$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/ba58b7ef-ee2a-31b1-951f-6e7b79a52f32.roa File: ba58b7ef-ee2a-31b1-951f-6e7b79a52f32.roa (raw, json) Hash identifier: c0Vn4pW9vSKyz22dU+JJVovBPl6/FMq7teGMt5xUqIU= Subject key identifier: 90:B2:95:4B:D5:E3:02:A7:4C:8D:1A:A4:33:2E:6E:ED:53:5C:85:FB Certificate issuer: /CN=3e886672-55f3-450f-ab6e-342c76f256db Certificate serial: 010D0C9F4328584BA39D03EC052D678AFE363700 Authority key identifier: C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/ba58b7ef-ee2a-31b1-951f-6e7b79a52f32.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 16584 IP address blocks: 23.140.98.0/24 maxlen: 24 172.111.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:03:ec:05:2d:67:8a:fe:36:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e886672-55f3-450f-ab6e-342c76f256db Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=14f5d395-5b12-4b7a-a1af-b7fdb0ee2a2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c1:19:fc:a7:30:7c:3c:ee:58:f5:1d:fe:03: 71:db:95:c1:70:56:2f:94:21:c5:55:7c:2d:59:1e: a4:df:7c:84:19:71:ba:aa:14:62:cd:5c:5a:19:bd: 3d:c1:23:d7:89:60:61:90:2f:ae:5c:ba:08:53:a0: c9:2c:66:05:da:8a:31:6c:e4:fa:c4:e8:86:e3:5b: c2:c2:74:33:91:7d:af:33:6e:20:36:5d:1d:9e:13: a7:24:7c:d2:a7:5d:e6:32:13:b9:19:6a:a9:2d:56: 88:16:9d:32:98:9e:bb:ca:6d:8f:b5:47:a8:a7:f9: 6e:fc:c8:b1:b2:7f:c6:17:46:fc:34:f1:f7:f9:81: b0:38:47:47:46:51:d4:9f:2e:38:5c:9d:b8:da:96: 9a:2f:28:61:c0:19:12:8d:a7:11:0c:4a:63:87:77: 9b:f6:8b:a1:0a:a9:4e:d2:b8:b3:8e:0b:ec:7e:0d: 6d:d2:f8:ce:b7:fe:2a:c6:81:d5:ce:e2:f3:7e:66: c7:5d:0c:a5:07:9e:e3:47:24:67:62:2b:04:1c:e2: 0c:f5:c7:16:95:09:a8:d5:3e:3e:da:e7:d9:5b:be: 29:2d:b0:f3:0f:fb:18:97:f7:88:61:f4:a6:51:79: c3:9f:c8:87:3d:d7:10:3a:34:e7:22:51:29:6b:2c: 48:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B2:95:4B:D5:E3:02:A7:4C:8D:1A:A4:33:2E:6E:ED:53:5C:85:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/ba58b7ef-ee2a-31b1-951f-6e7b79a52f32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl X509v3 Authority Key Identifier: keyid:C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer sbgp-ipAddrBlock: critical IPv4: 23.140.98.0/24 172.111.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:c7:48:d0:45:8a:3b:79:a5:65:ce:0d:b7:c0:2f:88:5b:36: b0:f6:f6:d4:ae:6b:a1:fe:a3:02:99:76:9d:60:50:fc:58:3d: 2b:20:b6:ea:24:37:6a:12:ea:85:13:50:7c:c5:2e:ec:df:00: 53:77:83:99:3c:2c:ca:03:71:89:9e:4c:82:e6:a1:6c:83:6e: b2:26:fa:ea:15:da:b1:f3:0b:6a:b3:3f:60:d7:f4:29:8a:02: 57:28:44:6f:b6:7e:0c:24:f9:87:0f:ef:ce:de:46:63:fd:dd: 55:91:01:ca:08:3f:87:44:be:13:7f:40:65:a8:b2:5d:f5:fe: 68:3a:42:dc:1d:74:d4:5b:cb:f3:ab:e9:0d:76:e9:f3:d1:17: f0:b8:6e:d4:b2:a1:34:02:34:a5:d4:2a:b1:f5:fd:d4:24:cb: 55:4d:86:06:ee:f6:b4:38:e3:7d:de:cd:ae:59:b9:9d:89:17: e7:1d:dd:4f:95:bf:de:70:2a:ad:d5:a8:36:6b:52:d2:95:fb: 53:d0:a4:86:42:f3:c1:3f:d0:d1:a8:21:76:f4:f2:df:b4:91: 86:b3:0a:ce:3f:ac:35:46:fb:9d:02:9e:e3:84:35:93:be:fd: 28:2c:8a:64:0d:f5:3b:17:44:ea:c5:a4:ac:0f:90:8a:e5:1c: 42:f9:b0:29 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEujnQPsBS1niv42NwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U4ODY2NzItNTVmMy00NTBmLWFiNmUtMzQyYzc2ZjI1 NmRiMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MTRmNWQzOTUtNWIxMi00YjdhLWExYWYtYjdmZGIwZWUyYTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsEZ/KcwfDzuWPUd/gNx25XBcFYvlCHFVXwt WR6k33yEGXG6qhRizVxaGb09wSPXiWBhkC+uXLoIU6DJLGYF2ooxbOT6xOiG41vC wnQzkX2vM24gNl0dnhOnJHzSp13mMhO5GWqpLVaIFp0ymJ67ym2PtUeop/lu/Mix sn/GF0b8NPH3+YGwOEdHRlHUny44XJ242paaLyhhwBkSjacRDEpjh3eb9ouhCqlO 0rizjgvsfg1t0vjOt/4qxoHVzuLzfmbHXQylB57jRyRnYisEHOIM9ccWlQmo1T4+ 2ufZW74pLbDzD/sYl/eIYfSmUXnDn8iHPdcQOjTnIlEpayxIjQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJCylUvV4wKnTI0apDMubu1TXIX7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4 NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJjNzZmMjU2ZGIvYmE1OGI3ZWYtZWUyYS0z MWIxLTk1MWYtNmU3Yjc5YTUyZjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2U4ODY2NzItNTVmMy00NTBmLWFi NmUtMzQyYzc2ZjI1NmRiLzNlODg2NjcyLTU1ZjMtNDUwZi1hYjZlLTM0MmM3NmYy NTZkYi5jcmwwHwYDVR0jBBgwFoAUyffaYgRlgk+Ha8qShuQWCtT5MZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJj NzZmMjU2ZGIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF4xiAwQC rG8MMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFTHSNBFijt5pWXODbfAL4hbNrD29tSua6H+owKZdp1gUPxY PSsgtuokN2oS6oUTUHzFLuzfAFN3g5k8LMoDcYmeTILmoWyDbrIm+uoV2rHzC2qz P2DX9CmKAlcoRG+2fgwk+YcP787eRmP93VWRAcoIP4dEvhN/QGWosl31/mg6Qtwd dNRby/Or6Q126fPRF/C4btSyoTQCNKXUKrH1/dQky1VNhgbu9rQ4433eza5ZuZ2J F+cd3U+Vv95wKq3VqDZrUtKV+1PQpIZC88E/0NGoIXb08t+0kYazCs4/rDVG+50C nuOENZO+/SgsimQN9TsXROrFpKwPkIrlHEL5sCk= -----END CERTIFICATE-----Generated at Wed Nov 5 14:54:30 2025 by rpki-client