$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9212b0db-bb73-4a6f-a5e7-4423f4889ee8/ba044680-acfd-3da3-a6d9-a0f0c2911dbb.roa File: ba044680-acfd-3da3-a6d9-a0f0c2911dbb.roa (raw, json) Hash identifier: BwE8ewJNT6mxaGZaRYCMNAzZW/XlDOQNVhKkR7ZvlvI= Subject key identifier: 51:19:08:B7:46:B0:94:56:6E:F5:CA:18:80:D6:59:A1:27:FD:6B:F8 Certificate issuer: /CN=9212b0db-bb73-4a6f-a5e7-4423f4889ee8 Certificate serial: 010D0C9F4328584BB45D3639606AEA66936EDD80 Authority key identifier: AC:2A:F3:00:A0:97:DA:F9:0F:08:C0:F3:DB:A0:45:A9:9D:B5:50:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9212b0db-bb73-4a6f-a5e7-4423f4889ee8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9212b0db-bb73-4a6f-a5e7-4423f4889ee8/ba044680-acfd-3da3-a6d9-a0f0c2911dbb.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 25948 IP address blocks: 23.172.208.0/24 maxlen: 24 172.110.129.0/24 maxlen: 24 198.135.236.0/24 maxlen: 24 199.212.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9212b0db-bb73-4a6f-a5e7-4423f4889ee8/9212b0db-bb73-4a6f-a5e7-4423f4889ee8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9212b0db-bb73-4a6f-a5e7-4423f4889ee8/9212b0db-bb73-4a6f-a5e7-4423f4889ee8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9212b0db-bb73-4a6f-a5e7-4423f4889ee8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:36:39:60:6a:ea:66:93:6e:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9212b0db-bb73-4a6f-a5e7-4423f4889ee8 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=ca3a9eb5-5e4e-482b-8162-dcd32ee23e87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b1:9e:6e:ac:b8:a2:fc:fb:f2:d1:13:d9:ab: 04:47:7f:e8:cf:bc:e2:30:c4:dc:76:92:ac:f7:df: 71:a9:b1:16:c8:4c:ec:15:03:13:b0:73:c1:55:dc: 53:67:43:43:d0:a9:ca:d9:ba:a2:83:2c:32:51:5f: b2:ef:86:9c:c8:14:b1:ae:b4:56:b5:d9:64:35:91: bc:db:f5:4f:fe:03:d0:64:00:af:56:a1:4f:44:55: cd:90:41:15:e2:45:14:13:91:f9:61:48:e6:33:e3: 31:4c:35:d0:c3:cb:39:07:44:11:1e:71:a4:c6:41: 33:76:fc:37:da:09:5c:3f:86:58:35:b2:78:aa:8a: 0d:7e:b9:3d:12:f7:6c:9a:e2:6b:85:cb:23:69:4c: dc:67:34:cf:c9:e7:5e:08:27:fb:dc:d8:98:4e:2b: 76:32:db:fc:c1:5d:96:cf:3a:ae:67:1d:f1:9d:c8: 9f:58:de:66:24:a8:e7:61:83:0c:c4:ab:15:f9:86: f5:0d:3b:91:0c:3f:68:cb:96:41:b3:fe:5c:88:6c: c1:b6:a9:87:92:7b:5c:ad:eb:31:ce:9c:bd:f6:05: 25:5e:3f:6e:b6:b1:4c:2d:00:a0:59:32:11:7a:40: f4:49:61:03:e1:31:a8:1b:9f:a1:91:fe:02:d0:72: e9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:19:08:B7:46:B0:94:56:6E:F5:CA:18:80:D6:59:A1:27:FD:6B:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9212b0db-bb73-4a6f-a5e7-4423f4889ee8/ba044680-acfd-3da3-a6d9-a0f0c2911dbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9212b0db-bb73-4a6f-a5e7-4423f4889ee8/9212b0db-bb73-4a6f-a5e7-4423f4889ee8.crl X509v3 Authority Key Identifier: keyid:AC:2A:F3:00:A0:97:DA:F9:0F:08:C0:F3:DB:A0:45:A9:9D:B5:50:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9212b0db-bb73-4a6f-a5e7-4423f4889ee8.cer sbgp-ipAddrBlock: critical IPv4: 23.172.208.0/24 172.110.129.0/24 198.135.236.0/24 199.212.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:3c:5d:23:4c:b8:4f:46:b4:2c:d4:5e:8e:69:25:16:cc:29: 5f:84:ba:68:f1:83:52:dc:50:ec:ef:32:d3:3b:33:7d:ba:5a: c8:30:b7:03:00:72:d5:14:bf:b5:bc:c5:9b:e5:a1:12:99:53: 0a:3c:7b:3b:b6:7b:84:56:86:17:87:12:53:b1:3a:18:d2:e1: 4c:ad:65:01:45:bb:36:ad:d5:2b:e2:1a:d7:d9:ed:fc:86:0f: b6:d9:21:2f:c9:fc:07:b3:fe:6d:8a:0d:b8:bf:86:ea:c9:46: ab:5d:20:59:ca:12:c0:e9:ad:ef:66:e5:0c:b3:95:3c:1f:32: 1a:c0:67:67:10:8d:05:75:26:b8:37:5d:e7:93:79:bc:2e:c0: eb:c2:1b:0a:e9:fa:01:93:19:22:12:90:9d:9a:a9:4f:c8:73: bd:e7:de:37:3d:1e:21:da:48:a7:73:79:0a:33:13:9b:b7:9e: 36:2c:ff:df:5a:2e:8d:e9:05:cd:94:2e:c8:09:00:2a:23:ab: 1b:4b:33:37:2b:44:70:dd:2d:3c:a2:d1:b2:30:88:14:2e:1c: e1:d3:bf:c8:c7:43:75:f1:af:c4:1b:54:86:5f:85:8b:63:f7: 69:dc:95:ef:85:22:c8:61:e0:0c:fa:66:ac:e1:54:8a:40:dd: 2e:b0:f0:90 -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEu0XTY5YGrqZpNu3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTIxMmIwZGItYmI3My00YTZmLWE1ZTctNDQyM2Y0ODg5 ZWU4MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk Y2EzYTllYjUtNWU0ZS00ODJiLTgxNjItZGNkMzJlZTIzZTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7Gebqy4ovz78tET2asER3/oz7ziMMTcdpKs 999xqbEWyEzsFQMTsHPBVdxTZ0ND0KnK2bqigywyUV+y74acyBSxrrRWtdlkNZG8 2/VP/gPQZACvVqFPRFXNkEEV4kUUE5H5YUjmM+MxTDXQw8s5B0QRHnGkxkEzdvw3 2glcP4ZYNbJ4qooNfrk9EvdsmuJrhcsjaUzcZzTPyedeCCf73NiYTit2Mtv8wV2W zzquZx3xncifWN5mJKjnYYMMxKsV+Yb1DTuRDD9oy5ZBs/5ciGzBtqmHkntcresx zpy99gUlXj9utrFMLQCgWTIRekD0SWED4TGoG5+hkf4C0HLpsQIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFFEZCLdGsJRWbvXKGIDWWaEn/Wv4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MjEy YjBkYi1iYjczLTRhNmYtYTVlNy00NDIzZjQ4ODllZTgvYmEwNDQ2ODAtYWNmZC0z ZGEzLWE2ZDktYTBmMGMyOTExZGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTIxMmIwZGItYmI3My00YTZmLWE1 ZTctNDQyM2Y0ODg5ZWU4LzkyMTJiMGRiLWJiNzMtNGE2Zi1hNWU3LTQ0MjNmNDg4 OWVlOC5jcmwwHwYDVR0jBBgwFoAUrCrzAKCX2vkPCMDz26BFqZ21UFUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MjEyYjBkYi1iYjczLTRhNmYtYTVlNy00NDIz ZjQ4ODllZTguY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAF6zQAwQA rG6BAwQAxofsAwQAx9T/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBADI8XSNMuE9GtCzUXo5pJRbMKV+Eumjx g1LcUOzvMtM7M326WsgwtwMActUUv7W8xZvloRKZUwo8ezu2e4RWhheHElOxOhjS 4UytZQFFuzat1SviGtfZ7fyGD7bZIS/J/Aez/m2KDbi/hurJRqtdIFnKEsDpre9m 5QyzlTwfMhrAZ2cQjQV1Jrg3XeeTebwuwOvCGwrp+gGTGSISkJ2aqU/Ic73n3jc9 HiHaSKdzeQozE5u3njYs/99aLo3pBc2ULsgJACojqxtLMzcrRHDdLTyi0bIwiBQu HOHTv8jHQ3Xxr8QbVIZfhYtj92ncle+FIshh4Az6ZqzhVIpA3S6w8JA= -----END CERTIFICATE-----Generated at Mon Nov 3 08:41:28 2025 by rpki-client