$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/4adffaad-094f-3c5c-be44-b28e8e85a3cb.roa File: 4adffaad-094f-3c5c-be44-b28e8e85a3cb.roa (raw, json) Hash identifier: rQNGcFVIuKubXUPuMo4s+uRmNDAlJ9Q77Z56FYQod7A= Subject key identifier: 45:85:7F:FE:6A:05:2B:BD:25:AD:64:49:4D:54:CD:09:19:00:C9:00 Certificate issuer: /CN=bad5af20-8385-44d4-815f-bb83497d4a0e Certificate serial: 010D0C9F4328584B2A2C2977CECD2C89DB1A0B80 Authority key identifier: 11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/4adffaad-094f-3c5c-be44-b28e8e85a3cb.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 21777 IP address blocks: 199.189.30.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:29:77:ce:cd:2c:89:db:1a:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bad5af20-8385-44d4-815f-bb83497d4a0e Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=34266dc8-3753-4ce7-b64b-7257ce504870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f6:0e:8b:1e:71:0d:02:f5:12:5b:a7:0b:4b: 2d:60:8e:e1:54:cf:80:c6:48:43:af:4e:a8:76:0a: a2:9e:57:e1:a9:70:6a:8a:61:f9:51:36:13:38:1a: cc:6e:7e:e6:8c:f5:bd:a1:fc:27:e2:72:69:de:98: 84:46:9e:16:02:f8:a7:0f:f3:83:9e:f7:58:05:54: 23:eb:b1:2c:89:37:51:c2:92:1e:62:5a:ad:7d:02: 43:4a:ed:7f:4a:bd:04:40:05:e5:f5:ed:e7:0f:c4: eb:a8:5a:af:ea:b8:98:e2:82:1f:44:64:01:54:23: 10:4e:06:76:4a:44:39:46:77:a5:10:65:ba:0e:8b: 05:e9:22:59:95:fa:40:3c:68:47:c1:b4:51:46:25: 33:88:ac:20:95:4b:db:42:62:ca:fd:fd:72:64:53: 3d:52:ec:fd:f1:d5:47:19:d5:fc:de:cf:9c:2f:23: 69:ac:b3:14:56:80:b2:6c:83:62:0c:bc:66:00:d6: 15:4c:f7:a1:d7:46:73:fa:33:02:19:34:bf:7a:e9: 24:2d:86:94:e6:f1:4e:eb:82:51:aa:32:b8:16:a8: 93:4d:0c:79:a2:f9:24:60:46:70:e6:2c:8b:48:19: de:b2:9d:49:49:0c:c1:b1:a2:f1:46:4d:e4:ca:34: c3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:85:7F:FE:6A:05:2B:BD:25:AD:64:49:4D:54:CD:09:19:00:C9:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/4adffaad-094f-3c5c-be44-b28e8e85a3cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl X509v3 Authority Key Identifier: keyid:11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer sbgp-ipAddrBlock: critical IPv4: 199.189.30.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:b4:fc:ec:80:83:68:4c:e7:c0:2b:c3:bc:cf:ea:2d:f7:46: 7c:bf:af:6c:aa:0f:fa:24:a5:5f:77:ea:48:d2:44:92:ee:05: 0b:59:76:4a:ed:05:c5:cd:11:6b:06:61:bc:d5:75:de:2e:b5: d9:d1:59:a3:e5:7f:08:89:03:ed:62:be:61:e4:3d:0c:97:0c: 88:f1:a5:cf:1b:31:9f:2b:00:98:19:07:63:a3:b8:53:3e:51: 03:92:65:71:3c:3b:af:98:38:36:bb:ad:6c:a3:45:74:06:b9: 6e:26:d8:12:0c:fe:42:ba:ae:b1:67:62:9a:5b:cd:ad:af:90: f1:d8:87:03:d7:09:f6:6c:59:9c:bb:2d:36:87:da:45:e6:b4: 87:9d:3d:dd:58:b0:13:a3:c1:22:88:4d:21:e8:88:ae:b5:3f: 3a:7f:a8:71:e6:d7:67:0b:db:3f:78:5b:dd:03:9d:f9:08:e0: e8:02:99:38:d2:f7:8b:95:4e:52:6f:d8:02:c1:dd:c3:85:6c: 0c:1f:54:b7:52:c6:bc:fa:8d:4a:8c:37:ac:f5:aa:42:a2:fd: 7f:a0:a2:9f:8c:6e:88:11:f3:5a:b8:d9:f1:0e:c7:e9:ea:4b: b5:97:25:6c:7e:31:e7:34:de:fa:76:d2:8b:37:a1:8b:0a:86: 07:7d:24:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLCl3zs0sidsaC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFkNWFmMjAtODM4NS00NGQ0LTgxNWYtYmI4MzQ5N2Q0 YTBlMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk MzQyNjZkYzgtMzc1My00Y2U3LWI2NGItNzI1N2NlNTA0ODcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofYOix5xDQL1ElunC0stYI7hVM+AxkhDr06o dgqinlfhqXBqimH5UTYTOBrMbn7mjPW9ofwn4nJp3piERp4WAvinD/ODnvdYBVQj 67EsiTdRwpIeYlqtfQJDSu1/Sr0EQAXl9e3nD8TrqFqv6riY4oIfRGQBVCMQTgZ2 SkQ5RnelEGW6DosF6SJZlfpAPGhHwbRRRiUziKwglUvbQmLK/f1yZFM9Uuz98dVH GdX83s+cLyNprLMUVoCybINiDLxmANYVTPeh10Zz+jMCGTS/eukkLYaU5vFO64JR qjK4FqiTTQx5ovkkYEZw5iyLSBnesp1JSQzBsaLxRk3kyjTD7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWFf/5qBSu9Ja1kSU1UzQkZAMkAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1 YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgzNDk3ZDRhMGUvNGFkZmZhYWQtMDk0Zi0z YzVjLWJlNDQtYjI4ZThlODVhM2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmFkNWFmMjAtODM4NS00NGQ0LTgx NWYtYmI4MzQ5N2Q0YTBlL2JhZDVhZjIwLTgzODUtNDRkNC04MTVmLWJiODM0OTdk NGEwZS5jcmwwHwYDVR0jBBgwFoAUEapw8wRQo6yCOXMUtq3WNdHdOZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgz NDk3ZDRhMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx70eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKO0/OyAg2hM58Arw7zP6i33Rny/r2yqD/okpV936kjSRJLuBQtZdkrt BcXNEWsGYbzVdd4utdnRWaPlfwiJA+1ivmHkPQyXDIjxpc8bMZ8rAJgZB2OjuFM+ UQOSZXE8O6+YODa7rWyjRXQGuW4m2BIM/kK6rrFnYppbza2vkPHYhwPXCfZsWZy7 LTaH2kXmtIedPd1YsBOjwSKITSHoiK61Pzp/qHHm12cL2z94W90DnfkI4OgCmTjS 94uVTlJv2ALB3cOFbAwfVLdSxrz6jUqMN6z1qkKi/X+gop+MbogR81q42fEOx+nq S7WXJWx+Mec03vp20os3oYsKhgd9JNs= -----END CERTIFICATE-----Generated at Wed Nov 5 09:18:17 2025 by rpki-client