$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/ba09dfad-31a3-31a1-8d98-b0cec5949829.roa File: ba09dfad-31a3-31a1-8d98-b0cec5949829.roa (raw, json) Hash identifier: pJXmuFfgoYJGC6Hlwl1B6OCSdF2M9yB5wGUfHTzjDc0= Subject key identifier: AC:0E:D4:23:FB:41:75:56:78:FB:9F:06:03:FA:2E:FF:E4:F0:97:04 Certificate issuer: /CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343 Certificate serial: 010D0C9F4328584AF95139DBFCC4CB0715516C00 Authority key identifier: B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/ba09dfad-31a3-31a1-8d98-b0cec5949829.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 30041 IP address blocks: 66.218.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:39:db:fc:c4:cb:07:15:51:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=bcfabd23-d080-4624-b327-541fb2c71dfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5b:7b:05:7d:49:02:e2:9a:07:f5:ee:c3:30: 15:e7:ef:61:dc:71:62:4d:80:a7:91:9f:34:cb:99: 2a:74:80:d7:8a:c0:01:32:2f:e5:38:3c:22:58:fb: a4:80:d8:6f:2d:0a:a4:2d:5a:72:6e:98:9c:2a:ea: 89:d2:8c:6a:16:9d:63:52:89:6b:b8:89:27:90:d2: 28:b1:27:2f:bd:0e:7a:8d:83:ec:3e:be:3a:d6:7c: b9:55:08:46:3b:72:56:a3:2b:b4:db:7c:61:fd:c4: ae:62:82:e0:be:cb:93:8e:01:d7:e4:62:97:83:03: ad:92:81:76:8c:53:c0:93:90:43:cb:52:5a:0f:29: 69:80:52:cc:6c:18:fc:cf:66:91:66:db:e7:c0:8e: b3:f3:ab:dc:3c:10:6f:0c:13:f4:ac:59:e8:55:09: 83:13:f6:ec:6b:04:0e:17:60:ad:91:80:9c:4b:79: 63:92:1a:94:6f:09:51:6b:32:a5:90:47:98:27:5f: 32:1d:eb:ef:54:19:55:d8:50:70:61:c3:c3:9b:8c: 2c:15:6e:18:e6:c2:1a:32:86:73:9d:67:cf:58:9e: 49:d9:01:e9:48:1a:42:6a:23:8d:9e:91:e2:ad:87: 94:69:0f:cb:36:c8:54:b4:7a:04:fd:78:bc:a8:11: f0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:0E:D4:23:FB:41:75:56:78:FB:9F:06:03:FA:2E:FF:E4:F0:97:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/ba09dfad-31a3-31a1-8d98-b0cec5949829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl X509v3 Authority Key Identifier: keyid:B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer sbgp-ipAddrBlock: critical IPv4: 66.218.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:48:66:b1:4a:1c:22:b2:58:41:18:39:59:16:2d:c5:21:7b: 36:08:45:21:a0:92:57:69:a2:2a:e8:19:07:25:9b:9f:7f:24: 07:e3:fe:29:ff:e4:20:6a:08:dd:04:18:eb:3e:66:2c:cd:af: 14:b8:8e:af:bc:e0:48:a2:75:77:53:97:27:2f:f1:6e:c6:f0: 0e:e4:de:9f:c4:6f:e0:df:48:81:07:8d:30:e0:f4:83:e2:72: e2:1a:36:33:26:82:0d:f5:be:5a:89:09:5b:e4:30:94:c7:4e: d9:79:74:8c:0f:58:c1:6c:f7:07:b9:66:99:57:ec:49:64:e5: 7c:f0:57:86:88:8a:68:e1:0d:11:27:f0:7a:65:6e:70:83:e5: 45:06:31:44:6d:68:51:a2:9c:c0:47:dd:41:bb:5d:00:cd:ba: 5c:32:ed:96:8e:ba:d1:3c:83:60:8d:ac:16:92:e0:b9:91:3a: 3b:84:8a:8a:9d:5e:96:18:48:48:00:d1:3e:32:9f:e5:da:46: 38:8c:12:55:00:ee:ed:12:34:d3:37:7f:b0:89:8d:16:95:a2: 13:a7:aa:a8:0d:13:e3:ed:c2:01:aa:00:43:eb:4d:6e:18:8c: 92:e3:9a:73:3d:cc:5f:4f:6e:b5:95:c2:a5:d9:d8:5d:d2:e9: e9:76:17:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UTnb/MTLBxVRbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJhOGJkZDAtNmM3Zi00N2I3LWI0MjctNmUyYjQ1NGZh MzQzMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk YmNmYWJkMjMtZDA4MC00NjI0LWIzMjctNTQxZmIyYzcxZGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlt7BX1JAuKaB/XuwzAV5+9h3HFiTYCnkZ80 y5kqdIDXisABMi/lODwiWPukgNhvLQqkLVpybpicKuqJ0oxqFp1jUolruIknkNIo sScvvQ56jYPsPr461ny5VQhGO3JWoyu023xh/cSuYoLgvsuTjgHX5GKXgwOtkoF2 jFPAk5BDy1JaDylpgFLMbBj8z2aRZtvnwI6z86vcPBBvDBP0rFnoVQmDE/bsawQO F2CtkYCcS3ljkhqUbwlRazKlkEeYJ18yHevvVBlV2FBwYcPDm4wsFW4Y5sIaMoZz nWfPWJ5J2QHpSBpCaiONnpHirYeUaQ/LNshUtHoE/Xi8qBHwOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwO1CP7QXVWePufBgP6Lv/k8JcEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85YmE4 YmRkMC02YzdmLTQ3YjctYjQyNy02ZTJiNDU0ZmEzNDMvYmEwOWRmYWQtMzFhMy0z MWExLThkOTgtYjBjZWM1OTQ5ODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOWJhOGJkZDAtNmM3Zi00N2I3LWI0 MjctNmUyYjQ1NGZhMzQzLzliYThiZGQwLTZjN2YtNDdiNy1iNDI3LTZlMmI0NTRm YTM0My5jcmwwHwYDVR0jBBgwFoAUsWj3t9BOo5ekclbjM5CgXUrxK0AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85YmE4YmRkMC02YzdmLTQ3YjctYjQyNy02ZTJi NDU0ZmEzNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQtogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhIZrFKHCKyWEEYOVkWLcUhezYIRSGgkldpoiroGQclm59/JAfj/in/ 5CBqCN0EGOs+ZizNrxS4jq+84EiidXdTlycv8W7G8A7k3p/Eb+DfSIEHjTDg9IPi cuIaNjMmgg31vlqJCVvkMJTHTtl5dIwPWMFs9we5ZplX7Elk5XzwV4aIimjhDREn 8HplbnCD5UUGMURtaFGinMBH3UG7XQDNulwy7ZaOutE8g2CNrBaS4LmROjuEioqd XpYYSEgA0T4yn+XaRjiMElUA7u0SNNM3f7CJjRaVohOnqqgNE+PtwgGqAEPrTW4Y jJLjmnM9zF9PbrWVwqXZ2F3S6el2F/E= -----END CERTIFICATE-----Generated at Mon Oct 20 18:37:12 2025 by rpki-client