$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/a973be6d-e115-33cf-9248-c6c35ab8897d.roa File: a973be6d-e115-33cf-9248-c6c35ab8897d.roa (raw, json) Hash identifier: DiVILjHnukl6mQWn1d8cMTcbKkdJiSjgnwH2UbeN5pY= Subject key identifier: 46:E9:A0:F5:48:62:44:2B:57:2D:6E:3E:CA:71:9A:CA:15:B8:96:50 Certificate issuer: /CN=ba461ed6-9748-4005-b669-8946003e1ae1 Certificate serial: 010D0C9F4328584A9E961A86A01C77A5B77A0280 Authority key identifier: 86:FF:2D:22:FE:C4:48:05:84:E8:92:00:D8:2D:7A:2E:A3:82:9E:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/a973be6d-e115-33cf-9248-c6c35ab8897d.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 4246 IP address blocks: 128.235.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:1a:86:a0:1c:77:a5:b7:7a:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba461ed6-9748-4005-b669-8946003e1ae1 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=c19ec0ce-6882-4a3c-b539-3869e84e9c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:11:97:75:3f:77:74:cf:cf:2a:68:2f:e0:e7: 4f:84:ce:71:d9:18:ca:a2:15:38:d6:7a:56:ba:21: cc:df:a7:ca:f0:e7:48:12:85:be:6a:19:64:ad:64: bb:db:80:9a:4d:92:a4:6a:e7:2e:b3:26:9b:10:c5: 9d:ad:05:d4:15:3a:85:22:3f:8c:3f:ad:a1:43:48: 65:7a:76:19:13:77:12:52:ec:78:f8:48:2a:77:84: 60:34:d0:1f:e7:42:3c:1a:98:fc:af:32:0b:43:5d: 37:ef:51:8e:f8:4b:bf:0b:0d:5f:6e:de:ec:85:28: 9e:c0:05:78:9e:ac:06:03:38:85:99:b3:89:0d:08: 8c:02:bb:dc:09:bf:84:95:6e:11:07:f0:e5:1c:83: 4e:01:27:e2:89:21:45:a6:15:10:20:a9:41:bc:42: 75:cd:9a:eb:3d:47:d9:27:cd:f4:61:89:15:b8:54: 49:31:69:bb:43:1d:25:7c:10:d0:18:be:95:a2:e2: b5:7a:b4:c7:69:de:fc:13:54:9f:ed:f2:58:99:44: fe:c7:62:59:11:4c:1a:68:c5:1a:df:e0:35:c8:e1: 3c:5a:54:60:3a:62:61:89:90:f9:37:37:54:f0:86: 79:fc:ea:e8:d6:63:15:4a:05:fd:eb:1c:db:9b:80: 66:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E9:A0:F5:48:62:44:2B:57:2D:6E:3E:CA:71:9A:CA:15:B8:96:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/a973be6d-e115-33cf-9248-c6c35ab8897d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.crl X509v3 Authority Key Identifier: keyid:86:FF:2D:22:FE:C4:48:05:84:E8:92:00:D8:2D:7A:2E:A3:82:9E:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer sbgp-ipAddrBlock: critical IPv4: 128.235.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:91:30:97:b2:a9:34:45:0f:e4:54:89:86:8b:e7:14:86:3e: c9:9a:53:24:f1:76:80:5b:ba:a7:62:81:bb:f1:b1:cf:99:23: 4d:1c:e8:65:2d:5d:57:70:81:8f:d2:82:f6:bd:d3:90:0d:36: f9:87:75:cb:0b:5f:d5:3d:5b:45:9b:1a:66:fc:de:fd:49:8e: 91:b3:6f:6d:49:8b:e3:ad:7f:93:af:09:ff:88:98:09:d7:1f: b6:fb:d6:c6:15:bf:1b:60:21:b0:53:83:69:30:23:b9:f3:34: 0e:11:a2:f2:23:7e:82:7f:9f:91:23:02:04:8c:fc:b8:c9:89: cd:0f:1e:73:76:10:96:47:4f:56:e9:c0:e0:6d:c7:7d:21:cc: 2a:9f:12:05:ad:94:0d:8e:c7:34:50:89:08:d0:00:04:78:53: e2:7b:85:95:4f:63:72:dc:8d:24:31:f0:ef:a4:c4:44:9e:b3: 79:8c:12:fc:6b:20:e6:8d:e5:06:5a:a5:f4:a0:38:ad:49:1d: 33:cf:86:7d:bb:15:0c:a5:41:fd:28:81:7c:f6:8f:63:86:c5: a4:b5:4d:45:c2:85:62:17:2f:f4:04:fd:72:53:66:71:1c:63: 08:a3:f2:bd:a8:de:f6:7b:47:0c:d8:cb:7e:f4:6f:80:76:f5: e0:ed:ce:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqelhqGoBx3pbd6AoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE0NjFlZDYtOTc0OC00MDA1LWI2NjktODk0NjAwM2Ux YWUxMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk YzE5ZWMwY2UtNjg4Mi00YTNjLWI1MzktMzg2OWU4NGU5YzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRGXdT93dM/PKmgv4OdPhM5x2RjKohU41npW uiHM36fK8OdIEoW+ahlkrWS724CaTZKkaucusyabEMWdrQXUFTqFIj+MP62hQ0hl enYZE3cSUux4+Egqd4RgNNAf50I8Gpj8rzILQ10371GO+Eu/Cw1fbt7shSiewAV4 nqwGAziFmbOJDQiMArvcCb+ElW4RB/DlHINOASfiiSFFphUQIKlBvEJ1zZrrPUfZ J830YYkVuFRJMWm7Qx0lfBDQGL6VouK1erTHad78E1Sf7fJYmUT+x2JZEUwaaMUa 3+A1yOE8WlRgOmJhiZD5NzdU8IZ5/Oro1mMVSgX96xzbm4Bm1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbpoPVIYkQrVy1uPspxmsoVuJZQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iYTQ2 MWVkNi05NzQ4LTQwMDUtYjY2OS04OTQ2MDAzZTFhZTEvYTk3M2JlNmQtZTExNS0z M2NmLTkyNDgtYzZjMzVhYjg4OTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmE0NjFlZDYtOTc0OC00MDA1LWI2 NjktODk0NjAwM2UxYWUxL2JhNDYxZWQ2LTk3NDgtNDAwNS1iNjY5LTg5NDYwMDNl MWFlMS5jcmwwHwYDVR0jBBgwFoAUhv8tIv7ESAWE6JIA2C16LqOCnnUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iYTQ2MWVkNi05NzQ4LTQwMDUtYjY2OS04OTQ2 MDAzZTFhZTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgOvEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqRMJeyqTRFD+RUiYaL5xSGPsmaUyTxdoBbuqdigbvxsc+ZI00c6GUt XVdwgY/Sgva905ANNvmHdcsLX9U9W0WbGmb83v1JjpGzb21Ji+Otf5OvCf+ImAnX H7b71sYVvxtgIbBTg2kwI7nzNA4RovIjfoJ/n5EjAgSM/LjJic0PHnN2EJZHT1bp wOBtx30hzCqfEgWtlA2OxzRQiQjQAAR4U+J7hZVPY3LcjSQx8O+kxESes3mMEvxr IOaN5QZapfSgOK1JHTPPhn27FQylQf0ogXz2j2OGxaS1TUXChWIXL/QE/XJTZnEc Ywij8r2o3vZ7RwzYy370b4B29eDtznQ= -----END CERTIFICATE-----Generated at Sat Aug 9 10:35:12 2025 by rpki-client