$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/0227bc2a-58f7-3d56-80ba-22ad20d7e9da.roa File: 0227bc2a-58f7-3d56-80ba-22ad20d7e9da.roa (raw, json) Hash identifier: ztOlXaGbiYB0hLq4sJROfpkIcYLaosppd3Xdl/q3xfM= Subject key identifier: 3F:33:64:FC:87:AB:DC:4D:AA:01:96:DB:09:60:FC:87:4F:9F:58:F2 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584AF52147A94F767095528E8E00 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/0227bc2a-58f7-3d56-80ba-22ad20d7e9da.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 33392 IP address blocks: 208.103.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:47:a9:4f:76:70:95:52:8e:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=3bb18fef-6fd4-46b6-a00a-9fbeed1466df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:07:7a:4a:01:68:f4:63:aa:35:54:70:19:6f: d0:e7:71:96:16:d9:58:3d:c2:c2:25:cf:75:07:c6: 3f:5b:57:e5:8e:d2:0a:c1:1c:fe:a6:46:2c:d3:e6: 1e:01:9a:44:da:4c:17:90:84:70:fe:82:0b:c3:cd: 5b:ca:78:7e:fa:7f:b5:c1:d7:3d:87:1d:d1:a0:6b: d0:38:b7:3c:0b:53:06:18:ba:4f:03:0e:7d:29:2d: 23:33:1f:26:a9:fb:8b:ab:53:38:cf:27:19:4d:62: 15:8d:08:a7:5d:37:ec:be:15:21:d3:a2:41:e7:e3: 06:8b:69:56:22:16:36:58:dc:66:2d:e3:ad:67:b3: 29:79:13:95:5a:12:e1:69:b5:c6:0b:72:45:c7:61: ca:c0:5c:02:73:7e:51:2c:17:49:80:ea:5b:da:8a: e8:88:0f:a8:c4:01:44:5f:6e:d8:76:cc:0c:a9:69: 49:52:5f:73:55:0c:f8:bd:ed:63:ba:a4:39:e6:7a: 2d:17:e1:71:c4:8f:27:7b:8e:06:87:22:6c:c0:33: 85:ab:d2:01:5a:a5:ac:e0:28:26:e6:3f:9a:6a:9c: 33:ef:7a:46:8b:23:4c:6a:9d:c5:0f:36:6e:b8:7e: 70:bb:1b:8f:d5:bd:a3:c6:20:06:81:8a:53:d3:a3: 35:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:33:64:FC:87:AB:DC:4D:AA:01:96:DB:09:60:FC:87:4F:9F:58:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/0227bc2a-58f7-3d56-80ba-22ad20d7e9da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 208.103.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:44:e0:b1:af:6f:50:d7:a5:9d:36:ef:ac:3e:df:00:46:55: a4:17:ee:92:f9:37:0a:6f:ce:09:ac:2e:08:36:d6:74:4c:8a: 64:5b:fb:db:dc:30:4e:d4:8f:c9:c8:bb:04:26:c7:de:49:1a: 8a:64:6f:69:5e:1f:79:40:35:d4:d7:80:99:fc:0e:5c:82:b2: 5d:c2:a7:83:e6:07:27:c8:f1:23:fc:88:9a:c2:80:95:82:27: 5a:57:10:06:b9:b1:41:7f:5e:56:6b:dc:55:9d:89:41:c0:23: ba:61:52:78:aa:38:e1:70:28:92:e0:24:02:06:1a:fa:26:44: c2:33:5e:ae:06:0b:ee:91:ef:10:08:9a:9c:15:05:3d:a6:70: e6:ab:58:c6:e8:1c:66:77:dd:58:a3:c5:85:51:1c:c4:66:d0: 8b:df:f7:2f:e8:48:00:5f:05:97:a3:f9:c0:71:dd:ce:10:0a: 2e:f0:2c:94:e5:5c:b3:8f:4e:10:f0:06:5e:fc:08:bb:10:4c: 11:c2:39:89:e2:f0:fd:7e:e6:13:b8:e6:ef:f0:63:86:be:28: c5:5d:e9:f6:44:b7:3d:44:38:97:da:f6:de:f1:c1:7f:8b:09: f0:db:06:d9:a3:d6:25:d9:13:39:10:9b:4b:0f:9d:9b:e6:b2: 99:69:0c:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IUepT3ZwlVKOjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk M2JiMThmZWYtNmZkNC00NmI2LWEwMGEtOWZiZWVkMTQ2NmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAd6SgFo9GOqNVRwGW/Q53GWFtlYPcLCJc91 B8Y/W1fljtIKwRz+pkYs0+YeAZpE2kwXkIRw/oILw81bynh++n+1wdc9hx3RoGvQ OLc8C1MGGLpPAw59KS0jMx8mqfuLq1M4zycZTWIVjQinXTfsvhUh06JB5+MGi2lW IhY2WNxmLeOtZ7MpeROVWhLhabXGC3JFx2HKwFwCc35RLBdJgOpb2oroiA+oxAFE X27YdswMqWlJUl9zVQz4ve1juqQ55notF+FxxI8ne44GhyJswDOFq9IBWqWs4Cgm 5j+aapwz73pGiyNMap3FDzZuuH5wuxuP1b2jxiAGgYpT06M1+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8zZPyHq9xNqgGW2wlg/IdPn1jyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvMDIyN2JjMmEtNThmNy0z ZDU2LTgwYmEtMjJhZDIwZDdlOWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0GeVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNE4LGvb1DXpZ0276w+3wBGVaQX7pL5NwpvzgmsLgg21nRMimRb+9vc ME7Uj8nIuwQmx95JGopkb2leH3lANdTXgJn8DlyCsl3Cp4PmByfI8SP8iJrCgJWC J1pXEAa5sUF/XlZr3FWdiUHAI7phUniqOOFwKJLgJAIGGvomRMIzXq4GC+6R7xAI mpwVBT2mcOarWMboHGZ33VijxYVRHMRm0Ivf9y/oSABfBZej+cBx3c4QCi7wLJTl XLOPThDwBl78CLsQTBHCOYni8P1+5hO45u/wY4a+KMVd6fZEtz1EOJfa9t7xwX+L CfDbBtmj1iXZEzkQm0sPnZvmsplpDEA= -----END CERTIFICATE-----Generated at Sun Aug 24 02:54:57 2025 by rpki-client