$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/cb2fdef3-69d3-33f1-a276-0ebf0c220d49.roa File: cb2fdef3-69d3-33f1-a276-0ebf0c220d49.roa (raw, json) Hash identifier: NUxiCNzkl4z9GYfAu2xUSJetueFLaaMhqSmSTQrs0OQ= Subject key identifier: 57:B3:67:64:4A:9C:DF:E4:5C:18:A2:F6:B2:1A:A9:A6:D3:93:2C:E0 Certificate issuer: /CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5 Certificate serial: 010D0C9F43285849E4EFBD0905431AA3FF389900 Authority key identifier: 91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/cb2fdef3-69d3-33f1-a276-0ebf0c220d49.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 32762 IP address blocks: 198.96.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:bd:09:05:43:1a:a3:ff:38:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5 Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=e283c127-3b4f-44bc-97f3-6dfef5d55019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:29:25:26:c0:39:72:41:ea:c6:72:65:4b:dc: 8c:60:f7:68:dd:ae:99:d4:2b:43:e1:79:a5:40:a8: 90:7a:17:e5:af:e0:29:a1:ef:e3:a9:9c:b7:1e:73: f9:e4:e1:cc:99:8a:86:58:35:e2:2b:01:e5:dc:05: 72:80:21:b2:3b:f2:82:87:c0:9a:b1:5e:f0:0d:34: 98:67:63:1a:38:3a:c6:3f:66:b5:e3:be:5c:21:cd: c3:3c:bd:42:e3:e7:5b:e4:fd:65:c2:56:88:b1:b1: af:4a:3b:d1:73:ee:cf:8e:d3:82:ce:6d:de:e4:39: fe:a8:35:27:b0:27:5e:a1:96:53:14:7c:68:c0:5d: 6b:fe:1f:dc:14:6b:a5:1a:ec:94:31:a8:8b:e6:15: 30:f6:4c:fa:7e:ce:ee:90:f4:5a:59:d0:70:df:f8: 7a:1d:08:06:51:92:b3:c9:59:63:d3:ca:ab:af:4d: f9:77:45:a7:59:ad:cf:4c:e1:34:e4:57:d5:fb:1d: 68:9e:f5:c8:56:1f:98:2d:f0:b7:22:89:4c:d7:6b: da:85:d5:80:15:14:c7:1d:6d:27:47:7e:fb:89:9b: 3d:0d:18:30:f5:8c:e3:92:7f:ff:e3:23:3b:fb:40: 91:bd:fd:fc:04:a5:7e:75:df:8a:45:69:7a:76:cd: 41:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B3:67:64:4A:9C:DF:E4:5C:18:A2:F6:B2:1A:A9:A6:D3:93:2C:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/cb2fdef3-69d3-33f1-a276-0ebf0c220d49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.crl X509v3 Authority Key Identifier: keyid:91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer sbgp-ipAddrBlock: critical IPv4: 198.96.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:90:b1:35:be:01:ef:a0:41:a8:e3:74:f0:33:f1:6e:90:1b: 9d:af:49:63:14:34:65:f3:c5:08:bd:bd:93:20:81:4d:fa:04: 10:7d:70:1b:66:ff:aa:f4:c3:80:fa:ce:b7:56:57:ad:5a:a8: 25:81:d7:4e:f5:a1:06:40:7e:db:a9:66:b6:06:a7:bf:74:d2: 8a:72:12:a9:86:e8:04:7f:3e:1f:23:a2:61:e9:ee:00:99:1c: fe:54:f7:54:68:01:ec:3f:9b:2f:f1:d4:9b:f0:ed:fa:2f:5d: 7c:21:64:a8:72:7f:36:27:57:b4:e4:79:f3:92:50:b6:6f:e4: 48:21:c7:a4:e1:ac:56:f7:e0:56:45:9f:9d:f5:e6:7f:0e:38: 1e:ec:34:ad:5f:17:94:db:b7:0c:79:a8:21:82:4a:e1:f1:69: 52:35:96:85:3e:f7:e6:62:ea:64:48:fa:7a:b5:bd:fa:b3:be: 90:77:6e:f1:db:08:34:19:88:7c:a8:47:f0:22:53:02:f2:c4: b6:2b:32:81:5d:3f:f0:54:1e:c3:1f:5e:ad:50:e9:d8:f1:83: f1:ba:a2:b0:b8:2f:d4:f0:03:6e:59:71:e1:86:7d:c3:ad:31: 4a:87:ee:e0:9c:cf:d6:02:cb:c4:96:64:d2:32:05:df:e6:bc: 9a:76:4c:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk770JBUMao/84mQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE1NzAzZmMtYjBlMi00ZGQzLWFiYmMtNzFkMDhlMWM2 N2M1MB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk ZTI4M2MxMjctM2I0Zi00NGJjLTk3ZjMtNmRmZWY1ZDU1MDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSklJsA5ckHqxnJlS9yMYPdo3a6Z1CtD4Xml QKiQehflr+Apoe/jqZy3HnP55OHMmYqGWDXiKwHl3AVygCGyO/KCh8CasV7wDTSY Z2MaODrGP2a1475cIc3DPL1C4+db5P1lwlaIsbGvSjvRc+7PjtOCzm3e5Dn+qDUn sCdeoZZTFHxowF1r/h/cFGulGuyUMaiL5hUw9kz6fs7ukPRaWdBw3/h6HQgGUZKz yVlj08qrr035d0WnWa3PTOE05FfV+x1onvXIVh+YLfC3IolM12vahdWAFRTHHW0n R377iZs9DRgw9Yzjkn//4yM7+0CRvf38BKV+dd+KRWl6ds1BuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFezZ2RKnN/kXBii9rIaqabTkyzgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iYTU3 MDNmYy1iMGUyLTRkZDMtYWJiYy03MWQwOGUxYzY3YzUvY2IyZmRlZjMtNjlkMy0z M2YxLWEyNzYtMGViZjBjMjIwZDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmE1NzAzZmMtYjBlMi00ZGQzLWFi YmMtNzFkMDhlMWM2N2M1L2JhNTcwM2ZjLWIwZTItNGRkMy1hYmJjLTcxZDA4ZTFj NjdjNS5jcmwwHwYDVR0jBBgwFoAUkaMiLb6LWI+0+yzNjJHeFoQNiAswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iYTU3MDNmYy1iMGUyLTRkZDMtYWJiYy03MWQw OGUxYzY3YzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK2QsTW+Ae+gQajjdPAz8W6QG52vSWMUNGXzxQi9vZMggU36BBB9cBtm /6r0w4D6zrdWV61aqCWB1071oQZAftupZrYGp7900opyEqmG6AR/Ph8jomHp7gCZ HP5U91RoAew/my/x1Jvw7fovXXwhZKhyfzYnV7TkefOSULZv5Eghx6ThrFb34FZF n5315n8OOB7sNK1fF5Tbtwx5qCGCSuHxaVI1loU+9+Zi6mRI+nq1vfqzvpB3bvHb CDQZiHyoR/AiUwLyxLYrMoFdP/BUHsMfXq1Q6djxg/G6orC4L9TwA25ZceGGfcOt MUqH7uCcz9YCy8SWZNIyBd/mvJp2TO8= -----END CERTIFICATE-----Generated at Tue Jul 1 11:37:59 2025 by rpki-client