$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/b803a2aa-249f-369e-b316-88947c4204b0.roa File: b803a2aa-249f-369e-b316-88947c4204b0.roa (raw, json) Hash identifier: rXGC95hm5/TaE2KNVvGQm4QFMBPr9/zAA1LXiUFxjrI= Subject key identifier: F4:1C:A1:1D:B2:6F:0D:C0:68:F3:48:DD:3E:94:42:40:EF:5C:3D:F3 Certificate issuer: /CN=ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f Certificate serial: 010D0C9F43285849AD4582B2AD1E04E3C4B12300 Authority key identifier: 83:88:B3:BC:24:88:CC:99:8F:F1:E8:77:05:FB:2A:C3:E9:A0:B3:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/b803a2aa-249f-369e-b316-88947c4204b0.roa Signing time: Mon 28 Apr 2025 14:28:43 +0000 ROA not before: Mon 28 Apr 2025 14:28:43 +0000 ROA not after: Sun 27 Jul 2025 14:28:43 +0000 asID: 16698 IP address blocks: 199.21.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:45:82:b2:ad:1e:04:e3:c4:b1:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f Validity Not Before: Apr 28 14:28:43 2025 GMT Not After : Jul 27 14:28:43 2025 GMT Subject: CN=889537f3-ac9f-4310-bcf5-b5fb18f8a152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:50:aa:87:90:61:bb:94:5e:75:b2:a7:ca:5f: 6e:78:4c:9c:e3:2e:ef:0b:7d:29:90:e1:3a:bd:a9: 87:ed:d7:75:2c:4d:a5:31:23:47:7f:24:d7:3e:20: b3:7a:ea:08:2f:06:ba:7b:6f:f6:b3:2e:ab:85:5a: 48:7b:6f:7f:a1:1d:9a:a0:0e:56:5a:19:d5:4e:2b: f6:fa:30:c4:75:41:40:8f:97:ca:07:08:ca:65:4b: 8a:3a:12:c4:d3:87:09:fd:62:a1:c0:d6:20:59:3f: 9f:d0:51:98:5a:8c:42:a2:61:1a:bc:84:99:4b:c0: 7f:6a:a5:5d:f1:9c:f1:5b:6a:eb:17:a1:0e:c0:1b: 25:21:6a:3d:17:1d:2f:59:f9:ab:9f:90:54:45:7f: 5e:31:eb:31:88:03:93:da:f5:eb:a2:2d:0d:6d:08: 75:7f:ee:1c:68:fe:d9:48:a5:17:e7:66:47:e8:96: 87:d0:e0:84:fa:4d:4e:c4:ff:ad:4a:3d:79:0c:c9: 67:93:e2:a7:70:20:ec:02:b5:77:7d:ba:a0:41:47: f0:1f:0a:5b:50:8e:eb:c9:cf:1e:2c:eb:5a:8c:1b: 16:c3:42:63:1e:ef:a0:4e:95:6a:6a:08:17:d1:b6: ec:50:b4:a8:cb:7a:98:0b:2d:ef:22:e5:fb:b6:e2: 86:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:1C:A1:1D:B2:6F:0D:C0:68:F3:48:DD:3E:94:42:40:EF:5C:3D:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/b803a2aa-249f-369e-b316-88947c4204b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.crl X509v3 Authority Key Identifier: keyid:83:88:B3:BC:24:88:CC:99:8F:F1:E8:77:05:FB:2A:C3:E9:A0:B3:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.cer sbgp-ipAddrBlock: critical IPv4: 199.21.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:6d:03:11:04:2a:b5:46:cd:b8:76:5e:2a:47:8b:c8:30:79: c2:e2:5d:4b:4d:d7:b5:a2:63:da:cf:be:92:ad:f7:00:44:38: 57:8e:a6:1f:6a:07:e8:c9:07:ba:ac:2f:1c:0f:37:bb:b4:2c: 47:cc:3f:cc:2a:cb:e5:02:b4:9b:a8:98:ab:18:1f:4f:4b:29: e4:60:88:06:61:02:95:31:86:40:55:cf:67:45:f5:69:2f:9a: c2:cc:1e:a5:8e:87:23:3c:e2:70:6c:6e:47:e9:9e:1b:63:63: 0c:22:80:e4:44:0d:a9:3b:b9:62:9e:fd:02:72:9e:89:3e:59: 7e:f5:5f:4f:09:0e:3d:f3:dd:ed:aa:66:33:27:70:7e:8f:6a: 3e:60:ac:5e:4d:6a:a7:0e:0d:d3:f7:3e:71:53:20:f8:04:6c: bd:14:ea:92:fd:9c:5f:51:8f:39:6a:cf:97:72:ac:df:f8:81: 84:91:24:1a:51:00:35:f2:76:76:9c:c3:00:02:ae:74:eb:83: b0:54:30:7f:c0:ca:26:b3:ed:fd:1d:d6:f2:60:4e:87:c1:49: ae:77:42:5d:66:c6:e1:84:71:6d:91:78:32:42:6b:7b:f5:d3: d8:5f:67:e9:39:69:40:cc:67:69:04:ae:ac:87:b7:f3:fb:02: c5:97:00:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtRYKyrR4E48SxIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE4YzFkNDEtMmM3Yy00OTA1LThkZWItYzZhNTBlMWQ3 ZTJmMB4XDTI1MDQyODE0Mjg0M1oXDTI1MDcyNzE0Mjg0M1owLzEtMCsGA1UEAxMk ODg5NTM3ZjMtYWM5Zi00MzEwLWJjZjUtYjVmYjE4ZjhhMTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlCqh5Bhu5RedbKnyl9ueEyc4y7vC30pkOE6 vamH7dd1LE2lMSNHfyTXPiCzeuoILwa6e2/2sy6rhVpIe29/oR2aoA5WWhnVTiv2 +jDEdUFAj5fKBwjKZUuKOhLE04cJ/WKhwNYgWT+f0FGYWoxComEavISZS8B/aqVd 8ZzxW2rrF6EOwBslIWo9Fx0vWfmrn5BURX9eMesxiAOT2vXroi0NbQh1f+4caP7Z SKUX52ZH6JaH0OCE+k1OxP+tSj15DMlnk+KncCDsArV3fbqgQUfwHwpbUI7ryc8e LOtajBsWw0JjHu+gTpVqaggX0bbsULSoy3qYCy3vIuX7tuKG3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQcoR2ybw3AaPNI3T6UQkDvXD3zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iYThj MWQ0MS0yYzdjLTQ5MDUtOGRlYi1jNmE1MGUxZDdlMmYvYjgwM2EyYWEtMjQ5Zi0z NjllLWIzMTYtODg5NDdjNDIwNGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYmE4YzFkNDEtMmM3Yy00OTA1LThk ZWItYzZhNTBlMWQ3ZTJmL2JhOGMxZDQxLTJjN2MtNDkwNS04ZGViLWM2YTUwZTFk N2UyZi5jcmwwHwYDVR0jBBgwFoAUg4izvCSIzJmP8eh3Bfsqw+mgs84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iYThjMWQ0MS0yYzdjLTQ5MDUtOGRlYi1jNmE1 MGUxZDdlMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxxXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZtAxEEKrVGzbh2XipHi8gwecLiXUtN17WiY9rPvpKt9wBEOFeOph9q B+jJB7qsLxwPN7u0LEfMP8wqy+UCtJuomKsYH09LKeRgiAZhApUxhkBVz2dF9Wkv msLMHqWOhyM84nBsbkfpnhtjYwwigOREDak7uWKe/QJynok+WX71X08JDj3z3e2q ZjMncH6Paj5grF5NaqcODdP3PnFTIPgEbL0U6pL9nF9Rjzlqz5dyrN/4gYSRJBpR ADXydnacwwACrnTrg7BUMH/Ayiaz7f0d1vJgTofBSa53Ql1mxuGEcW2ReDJCa3v1 09hfZ+k5aUDMZ2kErqyHt/P7AsWXAJk= -----END CERTIFICATE-----Generated at Tue May 13 06:53:44 2025 by rpki-client