$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/0b1c3364-e87a-3b7d-af93-e0c89841b720.roa File: 0b1c3364-e87a-3b7d-af93-e0c89841b720.roa (raw, json) Hash identifier: hyiTA5PRBW+PSrUfGBQgUCgAxQZ8bXbrHzmdB4Xt5cs= Subject key identifier: 98:38:D6:D6:4C:1C:2F:93:E4:BC:4C:BF:84:80:7F:E6:E5:F1:A9:83 Certificate issuer: /CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5 Certificate serial: 010D0C9F4328584AC5AB8DBFAD1132AF9CC76080 Authority key identifier: 91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/0b1c3364-e87a-3b7d-af93-e0c89841b720.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 32762 IP address blocks: 198.96.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:8d:bf:ad:11:32:af:9c:c7:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5 Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=5a1d1b71-7d95-4fc3-8ef6-a797fd2210e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5c:94:d9:0d:11:fe:88:76:75:87:4d:98:b5: f1:25:85:d9:2d:32:76:8f:b4:1a:7d:af:04:89:81: ea:b4:c5:f2:bb:7b:59:71:65:7d:f0:8f:10:ed:ac: 5b:2b:c3:4f:c0:17:92:07:f4:8f:ea:86:42:2b:3f: 89:de:ff:77:53:ad:3c:e9:b2:72:68:ff:08:58:6e: 9a:58:e5:6d:a3:69:35:0e:5e:7f:b4:6e:a4:a1:8d: b8:82:82:cd:1b:91:d2:15:37:01:14:0d:da:ef:82: 6f:03:c7:77:8d:c8:18:21:49:e3:ef:d6:4e:ff:de: 22:6d:50:45:25:c6:50:40:76:27:71:4a:a3:0c:20: 65:48:58:51:23:7b:6e:4a:6b:f2:04:a0:35:29:dd: 05:33:7a:c2:d9:9d:8c:f3:4b:e0:ad:94:ca:e0:33: d1:2c:4f:27:f3:b8:73:f2:38:61:77:b8:6e:2d:3d: 34:8b:35:af:35:bb:c3:44:42:67:42:33:83:e9:db: 8f:82:9a:61:df:79:4a:73:4c:43:9d:a3:be:61:e5: 06:3c:43:7d:28:e5:16:36:4f:8b:88:e4:d5:00:5b: 65:4b:15:8b:7b:2d:1d:f1:98:74:5c:b9:58:76:f4: 65:5a:b6:dc:39:20:6f:f4:5a:b5:44:01:60:e0:eb: c6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:38:D6:D6:4C:1C:2F:93:E4:BC:4C:BF:84:80:7F:E6:E5:F1:A9:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/0b1c3364-e87a-3b7d-af93-e0c89841b720.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.crl X509v3 Authority Key Identifier: keyid:91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer sbgp-ipAddrBlock: critical IPv4: 198.96.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:fa:5e:63:42:a7:81:15:1d:05:9d:61:fe:07:31:b4:4a:c2: 6b:c2:a8:ec:20:f5:c8:35:19:43:49:9d:09:57:0b:37:2b:4f: 57:1b:46:ab:9f:cf:67:d6:b5:43:4d:2d:74:02:d1:f5:be:c1: e2:99:c0:ca:05:bd:27:11:ba:d5:90:60:43:bf:6f:ef:f4:35: 82:34:bf:99:70:dc:7a:64:ae:7f:3e:55:69:74:6c:73:8c:c2: f1:25:d6:dd:04:b9:57:15:9b:3e:a2:f5:21:fd:e9:59:21:fa: 58:92:e6:03:8b:04:9e:4b:9f:1c:98:9b:ef:18:4b:c6:90:bf: 39:41:e4:86:86:6e:cb:8c:70:ed:a7:7b:c9:3f:bb:05:8a:95: ca:13:35:8e:bc:e4:23:d4:f5:41:0e:f4:77:06:57:d4:b5:57: 9f:f6:2e:aa:b4:f7:51:06:94:b9:ac:71:4a:f0:bb:67:54:01: 44:18:dd:60:d8:6b:6c:39:b7:48:56:41:79:62:37:d2:f7:7b: 9a:d6:0a:41:36:ee:dc:28:c7:5e:bb:e1:0d:e1:c1:08:60:6f: 3d:c5:9d:a9:08:64:c2:6f:7c:56:9c:d9:d8:ca:ab:be:87:aa: 0a:9e:2f:1f:bd:9b:a1:09:ca:02:46:05:1e:d1:7c:72:7b:1a: 75:7f:5f:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq42/rREyr5zHYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE1NzAzZmMtYjBlMi00ZGQzLWFiYmMtNzFkMDhlMWM2 N2M1MB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk NWExZDFiNzEtN2Q5NS00ZmMzLThlZjYtYTc5N2ZkMjIxMGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylyU2Q0R/oh2dYdNmLXxJYXZLTJ2j7Qafa8E iYHqtMXyu3tZcWV98I8Q7axbK8NPwBeSB/SP6oZCKz+J3v93U6086bJyaP8IWG6a WOVto2k1Dl5/tG6koY24goLNG5HSFTcBFA3a74JvA8d3jcgYIUnj79ZO/94ibVBF JcZQQHYncUqjDCBlSFhRI3tuSmvyBKA1Kd0FM3rC2Z2M80vgrZTK4DPRLE8n87hz 8jhhd7huLT00izWvNbvDREJnQjOD6duPgpph33lKc0xDnaO+YeUGPEN9KOUWNk+L iOTVAFtlSxWLey0d8Zh0XLlYdvRlWrbcOSBv9Fq1RAFg4OvGPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJg41tZMHC+T5LxMv4SAf+bl8amDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iYTU3 MDNmYy1iMGUyLTRkZDMtYWJiYy03MWQwOGUxYzY3YzUvMGIxYzMzNjQtZTg3YS0z YjdkLWFmOTMtZTBjODk4NDFiNzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmE1NzAzZmMtYjBlMi00ZGQzLWFi YmMtNzFkMDhlMWM2N2M1L2JhNTcwM2ZjLWIwZTItNGRkMy1hYmJjLTcxZDA4ZTFj NjdjNS5jcmwwHwYDVR0jBBgwFoAUkaMiLb6LWI+0+yzNjJHeFoQNiAswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iYTU3MDNmYy1iMGUyLTRkZDMtYWJiYy03MWQw OGUxYzY3YzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmAGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGn6XmNCp4EVHQWdYf4HMbRKwmvCqOwg9cg1GUNJnQlXCzcrT1cbRquf z2fWtUNNLXQC0fW+weKZwMoFvScRutWQYEO/b+/0NYI0v5lw3Hpkrn8+VWl0bHOM wvEl1t0EuVcVmz6i9SH96Vkh+liS5gOLBJ5LnxyYm+8YS8aQvzlB5IaGbsuMcO2n e8k/uwWKlcoTNY685CPU9UEO9HcGV9S1V5/2Lqq091EGlLmscUrwu2dUAUQY3WDY a2w5t0hWQXliN9L3e5rWCkE27twox1674Q3hwQhgbz3FnakIZMJvfFac2djKq76H qgqeLx+9m6EJygJGBR7RfHJ7GnV/X58= -----END CERTIFICATE-----Generated at Sun Aug 24 07:10:45 2025 by rpki-client