$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/ad54b7fa-7f94-3a59-a526-76e61ebb4a00.roa File: ad54b7fa-7f94-3a59-a526-76e61ebb4a00.roa (raw, json) Hash identifier: s13rjpTI915p6ujLJrX5pmyNAodS/EZ8MNqg8FDylYo= Subject key identifier: C6:D7:91:FB:C2:B0:51:E8:D0:B1:B8:BC:E3:C6:67:47:6A:51:49:F0 Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F4328584BAD628A92E120FEB5AF108800 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/ad54b7fa-7f94-3a59-a526-76e61ebb4a00.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 16509 IP address blocks: 13.111.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:8a:92:e1:20:fe:b5:af:10:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=e5cfa5f6-f1c4-415f-a319-f62d586dc10a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b1:76:3c:bc:33:6d:bb:1b:0a:e9:e5:c7:6e: 62:1f:90:e7:af:72:15:a4:ad:aa:0a:20:dc:f1:ac: ed:bd:4a:2f:4e:00:68:85:be:88:3b:41:6f:dd:98: 66:53:95:35:1e:4a:3a:08:10:15:81:ef:91:72:37: eb:54:57:bc:66:3b:3f:f1:66:4c:5e:c3:1d:af:b1: 56:a8:16:76:1c:62:93:f4:6c:ac:f9:49:e5:01:a5: db:f3:b0:dc:5d:99:2a:69:ad:e6:37:2f:9f:25:61: 69:90:fc:3f:a3:16:da:ae:96:df:2d:8e:d1:d2:8a: b7:33:55:2b:53:20:ad:4a:a9:59:c9:6e:cd:03:18: 46:76:db:7e:82:d8:84:b4:78:dd:b2:54:5a:20:46: a7:86:1f:b9:62:36:84:33:51:87:ee:d3:20:e4:6f: 0b:dd:af:ec:2c:9b:94:fd:52:95:41:5f:be:9f:52: 66:59:42:c3:ab:21:cb:01:44:cb:e1:22:d4:e0:23: 49:72:0a:46:98:2b:99:d8:86:29:20:31:43:d4:43: b6:56:93:71:c8:df:9c:ab:80:28:86:c5:ea:ef:26: b7:f8:1b:78:e5:7e:83:6b:f2:f3:b8:db:40:69:50: ae:f0:a9:aa:69:b7:49:24:87:88:e1:c7:15:c8:f9: 37:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D7:91:FB:C2:B0:51:E8:D0:B1:B8:BC:E3:C6:67:47:6A:51:49:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/ad54b7fa-7f94-3a59-a526-76e61ebb4a00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 13.111.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:53:75:09:78:2a:be:5c:ac:d2:58:28:9e:b8:fd:b6:b6:85: e6:f6:44:fb:fa:63:c6:fa:ae:3d:65:7d:c6:85:68:d1:88:d0: 08:2e:a0:50:ad:a5:cf:be:f0:a6:17:9d:02:25:02:34:56:00: ba:09:31:5e:94:c5:0e:8f:b6:f0:6e:20:19:12:e3:17:8b:14: 97:c6:bd:c0:42:58:db:c8:13:6a:87:83:15:3c:5a:ad:d4:3b: 5d:9a:50:5f:e6:8a:04:3a:ac:90:83:0e:ac:32:ea:83:d3:ca: ad:4b:04:31:bd:65:4e:44:37:84:43:ed:0b:88:86:48:0d:7c: 3b:e1:4d:e1:22:bf:e6:21:f4:db:89:65:6c:92:ad:2a:20:57: cf:a3:b9:26:7e:ef:78:fd:9c:d2:01:5f:ed:c7:e7:dc:f7:aa: 34:53:7f:94:cf:32:90:b8:87:f2:63:ff:88:4b:67:65:63:cc: aa:cc:be:0e:63:e8:c2:2a:c7:5f:99:76:f2:fa:26:b2:5e:e0: ad:47:bb:58:81:fa:22:74:87:a7:9f:cf:59:85:ee:21:c2:33: 27:4d:c7:aa:b9:73:03:04:f1:c1:bd:58:4f:2a:2b:b8:ad:e6: b4:23:21:8e:82:94:5a:9e:ad:6c:5f:9d:59:a6:d4:c2:73:73: 4a:4d:68:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYoqS4SD+ta8QiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk ZTVjZmE1ZjYtZjFjNC00MTVmLWEzMTktZjYyZDU4NmRjMTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirF2PLwzbbsbCunlx25iH5Dnr3IVpK2qCiDc 8aztvUovTgBohb6IO0Fv3ZhmU5U1Hko6CBAVge+RcjfrVFe8Zjs/8WZMXsMdr7FW qBZ2HGKT9Gys+UnlAaXb87DcXZkqaa3mNy+fJWFpkPw/oxbarpbfLY7R0oq3M1Ur UyCtSqlZyW7NAxhGdtt+gtiEtHjdslRaIEanhh+5YjaEM1GH7tMg5G8L3a/sLJuU /VKVQV++n1JmWULDqyHLAUTL4SLU4CNJcgpGmCuZ2IYpIDFD1EO2VpNxyN+cq4Ao hsXq7ya3+Bt45X6Da/LzuNtAaVCu8KmqabdJJIeI4ccVyPk3ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMbXkfvCsFHo0LG4vOPGZ0dqUUnwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvYWQ1NGI3ZmEtN2Y5NC0z YTU5LWE1MjYtNzZlNjFlYmI0YTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQADW/BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMdTdQl4Kr5crNJYKJ64/ba2heb2RPv6Y8b6rj1lfcaFaNGI0AguoFCt pc++8KYXnQIlAjRWALoJMV6UxQ6PtvBuIBkS4xeLFJfGvcBCWNvIE2qHgxU8Wq3U O12aUF/migQ6rJCDDqwy6oPTyq1LBDG9ZU5EN4RD7QuIhkgNfDvhTeEiv+Yh9NuJ ZWySrSogV8+juSZ+73j9nNIBX+3H59z3qjRTf5TPMpC4h/Jj/4hLZ2VjzKrMvg5j 6MIqx1+ZdvL6JrJe4K1Hu1iB+iJ0h6efz1mF7iHCMydNx6q5cwME8cG9WE8qK7it 5rQjIY6ClFqerWxfnVmm1MJzc0pNaJw= -----END CERTIFICATE-----Generated at Tue Nov 4 23:59:41 2025 by rpki-client