$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/060d9b45-ec7e-3223-aa62-360e2bf75701.roa File: 060d9b45-ec7e-3223-aa62-360e2bf75701.roa (raw, json) Hash identifier: lUhVostecTJvexdgUQxZUZNKnihpU9DZd2wAxOl6n2o= Subject key identifier: 0B:6D:1C:DD:5E:1B:6E:CF:DC:AE:39:11:83:3F:AD:DB:8A:8E:51:D6 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584B004BF44C7ECDC36BF4191C80 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/060d9b45-ec7e-3223-aa62-360e2bf75701.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 33392 IP address blocks: 216.230.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:f4:4c:7e:cd:c3:6b:f4:19:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=c845d6d2-ba33-45d2-a0b5-ae8c860ead79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:78:a8:42:7e:11:52:fa:62:21:c5:b4:b5:b4: 0c:5b:4b:c6:14:92:04:3d:64:24:29:50:30:79:77: 62:26:1f:5b:31:d7:d3:31:58:ed:1c:9e:20:59:bd: 1a:d4:f6:68:12:03:9f:d5:c8:f6:e5:dd:7b:3b:03: 05:3f:89:17:86:76:9c:3c:e1:f0:6b:c3:fa:36:3c: a1:6e:c0:8a:73:2d:37:3a:71:aa:af:32:5a:4e:63: 33:fd:dc:38:5d:0e:88:00:96:83:78:c6:ce:05:a2: ed:e9:a9:65:13:73:1b:b2:7f:42:31:2d:58:b9:86: 11:99:3f:15:b2:80:d0:c0:56:d9:36:66:02:47:e4: c5:f9:c7:a0:ee:00:2a:75:6c:3d:be:18:54:5e:24: c4:62:fc:cf:64:43:b2:6c:5e:0e:9f:3f:11:a5:dc: bf:1b:a5:8c:e8:3e:fb:e9:14:52:c8:03:0e:ce:f6: df:43:d3:ed:80:bd:5f:00:7c:90:33:19:47:ac:46: bf:7e:a1:48:3c:40:5d:30:ce:c8:9e:dc:0b:91:c9: 28:75:1a:de:a3:7b:6e:29:41:04:3b:8e:02:cc:00: 39:5b:b9:a6:42:ab:ca:37:e4:3a:70:88:d7:87:dc: b9:7b:b0:1b:48:0c:02:8c:09:a3:85:43:bf:b0:13: ff:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:6D:1C:DD:5E:1B:6E:CF:DC:AE:39:11:83:3F:AD:DB:8A:8E:51:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/060d9b45-ec7e-3223-aa62-360e2bf75701.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 216.230.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:d1:51:9e:49:0e:4d:4c:89:b7:fc:eb:97:f1:6c:dc:40:cc: c3:98:62:3f:a3:9f:fc:4f:75:be:9a:ea:69:86:d9:7d:39:19: 29:fd:fa:2e:1d:3a:3d:33:63:96:1c:76:d1:1a:99:f0:3a:13: 8c:b2:cc:37:1c:fd:cc:40:7b:99:b4:0f:28:3c:e0:be:ce:92: e5:30:9a:70:d1:fe:5f:ca:af:79:ca:a8:8b:13:09:23:e1:2e: a3:4d:f7:d4:eb:c3:9f:86:f9:d5:9b:6b:78:d0:05:0d:b4:86: d9:cc:d6:39:81:b4:10:b7:5a:c6:92:29:b0:ed:1b:39:53:c4: 6f:16:35:de:dc:00:a0:2b:fc:c2:d4:59:8e:93:ef:6a:dd:7b: fb:0b:eb:1f:5a:34:07:07:90:db:62:61:53:aa:46:8c:34:9d: 7b:28:6d:21:e7:ac:9e:fe:b8:3d:f9:06:e8:a9:1b:95:59:20: 01:0b:71:76:df:7e:b3:fb:68:5f:27:cc:c1:22:db:00:85:ca: ac:43:3e:8f:36:ca:dc:b1:fd:b9:a0:57:aa:4c:9e:c4:35:e7: 26:b4:67:52:63:7d:f6:3e:f7:35:2f:91:98:6b:98:f1:23:20: 53:61:f8:69:65:57:6d:1c:34:98:65:49:37:86:0e:12:17:ac: d9:82:d6:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS/RMfs3Da/QZHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk Yzg0NWQ2ZDItYmEzMy00NWQyLWEwYjUtYWU4Yzg2MGVhZDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnioQn4RUvpiIcW0tbQMW0vGFJIEPWQkKVAw eXdiJh9bMdfTMVjtHJ4gWb0a1PZoEgOf1cj25d17OwMFP4kXhnacPOHwa8P6Njyh bsCKcy03OnGqrzJaTmMz/dw4XQ6IAJaDeMbOBaLt6allE3Mbsn9CMS1YuYYRmT8V soDQwFbZNmYCR+TF+ceg7gAqdWw9vhhUXiTEYvzPZEOybF4Onz8Rpdy/G6WM6D77 6RRSyAMOzvbfQ9PtgL1fAHyQMxlHrEa/fqFIPEBdMM7IntwLkckodRreo3tuKUEE O44CzAA5W7mmQqvKN+Q6cIjXh9y5e7AbSAwCjAmjhUO/sBP/gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAttHN1eG27P3K45EYM/rduKjlHWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvMDYwZDliNDUtZWM3ZS0z MjIzLWFhNjItMzYwZTJiZjc1NzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OYRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnRUZ5JDk1Mibf865fxbNxAzMOYYj+jn/xPdb6a6mmG2X05GSn9+i4d Oj0zY5YcdtEamfA6E4yyzDcc/cxAe5m0Dyg84L7OkuUwmnDR/l/Kr3nKqIsTCSPh LqNN99Trw5+G+dWba3jQBQ20htnM1jmBtBC3WsaSKbDtGzlTxG8WNd7cAKAr/MLU WY6T72rde/sL6x9aNAcHkNtiYVOqRow0nXsobSHnrJ7+uD35BuipG5VZIAELcXbf frP7aF8nzMEi2wCFyqxDPo82ytyx/bmgV6pMnsQ15ya0Z1JjffY+9zUvkZhrmPEj IFNh+GllV20cNJhlSTeGDhIXrNmC1oI= -----END CERTIFICATE-----Generated at Wed Nov 5 12:12:08 2025 by rpki-client