb:6d:bf:92:1f:cb:24:b8:5c: ae:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:21:13:98:32:5D:27:54:02:5F:03:D2:8B:92:0B:AB:00:B9:27:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/ba10d448-b912-33bc-a392-2588e49baea1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/6eb23b03-9d1d-412d-a56a-493aeaa5d057.crl X509v3 Authority Key Identifier: keyid:36:34:B6:69:CC:BF:86:C1:CA:BE:06:6D:34:F3:24:A6:86:D3:31:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057.cer sbgp-ipAddrBlock: critical IPv4: 198.99.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:ee:4c:b8:05:04:10:b5:fc:6b:52:f5:09:b7:9e:88:c2:04: f6:28:0d:8c:9f:42:f3:39:ee:aa:2a:39:66:37:26:d4:d8:74: c8:2a:b5:d8:a8:ba:42:ba:f6:4a:a9:44:9d:13:00:b8:29:20: 10:98:11:d6:5b:d5:8d:01:17:b6:82:b8:a7:94:91:ed:eb:94: c0:a8:21:a3:ac:8d:7b:e6:22:80:06:cb:be:c1:7e:18:d6:bd: 19:cc:d9:e6:e0:bc:eb:d5:6b:54:74:a2:da:e3:03:d5:12:1d: 17:8c:37:28:fb:3d:50:f0:60:79:51:99:96:6e:d9:dd:ad:3f: e3:fd:34:b0:50:05:ab:ba:d9:a6:7f:c8:d6:e4:7e:fe:11:1b: 74:50:49:ec:63:bc:48:bc:1c:c3:d0:0c:e9:7e:c8:62:20:48: 2b:9b:c0:ca:74:c6:c9:b5:33:2c:71:64:c7:45:09:3d:59:13: 56:e0:c9:80:05:8a:2f:78:0b:93:20:2f:30:95:4b:81:ff:a2: 81:0d:90:2c:31:99:76:95:8f:3e:52:84:e9:73:cc:c7:f1:dc: 85:7e:f6:c7:3d:52:53:92:5a:c7:81:93:8d:5d:b4:1d:8b:ee: e8:d3:13:43:e2:ac:9b:94:df:9a:f5:2d:38:0c:a9:4b:4d:34: cd:bf:6e:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97K0nSg/LE1t4vgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmViMjNiMDMtOWQxZC00MTJkLWE1NmEtNDkzYWVhYTVk MDU3MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk ZjIwNDA5ZGItNWQxYS00Zjg2LWEzM2UtMDEwNzMyNjlhZDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRZ+7NN1fKOPyvyDUbCUL1cEXwSY/LlhSXPj vy6y9DwDvOrxD8oA2l8WiD7P+7yaGtgitE2fEzFFAmHmMmsbmLil0jISXi690lwa p+MzzERsShps8ISiX3q1j7JWOkcGcFHVdGTGYobRaGVk1cBgPWoOMJH70gLhw2pH rwpfyaIB7um51hyBQWJEFuVkV6gwoNutcvF279sAIel3Hu0Ln1UHQ10Z6pwC422X 9DbxKAt6eODKSIhxnY11LtcrjtgkJhWEoER9XKLCQ0Gtz3bkxy8lJVxLqWa1aVA6 WT1eLFLHRMsO2mB0TIuecyjEnxk0ZmqgQBfrbb+SH8skuFyuMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCchE5gyXSdUAl8D0ouSC6sAuSfrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82ZWIy M2IwMy05ZDFkLTQxMmQtYTU2YS00OTNhZWFhNWQwNTcvYmExMGQ0NDgtYjkxMi0z M2JjLWEzOTItMjU4OGU0OWJhZWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmViMjNiMDMtOWQxZC00MTJkLWE1 NmEtNDkzYWVhYTVkMDU3LzZlYjIzYjAzLTlkMWQtNDEyZC1hNTZhLTQ5M2FlYWE1 ZDA1Ny5jcmwwHwYDVR0jBBgwFoAUNjS2acy/hsHKvgZtNPMkpobTMY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82ZWIyM2IwMy05ZDFkLTQxMmQtYTU2YS00OTNh ZWFhNWQwNTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmOrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzuTLgFBBC1/GtS9Qm3nojCBPYoDYyfQvM57qoqOWY3JtTYdMgqtdio ukK69kqpRJ0TALgpIBCYEdZb1Y0BF7aCuKeUke3rlMCoIaOsjXvmIoAGy77BfhjW vRnM2ebgvOvVa1R0otrjA9USHReMNyj7PVDwYHlRmZZu2d2tP+P9NLBQBau62aZ/ yNbkfv4RG3RQSexjvEi8HMPQDOl+yGIgSCubwMp0xsm1MyxxZMdFCT1ZE1bgyYAF ii94C5MgLzCVS4H/ooENkCwxmXaVjz5ShOlzzMfx3IV+9sc9UlOSWseBk41dtB2L 7ujTE0PirJuU35r1LTgMqUtNNM2/bqw= -----END CERTIFICATE-----Generated at Mon Nov 3 08:38:38 2025 by rpki-client