$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/66cef13d-dff8-32f0-a25e-7a5331345d1c.roa File: 66cef13d-dff8-32f0-a25e-7a5331345d1c.roa (raw, json) Hash identifier: emL/SUilLpYGVAPcfQXCohAo7XG/BRCIsKAMw459OwU= Subject key identifier: 2C:59:2A:98:50:11:F2:8D:78:96:7A:35:82:D9:40:B7:B0:9E:4F:1C Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584B004BF410E3E694D50D559B80 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/66cef13d-dff8-32f0-a25e-7a5331345d1c.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 33392 IP address blocks: 142.202.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:f4:10:e3:e6:94:d5:0d:55:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=151dbd12-6dc4-43c3-a244-f3fcd7be3afd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:dd:3c:65:63:09:f9:cd:4d:91:fa:94:c1:aa: 81:4d:9f:21:08:0f:54:25:a7:9f:0c:b8:e9:5f:3c: b5:62:df:37:00:c0:08:6e:95:2f:90:5b:e3:27:2e: 67:02:55:a0:2a:f6:f5:51:2d:63:e0:44:b6:db:be: 4d:17:47:1b:73:be:4a:d9:1a:e5:7c:72:7d:d1:96: cf:9d:e0:0f:b9:bd:4c:30:fb:e2:29:16:dc:48:1b: a4:bc:7a:56:2c:78:ee:cb:0f:7f:64:cc:dc:eb:ce: bd:2e:fc:0d:09:10:0a:b9:63:29:b0:29:8f:3b:14: 6f:1e:0b:bc:e5:e7:e7:da:61:95:e3:fe:80:fc:80: 69:5f:17:c2:6f:19:d9:65:5f:49:ac:2b:89:55:cd: 23:2d:6a:a7:b0:8f:42:b4:41:2f:8e:85:b6:af:8d: 12:c4:f6:2b:68:9f:41:24:c8:f0:b8:b8:57:87:32: 6c:72:d1:55:db:03:3b:4e:c9:43:73:43:69:f4:6c: b8:c3:0e:a5:89:e9:f9:75:eb:fa:e6:84:78:e6:44: 0d:e6:01:6a:38:3b:81:ac:51:98:de:6c:13:25:9a: 17:16:dc:32:35:4a:07:d5:63:74:5f:e9:56:8d:1a: 62:ed:f4:7f:0b:91:42:99:17:af:3a:58:14:58:ce: c9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:59:2A:98:50:11:F2:8D:78:96:7A:35:82:D9:40:B7:B0:9E:4F:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/66cef13d-dff8-32f0-a25e-7a5331345d1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 142.202.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:92:52:64:c5:7e:ea:8e:10:4d:38:20:de:83:5c:f0:ce:30: af:f9:22:a1:97:e5:95:78:bd:80:d6:62:b8:5b:68:8e:ba:81: 2a:53:f7:91:6b:33:0e:76:62:98:51:37:0f:99:9e:e4:14:95: 73:61:13:0e:52:1f:92:7f:1c:35:b7:ec:59:c3:09:b3:e4:28: 43:e2:36:53:02:d6:cc:18:d2:4f:29:51:75:5d:1a:7b:6f:0f: a4:c3:38:c5:53:f3:c5:74:48:d9:30:ae:20:f5:5a:46:23:b5: 25:43:7c:e8:58:fa:9c:f5:32:a0:69:1e:f4:e9:77:b5:70:35: 6d:d6:24:3b:5f:86:66:9f:ef:f5:b3:dd:8b:eb:78:0f:32:a9: 75:dd:da:63:af:4c:10:bf:c2:44:93:fb:ed:77:7e:0e:2b:b4: e7:3d:af:e8:64:14:51:c5:f7:28:c3:93:b3:a3:59:53:a2:69: 88:55:59:9c:ea:1a:d7:d0:57:2f:f3:3c:8f:b1:96:4c:e8:5f: 8e:9c:88:31:5f:ff:74:cf:33:64:a7:af:30:cf:a1:02:1c:30: 5a:48:77:15:b6:58:6b:8e:28:68:a3:50:e2:08:6d:c2:b1:79: 85:00:f6:0f:50:ac:8c:72:67:d7:b8:49:e1:10:a8:a6:6a:6a: 01:f3:40:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS/QQ4+aU1Q1Vm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk MTUxZGJkMTItNmRjNC00M2MzLWEyNDQtZjNmY2Q3YmUzYWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgt08ZWMJ+c1NkfqUwaqBTZ8hCA9UJaefDLjp Xzy1Yt83AMAIbpUvkFvjJy5nAlWgKvb1US1j4ES2275NF0cbc75K2RrlfHJ90ZbP neAPub1MMPviKRbcSBukvHpWLHjuyw9/ZMzc6869LvwNCRAKuWMpsCmPOxRvHgu8 5efn2mGV4/6A/IBpXxfCbxnZZV9JrCuJVc0jLWqnsI9CtEEvjoW2r40SxPYraJ9B JMjwuLhXhzJsctFV2wM7TslDc0Np9Gy4ww6lien5dev65oR45kQN5gFqODuBrFGY 3mwTJZoXFtwyNUoH1WN0X+lWjRpi7fR/C5FCmRevOlgUWM7JZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCxZKphQEfKNeJZ6NYLZQLewnk8cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvNjZjZWYxM2QtZGZmOC0z MmYwLWEyNWUtN2E1MzMxMzQ1ZDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjspwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeSUmTFfuqOEE04IN6DXPDOMK/5IqGX5ZV4vYDWYrhbaI66gSpT95Fr Mw52YphRNw+ZnuQUlXNhEw5SH5J/HDW37FnDCbPkKEPiNlMC1swY0k8pUXVdGntv D6TDOMVT88V0SNkwriD1WkYjtSVDfOhY+pz1MqBpHvTpd7VwNW3WJDtfhmaf7/Wz 3YvreA8yqXXd2mOvTBC/wkST++13fg4rtOc9r+hkFFHF9yjDk7OjWVOiaYhVWZzq GtfQVy/zPI+xlkzoX46ciDFf/3TPM2SnrzDPoQIcMFpIdxW2WGuOKGijUOIIbcKx eYUA9g9QrIxyZ9e4SeEQqKZqagHzQCU= -----END CERTIFICATE-----Generated at Fri Sep 19 10:25:01 2025 by rpki-client