$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/c54b3846-303b-3aa7-8c60-f0b25d387609.roa File: c54b3846-303b-3aa7-8c60-f0b25d387609.roa (raw, json) Hash identifier: tprvnq4S0skLmmY4UY8JXaOMwsAAmL8k8ZF47OT1I6c= Subject key identifier: 6D:2F:0B:08:AC:0D:D1:38:34:D4:74:51:05:21:3C:31:4F:D2:EE:A0 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584AF7EBD4FE7FD41EBC97377200 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/c54b3846-303b-3aa7-8c60-f0b25d387609.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 36511 IP address blocks: 142.202.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:d4:fe:7f:d4:1e:bc:97:37:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=2308504a-c1dc-43fa-9092-10c71ea1d0b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bc:96:a5:9f:5b:78:91:e3:65:c1:b7:4d:b9: 5e:24:52:3e:c4:a6:5c:29:d7:72:d6:1f:e1:63:ae: a7:71:69:ee:9d:ea:a2:30:a0:46:52:dc:c1:21:e0: 10:51:e2:e2:81:d7:96:bf:c2:33:36:e7:22:ce:f1: 41:a1:d1:2b:97:c4:17:01:0d:c6:cc:0c:7e:df:c2: d0:5b:24:f2:69:5a:e6:6b:77:60:50:d5:ea:bd:f5: f6:69:8e:54:76:3f:d4:cc:97:aa:0b:0d:eb:f7:38: dd:70:93:d6:0d:96:7f:9a:48:8c:cb:8a:47:9b:52: e7:a9:f1:66:70:69:58:45:c5:11:e1:dc:5e:53:a2: b2:d0:e9:74:ee:ce:fb:01:7d:f5:84:ac:73:da:1d: 93:e9:b6:76:82:5e:42:89:1d:8f:6a:ff:ef:dc:44: d3:7c:04:03:bf:57:a0:69:d4:02:b6:41:38:13:6d: 59:fb:b6:57:20:4f:2a:56:c0:38:76:5c:f9:4c:25: 2b:83:dc:dc:18:77:69:0d:68:7c:d1:4f:cd:96:64: 38:9a:45:6a:2f:0d:86:2a:3d:b4:fa:78:d5:71:cb: 6d:cf:df:f4:f2:aa:3b:d8:9a:20:1f:36:d4:2f:e6: 36:96:ba:21:56:bd:de:08:d1:f8:c8:5d:24:06:2e: 71:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:2F:0B:08:AC:0D:D1:38:34:D4:74:51:05:21:3C:31:4F:D2:EE:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/c54b3846-303b-3aa7-8c60-f0b25d387609.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 142.202.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:65:33:8b:88:49:4c:5d:b7:fc:8b:a9:0f:fb:87:92:06:1b: 20:6f:6e:8e:c4:2e:3c:ba:10:b0:74:2a:24:dd:8d:9c:4f:10: f1:1c:63:58:66:d2:99:b0:44:30:75:2c:08:26:0d:26:99:cb: 72:4c:de:08:2d:eb:97:cc:06:0d:ef:86:78:1d:10:1d:fb:e0: f1:a6:65:ac:90:1b:c3:cd:3c:f7:45:df:c8:91:bb:01:87:75: 1c:88:2a:e7:e7:f0:b5:31:5d:dd:3a:b5:50:75:02:a9:db:2d: 76:21:67:17:84:18:89:e4:42:57:5e:20:2c:bf:46:11:35:01: b5:a3:5e:6e:02:9f:31:36:f6:c2:c4:93:81:8a:e1:ea:c4:e6: cf:ec:8e:c6:65:b3:43:7c:0a:d7:b4:8f:a7:e3:99:49:5e:c8: 46:55:31:ab:c5:9f:2b:00:87:29:8e:07:f6:76:ed:d3:52:90: ea:dd:78:c3:1c:3e:2e:18:ee:b6:40:44:24:69:78:8d:c9:12: b7:c4:52:36:5a:8d:b7:99:71:b2:05:5b:77:57:82:4f:5e:53: 8b:e0:f6:2c:d9:68:19:4a:06:ad:39:5c:f1:2e:96:15:47:2a: 36:92:9d:29:8b:0d:35:65:a9:4b:f9:f9:5b:8c:3b:89:45:ee: 13:46:25:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr369T+f9QevJc3cgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk MjMwODUwNGEtYzFkYy00M2ZhLTkwOTItMTBjNzFlYTFkMGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLyWpZ9beJHjZcG3TbleJFI+xKZcKddy1h/h Y66ncWnuneqiMKBGUtzBIeAQUeLigdeWv8IzNucizvFBodErl8QXAQ3GzAx+38LQ WyTyaVrma3dgUNXqvfX2aY5Udj/UzJeqCw3r9zjdcJPWDZZ/mkiMy4pHm1LnqfFm cGlYRcUR4dxeU6Ky0Ol07s77AX31hKxz2h2T6bZ2gl5CiR2Pav/v3ETTfAQDv1eg adQCtkE4E21Z+7ZXIE8qVsA4dlz5TCUrg9zcGHdpDWh80U/NlmQ4mkVqLw2GKj20 +njVccttz9/08qo72JogHzbUL+Y2lrohVr3eCNH4yF0kBi5x+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0vCwisDdE4NNR0UQUhPDFP0u6gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvYzU0YjM4NDYtMzAzYi0z YWE3LThjNjAtZjBiMjVkMzg3NjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjspwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdlM4uISUxdt/yLqQ/7h5IGGyBvbo7ELjy6ELB0KiTdjZxPEPEcY1hm 0pmwRDB1LAgmDSaZy3JM3ggt65fMBg3vhngdEB374PGmZayQG8PNPPdF38iRuwGH dRyIKufn8LUxXd06tVB1AqnbLXYhZxeEGInkQldeICy/RhE1AbWjXm4CnzE29sLE k4GK4erE5s/sjsZls0N8Cte0j6fjmUleyEZVMavFnysAhymOB/Z27dNSkOrdeMMc Pi4Y7rZARCRpeI3JErfEUjZajbeZcbIFW3dXgk9eU4vg9izZaBlKBq05XPEulhVH KjaSnSmLDTVlqUv5+VuMO4lF7hNGJSE= -----END CERTIFICATE-----Generated at Wed Nov 5 06:17:56 2025 by rpki-client