$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/b803a2aa-249f-369e-b316-88947c4204b0.roa File: b803a2aa-249f-369e-b316-88947c4204b0.roa (raw, json) Hash identifier: kk4QmS8KcSsmaAGjfjLv3dP2mYzhGitbGhJu/AqGxx8= Subject key identifier: DF:92:65:C5:67:A7:12:A8:87:52:09:0E:07:3B:9E:4F:0C:E6:1A:38 Certificate issuer: /CN=ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f Certificate serial: 010D0C9F4328584A51EF2B60908717357B9321C0 Authority key identifier: 83:88:B3:BC:24:88:CC:99:8F:F1:E8:77:05:FB:2A:C3:E9:A0:B3:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/b803a2aa-249f-369e-b316-88947c4204b0.roa Signing time: Mon 28 Apr 2025 14:28:43 +0000 ROA not before: Mon 28 Apr 2025 14:28:43 +0000 ROA not after: Sun 27 Jul 2025 14:28:43 +0000 asID: 16698 IP address blocks: 199.21.192.0/21 maxlen: 21 199.21.192.0/22 maxlen: 22 199.21.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:51:ef:2b:60:90:87:17:35:7b:93:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f Validity Not Before: Apr 28 14:28:43 2025 GMT Not After : Jul 27 14:28:43 2025 GMT Subject: CN=5c5c059d-8948-4381-bf47-e3db63282af9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f4:9e:da:94:7c:92:a1:25:72:b1:77:4f:91: 07:fb:3f:6a:5f:5a:29:9b:9f:d1:9c:30:52:18:d1: ce:cc:8b:fb:c5:be:93:89:b4:e1:2e:bc:58:b9:d4: df:d6:3c:8a:5d:aa:71:b1:c5:e5:b9:4b:f7:7d:3c: 1a:e8:83:02:69:d8:d6:6f:0a:76:88:66:18:8c:7f: b6:ee:64:bb:50:87:1a:29:b0:58:cf:b7:ae:92:55: a6:f6:f9:0f:1b:03:59:e6:1a:60:5f:e5:57:6b:df: 96:96:e2:79:5e:d3:3a:19:56:29:9b:29:de:ed:85: 77:3e:2f:c5:9d:10:05:9a:75:2d:f9:8b:17:6d:f3: 5c:02:09:f3:25:d2:f2:94:14:54:b9:33:94:e3:2e: c0:33:3a:4f:0d:11:08:a8:5f:c1:85:99:9c:c1:64: 88:f4:bb:b1:5e:d9:c4:9e:2d:20:53:ba:b3:37:76: ff:f7:f3:b7:9f:0e:fe:2e:84:40:b5:b9:ff:f6:b0: 57:e3:9f:9a:19:38:fc:3a:28:60:7d:ef:4c:f1:32: 88:71:6e:4c:16:d7:32:ac:a7:69:ed:74:14:18:27: b0:d2:7d:b4:d5:66:61:e3:30:fb:62:31:45:58:8d: 9f:ee:c9:d7:71:52:72:d3:91:f7:81:d5:d6:54:36: 8e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:92:65:C5:67:A7:12:A8:87:52:09:0E:07:3B:9E:4F:0C:E6:1A:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/b803a2aa-249f-369e-b316-88947c4204b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.crl X509v3 Authority Key Identifier: keyid:83:88:B3:BC:24:88:CC:99:8F:F1:E8:77:05:FB:2A:C3:E9:A0:B3:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.cer sbgp-ipAddrBlock: critical IPv4: 199.21.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:80:1b:a0:ef:4c:dc:6a:a4:83:01:be:5a:ff:9b:43:14:21: 2c:a6:c6:66:39:b0:e8:fb:a4:13:10:7c:21:98:8e:71:5d:5a: 72:db:00:25:f5:e4:20:49:92:f4:d2:69:a7:04:fc:b7:29:77: 87:3d:db:6d:ed:83:f4:cb:b0:d0:1c:4a:6d:15:31:cc:63:c7: 17:3f:f9:e9:ca:9f:12:d4:00:07:f7:a5:1d:da:6d:62:bb:c6: 94:c9:ca:a5:f2:20:1e:f7:ba:01:08:0a:03:5e:be:59:6f:fe: b4:ca:de:7c:3c:f6:c4:1c:c1:99:f3:75:c1:b7:79:d0:a3:f8: 00:d5:ea:85:ec:03:05:77:90:fd:f0:92:90:8c:51:df:49:e4: 53:aa:f4:5c:84:84:e5:74:6c:dc:1d:a3:5d:5e:be:01:d5:f3: f0:28:95:0b:00:9d:4f:aa:7f:e7:71:ae:04:19:ca:d1:05:fb: 88:9c:b8:46:36:8c:92:13:83:9e:a5:01:4c:0f:d3:93:e4:1c: 96:48:15:4d:5e:ad:a6:f7:b3:84:8b:82:99:94:40:d3:fa:d2: d3:2e:8e:4f:fb:76:8c:d7:1e:d4:c4:26:5c:ec:cc:11:d9:1a: e7:75:82:b6:b4:f9:1e:a2:10:b0:1d:cd:7c:60:7a:d4:66:c5: 40:48:50:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpR7ytgkIcXNXuTIcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE4YzFkNDEtMmM3Yy00OTA1LThkZWItYzZhNTBlMWQ3 ZTJmMB4XDTI1MDQyODE0Mjg0M1oXDTI1MDcyNzE0Mjg0M1owLzEtMCsGA1UEAxMk NWM1YzA1OWQtODk0OC00MzgxLWJmNDctZTNkYjYzMjgyYWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPSe2pR8kqElcrF3T5EH+z9qX1opm5/RnDBS GNHOzIv7xb6TibThLrxYudTf1jyKXapxscXluUv3fTwa6IMCadjWbwp2iGYYjH+2 7mS7UIcaKbBYz7euklWm9vkPGwNZ5hpgX+VXa9+WluJ5XtM6GVYpmyne7YV3Pi/F nRAFmnUt+YsXbfNcAgnzJdLylBRUuTOU4y7AMzpPDREIqF/BhZmcwWSI9LuxXtnE ni0gU7qzN3b/9/O3nw7+LoRAtbn/9rBX45+aGTj8Oihgfe9M8TKIcW5MFtcyrKdp 7XQUGCew0n201WZh4zD7YjFFWI2f7snXcVJy05H3gdXWVDaOawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+SZcVnpxKoh1IJDgc7nk8M5ho4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iYThj MWQ0MS0yYzdjLTQ5MDUtOGRlYi1jNmE1MGUxZDdlMmYvYjgwM2EyYWEtMjQ5Zi0z NjllLWIzMTYtODg5NDdjNDIwNGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYmE4YzFkNDEtMmM3Yy00OTA1LThk ZWItYzZhNTBlMWQ3ZTJmL2JhOGMxZDQxLTJjN2MtNDkwNS04ZGViLWM2YTUwZTFk N2UyZi5jcmwwHwYDVR0jBBgwFoAUg4izvCSIzJmP8eh3Bfsqw+mgs84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iYThjMWQ0MS0yYzdjLTQ5MDUtOGRlYi1jNmE1 MGUxZDdlMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxxXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL+AG6DvTNxqpIMBvlr/m0MUISymxmY5sOj7pBMQfCGYjnFdWnLbACX1 5CBJkvTSaacE/Lcpd4c9223tg/TLsNAcSm0VMcxjxxc/+enKnxLUAAf3pR3abWK7 xpTJyqXyIB73ugEICgNevllv/rTK3nw89sQcwZnzdcG3edCj+ADV6oXsAwV3kP3w kpCMUd9J5FOq9FyEhOV0bNwdo11evgHV8/AolQsAnU+qf+dxrgQZytEF+4icuEY2 jJITg56lAUwP05PkHJZIFU1erab3s4SLgpmUQNP60tMujk/7dozXHtTEJlzszBHZ Gud1gra0+R6iELAdzXxgetRmxUBIUHM= -----END CERTIFICATE-----Generated at Thu Jul 3 23:06:05 2025 by rpki-client