$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/008d7de3-7f1e-3d45-bc4c-4a2572d24396.roa File: 008d7de3-7f1e-3d45-bc4c-4a2572d24396.roa (raw, json) Hash identifier: cGupvPQcR51Wfb0JNA4fZA62a+/B66orepCkoyLsRxU= Subject key identifier: F0:AC:99:2D:D6:76:D9:32:F1:68:5D:85:31:4D:2C:59:E7:2A:5E:E5 Certificate issuer: /CN=ba461ed6-9748-4005-b669-8946003e1ae1 Certificate serial: 010D0C9F4328584B3C51AA14B968DE5761F16DC0 Authority key identifier: 86:FF:2D:22:FE:C4:48:05:84:E8:92:00:D8:2D:7A:2E:A3:82:9E:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/008d7de3-7f1e-3d45-bc4c-4a2572d24396.roa Signing time: Thu 18 Sep 2025 13:00:41 +0000 ROA not before: Thu 18 Sep 2025 13:00:41 +0000 ROA not after: Wed 17 Dec 2025 14:00:41 +0000 asID: 4246 IP address blocks: 128.235.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:51:aa:14:b9:68:de:57:61:f1:6d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba461ed6-9748-4005-b669-8946003e1ae1 Validity Not Before: Sep 18 13:00:41 2025 GMT Not After : Dec 17 14:00:41 2025 GMT Subject: CN=8e224bf1-3def-474b-9be3-39ac3af1770f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:7d:ed:aa:8d:11:d6:0e:3b:cc:53:0e:94:ec: 7f:cb:d9:b6:af:76:66:87:84:11:61:5e:3f:e2:3e: b2:82:f8:9c:72:bf:89:56:aa:e8:91:a3:eb:da:ce: af:76:bc:ea:70:0d:94:63:23:85:33:b3:4a:48:bd: 54:2e:cb:11:b0:89:7d:48:66:5b:89:01:6f:f7:16: a3:ed:98:24:b6:55:23:6e:f1:4a:e9:c7:d4:c4:ae: 8e:e1:99:ef:82:5f:1e:57:50:36:23:af:6f:fc:bd: f7:28:e2:6d:ac:4f:bb:0b:2d:6a:06:df:5b:d4:c6: ab:99:7f:38:a7:c7:2c:37:9b:e2:e2:c5:62:c2:13: b0:b9:24:a5:ae:65:71:66:9e:85:c1:14:17:23:4f: 1a:b2:4e:0e:28:6d:ab:54:21:f8:a7:cb:42:46:51: f9:36:22:0e:5a:f1:c6:83:7e:c1:f0:73:bc:cf:be: 9a:c2:1a:62:3f:d3:58:aa:ef:a0:fc:ba:f8:38:33: 53:f9:3b:a3:1f:c2:61:df:24:03:a0:56:27:6e:f9: fd:c2:63:9c:b5:a9:62:7b:bc:6d:a0:eb:ab:15:5d: ab:d4:c6:d1:f0:44:aa:f3:30:5b:db:65:ba:8b:cb: 7b:b2:95:57:f8:ab:50:30:cd:57:48:8b:ce:0d:b8: 68:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:AC:99:2D:D6:76:D9:32:F1:68:5D:85:31:4D:2C:59:E7:2A:5E:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/008d7de3-7f1e-3d45-bc4c-4a2572d24396.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.crl X509v3 Authority Key Identifier: keyid:86:FF:2D:22:FE:C4:48:05:84:E8:92:00:D8:2D:7A:2E:A3:82:9E:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer sbgp-ipAddrBlock: critical IPv4: 128.235.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:ea:5c:5f:a2:e1:72:78:50:5e:26:ff:a4:3a:45:05:a5:0b: 55:65:4f:5d:10:45:5c:e6:41:73:71:81:c5:2b:ad:5a:bd:73: 97:74:14:19:8d:17:7c:d5:21:f6:f8:0c:cd:24:a9:62:f2:d0: 3c:28:1b:cf:4e:9c:41:f2:63:ac:ef:e5:b4:31:f2:4d:f4:7b: dd:15:f4:20:6a:dc:ca:60:18:44:fa:3e:32:7c:ad:c7:b3:05: 93:1e:3b:ce:b6:91:0c:f6:15:57:67:6f:7c:b2:41:19:b1:b1: 10:35:ae:9e:88:c9:09:48:62:41:fc:f6:72:6e:e2:17:fe:a9: b5:3c:31:aa:24:4b:60:e2:d1:fb:42:4b:9d:c2:a6:74:7a:8b: c4:b9:a4:17:9b:c3:64:cd:b3:fd:79:e4:23:02:9d:79:e8:4f: f1:da:0c:29:17:2d:6e:92:cb:60:89:d4:7c:cd:40:ef:15:1f: f0:90:bd:a0:48:16:cd:1c:97:c4:58:5c:20:3d:57:2d:80:2e: ed:46:2e:6f:a3:25:49:35:a5:86:a0:af:a5:06:fe:c4:c7:3f: bf:47:96:0b:b9:44:d4:19:2a:d1:92:14:55:f8:d7:dd:6f:8b: 51:a1:05:8a:c4:ff:11:49:af:e7:fb:1e:a2:4e:e8:03:b3:15: 06:37:3a:37 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEs8UaoUuWjeV2HxbcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE0NjFlZDYtOTc0OC00MDA1LWI2NjktODk0NjAwM2Ux YWUxMB4XDTI1MDkxODEzMDA0MVoXDTI1MTIxNzE0MDA0MVowLzEtMCsGA1UEAxMk OGUyMjRiZjEtM2RlZi00NzRiLTliZTMtMzlhYzNhZjE3NzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg33tqo0R1g47zFMOlOx/y9m2r3Zmh4QRYV4/ 4j6ygviccr+JVqrokaPr2s6vdrzqcA2UYyOFM7NKSL1ULssRsIl9SGZbiQFv9xaj 7ZgktlUjbvFK6cfUxK6O4Znvgl8eV1A2I69v/L33KOJtrE+7Cy1qBt9b1MarmX84 p8csN5vi4sViwhOwuSSlrmVxZp6FwRQXI08ask4OKG2rVCH4p8tCRlH5NiIOWvHG g37B8HO8z76awhpiP9NYqu+g/Lr4ODNT+TujH8Jh3yQDoFYnbvn9wmOctalie7xt oOurFV2r1MbR8ESq8zBb22W6i8t7spVX+KtQMM1XSIvODbho/QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFPCsmS3Wdtky8WhdhTFNLFnnKl7lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iYTQ2 MWVkNi05NzQ4LTQwMDUtYjY2OS04OTQ2MDAzZTFhZTEvMDA4ZDdkZTMtN2YxZS0z ZDQ1LWJjNGMtNGEyNTcyZDI0Mzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmE0NjFlZDYtOTc0OC00MDA1LWI2 NjktODk0NjAwM2UxYWUxL2JhNDYxZWQ2LTk3NDgtNDAwNS1iNjY5LTg5NDYwMDNl MWFlMS5jcmwwHwYDVR0jBBgwFoAUhv8tIv7ESAWE6JIA2C16LqOCnnUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iYTQ2MWVkNi05NzQ4LTQwMDUtYjY2OS04OTQ2 MDAzZTFhZTEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgOswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAWOpcX6LhcnhQXib/pDpFBaULVWVPXRBFXOZBc3GBxSutWr1zl3QUGY0X fNUh9vgMzSSpYvLQPCgbz06cQfJjrO/ltDHyTfR73RX0IGrcymAYRPo+Mnytx7MF kx47zraRDPYVV2dvfLJBGbGxEDWunojJCUhiQfz2cm7iF/6ptTwxqiRLYOLR+0JL ncKmdHqLxLmkF5vDZM2z/XnkIwKdeehP8doMKRctbpLLYInUfM1A7xUf8JC9oEgW zRyXxFhcID1XLYAu7UYub6MlSTWlhqCvpQb+xMc/v0eWC7lE1Bkq0ZIUVfjX3W+L UaEFisT/EUmv5/seok7oA7MVBjc6Nw== -----END CERTIFICATE-----Generated at Fri Oct 17 13:21:08 2025 by rpki-client