$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/ba0f5949-0792-3f7c-9cde-b7e74546e79c.roa File: ba0f5949-0792-3f7c-9cde-b7e74546e79c.roa (raw, json) Hash identifier: oh+/DIpiCDDMsuYIDtt5n1TJfDdeFbX41KQcvt0Jkh4= Subject key identifier: 8C:7D:F0:30:26:8D:63:40:9C:64:C4:9F:05:5E:75:91:43:0C:A9:76 Certificate issuer: /CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Certificate serial: 010D0C9F4328584B63674025829D347FF1F09FC0 Authority key identifier: B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/ba0f5949-0792-3f7c-9cde-b7e74546e79c.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 394002 IP address blocks: 64.136.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:40:25:82:9d:34:7f:f1:f0:9f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=f689e6e9-958f-4cc4-be85-17113bea30ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:44:cd:e3:fb:50:4f:77:72:8d:e4:4e:92:c7: bc:05:8a:ca:6b:91:dc:d6:b3:4d:28:1c:8f:21:c2: 46:bd:ce:f4:cc:79:89:97:27:d0:83:d9:d8:bd:af: e2:4b:52:a1:d0:e0:63:aa:fc:22:a9:77:90:72:a7: af:b9:fe:8e:63:ad:f4:78:70:75:bc:1f:a4:ff:66: 6f:92:9f:f8:ce:eb:5b:06:ae:7f:32:e0:93:14:a1: 9a:e9:1f:00:e1:d0:93:3f:bd:4a:c6:2c:42:88:47: 6d:c7:c9:83:fd:a3:4a:e4:56:85:28:14:ef:4d:8f: e4:76:00:da:af:22:05:17:35:5a:71:a8:0f:63:76: ea:55:48:42:9c:e0:0f:08:8c:18:9a:04:d9:3d:d0: 2e:30:7a:ae:6a:9a:ea:07:4e:57:ae:a1:26:84:54: f4:94:49:93:51:a4:96:2a:92:2c:19:a1:b3:3b:bc: 5a:31:75:fc:45:bc:c4:d7:aa:1d:64:54:7b:26:f1: 5c:fe:81:7c:99:b0:05:49:7b:24:71:a2:b9:66:6e: 42:7a:68:86:4d:b8:83:e4:12:95:fc:4b:2e:7a:5b: 7f:c8:44:f9:70:34:ac:f5:5f:9f:09:be:f9:cf:da: d2:99:63:b0:0d:9d:c4:ee:ef:dd:ea:7b:d7:94:d5: 2b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:7D:F0:30:26:8D:63:40:9C:64:C4:9F:05:5E:75:91:43:0C:A9:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/ba0f5949-0792-3f7c-9cde-b7e74546e79c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl X509v3 Authority Key Identifier: keyid:B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer sbgp-ipAddrBlock: critical IPv4: 64.136.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:19:33:0e:b7:82:84:a2:4c:f6:25:3e:89:3b:51:9f:14:aa: b8:1f:e3:12:3f:6e:7e:cb:1b:53:98:a0:0f:39:f6:63:dd:e5: 38:8e:fc:01:71:9d:6f:e8:1b:9e:c3:55:7b:6a:93:0d:06:ff: 10:2e:d4:c8:1e:84:40:b3:44:56:ff:59:93:97:97:ce:4c:54: 71:0c:92:24:8a:a4:b5:67:93:52:a0:b4:3d:46:09:65:aa:11: c4:6b:7f:79:37:04:cb:6b:9f:ac:28:ff:c5:a4:dd:b1:60:9b: 67:c1:79:4f:48:92:26:58:ce:ec:a4:92:12:04:d7:56:73:20: 72:f2:f9:dc:c4:c3:6f:7b:3f:6f:4c:b6:bd:59:a9:33:93:bf: a9:c6:70:eb:2e:50:a6:a8:5e:25:af:79:c5:77:1f:2a:26:08: fc:12:08:26:7c:ea:cd:e3:70:54:0e:ad:ea:6d:b7:81:21:3c: 9b:26:b8:a5:d7:2e:21:99:08:8e:24:91:69:61:2a:98:c0:b1: f3:a7:7c:85:1c:35:e9:60:c5:2c:b1:0a:9a:3c:81:44:e0:4e: 52:50:7f:b5:58:f3:3e:00:8e:d2:6b:96:e7:d3:af:5e:19:04: 19:fc:62:d5:f1:0f:d4:48:e8:eb:53:11:4f:40:50:4b:6b:21: 1a:a7:e2:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZ0Algp00f/Hwn8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1OGJmNzUtOTUzMS00YWNhLWE1MmUtMmEzMjQxZmE2 ZGQ4MB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk ZjY4OWU2ZTktOTU4Zi00Y2M0LWJlODUtMTcxMTNiZWEzMGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ETN4/tQT3dyjeROkse8BYrKa5Hc1rNNKByP IcJGvc70zHmJlyfQg9nYva/iS1Kh0OBjqvwiqXeQcqevuf6OY630eHB1vB+k/2Zv kp/4zutbBq5/MuCTFKGa6R8A4dCTP71KxixCiEdtx8mD/aNK5FaFKBTvTY/kdgDa ryIFFzVacagPY3bqVUhCnOAPCIwYmgTZPdAuMHquaprqB05XrqEmhFT0lEmTUaSW KpIsGaGzO7xaMXX8RbzE16odZFR7JvFc/oF8mbAFSXskcaK5Zm5CemiGTbiD5BKV /Esuelt/yET5cDSs9V+fCb75z9rSmWOwDZ3E7u/d6nvXlNUrWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIx98DAmjWNAnGTEnwVedZFDDKl2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4 YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMyNDFmYTZkZDgvYmEwZjU5NDktMDc5Mi0z ZjdjLTljZGUtYjdlNzQ1NDZlNzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWY1OGJmNzUtOTUzMS00YWNhLWE1 MmUtMmEzMjQxZmE2ZGQ4LzFmNThiZjc1LTk1MzEtNGFjYS1hNTJlLTJhMzI0MWZh NmRkOC5jcmwwHwYDVR0jBBgwFoAUuMx8HBZNy4KZTSwdb5O2OAgUDTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMy NDFmYTZkZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQIhiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4ZMw63goSiTPYlPok7UZ8Uqrgf4xI/bn7LG1OYoA859mPd5TiO/AFx nW/oG57DVXtqkw0G/xAu1MgehECzRFb/WZOXl85MVHEMkiSKpLVnk1KgtD1GCWWq EcRrf3k3BMtrn6wo/8Wk3bFgm2fBeU9IkiZYzuykkhIE11ZzIHLy+dzEw297P29M tr1ZqTOTv6nGcOsuUKaoXiWvecV3HyomCPwSCCZ86s3jcFQOreptt4EhPJsmuKXX LiGZCI4kkWlhKpjAsfOnfIUcNelgxSyxCpo8gUTgTlJQf7VY8z4AjtJrlufTr14Z BBn8YtXxD9RI6OtTEU9AUEtrIRqn4kU= -----END CERTIFICATE-----Generated at Wed Nov 5 02:19:47 2025 by rpki-client