$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ae158e8b-9bf3-373e-8e12-aa952bd4a686.roa File: ae158e8b-9bf3-373e-8e12-aa952bd4a686.roa (raw, json) Hash identifier: z7IlDyapTkjwqNC6b8b5X9JYTc84MuSnwahpcHymfpI= Subject key identifier: 01:28:D5:AC:30:2A:5F:34:74:0B:6C:57:54:FE:EC:F5:4C:0B:26:37 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584B004BF3E586E41C159D47D380 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ae158e8b-9bf3-373e-8e12-aa952bd4a686.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 33392 IP address blocks: 137.83.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:f3:e5:86:e4:1c:15:9d:47:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=495f283e-c415-42fc-855c-a66845b88d1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:75:9b:b2:ea:59:56:56:b9:35:76:11:b9:c9: 5a:b9:21:5f:18:8c:1a:fc:cd:4a:9b:f2:b0:14:f9: 56:d7:d9:3c:f0:7c:10:a8:15:80:07:aa:68:6d:3f: 29:12:9e:ba:b4:be:dc:a2:c7:4c:5a:28:5f:72:2f: ca:e0:bd:95:01:86:c4:dd:e1:73:4c:de:b1:74:61: 05:ba:ad:22:15:8d:33:e4:d9:b9:f5:4d:81:58:c7: 29:f6:65:32:00:25:25:7f:d2:c7:9f:d1:a4:d8:38: 24:bd:3f:16:1c:a7:94:e3:a8:73:12:3b:6c:cc:44: 8c:b2:73:01:21:ab:57:72:0e:72:12:3e:70:bf:59: d5:7f:9a:5a:a5:81:c3:2b:85:d6:6d:18:2d:76:4d: 0f:a9:bc:4d:b8:b2:33:5d:1c:0e:ef:d4:72:e4:a8: 85:3b:c1:fd:dc:18:2e:33:af:eb:32:19:ab:32:52: b8:0d:93:d3:09:89:7f:20:9d:9e:50:14:f0:7c:fe: b3:24:aa:80:4b:91:33:f5:5a:69:ff:9f:07:14:be: 52:2d:ae:a6:38:70:8d:7c:47:a4:86:e8:02:d3:e0: 24:83:d8:88:7b:99:0e:bf:d5:b3:d8:ed:0a:20:19: 69:1d:71:66:63:4c:ac:8c:61:c2:9b:fd:55:df:b8: 4f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:28:D5:AC:30:2A:5F:34:74:0B:6C:57:54:FE:EC:F5:4C:0B:26:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ae158e8b-9bf3-373e-8e12-aa952bd4a686.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 137.83.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:dd:17:c3:38:08:7c:0a:32:8e:7d:1b:45:83:83:2d:76:47: 73:33:a6:46:f7:f7:78:18:63:91:21:99:ad:ea:e0:79:76:68: 6a:a7:7f:97:0e:d4:61:a6:fc:ac:42:1a:e5:0f:ea:e5:0d:77: f6:4b:4f:96:30:ed:71:19:90:c4:ca:ec:9a:bb:96:fb:32:0a: d6:8e:fd:f1:9e:6c:ad:61:9b:50:4f:28:0f:44:77:39:c3:3c: fd:2f:58:4a:12:d5:3d:40:5c:3d:3f:31:3e:1a:17:b0:4e:49: 68:28:a4:94:22:36:3d:31:55:67:1a:01:69:b3:93:d3:bd:be: db:50:e2:f1:1a:90:8f:80:ea:a6:38:45:18:e1:3f:6c:8a:e1: 9b:5a:c5:0c:fb:2c:a4:8b:3e:a8:43:e0:6d:a2:24:2d:e1:49: 43:7d:53:9d:2e:f8:f6:aa:4a:e6:46:d0:f8:10:35:82:a0:b2: 1c:63:6c:06:04:50:95:d7:09:57:2b:fb:43:a7:8e:bd:0d:9f: ed:f3:7b:b1:26:76:56:0b:ca:08:bc:9a:e1:94:a7:2c:46:37: 06:5a:7f:7b:a1:65:a0:ed:8a:71:e1:9b:54:f5:1a:f2:2a:6b: 18:90:ca:de:d5:17:7a:c7:a1:f3:26:18:6a:0f:37:7f:5e:d7: 97:39:8d:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS/PlhuQcFZ1H04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk NDk1ZjI4M2UtYzQxNS00MmZjLTg1NWMtYTY2ODQ1Yjg4ZDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnWbsupZVla5NXYRuclauSFfGIwa/M1Km/Kw FPlW19k88HwQqBWAB6pobT8pEp66tL7cosdMWihfci/K4L2VAYbE3eFzTN6xdGEF uq0iFY0z5Nm59U2BWMcp9mUyACUlf9LHn9Gk2DgkvT8WHKeU46hzEjtszESMsnMB IatXcg5yEj5wv1nVf5papYHDK4XWbRgtdk0PqbxNuLIzXRwO79Ry5KiFO8H93Bgu M6/rMhmrMlK4DZPTCYl/IJ2eUBTwfP6zJKqAS5Ez9Vpp/58HFL5SLa6mOHCNfEek hugC0+Akg9iIe5kOv9Wz2O0KIBlpHXFmY0ysjGHCm/1V37hPlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAEo1awwKl80dAtsV1T+7PVMCyY3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvYWUxNThlOGItOWJmMy0z NzNlLThlMTItYWE5NTJiZDRhNjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiVNMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzdF8M4CHwKMo59G0WDgy12R3Mzpkb393gYY5Ehma3q4Hl2aGqnf5cO 1GGm/KxCGuUP6uUNd/ZLT5Yw7XEZkMTK7Jq7lvsyCtaO/fGebK1hm1BPKA9EdznD PP0vWEoS1T1AXD0/MT4aF7BOSWgopJQiNj0xVWcaAWmzk9O9vttQ4vEakI+A6qY4 RRjhP2yK4ZtaxQz7LKSLPqhD4G2iJC3hSUN9U50u+PaqSuZG0PgQNYKgshxjbAYE UJXXCVcr+0Onjr0Nn+3ze7EmdlYLygi8muGUpyxGNwZaf3uhZaDtinHhm1T1GvIq axiQyt7VF3rHofMmGGoPN39e15c5jYU= -----END CERTIFICATE-----Generated at Wed Nov 5 12:12:09 2025 by rpki-client