$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/bba65f7e-65e4-3d3c-9a5d-12a6168f6bdf.roa File: bba65f7e-65e4-3d3c-9a5d-12a6168f6bdf.roa (raw, json) Hash identifier: uq3oIN15nmgiDJHeLOJ/FlbMEe67nPURTwkO6YA2d+I= Subject key identifier: CB:23:15:DA:65:5B:C6:32:F3:AD:EC:E2:40:3A:45:93:D7:1B:E0:A6 Certificate issuer: /CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61 Certificate serial: 010D0C9F4328584B110C0437CAA94200D0966800 Authority key identifier: F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/bba65f7e-65e4-3d3c-9a5d-12a6168f6bdf.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 14090 IP address blocks: 64.21.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0c:04:37:ca:a9:42:00:d0:96:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61 Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=0c348ee2-b0c6-4268-9e8d-4207ed14a8a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d0:16:21:0f:a4:e9:09:e8:8e:4b:1d:02:28: b9:e7:f5:dd:4e:9e:11:63:39:05:c4:1e:88:b7:1a: 5f:dc:db:15:5b:2a:d6:6b:9a:93:07:5a:23:75:46: 6f:57:69:52:1f:26:b4:50:32:ed:6c:1d:e6:f7:f7: 52:47:49:ee:86:34:ad:b8:ab:3e:dc:4d:d3:ed:c8: 28:19:6d:4a:f9:21:f9:b3:af:0e:0c:15:97:54:b2: c2:4c:62:af:6d:ce:90:87:e6:61:46:02:95:0e:78: 82:cb:c2:a9:f4:1a:9c:ab:e5:8e:b4:30:5c:98:32: 01:93:c7:a0:34:81:0e:84:bc:fe:be:10:69:2c:1a: 96:a1:03:a1:34:5a:76:38:c5:21:26:fe:6b:5d:ea: 7b:38:de:91:1e:06:d6:84:3d:7f:60:4a:b2:9b:70: d0:88:ee:2f:bd:4a:ea:c7:85:02:f8:fe:ce:ac:4d: 70:8f:c8:6b:25:ad:64:f3:4e:a1:85:93:35:76:92: 95:e8:21:b5:8b:83:f6:0d:ac:e1:7b:a6:95:8f:d2: 7d:6f:1c:1a:d4:6f:68:36:29:c2:74:3f:d5:82:03: 69:53:9f:76:e1:72:ce:6b:c2:ce:41:70:d9:9d:0e: 9d:9d:3e:f9:71:55:a8:6a:14:48:01:88:f9:ff:95: 8b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:23:15:DA:65:5B:C6:32:F3:AD:EC:E2:40:3A:45:93:D7:1B:E0:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/bba65f7e-65e4-3d3c-9a5d-12a6168f6bdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl X509v3 Authority Key Identifier: keyid:F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer sbgp-ipAddrBlock: critical IPv4: 64.21.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:ee:80:ad:bb:05:7f:89:3a:88:83:2f:9b:0a:79:ac:52:0f: b7:cc:23:51:07:e7:a5:5f:78:90:9f:be:42:7b:ad:74:3b:24: a0:7b:b2:b3:30:74:6c:b2:f6:de:ae:7a:7c:55:3c:24:db:c7: 8e:88:04:1b:52:8f:0b:9f:35:c8:43:85:4e:e8:e9:99:2a:9f: 4c:b3:d0:05:69:3a:64:a0:5c:54:f4:80:9f:37:a8:e5:81:e7: 05:48:64:18:d9:0a:6e:07:e0:91:21:4b:b7:1b:f0:00:f6:bf: 12:bc:2b:b2:8b:7d:9b:c0:c8:74:3b:fe:bc:29:b4:37:37:47: af:4b:16:dd:59:ed:b8:1e:c8:3f:09:49:a9:1d:46:85:3d:93: f3:84:5c:5b:ba:a0:db:c5:51:59:0c:24:04:28:98:00:46:b1: ab:7d:f1:76:59:07:d4:f1:ed:20:b4:96:66:b1:1b:e4:44:7f: 99:66:f9:fd:17:f8:39:d5:ae:d3:51:7f:43:51:29:1a:90:d1: c3:23:e9:eb:2c:24:76:2e:1a:6a:ae:91:f2:62:c1:bb:71:a7: 15:0c:d5:d1:ce:6f:52:63:77:0d:0e:9c:5c:8a:3c:d0:8a:f0: 43:44:6d:6f:da:ce:c8:d9:d1:ef:38:8d:96:b5:1d:84:b2:a7: d5:25:17:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsRDAQ3yqlCANCWaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRhN2Q1YzAtZWVjOS00MjVjLWE1NzQtNmViOWRkNGVk ZTYxMB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk MGMzNDhlZTItYjBjNi00MjY4LTllOGQtNDIwN2VkMTRhOGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9AWIQ+k6QnojksdAii55/XdTp4RYzkFxB6I txpf3NsVWyrWa5qTB1ojdUZvV2lSHya0UDLtbB3m9/dSR0nuhjStuKs+3E3T7cgo GW1K+SH5s68ODBWXVLLCTGKvbc6Qh+ZhRgKVDniCy8Kp9Bqcq+WOtDBcmDIBk8eg NIEOhLz+vhBpLBqWoQOhNFp2OMUhJv5rXep7ON6RHgbWhD1/YEqym3DQiO4vvUrq x4UC+P7OrE1wj8hrJa1k806hhZM1dpKV6CG1i4P2Dazhe6aVj9J9bxwa1G9oNinC dD/VggNpU5924XLOa8LOQXDZnQ6dnT75cVWoahRIAYj5/5WLLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsjFdplW8Yy863s4kA6RZPXG+CmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3 ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5ZGQ0ZWRlNjEvYmJhNjVmN2UtNjVlNC0z ZDNjLTlhNWQtMTJhNjE2OGY2YmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWRhN2Q1YzAtZWVjOS00MjVjLWE1 NzQtNmViOWRkNGVkZTYxLzVkYTdkNWMwLWVlYzktNDI1Yy1hNTc0LTZlYjlkZDRl ZGU2MS5jcmwwHwYDVR0jBBgwFoAU8QWcju/aWUH6JtOjabaF+gQ8dhswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5 ZGQ0ZWRlNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQBXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjugK27BX+JOoiDL5sKeaxSD7fMI1EH56VfeJCfvkJ7rXQ7JKB7srMw dGyy9t6uenxVPCTbx46IBBtSjwufNchDhU7o6Zkqn0yz0AVpOmSgXFT0gJ83qOWB 5wVIZBjZCm4H4JEhS7cb8AD2vxK8K7KLfZvAyHQ7/rwptDc3R69LFt1Z7bgeyD8J SakdRoU9k/OEXFu6oNvFUVkMJAQomABGsat98XZZB9Tx7SC0lmaxG+REf5lm+f0X +DnVrtNRf0NRKRqQ0cMj6essJHYuGmqukfJiwbtxpxUM1dHOb1Jjdw0OnFyKPNCK 8ENEbW/azsjZ0e84jZa1HYSyp9UlF3E= -----END CERTIFICATE-----Generated at Wed Nov 5 04:34:29 2025 by rpki-client