$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/baa68c67-2eff-30bf-976e-892fa383dd82.roa File: baa68c67-2eff-30bf-976e-892fa383dd82.roa (raw, json) Hash identifier: Tj1EUtNGTNUXIEp2ln9pfwIc6HwXe64xgWiWoD4AQzY= Subject key identifier: EA:D0:87:21:DE:43:F9:CD:71:94:78:23:D8:14:D1:E5:53:C4:C2:08 Certificate issuer: /CN=1bd97e7a-c31d-417a-bc07-1ecdb96be09f Certificate serial: 010D0C9F4328584BAA97B6DFB456FA42A9B29080 Authority key identifier: E0:BC:46:6D:8F:5F:DC:23:84:62:42:1C:22:C8:6C:C1:EE:EB:CB:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/baa68c67-2eff-30bf-976e-892fa383dd82.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 40605 IP address blocks: 173.0.96.0/24 maxlen: 24 173.0.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:b6:df:b4:56:fa:42:a9:b2:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bd97e7a-c31d-417a-bc07-1ecdb96be09f Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=915db7fa-61c7-4501-9aad-2c00543e86e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:18:aa:e3:75:29:a4:a9:dd:4a:4b:fe:a7:e5: 2f:21:01:f0:ac:6b:56:01:45:7f:ab:e5:e0:62:3d: a2:00:18:2f:30:45:b0:5e:c0:22:aa:43:68:5a:6b: 39:89:52:11:72:c8:70:b6:12:1b:90:a9:de:4f:ac: 4f:a7:46:bc:0d:2b:65:6b:91:85:30:c2:a3:0f:4b: ad:79:20:bd:2e:7f:f9:3f:99:f9:e1:10:48:3d:7a: 0f:48:e4:50:95:59:31:a3:a1:11:f8:cc:45:fb:a1: 6d:17:63:72:98:52:aa:1c:55:7b:b8:14:97:c0:36: cc:df:e4:0f:78:f5:cb:72:08:cc:0e:fb:40:ee:60: 48:b1:93:d1:b4:bc:64:08:fc:c8:03:27:32:e1:89: a2:d9:18:a8:74:b9:0f:e6:fb:eb:75:de:d0:34:1c: 52:0c:5b:d9:f0:fc:9c:5b:f4:22:37:0b:69:fa:32: 63:16:b7:4c:dc:a6:95:ca:9a:b8:ee:58:0e:5b:22: 87:83:f4:49:04:30:e2:93:07:96:d0:cf:c0:1c:02: 7b:4a:b5:26:29:10:dd:4b:33:18:eb:08:43:70:ba: 64:a8:1c:4e:d0:e4:b6:d7:b5:9b:62:7c:71:db:2f: 22:7d:09:55:8e:a4:78:19:bb:00:b2:d1:92:c6:85: 37:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:D0:87:21:DE:43:F9:CD:71:94:78:23:D8:14:D1:E5:53:C4:C2:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/baa68c67-2eff-30bf-976e-892fa383dd82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.crl X509v3 Authority Key Identifier: keyid:E0:BC:46:6D:8F:5F:DC:23:84:62:42:1C:22:C8:6C:C1:EE:EB:CB:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer sbgp-ipAddrBlock: critical IPv4: 173.0.96.0/24 173.0.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:8e:8f:23:5e:b8:d8:86:89:b6:85:bb:2a:2d:1d:6e:6e:a1: 72:f5:a8:50:3f:4c:26:66:7b:2a:b3:49:fb:b0:a9:1f:e0:86: dc:ae:cd:84:84:da:4e:6d:9f:77:59:f8:4c:4d:fa:fa:97:ba: ac:33:3e:ef:5f:69:d4:c9:df:b2:bc:f4:38:7c:e2:29:87:b5: 92:ff:0a:1c:ae:8b:86:35:c7:d7:86:fb:a9:70:26:52:93:c1: 44:29:23:ce:55:dc:8c:c7:36:00:a3:a3:42:30:0c:78:5f:fb: e9:32:e5:f7:19:1a:23:08:f2:ef:3d:47:29:3f:4a:c2:b5:66: af:54:e4:0d:2a:63:2d:1d:f2:c2:f3:f4:52:0b:47:b9:8c:8f: 12:fe:16:a8:5d:dd:bc:f6:61:77:6a:c9:e6:4e:7f:2a:b6:a5: 81:7a:ea:b3:80:b4:ef:c6:51:6d:8f:47:5e:b2:0b:59:62:3f: b0:87:aa:2a:06:2d:c1:09:de:04:e1:52:fa:2a:a9:6e:9f:44: d6:92:2a:a5:c2:54:74:11:92:b7:c7:15:82:b2:e6:64:3b:e1: b1:bb:bc:1b:d9:a1:9a:48:fd:d1:84:5b:de:5e:4c:7a:7f:6a: eb:a3:7b:aa:30:fa:fb:94:88:a8:a7:87:3f:1d:8e:02:d4:76: a2:03:8f:79 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuql7bftFb6QqmykIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWJkOTdlN2EtYzMxZC00MTdhLWJjMDctMWVjZGI5NmJl MDlmMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk OTE1ZGI3ZmEtNjFjNy00NTAxLTlhYWQtMmMwMDU0M2U4NmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxiq43UppKndSkv+p+UvIQHwrGtWAUV/q+Xg Yj2iABgvMEWwXsAiqkNoWms5iVIRcshwthIbkKneT6xPp0a8DStla5GFMMKjD0ut eSC9Ln/5P5n54RBIPXoPSORQlVkxo6ER+MxF+6FtF2NymFKqHFV7uBSXwDbM3+QP ePXLcgjMDvtA7mBIsZPRtLxkCPzIAycy4Ymi2RiodLkP5vvrdd7QNBxSDFvZ8Pyc W/QiNwtp+jJjFrdM3KaVypq47lgOWyKHg/RJBDDikweW0M/AHAJ7SrUmKRDdSzMY 6whDcLpkqBxO0OS217WbYnxx2y8ifQlVjqR4GbsAstGSxoU3BwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFOrQhyHeQ/nNcZR4I9gU0eVTxMIIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xYmQ5 N2U3YS1jMzFkLTQxN2EtYmMwNy0xZWNkYjk2YmUwOWYvYmFhNjhjNjctMmVmZi0z MGJmLTk3NmUtODkyZmEzODNkZDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWJkOTdlN2EtYzMxZC00MTdhLWJj MDctMWVjZGI5NmJlMDlmLzFiZDk3ZTdhLWMzMWQtNDE3YS1iYzA3LTFlY2RiOTZi ZTA5Zi5jcmwwHwYDVR0jBBgwFoAU4LxGbY9f3COEYkIcIshswe7ry44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xYmQ5N2U3YS1jMzFkLTQxN2EtYmMwNy0xZWNk Yjk2YmUwOWYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQArQBgAwQA rQBrMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABWOjyNeuNiGibaFuyotHW5uoXL1qFA/TCZmeyqzSfuwqR/g htyuzYSE2k5tn3dZ+ExN+vqXuqwzPu9fadTJ37K89Dh84imHtZL/Chyui4Y1x9eG +6lwJlKTwUQpI85V3IzHNgCjo0IwDHhf++ky5fcZGiMI8u89Ryk/SsK1Zq9U5A0q Yy0d8sLz9FILR7mMjxL+Fqhd3bz2YXdqyeZOfyq2pYF66rOAtO/GUW2PR16yC1li P7CHqioGLcEJ3gThUvoqqW6fRNaSKqXCVHQRkrfHFYKy5mQ74bG7vBvZoZpI/dGE W95eTHp/auuje6ow+vuUiKinhz8djgLUdqIDj3k= -----END CERTIFICATE-----Generated at Tue Nov 4 16:54:05 2025 by rpki-client