$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bba48f6f-7231-3f3a-a8e0-8c3ef5d94fd4.roa File: bba48f6f-7231-3f3a-a8e0-8c3ef5d94fd4.roa (raw, json) Hash identifier: 3ePQVlf5wAwFMsiqHXj5oxQnEoH52VnYdqiAPAprtik= Subject key identifier: 6B:5B:70:FC:D0:27:5B:B3:DB:A8:3F:75:E7:5F:64:69:FC:D3:EC:D3 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584B33F1A2B3E38068C704A1ADC0 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bba48f6f-7231-3f3a-a8e0-8c3ef5d94fd4.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 31898 IP address blocks: 199.36.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:a2:b3:e3:80:68:c7:04:a1:ad:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=3e8ee4a7-9a87-4686-aa27-0ea2fbec23a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ae:be:09:ca:f1:58:19:52:af:17:7c:50:60: 7d:3c:56:c2:97:9c:b8:00:6d:c2:8b:3e:c6:08:56: 42:2c:cf:a6:5f:73:74:a5:c1:32:8a:69:81:cd:7a: d1:d2:c3:52:15:1e:3b:e5:61:f4:47:c2:7d:a9:90: 3d:13:df:a8:d0:7c:6b:a5:10:05:46:59:c9:f7:b8: 42:7b:29:9e:3d:12:82:d6:6c:69:ff:97:c1:72:5f: 31:85:a8:84:22:f0:31:58:80:c7:20:f5:f0:4d:48: 35:0b:84:9e:27:0b:01:9d:df:22:84:9c:37:60:d0: 19:39:8e:b7:c3:37:0d:ad:4c:de:63:a9:d9:74:b8: 26:ca:df:42:81:ef:7c:b2:25:2c:76:69:3c:06:eb: 9a:93:28:4b:6e:f0:34:cb:b8:f4:c4:b9:c1:62:b4: 20:6e:0c:c6:95:62:65:ff:c5:eb:06:53:07:0b:94: e4:93:ca:99:48:b4:82:c7:1b:68:d7:10:a8:7c:fa: f9:75:83:9b:e5:02:f8:d7:ca:f5:b8:ef:14:1b:15: f5:2b:a3:cd:4e:f8:79:ca:0d:83:38:5b:c6:d0:d8: 4d:d9:5d:0f:d9:97:6e:21:c7:ec:f3:ed:15:38:22: 3f:ad:9b:ed:64:30:c5:0e:66:17:73:1b:a7:8c:76: d2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:5B:70:FC:D0:27:5B:B3:DB:A8:3F:75:E7:5F:64:69:FC:D3:EC:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bba48f6f-7231-3f3a-a8e0-8c3ef5d94fd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 199.36.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:b9:bf:28:88:db:0a:66:89:89:eb:bf:e5:48:07:cb:0d:0b: 31:f8:30:be:cf:4d:e0:09:47:5f:bd:b6:f7:4b:14:d0:74:36: da:0f:34:ab:9a:9d:25:8e:65:a5:e8:6a:9f:5f:2f:9c:c4:37: 75:90:22:98:10:ac:e6:64:05:0a:19:31:2b:e9:f9:6f:de:b7: e1:82:80:a7:34:0c:34:f4:b5:d3:d3:c8:35:4c:99:7d:bd:8a: 8f:27:15:22:55:6b:db:fb:e6:66:22:cd:11:14:df:b6:83:7e: e1:bf:09:00:c6:66:4c:f2:66:d4:e3:69:3c:2d:ba:c2:76:92: 1f:f0:00:da:b0:c8:f8:81:24:b9:59:cd:96:fd:1b:4f:7f:26: 10:78:a8:e9:55:2b:f9:2b:c3:b8:de:8f:b2:68:03:4f:8e:38: 10:95:ba:52:4a:7f:27:c7:a8:2e:5c:04:13:66:d5:04:da:a1: f6:24:7b:05:de:bf:93:2b:cd:4e:98:7d:ba:eb:cb:5c:0d:a1: f2:20:2a:70:92:02:2a:ee:7d:02:d6:49:f3:78:3f:81:bf:93: 73:58:3f:73:8e:3e:1c:7d:70:b6:18:5e:48:bd:0a:ca:50:49: f5:d5:1b:b7:ca:73:a4:02:8c:55:67:11:61:72:ec:cb:63:67: 06:90:40:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsz8aKz44BoxwShrcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk M2U4ZWU0YTctOWE4Ny00Njg2LWFhMjctMGVhMmZiZWMyM2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArK6+CcrxWBlSrxd8UGB9PFbCl5y4AG3Ciz7G CFZCLM+mX3N0pcEyimmBzXrR0sNSFR475WH0R8J9qZA9E9+o0HxrpRAFRlnJ97hC eymePRKC1mxp/5fBcl8xhaiEIvAxWIDHIPXwTUg1C4SeJwsBnd8ihJw3YNAZOY63 wzcNrUzeY6nZdLgmyt9Cge98siUsdmk8BuuakyhLbvA0y7j0xLnBYrQgbgzGlWJl /8XrBlMHC5Tkk8qZSLSCxxto1xCofPr5dYOb5QL418r1uO8UGxX1K6PNTvh5yg2D OFvG0NhN2V0P2ZduIcfs8+0VOCI/rZvtZDDFDmYXcxunjHbSbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGtbcPzQJ1uz26g/dedfZGn80+zTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYmJhNDhmNmYtNzIzMS0z ZjNhLWE4ZTAtOGMzZWY1ZDk0ZmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyT7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGu5vyiI2wpmiYnrv+VIB8sNCzH4ML7PTeAJR1+9tvdLFNB0NtoPNKua nSWOZaXoap9fL5zEN3WQIpgQrOZkBQoZMSvp+W/et+GCgKc0DDT0tdPTyDVMmX29 io8nFSJVa9v75mYizREU37aDfuG/CQDGZkzyZtTjaTwtusJ2kh/wANqwyPiBJLlZ zZb9G09/JhB4qOlVK/krw7jej7JoA0+OOBCVulJKfyfHqC5cBBNm1QTaofYkewXe v5MrzU6Yfbrry1wNofIgKnCSAirufQLWSfN4P4G/k3NYP3OOPhx9cLYYXki9CspQ SfXVG7fKc6QCjFVnEWFy7MtjZwaQQOE= -----END CERTIFICATE-----Generated at Wed Nov 5 12:17:28 2025 by rpki-client