$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bda1b591-985f-3521-be3d-186d808ac530.roa File: bda1b591-985f-3521-be3d-186d808ac530.roa (raw, json) Hash identifier: OTI/mG5YyiDVmETnwIsYzuV/7KDO2dB6KpAoeXti43o= Subject key identifier: 65:D0:E1:70:91:D7:A5:25:81:C0:F9:31:B2:11:01:B8:8A:74:CA:70 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B970CDE498F4F5A0869AD1900 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bda1b591-985f-3521-be3d-186d808ac530.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 396982 IP address blocks: 23.236.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:de:49:8f:4f:5a:08:69:ad:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=b76e2808-5738-4e14-ac91-8127ff9014c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ff:20:d0:35:0e:cc:7d:3d:11:01:a9:5e:d1: e6:b5:2b:e8:4b:db:8b:4c:ea:a9:b9:9e:19:e0:4e: 2f:3f:17:6b:58:0f:db:6c:7e:d9:cc:4b:1e:c9:15: 80:a4:e5:5f:0e:fa:f4:97:75:c0:74:ef:20:70:e6: b2:cc:7a:c2:20:bd:c8:1e:85:31:8c:53:37:4c:93: 93:49:5a:ab:d8:76:f9:31:f4:f3:eb:c3:48:0b:e8: 1f:5e:1f:b4:5d:ed:5e:41:36:ac:3a:9e:8a:28:ee: f1:a3:34:29:d8:06:4b:c4:ba:86:f4:68:cb:98:a2: a0:f3:8f:30:4a:cd:43:09:b0:c5:6e:ff:fe:61:b2: 74:cf:b8:d8:78:3d:d0:de:a3:a6:3b:92:75:68:f9: e8:ca:a3:6c:44:e4:18:91:2d:f2:f0:b8:11:85:55: 12:a1:a9:db:95:b7:08:85:ee:c2:3d:6f:77:3e:61: 09:16:ac:dd:bb:3e:3c:4e:22:52:9f:66:4d:ad:90: 69:04:98:3f:24:2d:b1:7e:7a:55:36:99:21:31:7b: 1b:bd:98:bc:26:cd:f3:d2:b1:c4:e3:0c:79:93:3b: c6:70:1f:b7:b0:e4:7c:4e:98:b3:7e:54:0c:a5:ff: a9:d0:68:23:b2:dd:29:8a:25:28:9e:ee:50:46:cc: 73:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D0:E1:70:91:D7:A5:25:81:C0:F9:31:B2:11:01:B8:8A:74:CA:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bda1b591-985f-3521-be3d-186d808ac530.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 23.236.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:a3:85:16:6e:33:d0:38:be:c8:25:bc:33:48:91:8e:41:7b: ba:0b:0d:42:b9:33:3e:76:d2:c1:5e:7c:ce:f8:ba:68:62:e7: 24:12:91:cc:e9:07:4c:ed:7f:74:ca:a1:c1:8c:fc:03:b2:6d: fa:ae:3b:ed:ec:9a:f8:67:61:f4:21:86:ca:7f:68:e3:58:03: 79:61:00:d2:42:6f:b4:d3:5e:cf:52:ba:63:7c:04:3a:b6:69: 16:00:27:75:55:a0:3a:96:86:97:e6:f5:4b:bd:68:71:03:14: 0e:61:2a:ae:2e:54:9d:05:c2:53:68:90:d0:7f:23:fc:4d:16: dd:51:cd:47:30:be:f2:36:9b:c0:d3:fb:56:7f:88:0f:c0:04: a1:c8:e8:c3:2e:5a:19:19:7a:ad:43:b0:d8:36:3b:b7:ca:dc: 71:b0:8c:d8:bd:ec:18:22:04:ce:ea:6b:d4:31:db:e5:59:9b: 31:1d:d2:b9:eb:1a:20:9f:7a:10:bb:e1:b9:97:ed:22:63:cc: aa:ea:b1:e7:fb:1d:62:ae:31:e8:19:4b:ff:48:80:be:65:97: d0:4c:f1:7e:d1:f0:f7:9e:8e:d5:5e:fa:b2:d4:97:a9:83:c2: fd:57:e2:72:60:84:3f:7e:c4:56:e8:99:8b:37:21:c7:3d:bf: 01:cf:de:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDN5Jj09aCGmtGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk Yjc2ZTI4MDgtNTczOC00ZTE0LWFjOTEtODEyN2ZmOTAxNGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlf8g0DUOzH09EQGpXtHmtSvoS9uLTOqpuZ4Z 4E4vPxdrWA/bbH7ZzEseyRWApOVfDvr0l3XAdO8gcOayzHrCIL3IHoUxjFM3TJOT SVqr2Hb5MfTz68NIC+gfXh+0Xe1eQTasOp6KKO7xozQp2AZLxLqG9GjLmKKg848w Ss1DCbDFbv/+YbJ0z7jYeD3Q3qOmO5J1aPnoyqNsROQYkS3y8LgRhVUSoanblbcI he7CPW93PmEJFqzduz48TiJSn2ZNrZBpBJg/JC2xfnpVNpkhMXsbvZi8Js3z0rHE 4wx5kzvGcB+3sOR8TpizflQMpf+p0Ggjst0piiUonu5QRsxzxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGXQ4XCR16UlgcD5MbIRAbiKdMpwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmRhMWI1OTEtOTg1Zi0z NTIxLWJlM2QtMTg2ZDgwOGFjNTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF+wwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCjhRZuM9A4vsglvDNIkY5Be7oLDUK5Mz520sFefM74umhi5yQSkczp B0ztf3TKocGM/AOybfquO+3smvhnYfQhhsp/aONYA3lhANJCb7TTXs9SumN8BDq2 aRYAJ3VVoDqWhpfm9Uu9aHEDFA5hKq4uVJ0FwlNokNB/I/xNFt1RzUcwvvI2m8DT +1Z/iA/ABKHI6MMuWhkZeq1DsNg2O7fK3HGwjNi97BgiBM7qa9Qx2+VZmzEd0rnr GiCfehC74bmX7SJjzKrqsef7HWKuMegZS/9IgL5ll9BM8X7R8PeejtVe+rLUl6mD wv1X4nJghD9+xFbomYs3Icc9vwHP3ko= -----END CERTIFICATE-----Generated at Wed Oct 22 21:25:47 2025 by rpki-client