$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/2d1421ca-d4ed-38a6-8a46-2d6c0aaa9d37.roa File: 2d1421ca-d4ed-38a6-8a46-2d6c0aaa9d37.roa (raw, json) Hash identifier: JPAPqS9HFZDGW2PjVjW7jf0GnDNGzG0Hi/UsIFQ3Uik= Subject key identifier: C6:34:8D:7F:2E:5C:08:98:BF:41:06:76:4A:22:52:B7:D1:00:C2:E5 Certificate issuer: /CN=bad5af20-8385-44d4-815f-bb83497d4a0e Certificate serial: 010D0C9F4328584B2A2C263A640680802DD7A480 Authority key identifier: 11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/2d1421ca-d4ed-38a6-8a46-2d6c0aaa9d37.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 21777 IP address blocks: 204.144.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:26:3a:64:06:80:80:2d:d7:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bad5af20-8385-44d4-815f-bb83497d4a0e Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=ea43aa09-4a74-4c11-9069-d9fa5ac0c3bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:52:66:cf:dd:9f:10:4c:5f:9f:35:5b:e3:1e: 8b:e9:b3:cd:3a:8e:57:32:af:00:9f:eb:d0:31:52: 72:d5:62:f3:2f:65:99:c2:e0:dd:a9:5c:d3:30:c4: 20:23:ce:fb:36:d0:04:0a:2a:ef:df:de:c2:ee:49: d2:ff:c0:9d:87:3d:53:4f:58:9c:a3:69:02:91:3a: 73:e3:06:bc:cf:86:dd:a1:7e:77:f0:af:1d:e4:da: 14:c9:54:36:b2:22:8e:29:d4:b2:d1:97:a0:c7:6b: 85:05:b9:4c:f8:8d:c0:65:49:76:89:fd:37:4d:4e: 6c:0d:ba:d2:89:4f:f4:e1:ee:13:10:57:5d:e3:70: 30:8d:df:51:3a:af:a8:06:b3:a5:4b:19:5b:49:5c: 12:09:03:39:29:bc:57:38:f7:d4:ec:c7:dc:be:9e: 82:ac:81:29:3e:e0:ef:ad:6f:1f:35:68:3a:f6:b0: 6d:78:97:b4:ce:22:fb:44:fe:58:5f:ab:17:b3:a3: ec:bf:ba:8e:be:c5:3d:6e:75:c9:3e:77:f1:e2:b8: 90:b7:f4:ee:60:70:62:c2:40:b3:20:c5:61:cb:dc: 92:e2:4d:b2:9d:da:22:97:f1:5e:5c:4c:68:a9:8e: 90:73:bd:b3:3c:75:63:63:28:ed:4e:40:3d:69:0d: e1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:34:8D:7F:2E:5C:08:98:BF:41:06:76:4A:22:52:B7:D1:00:C2:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/2d1421ca-d4ed-38a6-8a46-2d6c0aaa9d37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl X509v3 Authority Key Identifier: keyid:11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer sbgp-ipAddrBlock: critical IPv4: 204.144.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:41:9c:f7:e4:e6:6a:87:af:0f:78:0d:2e:8e:61:ac:51:d8: e0:6a:fc:14:0b:ae:39:f6:45:3a:1c:fb:80:d0:b4:58:95:50: d9:37:eb:f6:20:e9:b4:7a:ea:72:57:58:f7:51:03:a0:75:17: 31:a4:39:81:bf:a8:e1:a7:dd:51:43:e1:2b:de:b6:13:9e:2a: b2:61:6a:28:94:b2:a1:ff:98:99:56:65:8f:a9:2b:6d:c1:0f: 18:73:35:8a:de:1e:e7:5c:35:fb:cd:c5:11:a0:9a:0c:56:76: 56:56:7f:b8:8f:f9:04:f7:de:88:d6:a5:bc:23:10:8e:9f:19: 48:93:20:b1:03:4f:42:b4:b3:45:37:4c:d8:aa:a8:95:22:7f: f4:60:82:58:11:71:1b:46:6d:61:0e:64:ac:de:90:54:7e:77: 0e:56:a5:71:75:e9:2d:e1:db:bb:f9:fe:79:a4:2d:60:b8:d5: 2c:93:f2:54:a9:21:73:6e:39:b8:7d:c3:a0:26:d7:ed:91:ee: 38:76:3f:06:5b:19:be:39:44:6f:3e:cc:0f:cc:f0:b5:82:af: a0:36:1a:ae:87:d8:f2:48:99:77:e3:8b:54:e6:4c:29:13:6a: 84:f9:26:4c:ea:7c:86:92:7d:55:a2:51:00:64:37:75:5d:43: 10:d0:ac:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLCY6ZAaAgC3XpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFkNWFmMjAtODM4NS00NGQ0LTgxNWYtYmI4MzQ5N2Q0 YTBlMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk ZWE0M2FhMDktNGE3NC00YzExLTkwNjktZDlmYTVhYzBjM2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVJmz92fEExfnzVb4x6L6bPNOo5XMq8An+vQ MVJy1WLzL2WZwuDdqVzTMMQgI877NtAECirv397C7knS/8Cdhz1TT1ico2kCkTpz 4wa8z4bdoX538K8d5NoUyVQ2siKOKdSy0Zegx2uFBblM+I3AZUl2if03TU5sDbrS iU/04e4TEFdd43Awjd9ROq+oBrOlSxlbSVwSCQM5KbxXOPfU7Mfcvp6CrIEpPuDv rW8fNWg69rBteJe0ziL7RP5YX6sXs6Psv7qOvsU9bnXJPnfx4riQt/TuYHBiwkCz IMVhy9yS4k2yndoil/FeXExoqY6Qc72zPHVjYyjtTkA9aQ3hGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMY0jX8uXAiYv0EGdkoiUrfRAMLlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1 YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgzNDk3ZDRhMGUvMmQxNDIxY2EtZDRlZC0z OGE2LThhNDYtMmQ2YzBhYWE5ZDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmFkNWFmMjAtODM4NS00NGQ0LTgx NWYtYmI4MzQ5N2Q0YTBlL2JhZDVhZjIwLTgzODUtNDRkNC04MTVmLWJiODM0OTdk NGEwZS5jcmwwHwYDVR0jBBgwFoAUEapw8wRQo6yCOXMUtq3WNdHdOZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgz NDk3ZDRhMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJCzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1BnPfk5mqHrw94DS6OYaxR2OBq/BQLrjn2RToc+4DQtFiVUNk36/Yg 6bR66nJXWPdRA6B1FzGkOYG/qOGn3VFD4SvethOeKrJhaiiUsqH/mJlWZY+pK23B DxhzNYreHudcNfvNxRGgmgxWdlZWf7iP+QT33ojWpbwjEI6fGUiTILEDT0K0s0U3 TNiqqJUif/RgglgRcRtGbWEOZKzekFR+dw5WpXF16S3h27v5/nmkLWC41SyT8lSp IXNuObh9w6Am1+2R7jh2PwZbGb45RG8+zA/M8LWCr6A2Gq6H2PJImXfji1TmTCkT aoT5JkzqfIaSfVWiUQBkN3VdQxDQrGA= -----END CERTIFICATE-----Generated at Wed Nov 5 01:38:57 2025 by rpki-client