$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/4af164e1-0993-3a33-9adc-cedf691ba81f.roa File: 4af164e1-0993-3a33-9adc-cedf691ba81f.roa (raw, json) Hash identifier: PVt94JAIWmEnE4GY+ZfSKy508Dqios56iyV4wp5WhTU= Subject key identifier: 91:ED:52:02:C6:1C:11:57:CF:00:E9:18:27:86:65:B5:36:02:D4:2D Certificate issuer: /CN=5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca Certificate serial: 010D0C9F4328584B28C6DA743B1ED70D2752CD80 Authority key identifier: 02:5F:8E:3F:1A:33:F6:22:34:19:90:CE:F1:19:AB:2B:9B:5B:AF:79 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/4af164e1-0993-3a33-9adc-cedf691ba81f.roa Signing time: Thu 11 Sep 2025 13:00:41 +0000 ROA not before: Thu 11 Sep 2025 13:00:41 +0000 ROA not after: Wed 10 Dec 2025 14:00:41 +0000 asID: 400644 IP address blocks: 192.100.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:28:c6:da:74:3b:1e:d7:0d:27:52:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca Validity Not Before: Sep 11 13:00:41 2025 GMT Not After : Dec 10 14:00:41 2025 GMT Subject: CN=11d1a59c-ea0f-4882-9efd-7da4d5fbefd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:c5:4c:20:4f:c2:d6:4f:e6:39:e3:ed:95:9c: 20:95:45:bf:0f:58:d8:ad:65:2f:5c:01:7a:f0:a5: d7:34:88:67:31:51:18:d8:65:d2:e9:b0:ef:9b:2f: da:13:f2:de:12:14:23:e6:20:da:64:c9:57:9d:2a: 1c:7e:6d:dc:68:85:5b:4d:28:23:d3:e6:f9:d2:c3: cd:0b:31:78:30:9d:47:4f:d3:c0:b2:ea:46:cf:f3: fe:50:b5:40:e0:bd:a2:9b:6c:5b:c9:ab:94:34:d7: 3a:92:4b:96:11:0e:55:0d:a5:45:a5:6f:bd:51:a8: 46:3f:07:14:ef:75:c9:76:46:fa:32:6b:cd:b3:53: 75:c1:3a:21:17:32:22:b1:69:5d:a5:88:12:49:be: ca:ee:80:2d:32:bd:35:74:c6:a7:50:28:84:0a:d5: 2b:27:bb:0e:11:23:ac:89:60:de:34:5d:52:5a:17: 53:5c:4e:89:b0:e9:5d:6a:59:41:a7:fd:26:21:fe: 5e:21:1e:30:03:53:ae:cd:27:e8:03:a1:79:c4:ac: ca:d6:34:a3:7b:4c:d4:77:f5:4f:c4:f4:fb:33:f4: 5b:1f:af:63:06:fa:18:44:31:69:f9:4c:9c:d2:71: 17:8f:6b:3b:60:a5:55:d7:43:93:90:3c:b2:f6:32: 8b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:ED:52:02:C6:1C:11:57:CF:00:E9:18:27:86:65:B5:36:02:D4:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/4af164e1-0993-3a33-9adc-cedf691ba81f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.crl X509v3 Authority Key Identifier: keyid:02:5F:8E:3F:1A:33:F6:22:34:19:90:CE:F1:19:AB:2B:9B:5B:AF:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.cer sbgp-ipAddrBlock: critical IPv4: 192.100.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:6e:9d:fe:66:37:7a:f6:b3:9d:03:7e:85:c6:0e:f0:2c:27: a5:21:51:f8:dd:d4:cd:b8:a1:ea:4a:9f:43:0c:b2:2f:ef:b6: 51:21:f8:8c:b2:51:32:f1:6a:51:d5:53:43:1a:f0:8f:64:7c: ce:f8:3b:49:75:3c:99:d0:a7:02:c6:e7:bc:3a:0d:60:a3:ed: 45:d2:52:ee:39:19:02:bd:af:21:1a:29:3c:27:3f:2d:5b:ca: ae:d0:32:11:8d:29:88:c1:d9:32:f9:42:f1:f9:b4:10:0b:6c: ac:ae:1f:e7:e0:59:92:6b:9d:30:12:af:97:53:3f:80:bc:5b: 74:03:78:c8:9f:91:a6:c9:8a:82:33:81:f8:97:fd:85:1a:ab: 7b:0c:d1:1e:8b:c8:56:3c:71:8a:5c:03:37:eb:0e:e9:34:9f: 83:d0:52:a1:2a:6b:70:c0:3d:1e:a3:a8:47:f5:25:96:54:47: 34:e2:60:0a:64:04:e9:12:f1:1e:d5:1d:c7:fd:13:69:bc:ff: 14:5d:11:6b:12:c4:14:db:83:83:79:19:25:e5:05:60:d9:59: 77:eb:f3:40:f9:89:47:ec:5a:a7:79:b9:35:c4:d0:ec:f2:1c: 9f:eb:8a:f2:30:ca:be:cd:77:1d:91:09:de:91:70:11:8f:f0: e6:16:0c:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsoxtp0Ox7XDSdSzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWJhMWFhOGEtYmFkNi00ZTA5LWE0YzYtYWM0MjRmMDRm NWNhMB4XDTI1MDkxMTEzMDA0MVoXDTI1MTIxMDE0MDA0MVowLzEtMCsGA1UEAxMk MTFkMWE1OWMtZWEwZi00ODgyLTllZmQtN2RhNGQ1ZmJlZmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7MVMIE/C1k/mOePtlZwglUW/D1jYrWUvXAF6 8KXXNIhnMVEY2GXS6bDvmy/aE/LeEhQj5iDaZMlXnSocfm3caIVbTSgj0+b50sPN CzF4MJ1HT9PAsupGz/P+ULVA4L2im2xbyauUNNc6kkuWEQ5VDaVFpW+9UahGPwcU 73XJdkb6MmvNs1N1wTohFzIisWldpYgSSb7K7oAtMr01dManUCiECtUrJ7sOESOs iWDeNF1SWhdTXE6JsOldallBp/0mIf5eIR4wA1OuzSfoA6F5xKzK1jSje0zUd/VP xPT7M/RbH69jBvoYRDFp+Uyc0nEXj2s7YKVV10OTkDyy9jKLFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHtUgLGHBFXzwDpGCeGZbU2AtQtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YmEx YWE4YS1iYWQ2LTRlMDktYTRjNi1hYzQyNGYwNGY1Y2EvNGFmMTY0ZTEtMDk5My0z YTMzLTlhZGMtY2VkZjY5MWJhODFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWJhMWFhOGEtYmFkNi00ZTA5LWE0 YzYtYWM0MjRmMDRmNWNhLzViYTFhYThhLWJhZDYtNGUwOS1hNGM2LWFjNDI0ZjA0 ZjVjYS5jcmwwHwYDVR0jBBgwFoAUAl+OPxoz9iI0GZDO8RmrK5tbr3kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YmExYWE4YS1iYWQ2LTRlMDktYTRjNi1hYzQy NGYwNGY1Y2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGRSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRunf5mN3r2s50DfoXGDvAsJ6UhUfjd1M24oepKn0MMsi/vtlEh+Iyy UTLxalHVU0Ma8I9kfM74O0l1PJnQpwLG57w6DWCj7UXSUu45GQK9ryEaKTwnPy1b yq7QMhGNKYjB2TL5QvH5tBALbKyuH+fgWZJrnTASr5dTP4C8W3QDeMifkabJioIz gfiX/YUaq3sM0R6LyFY8cYpcAzfrDuk0n4PQUqEqa3DAPR6jqEf1JZZURzTiYApk BOkS8R7VHcf9E2m8/xRdEWsSxBTbg4N5GSXlBWDZWXfr80D5iUfsWqd5uTXE0Ozy HJ/rivIwyr7Ndx2RCd6RcBGP8OYWDLw= -----END CERTIFICATE-----Generated at Wed Nov 5 13:10:43 2025 by rpki-client