$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/ba3ff8df-1c2d-3cdb-9aa6-c021fdff5a26.roa File: ba3ff8df-1c2d-3cdb-9aa6-c021fdff5a26.roa (raw, json) Hash identifier: PeB2zR/bNowKMgeWfnIEqOX+QFwYBbGmsSOF6PlWvrU= Subject key identifier: B2:2A:9C:8A:91:CA:72:2E:AA:D4:B5:5E:0A:17:8A:B6:F3:78:68:3D Certificate issuer: /CN=6511a5cc-df0b-4c6e-a228-2902fbea4263 Certificate serial: 010D0C9F4328584B9E07BCFAE3A932F962D9B400 Authority key identifier: ED:B2:04:0A:65:F6:8A:00:34:25:EC:FC:AB:A5:2B:F8:26:99:1B:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/ba3ff8df-1c2d-3cdb-9aa6-c021fdff5a26.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 16509 IP address blocks: 140.98.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:bc:fa:e3:a9:32:f9:62:d9:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6511a5cc-df0b-4c6e-a228-2902fbea4263 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=793edf94-2a79-4247-bc1c-a22d2c44f82d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:4b:04:a9:f9:d3:7f:1c:11:c0:00:18:24:a9: 66:80:01:cd:8d:6a:f9:34:11:9c:2f:35:76:f1:7d: e6:cc:12:d3:cc:30:1e:d4:83:0c:0b:de:99:a8:53: 07:15:5f:d4:a8:df:5a:91:ff:29:ef:bc:f8:b7:63: cf:4a:16:8d:53:95:a2:9f:07:14:15:d1:e1:82:6d: 06:2a:11:4b:17:d3:83:54:47:86:c0:cb:5d:a5:fe: ce:c0:60:25:24:46:45:21:40:3d:f5:ca:7c:fb:55: b6:f7:76:9d:4b:76:20:55:83:ae:f4:6e:e7:8f:cb: 17:ca:87:2a:1d:23:67:5d:a4:61:7a:69:02:b8:d7: cc:ce:60:d8:c2:ee:ea:c0:18:07:d7:88:f4:ac:f8: 92:9e:34:af:87:a2:66:9f:3f:d8:e6:6a:33:0a:c8: d7:61:47:e5:7f:50:0c:3f:4f:3d:e9:7c:34:ff:0e: c4:85:59:48:ea:11:c5:5f:7c:0a:ae:1e:46:cf:f5: 30:dd:9c:74:75:46:08:55:c2:2f:d5:e8:05:d7:3f: 61:f9:1b:5c:77:7a:23:1a:59:39:44:be:90:6c:7e: cd:b9:d4:dd:d8:47:96:74:51:fe:f5:2a:ae:5f:2a: 26:2e:bb:c6:42:70:8d:ca:12:6b:9e:37:cd:04:00: 8d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:2A:9C:8A:91:CA:72:2E:AA:D4:B5:5E:0A:17:8A:B6:F3:78:68:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/ba3ff8df-1c2d-3cdb-9aa6-c021fdff5a26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.crl X509v3 Authority Key Identifier: keyid:ED:B2:04:0A:65:F6:8A:00:34:25:EC:FC:AB:A5:2B:F8:26:99:1B:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer sbgp-ipAddrBlock: critical IPv4: 140.98.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:e0:06:56:0c:83:bd:99:43:72:29:8b:f9:8e:09:aa:f9:8f: 5f:a2:f4:ce:b1:5c:7f:c0:f4:0e:82:99:47:16:a8:3a:7d:8d: fa:b1:75:95:7e:2e:c8:0d:ab:76:f7:2d:c1:6a:e8:54:99:e2: a2:8b:45:35:0f:2a:f5:77:0f:f8:9f:70:f0:d5:89:91:7b:23: 94:be:c8:d7:f3:ab:95:0c:0e:19:2b:56:75:c1:e9:2a:e9:a6: 26:d7:c8:01:55:08:f7:5d:c9:87:54:cb:f5:06:3e:5d:da:5b: 31:92:0d:ca:65:1f:26:3e:5d:a0:ba:15:51:2d:69:f9:bf:25: 87:06:3e:e4:76:2e:c1:e1:42:e1:4d:00:59:b3:de:b8:33:86: a2:72:2a:2e:ca:5f:cf:1e:94:14:a9:e9:da:65:f0:06:d6:78: 86:f1:fb:ba:0d:90:4f:5f:a7:33:88:85:59:f5:5b:45:4e:96: 34:72:8d:89:e6:a3:4b:1d:93:97:68:6d:39:bf:92:b9:b5:a6: 58:4b:d4:bc:91:13:e8:d3:64:a5:49:67:91:98:ab:79:15:56: 9a:fa:fa:d7:bf:b8:03:91:34:00:22:e9:cd:3d:28:50:a5:c5: a3:f6:8e:f0:2a:2d:23:4e:77:40:60:a5:eb:3c:43:34:9c:30: 75:2c:f1:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7z646ky+WLZtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjUxMWE1Y2MtZGYwYi00YzZlLWEyMjgtMjkwMmZiZWE0 MjYzMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk NzkzZWRmOTQtMmE3OS00MjQ3LWJjMWMtYTIyZDJjNDRmODJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEsEqfnTfxwRwAAYJKlmgAHNjWr5NBGcLzV2 8X3mzBLTzDAe1IMMC96ZqFMHFV/UqN9akf8p77z4t2PPShaNU5WinwcUFdHhgm0G KhFLF9ODVEeGwMtdpf7OwGAlJEZFIUA99cp8+1W293adS3YgVYOu9G7nj8sXyocq HSNnXaRhemkCuNfMzmDYwu7qwBgH14j0rPiSnjSvh6Jmnz/Y5mozCsjXYUflf1AM P0896Xw0/w7EhVlI6hHFX3wKrh5Gz/Uw3Zx0dUYIVcIv1egF1z9h+Rtcd3ojGlk5 RL6QbH7NudTd2EeWdFH+9SquXyomLrvGQnCNyhJrnjfNBACNKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIqnIqRynIuqtS1XgoXirbzeGg9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NTEx YTVjYy1kZjBiLTRjNmUtYTIyOC0yOTAyZmJlYTQyNjMvYmEzZmY4ZGYtMWMyZC0z Y2RiLTlhYTYtYzAyMWZkZmY1YTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjUxMWE1Y2MtZGYwYi00YzZlLWEy MjgtMjkwMmZiZWE0MjYzLzY1MTFhNWNjLWRmMGItNGM2ZS1hMjI4LTI5MDJmYmVh NDI2My5jcmwwHwYDVR0jBBgwFoAU7bIECmX2igA0Jez8q6Ur+CaZGxQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NTExYTVjYy1kZjBiLTRjNmUtYTIyOC0yOTAy ZmJlYTQyNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjGIcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/gBlYMg72ZQ3Ipi/mOCar5j1+i9M6xXH/A9A6CmUcWqDp9jfqxdZV+ LsgNq3b3LcFq6FSZ4qKLRTUPKvV3D/ifcPDViZF7I5S+yNfzq5UMDhkrVnXB6Srp pibXyAFVCPddyYdUy/UGPl3aWzGSDcplHyY+XaC6FVEtafm/JYcGPuR2LsHhQuFN AFmz3rgzhqJyKi7KX88elBSp6dpl8AbWeIbx+7oNkE9fpzOIhVn1W0VOljRyjYnm o0sdk5dobTm/krm1plhL1LyRE+jTZKVJZ5GYq3kVVpr6+te/uAORNAAi6c09KFCl xaP2jvAqLSNOd0Bgpes8QzScMHUs8bg= -----END CERTIFICATE-----Generated at Wed Nov 5 14:06:24 2025 by rpki-client