$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813/7bf4defd-72e1-32e9-bc26-5c8f218f5c75.roa File: 7bf4defd-72e1-32e9-bc26-5c8f218f5c75.roa (raw, json) Hash identifier: aHKeOfIyqBLjdNG7klUFGBiV3EREzCVqPkMc2UU+D6I= Subject key identifier: 28:87:0D:64:1C:91:16:18:50:D0:84:49:ED:16:EF:63:C1:31:13:22 Certificate issuer: /CN=ba46f857-c44f-430d-b73b-7a14eec4c813 Certificate serial: 010D0C9F4328584BA5024178D9EA5D3F913DE4C0 Authority key identifier: BB:D8:4B:75:75:65:A5:63:86:8B:FC:C0:E0:83:0D:6D:FC:00:71:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813/7bf4defd-72e1-32e9-bc26-5c8f218f5c75.roa Signing time: Sun 26 Oct 2025 01:00:31 +0000 ROA not before: Sun 26 Oct 2025 01:00:31 +0000 ROA not after: Sat 24 Jan 2026 02:00:31 +0000 asID: 202736 IP address blocks: 199.182.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813/ba46f857-c44f-430d-b73b-7a14eec4c813.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813/ba46f857-c44f-430d-b73b-7a14eec4c813.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a5:02:41:78:d9:ea:5d:3f:91:3d:e4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba46f857-c44f-430d-b73b-7a14eec4c813 Validity Not Before: Oct 26 01:00:31 2025 GMT Not After : Jan 24 02:00:31 2026 GMT Subject: CN=b2e02966-5561-48f7-ba09-2197ad4391b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:1b:23:aa:76:2a:39:12:7e:b2:dc:3f:9e:17: 56:12:84:10:b2:49:0e:27:a4:70:d8:88:f7:21:c5: a0:b6:3a:5f:2d:72:7f:16:f4:af:dc:50:4d:e9:1c: 30:16:98:4c:c2:f2:4e:3e:be:15:ca:34:8a:31:a5: 9d:77:75:8b:35:09:f8:ee:06:49:59:10:c3:5a:b4: d5:a3:1c:29:38:51:b4:be:5e:e0:e1:ee:62:28:e8: 5b:15:85:c6:b9:3f:cf:93:77:7a:3f:a7:7a:58:c2: 1d:85:1c:7e:65:6b:a5:31:7f:df:1b:37:ff:aa:45: 6f:f8:10:fe:a5:1a:79:51:39:b9:95:81:b5:7b:95: 81:cd:f2:97:6a:55:59:e4:d7:18:3e:dd:39:75:5f: 9d:a3:80:0a:dc:34:19:60:d6:91:ba:a3:fa:68:18: 6d:a2:23:90:3a:6c:0b:dd:e7:a5:43:64:53:03:61: 19:77:24:9d:04:0c:13:b5:0c:8e:ba:61:e4:5a:a5: b3:d3:04:a0:81:c4:39:f6:e7:b6:c6:19:36:47:4e: 30:07:d2:9c:71:42:ec:64:86:38:0a:25:37:3f:7e: 71:aa:61:3b:62:fa:8c:22:7b:b6:3e:72:9d:68:e5: 15:24:55:93:ae:99:0d:7c:8d:60:d0:58:9a:0f:5a: ad:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:87:0D:64:1C:91:16:18:50:D0:84:49:ED:16:EF:63:C1:31:13:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813/7bf4defd-72e1-32e9-bc26-5c8f218f5c75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813/ba46f857-c44f-430d-b73b-7a14eec4c813.crl X509v3 Authority Key Identifier: keyid:BB:D8:4B:75:75:65:A5:63:86:8B:FC:C0:E0:83:0D:6D:FC:00:71:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813.cer sbgp-ipAddrBlock: critical IPv4: 199.182.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:ab:1b:7d:e0:7b:56:83:d4:0c:1d:32:db:93:a3:ca:37:de: 14:8f:6e:e9:ad:ed:ce:1d:91:9d:7a:7e:f8:08:bf:a0:9f:c3: d8:90:6b:43:dd:86:f4:11:e6:94:c4:92:7f:16:5e:a9:e0:68: 82:b9:b3:4c:6f:ae:dd:42:94:38:4b:f5:69:39:9f:e9:35:8c: 59:0b:50:0f:d1:52:ea:1c:b3:27:20:36:35:2a:27:fd:61:b4: fd:5d:4b:89:80:7e:f3:74:7b:2c:80:fb:df:78:a5:4f:89:cc: 5b:6d:c4:54:48:ac:22:5d:36:4d:77:37:7e:32:7d:df:18:b6: 77:3f:5e:16:f7:63:6d:fd:ef:df:7a:da:1a:ef:a4:c1:90:49: 37:18:ad:7b:de:cb:2b:cf:91:8d:84:12:d5:b1:91:84:3b:cd: 94:e1:e8:86:56:b5:c8:33:9c:31:f3:20:a2:b3:d9:e6:46:48: 14:eb:4e:a2:88:6b:08:99:58:c1:d4:16:1e:78:6a:33:ba:7d: 02:9c:2d:72:49:ba:07:82:6a:d4:7c:f0:d0:4d:40:12:fc:18: a4:43:11:30:b9:be:7e:43:db:33:f8:c5:f3:40:3a:d4:66:65: b1:d6:cc:cd:ff:cf:68:e2:38:e7:3b:ca:ac:12:7e:4c:d2:d3: 4e:5c:cd:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEulAkF42epdP5E95MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE0NmY4NTctYzQ0Zi00MzBkLWI3M2ItN2ExNGVlYzRj ODEzMB4XDTI1MTAyNjAxMDAzMVoXDTI2MDEyNDAyMDAzMVowLzEtMCsGA1UEAxMk YjJlMDI5NjYtNTU2MS00OGY3LWJhMDktMjE5N2FkNDM5MWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hsjqnYqORJ+stw/nhdWEoQQskkOJ6Rw2Ij3 IcWgtjpfLXJ/FvSv3FBN6RwwFphMwvJOPr4VyjSKMaWdd3WLNQn47gZJWRDDWrTV oxwpOFG0vl7g4e5iKOhbFYXGuT/Pk3d6P6d6WMIdhRx+ZWulMX/fGzf/qkVv+BD+ pRp5UTm5lYG1e5WBzfKXalVZ5NcYPt05dV+do4AK3DQZYNaRuqP6aBhtoiOQOmwL 3eelQ2RTA2EZdySdBAwTtQyOumHkWqWz0wSggcQ59ue2xhk2R04wB9KccULsZIY4 CiU3P35xqmE7YvqMInu2PnKdaOUVJFWTrpkNfI1g0FiaD1qtYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCiHDWQckRYYUNCESe0W72PBMRMiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iYTQ2 Zjg1Ny1jNDRmLTQzMGQtYjczYi03YTE0ZWVjNGM4MTMvN2JmNGRlZmQtNzJlMS0z MmU5LWJjMjYtNWM4ZjIxOGY1Yzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYmE0NmY4NTctYzQ0Zi00MzBkLWI3 M2ItN2ExNGVlYzRjODEzL2JhNDZmODU3LWM0NGYtNDMwZC1iNzNiLTdhMTRlZWM0 YzgxMy5jcmwwHwYDVR0jBBgwFoAUu9hLdXVlpWOGi/zA4IMNbfwAcSwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iYTQ2Zjg1Ny1jNDRmLTQzMGQtYjczYi03YTE0 ZWVjNGM4MTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx7ZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACrG33ge1aD1AwdMtuTo8o33hSPbumt7c4dkZ16fvgIv6Cfw9iQa0Pd hvQR5pTEkn8WXqngaIK5s0xvrt1ClDhL9Wk5n+k1jFkLUA/RUuocsycgNjUqJ/1h tP1dS4mAfvN0eyyA+994pU+JzFttxFRIrCJdNk13N34yfd8Ytnc/Xhb3Y2397996 2hrvpMGQSTcYrXveyyvPkY2EEtWxkYQ7zZTh6IZWtcgznDHzIKKz2eZGSBTrTqKI awiZWMHUFh54ajO6fQKcLXJJugeCatR88NBNQBL8GKRDETC5vn5D2zP4xfNAOtRm ZbHWzM3/z2jiOOc7yqwSfkzS005czVE= -----END CERTIFICATE-----Generated at Tue Nov 4 17:12:19 2025 by rpki-client