$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea/a59b07bd-087c-3bd2-b8c2-4ce5bbd233f4.roa File: a59b07bd-087c-3bd2-b8c2-4ce5bbd233f4.roa (raw, json) Hash identifier: k269Ua+AQti6m565DO/1hX8hCYpdSZO4t4v+l3Y4zNc= Subject key identifier: A2:82:7F:14:D1:DB:16:B4:42:A7:5B:A7:38:34:3A:C9:08:6C:B7:A6 Certificate issuer: /CN=ba34350e-8a32-444e-a9c3-3267735f96ea Certificate serial: 010D0C9F4328584BA39D1F571EE162FC8D5B2FE0 Authority key identifier: 95:CE:E8:CF:4D:E9:4C:D0:B3:22:3D:3C:68:D2:DD:A5:A0:52:B2:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea/a59b07bd-087c-3bd2-b8c2-4ce5bbd233f4.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 46179 IP address blocks: 199.91.152.0/21 maxlen: 21 205.196.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea/ba34350e-8a32-444e-a9c3-3267735f96ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea/ba34350e-8a32-444e-a9c3-3267735f96ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:1f:57:1e:e1:62:fc:8d:5b:2f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba34350e-8a32-444e-a9c3-3267735f96ea Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=99e2a49f-8951-4eca-a01f-b02ca5d4e96a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c9:91:2e:72:7b:c4:54:d7:fa:06:ae:f0:f3: 7f:17:f3:14:90:4b:6e:6e:82:f4:87:0f:76:a7:92: f2:21:e5:01:e5:21:a8:ec:72:0a:4b:78:3d:7d:6f: 6b:94:6a:64:18:e8:51:57:26:91:f3:26:6e:3b:1d: 26:01:88:65:14:bf:b3:34:4a:e7:13:ca:d0:6e:7f: 4c:d8:51:92:08:b3:f4:75:60:28:c6:04:37:09:3e: bc:8e:a2:73:ed:91:e9:0e:d0:af:c3:29:7b:94:f2: 30:02:48:ce:d1:db:34:7e:c3:a7:e3:3c:27:48:63: b6:41:4b:e3:6c:09:e9:52:df:a9:e9:b0:d7:79:30: 94:5a:35:08:42:53:9c:1a:75:37:2b:10:13:50:f2: b5:63:69:61:56:75:4d:85:6c:34:9e:64:fe:5d:be: ed:b4:67:a9:5b:c7:3f:51:03:20:c1:e5:58:5d:0d: 4b:4f:4d:bf:98:53:34:17:cd:5e:45:3b:a3:e2:53: a5:3f:1f:32:a7:ad:9c:ce:c2:b4:ee:b8:fe:5b:9e: f2:79:9b:65:a0:76:f3:5d:92:ba:aa:68:d5:10:e8: d7:6d:98:fc:81:bc:46:92:36:39:99:ac:f9:e1:de: e6:c3:8c:9c:49:1f:40:0a:9f:13:1f:1f:2c:da:b0: 1b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:82:7F:14:D1:DB:16:B4:42:A7:5B:A7:38:34:3A:C9:08:6C:B7:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea/a59b07bd-087c-3bd2-b8c2-4ce5bbd233f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea/ba34350e-8a32-444e-a9c3-3267735f96ea.crl X509v3 Authority Key Identifier: keyid:95:CE:E8:CF:4D:E9:4C:D0:B3:22:3D:3C:68:D2:DD:A5:A0:52:B2:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea.cer sbgp-ipAddrBlock: critical IPv4: 199.91.152.0/21 205.196.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:85:14:38:61:6c:4f:6b:1b:ad:ca:b2:e7:02:16:73:4c:99: 32:df:10:36:6b:46:06:d3:90:c7:95:aa:4a:df:e5:d5:e8:ef: 96:80:c1:8d:e0:8d:f1:41:40:cb:9e:87:e3:e2:5f:d8:1f:29: bf:1f:a9:3e:fc:46:76:f0:94:6e:ef:2e:9f:58:f8:7f:88:96: f7:d0:b8:95:15:1a:33:46:04:38:24:ca:a5:95:84:7f:df:a6: df:44:14:13:5c:53:7e:2c:f3:c2:5e:2a:00:9c:d0:09:5c:24: ab:20:ea:8d:ff:4e:e6:be:5f:7c:ed:44:3a:90:dc:68:c2:68: 91:8d:7d:37:0b:41:db:08:45:b9:81:80:08:e7:aa:ef:57:d1: fd:a0:c6:f3:37:c5:a3:97:e0:67:d3:c4:8f:06:1a:d5:a8:1f: 90:a6:6e:e6:e1:58:4e:35:da:69:66:0a:91:46:52:dd:45:58: 6a:01:8e:67:42:af:26:75:c4:0f:2c:2b:6d:a9:33:b8:35:85: ef:cd:99:b1:1c:7c:94:02:cf:50:b6:6e:d6:d1:9e:b5:a0:72: ee:ed:d9:dc:25:fb:a1:8c:ca:ef:de:8c:41:c6:7a:8c:d6:19: c4:5a:25:ec:df:29:01:cd:f5:2a:50:56:50:ff:a1:14:84:d5: ef:5a:25:cf -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEujnR9XHuFi/I1bL+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEzNDM1MGUtOGEzMi00NDRlLWE5YzMtMzI2NzczNWY5 NmVhMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk OTllMmE0OWYtODk1MS00ZWNhLWEwMWYtYjAyY2E1ZDRlOTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8mRLnJ7xFTX+gau8PN/F/MUkEtuboL0hw92 p5LyIeUB5SGo7HIKS3g9fW9rlGpkGOhRVyaR8yZuOx0mAYhlFL+zNErnE8rQbn9M 2FGSCLP0dWAoxgQ3CT68jqJz7ZHpDtCvwyl7lPIwAkjO0ds0fsOn4zwnSGO2QUvj bAnpUt+p6bDXeTCUWjUIQlOcGnU3KxATUPK1Y2lhVnVNhWw0nmT+Xb7ttGepW8c/ UQMgweVYXQ1LT02/mFM0F81eRTuj4lOlPx8yp62czsK07rj+W57yeZtloHbzXZK6 qmjVEOjXbZj8gbxGkjY5maz54d7mw4ycSR9ACp8THx8s2rAbTQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKKCfxTR2xa0Qqdbpzg0OskIbLemMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iYTM0 MzUwZS04YTMyLTQ0NGUtYTljMy0zMjY3NzM1Zjk2ZWEvYTU5YjA3YmQtMDg3Yy0z YmQyLWI4YzItNGNlNWJiZDIzM2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmEzNDM1MGUtOGEzMi00NDRlLWE5 YzMtMzI2NzczNWY5NmVhL2JhMzQzNTBlLThhMzItNDQ0ZS1hOWMzLTMyNjc3MzVm OTZlYS5jcmwwHwYDVR0jBBgwFoAUlc7oz03pTNCzIj08aNLdpaBSst8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iYTM0MzUwZS04YTMyLTQ0NGUtYTljMy0zMjY3 NzM1Zjk2ZWEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDx1uYAwQC zcR4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAmFFDhhbE9rG63KsucCFnNMmTLfEDZrRgbTkMeVqkrf5dXo 75aAwY3gjfFBQMueh+PiX9gfKb8fqT78RnbwlG7vLp9Y+H+IlvfQuJUVGjNGBDgk yqWVhH/fpt9EFBNcU34s88JeKgCc0AlcJKsg6o3/Tua+X3ztRDqQ3GjCaJGNfTcL QdsIRbmBgAjnqu9X0f2gxvM3xaOX4GfTxI8GGtWoH5CmbubhWE412mlmCpFGUt1F WGoBjmdCryZ1xA8sK22pM7g1he/NmbEcfJQCz1C2btbRnrWgcu7t2dwl+6GMyu/e jEHGeozWGcRaJezfKQHN9SpQVlD/oRSE1e9aJc8= -----END CERTIFICATE-----Generated at Wed Nov 5 17:51:43 2025 by rpki-client