$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/cb2fdef3-69d3-33f1-a276-0ebf0c220d49.roa File: cb2fdef3-69d3-33f1-a276-0ebf0c220d49.roa (raw, json) Hash identifier: NswHr+L2LhhNsJKRAjUgkLg0k3KthTDzuYnPVK+STXE= Subject key identifier: AD:28:AD:AA:81:C3:BF:CB:01:AC:AA:3D:27:5E:80:5A:6B:29:93:20 Certificate issuer: /CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5 Certificate serial: 010D0C9F4328584AC5AB8DD444303065AD3B41C0 Authority key identifier: 91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/cb2fdef3-69d3-33f1-a276-0ebf0c220d49.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 32762 IP address blocks: 198.96.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:8d:d4:44:30:30:65:ad:3b:41:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5 Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=141fd06e-51bb-4d9c-b4c5-db7b74acec8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:36:6f:28:9d:84:7b:f6:06:67:ba:d5:b5:47: 99:84:af:e3:49:b0:00:e4:a3:4e:14:09:19:5b:70: 14:09:c9:93:c5:e4:0d:de:2b:19:8c:82:8f:2b:ad: b5:fe:d6:ef:2e:b4:42:38:46:c7:02:0b:66:1f:a3: ed:a3:be:9b:6e:18:03:21:f9:30:da:3e:f7:e6:f3: 45:f0:d4:28:91:df:bd:51:4e:be:ad:e3:28:e9:c3: bc:a6:c5:0d:7f:86:1c:00:2f:28:fc:ec:bb:15:9b: 0d:21:a5:5c:ba:d9:29:04:74:dc:ec:45:89:80:42: 53:cd:bd:56:94:d7:f9:4d:ba:d4:34:20:e5:fa:59: 01:d7:7a:23:57:ad:1d:2d:4f:9c:d8:88:08:46:48: 0a:a6:ba:32:33:dd:7d:58:dd:06:56:ef:cd:fb:4e: 56:59:ea:46:96:84:79:6b:94:d0:c4:7f:64:76:e2: 38:ed:95:81:95:f7:37:8d:2a:87:5a:66:e6:36:3f: 78:2f:8f:80:e7:f2:e2:dd:46:d0:58:74:e1:5a:10: 1d:7e:c1:a0:1c:4d:1c:02:98:e0:fd:1a:56:6e:86: a0:5f:12:24:71:f4:f4:4a:bc:f4:a0:36:f8:d6:17: 7e:b5:21:82:64:bd:76:aa:06:7a:8b:3d:f4:73:f6: c8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:28:AD:AA:81:C3:BF:CB:01:AC:AA:3D:27:5E:80:5A:6B:29:93:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/cb2fdef3-69d3-33f1-a276-0ebf0c220d49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.crl X509v3 Authority Key Identifier: keyid:91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer sbgp-ipAddrBlock: critical IPv4: 198.96.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:ac:87:35:49:a7:b7:e9:e5:b2:f2:a9:b2:a0:9e:2a:3d:f6: 82:af:52:94:9d:75:79:be:5b:dc:36:43:a1:82:a3:b1:a3:a2: cb:cc:e9:e7:01:0f:f6:84:58:19:59:c9:91:61:a8:75:1b:4d: 6f:c3:6f:14:29:27:94:47:d3:47:1d:2b:13:c1:74:73:15:00: 98:2e:69:5d:4a:c0:49:a4:8e:db:43:ae:c0:8e:8c:65:fa:bd: 96:93:e3:87:37:2a:4a:c2:2f:8d:8c:a1:43:a2:1f:8a:4b:0d: c0:03:d2:4f:fd:39:02:e5:bb:50:91:41:dc:5d:43:a0:e4:61: 5b:05:ed:4d:d4:f7:27:23:1f:d9:36:b0:10:92:ca:81:9b:de: a4:5f:da:87:a3:a6:48:3d:db:45:f4:09:ae:26:94:91:0b:71: 79:82:77:a2:1a:b4:f1:22:c8:86:c1:a2:a9:7c:8e:e6:84:2a: 44:17:2c:83:99:05:81:0c:dd:ba:7f:b6:07:38:74:71:1b:ac: 59:11:47:ed:32:36:ff:03:e2:0d:20:b3:58:d2:14:fc:11:54: e4:35:b7:9f:b2:62:a2:22:d7:ab:5e:5f:dd:95:9f:a2:ba:4e: fa:e4:09:63:6d:01:8c:c1:55:50:35:04:08:3f:77:89:9b:a4: d2:30:b4:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq43URDAwZa07QcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE1NzAzZmMtYjBlMi00ZGQzLWFiYmMtNzFkMDhlMWM2 N2M1MB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk MTQxZmQwNmUtNTFiYi00ZDljLWI0YzUtZGI3Yjc0YWNlYzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDZvKJ2Ee/YGZ7rVtUeZhK/jSbAA5KNOFAkZ W3AUCcmTxeQN3isZjIKPK621/tbvLrRCOEbHAgtmH6Pto76bbhgDIfkw2j735vNF 8NQokd+9UU6+reMo6cO8psUNf4YcAC8o/Oy7FZsNIaVcutkpBHTc7EWJgEJTzb1W lNf5TbrUNCDl+lkB13ojV60dLU+c2IgIRkgKproyM919WN0GVu/N+05WWepGloR5 a5TQxH9kduI47ZWBlfc3jSqHWmbmNj94L4+A5/Li3UbQWHThWhAdfsGgHE0cApjg /RpWboagXxIkcfT0Srz0oDb41hd+tSGCZL12qgZ6iz30c/bIvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0oraqBw7/LAayqPSdegFprKZMgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iYTU3 MDNmYy1iMGUyLTRkZDMtYWJiYy03MWQwOGUxYzY3YzUvY2IyZmRlZjMtNjlkMy0z M2YxLWEyNzYtMGViZjBjMjIwZDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmE1NzAzZmMtYjBlMi00ZGQzLWFi YmMtNzFkMDhlMWM2N2M1L2JhNTcwM2ZjLWIwZTItNGRkMy1hYmJjLTcxZDA4ZTFj NjdjNS5jcmwwHwYDVR0jBBgwFoAUkaMiLb6LWI+0+yzNjJHeFoQNiAswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iYTU3MDNmYy1iMGUyLTRkZDMtYWJiYy03MWQw OGUxYzY3YzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICshzVJp7fp5bLyqbKgnio99oKvUpSddXm+W9w2Q6GCo7GjosvM6ecB D/aEWBlZyZFhqHUbTW/DbxQpJ5RH00cdKxPBdHMVAJguaV1KwEmkjttDrsCOjGX6 vZaT44c3KkrCL42MoUOiH4pLDcAD0k/9OQLlu1CRQdxdQ6DkYVsF7U3U9ycjH9k2 sBCSyoGb3qRf2oejpkg920X0Ca4mlJELcXmCd6IatPEiyIbBoql8juaEKkQXLIOZ BYEM3bp/tgc4dHEbrFkRR+0yNv8D4g0gs1jSFPwRVOQ1t5+yYqIi16teX92Vn6K6 TvrkCWNtAYzBVVA1BAg/d4mbpNIwtAQ= -----END CERTIFICATE-----Generated at Sun Aug 24 07:10:51 2025 by rpki-client