$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/2021ca11-bb53-3b76-82ac-95fa09e690a3.roa File: 2021ca11-bb53-3b76-82ac-95fa09e690a3.roa (raw, json) Hash identifier: dIpNFWZtfRe0pXX88iFP/QRuwDoedAw2RSY/6+xu8V8= Subject key identifier: 34:F6:BE:0C:43:D4:CC:BA:7E:19:26:D5:44:D1:C2:F8:F3:34:F5:A9 Certificate issuer: /CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5 Certificate serial: 010D0C9F4328584AC5AB8DA85CB7C1E92E544CC0 Authority key identifier: 91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/2021ca11-bb53-3b76-82ac-95fa09e690a3.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 32762 IP address blocks: 192.197.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:8d:a8:5c:b7:c1:e9:2e:54:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5 Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=9b54d99f-5d5e-496b-9d61-361d8370659e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ad:58:81:9c:48:21:c6:3d:3c:20:25:c8:85: df:50:51:31:cf:45:5b:84:a8:9f:08:0c:8a:b0:45: 13:16:b7:87:e7:66:fc:68:5f:91:1c:ad:10:8e:ff: 52:6e:f8:d0:61:97:da:45:2d:ff:d3:41:44:9f:54: 5c:a1:89:7f:ba:b5:97:88:f5:ab:ee:ee:8d:d5:9e: c1:bc:86:88:f5:96:d0:d6:69:c3:fe:90:ba:75:93: 2e:ca:e7:0d:ce:d5:30:0b:c0:ef:55:5c:15:ab:71: 72:aa:56:27:29:f3:9d:82:f8:73:f1:75:d4:a0:92: d1:17:17:3c:93:d9:4c:f6:5d:fb:4b:de:32:cc:e1: c3:aa:6f:d9:3f:c1:b8:56:2d:5f:e5:5b:e6:3a:fb: 63:57:c2:bf:ab:5e:00:bc:ad:7b:ec:8e:28:f4:07: b7:7c:c1:08:a2:41:c4:71:58:b7:a2:de:4c:4e:bf: 2c:d5:2d:45:76:c5:43:65:19:86:c8:6f:22:ac:16: 42:e7:c7:10:9e:12:7e:35:2f:a3:8e:2a:a8:ae:5d: 7d:d0:fc:b7:84:4b:71:4f:aa:dc:35:0a:9a:0c:f3: 73:2a:ca:6c:1a:03:d5:9e:b5:b7:4e:db:49:8a:3c: 5d:2b:5f:b9:c5:a1:9c:db:ab:82:96:db:0f:d0:34: 9c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F6:BE:0C:43:D4:CC:BA:7E:19:26:D5:44:D1:C2:F8:F3:34:F5:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/2021ca11-bb53-3b76-82ac-95fa09e690a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.crl X509v3 Authority Key Identifier: keyid:91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer sbgp-ipAddrBlock: critical IPv4: 192.197.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:36:ec:6f:d9:7a:b9:f7:77:a4:67:35:b0:69:d4:ba:b0:3f: 22:16:34:7d:ff:20:20:0e:02:d1:fd:ce:5f:78:a6:fa:b9:a2: f0:89:e5:b8:78:1e:24:44:2a:ca:a9:3c:58:e4:f8:96:df:bd: b0:b9:22:79:30:5c:d1:89:68:8a:13:ca:63:e3:1f:4e:6c:78: 9e:c0:fb:5c:d6:38:f0:27:42:67:29:46:e2:fa:47:b2:82:05: 41:a7:74:d9:8a:8b:de:d2:66:79:cd:84:b8:c6:29:08:fe:31: 08:04:4d:df:f1:65:ad:ca:ca:d1:03:c8:64:4c:04:02:86:92: 6b:b0:c0:00:fc:f9:c6:07:f2:bd:f2:fb:4b:b7:89:33:dc:73: fb:fc:23:5f:ad:86:4a:dd:49:b6:d7:e3:ea:39:56:92:2b:54: bf:32:38:15:34:f6:30:84:46:f3:d5:84:81:b3:93:a5:3e:22: 33:cc:49:8b:47:d1:a3:3e:c4:a7:a4:6f:a0:4a:38:01:55:1a: 18:c8:f6:c0:f1:a0:b7:71:ef:7e:7b:75:55:86:2b:ee:73:a8: 6e:59:af:d5:d3:34:1f:97:73:d6:04:98:b3:84:87:f9:a1:aa: 54:59:02:15:f7:47:f4:1b:5d:a1:2b:01:e1:eb:94:ba:26:5e: f8:cf:4f:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq42oXLfB6S5UTMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE1NzAzZmMtYjBlMi00ZGQzLWFiYmMtNzFkMDhlMWM2 N2M1MB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk OWI1NGQ5OWYtNWQ1ZS00OTZiLTlkNjEtMzYxZDgzNzA2NTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm61YgZxIIcY9PCAlyIXfUFExz0VbhKifCAyK sEUTFreH52b8aF+RHK0Qjv9SbvjQYZfaRS3/00FEn1RcoYl/urWXiPWr7u6N1Z7B vIaI9ZbQ1mnD/pC6dZMuyucNztUwC8DvVVwVq3FyqlYnKfOdgvhz8XXUoJLRFxc8 k9lM9l37S94yzOHDqm/ZP8G4Vi1f5VvmOvtjV8K/q14AvK177I4o9Ae3fMEIokHE cVi3ot5MTr8s1S1FdsVDZRmGyG8irBZC58cQnhJ+NS+jjiqorl190Py3hEtxT6rc NQqaDPNzKspsGgPVnrW3TttJijxdK1+5xaGc26uCltsP0DScYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDT2vgxD1My6fhkm1UTRwvjzNPWpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iYTU3 MDNmYy1iMGUyLTRkZDMtYWJiYy03MWQwOGUxYzY3YzUvMjAyMWNhMTEtYmI1My0z Yjc2LTgyYWMtOTVmYTA5ZTY5MGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmE1NzAzZmMtYjBlMi00ZGQzLWFi YmMtNzFkMDhlMWM2N2M1L2JhNTcwM2ZjLWIwZTItNGRkMy1hYmJjLTcxZDA4ZTFj NjdjNS5jcmwwHwYDVR0jBBgwFoAUkaMiLb6LWI+0+yzNjJHeFoQNiAswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iYTU3MDNmYy1iMGUyLTRkZDMtYWJiYy03MWQw OGUxYzY3YzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMVaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKI27G/Zern3d6RnNbBp1LqwPyIWNH3/ICAOAtH9zl94pvq5ovCJ5bh4 HiREKsqpPFjk+JbfvbC5InkwXNGJaIoTymPjH05seJ7A+1zWOPAnQmcpRuL6R7KC BUGndNmKi97SZnnNhLjGKQj+MQgETd/xZa3KytEDyGRMBAKGkmuwwAD8+cYH8r3y +0u3iTPcc/v8I1+thkrdSbbX4+o5VpIrVL8yOBU09jCERvPVhIGzk6U+IjPMSYtH 0aM+xKekb6BKOAFVGhjI9sDxoLdx7357dVWGK+5zqG5Zr9XTNB+Xc9YEmLOEh/mh qlRZAhX3R/QbXaErAeHrlLomXvjPTw8= -----END CERTIFICATE-----Generated at Sun Aug 24 05:30:09 2025 by rpki-client