$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/a5aae8bc-a6ed-382f-af18-c5e191e02393.roa File: a5aae8bc-a6ed-382f-af18-c5e191e02393.roa (raw, json) Hash identifier: ga9JQIZqENXGUpL9oEj1zvGO1Ccc4E+yR6kdU0kljFo= Subject key identifier: 6B:07:9D:ED:F1:4D:D1:56:B6:07:F2:F3:35:6A:61:2D:49:FB:76:26 Certificate issuer: /CN=ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7 Certificate serial: 010D0C9F4328584B1030432110A9CF439A325660 Authority key identifier: E8:1E:15:0B:75:76:40:58:B6:9A:14:2D:A7:91:10:D7:B8:85:D2:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/a5aae8bc-a6ed-382f-af18-c5e191e02393.roa Signing time: Tue 02 Sep 2025 17:37:53 +0000 ROA not before: Tue 02 Sep 2025 17:37:53 +0000 ROA not after: Mon 01 Dec 2025 18:37:53 +0000 asID: 398091 IP address blocks: 64.140.172.0/22 maxlen: 24 64.185.238.0/24 maxlen: 24 64.185.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:10:30:43:21:10:a9:cf:43:9a:32:56:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7 Validity Not Before: Sep 2 17:37:53 2025 GMT Not After : Dec 1 18:37:53 2025 GMT Subject: CN=31d9b7a9-37a3-44d3-b7a2-02a327b80465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:49:ec:ea:8f:7d:8d:4c:9b:94:15:0e:03:c8: ba:c6:05:9c:14:00:80:79:35:5f:0e:1a:df:72:80: 25:b6:53:ec:0d:2a:00:e6:3f:3b:26:1d:8c:36:63: df:cd:06:39:ad:a7:c4:18:59:e9:6a:45:ca:fe:43: 16:fe:3f:ac:e7:e3:d7:84:02:88:4a:7e:8f:0b:94: 8b:84:46:ed:f6:0b:3a:aa:88:3c:28:56:48:c7:fd: 37:06:ce:63:5a:a2:ea:97:1c:97:78:31:5e:4c:4f: 72:61:ae:60:e0:48:0f:9e:f6:ab:bc:d9:7f:09:ae: ee:fa:6e:0b:55:ca:b1:0a:e6:d1:11:7f:27:62:63: c8:6a:a6:d7:13:60:e8:ff:4c:12:ee:1b:6b:53:4a: e0:4b:b2:1c:6a:96:2d:b4:af:59:0c:c9:63:55:7c: ea:67:13:fb:ea:7d:00:b8:9a:33:8f:0a:e2:82:1a: 26:87:bd:05:e1:66:2c:e0:78:73:83:db:46:65:86: db:98:07:49:85:52:b6:d0:80:19:78:b9:15:c3:12: 7b:be:c1:2a:68:f7:91:ba:1c:55:ab:f3:88:10:84: fe:e9:82:33:70:1e:14:85:5c:72:83:3f:b8:16:97: e9:7d:b8:8a:de:7a:e1:11:e3:e7:f1:86:3c:a1:e6: 1a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:07:9D:ED:F1:4D:D1:56:B6:07:F2:F3:35:6A:61:2D:49:FB:76:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/a5aae8bc-a6ed-382f-af18-c5e191e02393.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.crl X509v3 Authority Key Identifier: keyid:E8:1E:15:0B:75:76:40:58:B6:9A:14:2D:A7:91:10:D7:B8:85:D2:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.cer sbgp-ipAddrBlock: critical IPv4: 64.140.172.0/22 64.185.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:cd:e3:cc:01:01:49:93:dd:e5:52:5d:b8:80:2f:a6:71:ea: fb:68:9a:9e:88:33:da:9d:06:37:02:c5:bc:1a:e3:e2:93:fe: 52:d9:a6:f0:85:eb:f9:9e:67:74:aa:0e:98:45:5d:a6:be:13: 59:fc:aa:61:18:60:2a:85:da:29:3a:93:07:d7:74:55:cc:50: 31:ce:f5:fa:cb:92:31:68:04:d0:47:d9:a2:6a:7b:8a:c2:1c: 42:37:5b:8d:bf:06:08:d6:1a:2c:c3:d3:62:eb:9f:64:11:ff: 61:be:3f:9d:44:bc:79:a0:da:f3:0a:14:c6:c5:9e:5b:ff:e1: dc:bd:4d:13:eb:00:ea:02:f0:32:c9:29:a8:6e:e1:b5:42:12: d2:9b:f4:d3:ce:4f:5a:fa:04:5d:9b:39:2b:aa:de:24:2f:3c: d5:cc:ca:5d:e0:4e:5c:20:44:5f:d8:81:c0:82:45:c5:11:82: bb:6f:69:93:94:e1:06:ea:11:01:04:45:cd:e6:ca:84:5f:86: c7:a2:9c:40:83:df:e8:5a:fb:97:37:b1:ab:99:f8:6e:bf:95: 1c:05:3c:24:67:1c:81:5d:7c:6b:9f:78:b4:9a:ae:0d:88:f1: 0d:18:68:a5:85:65:e1:65:63:aa:f9:ff:75:39:2c:e0:95:ed: 79:44:b1:84 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEsQMEMhEKnPQ5oyVmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEzNjhkYzItZGQ4YS00MGQyLWJjNTMtMGZlODdlOWQ5 ZGQ3MB4XDTI1MDkwMjE3Mzc1M1oXDTI1MTIwMTE4Mzc1M1owLzEtMCsGA1UEAxMk MzFkOWI3YTktMzdhMy00NGQzLWI3YTItMDJhMzI3YjgwNDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUns6o99jUyblBUOA8i6xgWcFACAeTVfDhrf coAltlPsDSoA5j87Jh2MNmPfzQY5rafEGFnpakXK/kMW/j+s5+PXhAKISn6PC5SL hEbt9gs6qog8KFZIx/03Bs5jWqLqlxyXeDFeTE9yYa5g4EgPnvarvNl/Ca7u+m4L VcqxCubREX8nYmPIaqbXE2Do/0wS7htrU0rgS7IcapYttK9ZDMljVXzqZxP76n0A uJozjwrighomh70F4WYs4Hhzg9tGZYbbmAdJhVK20IAZeLkVwxJ7vsEqaPeRuhxV q/OIEIT+6YIzcB4UhVxygz+4FpfpfbiK3nrhEePn8YY8oeYaUwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGsHne3xTdFWtgfy8zVqYS1J+3YmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iYTM2 OGRjMi1kZDhhLTQwZDItYmM1My0wZmU4N2U5ZDlkZDcvYTVhYWU4YmMtYTZlZC0z ODJmLWFmMTgtYzVlMTkxZTAyMzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYmEzNjhkYzItZGQ4YS00MGQyLWJj NTMtMGZlODdlOWQ5ZGQ3L2JhMzY4ZGMyLWRkOGEtNDBkMi1iYzUzLTBmZTg3ZTlk OWRkNy5jcmwwHwYDVR0jBBgwFoAU6B4VC3V2QFi2mhQtp5EQ17iF0t0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iYTM2OGRjMi1kZDhhLTQwZDItYmM1My0wZmU4 N2U5ZDlkZDcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCQIysAwQB QLnuMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABLN48wBAUmT3eVSXbiAL6Zx6vtomp6IM9qdBjcCxbwa4+KT /lLZpvCF6/meZ3SqDphFXaa+E1n8qmEYYCqF2ik6kwfXdFXMUDHO9frLkjFoBNBH 2aJqe4rCHEI3W42/BgjWGizD02Lrn2QR/2G+P51EvHmg2vMKFMbFnlv/4dy9TRPr AOoC8DLJKahu4bVCEtKb9NPOT1r6BF2bOSuq3iQvPNXMyl3gTlwgRF/YgcCCRcUR grtvaZOU4QbqEQEERc3myoRfhseinECD3+ha+5c3sauZ+G6/lRwFPCRnHIFdfGuf eLSarg2I8Q0YaKWFZeFlY6r5/3U5LOCV7XlEsYQ= -----END CERTIFICATE-----Generated at Tue Sep 16 11:51:51 2025 by rpki-client