$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/0b1c3364-e87a-3b7d-af93-e0c89841b720.roa File: 0b1c3364-e87a-3b7d-af93-e0c89841b720.roa (raw, json) Hash identifier: 9SI+S1AdfXMMNnNMNgPBm9CuBsgmzYve9X+zfrCP1U4= Subject key identifier: 43:48:AA:24:A5:8B:DA:04:D2:8F:F8:1C:A2:C4:EA:23:6B:BB:28:DA Certificate issuer: /CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5 Certificate serial: 010D0C9F43285849E4EFBCF4F2B20A92E3F2FAE0 Authority key identifier: 91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/0b1c3364-e87a-3b7d-af93-e0c89841b720.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 32762 IP address blocks: 198.96.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:bc:f4:f2:b2:0a:92:e3:f2:fa:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5 Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=aa330a9d-a662-4917-b242-e39db0789054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:84:08:30:ac:24:4d:23:f0:37:3b:98:a3:ec: 97:91:8a:47:55:1c:e3:dd:ef:00:7f:09:39:59:f1: 66:3e:97:ef:38:3a:19:37:5b:f8:ef:8b:64:09:cd: f1:91:18:8e:92:33:bf:79:05:a9:b5:99:71:17:2d: c5:93:a8:8d:d9:e7:84:b6:b9:77:e5:2c:17:17:6e: 3c:e1:3d:ab:56:90:4b:0d:de:81:17:a5:b6:c7:ab: 03:53:9a:9d:5c:d6:c9:8b:b5:13:cf:40:0f:f9:44: 6b:85:4f:44:2f:d5:32:b1:aa:e5:66:92:e4:c7:d0: f7:af:21:d2:15:cd:84:18:53:d0:d8:11:08:0e:61: 51:08:f8:08:8a:f3:12:5e:c1:fe:87:31:ae:5e:70: 47:d1:02:09:59:63:b3:ca:71:63:1c:79:dd:74:59: 86:60:8d:f0:40:e0:45:9a:85:25:01:50:b8:a8:00: 18:95:ce:e9:9f:10:c8:65:5e:5d:8c:ba:72:e7:45: fc:cc:44:46:7c:af:aa:2c:8d:a4:90:61:05:68:66: 06:ac:1e:80:ac:60:ab:d0:e2:ef:16:c0:05:f3:d6: f3:da:ce:1a:98:e7:07:7f:8e:55:1d:52:50:ca:99: 4a:82:69:1f:4d:08:2c:05:86:c2:96:55:12:d3:38: 9f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:48:AA:24:A5:8B:DA:04:D2:8F:F8:1C:A2:C4:EA:23:6B:BB:28:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/0b1c3364-e87a-3b7d-af93-e0c89841b720.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.crl X509v3 Authority Key Identifier: keyid:91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer sbgp-ipAddrBlock: critical IPv4: 198.96.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:95:0d:35:13:2e:f9:d6:2c:ea:bf:eb:7c:73:48:59:7a:e6: c6:0e:78:2a:48:47:0a:2c:d4:c6:cb:37:e7:43:43:da:d9:40: 79:3e:35:31:bb:59:86:6f:4e:26:7c:ae:15:b5:27:ab:42:ea: d4:fd:96:6e:e1:32:89:05:0b:8b:03:1f:2c:a7:80:ef:14:83: 2c:60:83:ba:fd:b3:b2:29:ee:b9:1d:f0:ab:46:fd:23:63:9d: 6d:0c:55:3b:38:a1:3f:2e:dc:ad:81:1c:68:a6:ec:c7:68:a0: f8:29:44:65:9e:64:7b:42:e6:2a:7e:d7:e4:e8:44:ba:37:7c: cd:21:d2:8f:41:7d:6c:4f:7a:50:66:40:16:9f:99:65:76:32: 6f:17:c6:f8:82:1f:17:3c:b1:be:6a:c2:a6:3f:8c:c2:af:f0: 9b:1f:34:8d:f6:a6:01:8b:58:ac:2e:38:91:6c:76:17:16:ee: 7d:38:ea:f9:a6:e7:4e:a4:bd:26:da:94:4d:3d:ab:d0:52:1f: 9d:96:81:59:72:6a:17:bc:1f:ef:7f:bc:35:24:47:4a:f1:62: 4d:18:23:8a:3e:de:60:8f:2a:f5:2e:b7:99:37:85:c8:8a:e5: 22:96:31:94:24:18:ec:a0:e4:35:4c:4e:39:5c:f6:32:3f:63: 6a:c9:ec:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk77z08rIKkuPy+uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE1NzAzZmMtYjBlMi00ZGQzLWFiYmMtNzFkMDhlMWM2 N2M1MB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk YWEzMzBhOWQtYTY2Mi00OTE3LWIyNDItZTM5ZGIwNzg5MDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoQIMKwkTSPwNzuYo+yXkYpHVRzj3e8Afwk5 WfFmPpfvODoZN1v474tkCc3xkRiOkjO/eQWptZlxFy3Fk6iN2eeEtrl35SwXF248 4T2rVpBLDd6BF6W2x6sDU5qdXNbJi7UTz0AP+URrhU9EL9UysarlZpLkx9D3ryHS Fc2EGFPQ2BEIDmFRCPgIivMSXsH+hzGuXnBH0QIJWWOzynFjHHnddFmGYI3wQOBF moUlAVC4qAAYlc7pnxDIZV5djLpy50X8zERGfK+qLI2kkGEFaGYGrB6ArGCr0OLv FsAF89bz2s4amOcHf45VHVJQyplKgmkfTQgsBYbCllUS0zifEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENIqiSli9oE0o/4HKLE6iNruyjaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iYTU3 MDNmYy1iMGUyLTRkZDMtYWJiYy03MWQwOGUxYzY3YzUvMGIxYzMzNjQtZTg3YS0z YjdkLWFmOTMtZTBjODk4NDFiNzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmE1NzAzZmMtYjBlMi00ZGQzLWFi YmMtNzFkMDhlMWM2N2M1L2JhNTcwM2ZjLWIwZTItNGRkMy1hYmJjLTcxZDA4ZTFj NjdjNS5jcmwwHwYDVR0jBBgwFoAUkaMiLb6LWI+0+yzNjJHeFoQNiAswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iYTU3MDNmYy1iMGUyLTRkZDMtYWJiYy03MWQw OGUxYzY3YzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmAGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqVDTUTLvnWLOq/63xzSFl65sYOeCpIRwos1MbLN+dDQ9rZQHk+NTG7 WYZvTiZ8rhW1J6tC6tT9lm7hMokFC4sDHyyngO8Ugyxgg7r9s7Ip7rkd8KtG/SNj nW0MVTs4oT8u3K2BHGim7MdooPgpRGWeZHtC5ip+1+ToRLo3fM0h0o9BfWxPelBm QBafmWV2Mm8XxviCHxc8sb5qwqY/jMKv8JsfNI32pgGLWKwuOJFsdhcW7n046vmm 506kvSbalE09q9BSH52WgVlyahe8H+9/vDUkR0rxYk0YI4o+3mCPKvUut5k3hciK 5SKWMZQkGOyg5DVMTjlc9jI/Y2rJ7Go= -----END CERTIFICATE-----Generated at Tue Jul 1 11:37:59 2025 by rpki-client