$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/bb7fb158-cc7e-3f64-812a-6488d3fb6c13.roa File: bb7fb158-cc7e-3f64-812a-6488d3fb6c13.roa (raw, json) Hash identifier: Oc+We3CrpD/lxaPDSbsaw4JWc1NN0yMDl41WUZmJDHI= Subject key identifier: 60:49:98:5A:4B:D7:B8:89:F2:19:AF:47:C1:71:17:84:57:3E:00:BC Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584AF7EBD4D7F97C5931FB242000 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/bb7fb158-cc7e-3f64-812a-6488d3fb6c13.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 36511 IP address blocks: 137.83.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:d4:d7:f9:7c:59:31:fb:24:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=89ef599e-8a21-4b04-950a-709ba4601853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9f:e2:82:27:d1:ef:8d:86:30:a3:63:e8:10: b3:ae:1b:72:09:05:75:59:ad:2c:42:b7:6e:f9:b5: c2:e2:92:f6:67:12:10:1a:dd:16:b4:69:90:db:80: cb:fd:23:b6:03:19:b1:e0:93:22:eb:cd:cd:44:c1: f8:db:37:cb:ec:c8:d9:aa:bb:a1:35:b3:cd:2a:98: 66:d0:85:19:2c:c2:bf:e9:60:d7:2c:d8:3a:30:53: da:57:5b:c4:ce:b2:d4:76:a6:47:96:76:cd:e7:74: c5:37:56:33:4e:ff:92:fe:61:18:45:fc:45:6b:54: 3b:6b:26:2c:47:1f:89:ab:76:ad:b2:f5:0d:79:bd: 22:06:17:c8:d4:3f:08:1a:e9:f2:63:eb:78:f9:88: 2a:bf:b0:ee:6b:85:7c:7e:32:71:96:f1:47:3e:bd: d0:80:27:2d:19:03:cd:11:a9:58:e7:da:64:aa:c8: f1:5f:2c:19:06:88:ed:d9:2b:63:21:ef:93:96:86: 34:f5:af:8c:4f:f6:f7:94:ed:89:09:d6:31:c3:4d: 84:83:86:c7:a7:64:25:83:1c:dc:27:c7:27:bf:67: 59:1f:c5:57:2b:73:b3:f9:14:dd:93:23:7b:78:04: 2d:97:fb:06:b5:b1:18:8d:b3:8d:e9:84:b9:e5:57: fd:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:49:98:5A:4B:D7:B8:89:F2:19:AF:47:C1:71:17:84:57:3E:00:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/bb7fb158-cc7e-3f64-812a-6488d3fb6c13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 137.83.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:02:fe:29:e2:97:aa:02:d8:48:04:f4:be:6e:fd:70:21:b4: a7:fa:27:ab:58:cc:71:3b:3c:29:dc:e6:88:43:f9:f0:22:05: ee:e5:25:43:52:a3:d9:b2:a4:29:fd:91:0c:25:26:97:ee:40: b9:0b:96:63:ef:44:05:cf:0c:79:66:d4:e5:27:30:a7:b3:dd: 55:3b:2a:0f:64:e5:66:7b:78:ad:e2:a8:cd:2b:98:e5:f6:c8: 61:3d:53:8c:c1:2b:53:66:19:61:b1:e4:2e:e5:03:75:b4:db: 59:51:07:58:03:b0:e0:65:77:c0:2c:6b:d8:55:28:17:d8:e1: f3:66:35:da:b9:f5:8e:1e:1c:e9:88:f1:64:28:e4:fe:15:71: c9:5e:de:6e:df:0c:e7:6e:50:f1:23:ce:b4:80:86:9e:66:e6: 1f:03:e7:6b:82:65:61:7c:c4:5e:d9:41:51:25:52:71:3f:58: 79:77:cd:84:7c:fd:e6:1b:0a:4f:70:34:e1:9e:aa:74:d9:dc: fe:01:59:ca:47:14:3c:b9:08:2e:08:ae:33:00:f6:30:d2:69: 88:3c:cd:78:1a:50:81:d2:c7:db:bf:32:a1:8b:db:f9:61:5b: 0c:9a:63:30:65:0a:df:1b:e4:20:62:cb:30:93:2a:73:3b:7d: 32:3d:35:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr369TX+XxZMfskIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk ODllZjU5OWUtOGEyMS00YjA0LTk1MGEtNzA5YmE0NjAxODUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5/igifR742GMKNj6BCzrhtyCQV1Wa0sQrdu +bXC4pL2ZxIQGt0WtGmQ24DL/SO2Axmx4JMi683NRMH42zfL7MjZqruhNbPNKphm 0IUZLMK/6WDXLNg6MFPaV1vEzrLUdqZHlnbN53TFN1YzTv+S/mEYRfxFa1Q7ayYs Rx+Jq3atsvUNeb0iBhfI1D8IGunyY+t4+Ygqv7Dua4V8fjJxlvFHPr3QgCctGQPN EalY59pkqsjxXywZBojt2StjIe+TloY09a+MT/b3lO2JCdYxw02Eg4bHp2Qlgxzc J8cnv2dZH8VXK3Oz+RTdkyN7eAQtl/sGtbEYjbON6YS55Vf9cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBJmFpL17iJ8hmvR8FxF4RXPgC8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvYmI3ZmIxNTgtY2M3ZS0z ZjY0LTgxMmEtNjQ4OGQzZmI2YzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiVNMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYC/inil6oC2EgE9L5u/XAhtKf6J6tYzHE7PCnc5ohD+fAiBe7lJUNS o9mypCn9kQwlJpfuQLkLlmPvRAXPDHlm1OUnMKez3VU7Kg9k5WZ7eK3iqM0rmOX2 yGE9U4zBK1NmGWGx5C7lA3W021lRB1gDsOBld8Asa9hVKBfY4fNmNdq59Y4eHOmI 8WQo5P4Vccle3m7fDOduUPEjzrSAhp5m5h8D52uCZWF8xF7ZQVElUnE/WHl3zYR8 /eYbCk9wNOGeqnTZ3P4BWcpHFDy5CC4IrjMA9jDSaYg8zXgaUIHSx9u/MqGL2/lh WwyaYzBlCt8b5CBiyzCTKnM7fTI9NRg= -----END CERTIFICATE-----Generated at Fri Sep 19 05:03:06 2025 by rpki-client