$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/b803a2aa-249f-369e-b316-88947c4204b0.roa File: b803a2aa-249f-369e-b316-88947c4204b0.roa (raw, json) Hash identifier: bHlWfrRGiAoSja0Rv+l1dhoyUBNkMRKoMWQ7SN4rdBY= Subject key identifier: A5:4D:FB:55:10:12:9E:64:79:ED:25:3C:D4:5C:1F:1C:C8:43:4D:52 Certificate issuer: /CN=ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f Certificate serial: 010D0C9F4328584D300A41BA23766FD4D5B98280 Authority key identifier: 83:88:B3:BC:24:88:CC:99:8F:F1:E8:77:05:FB:2A:C3:E9:A0:B3:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/b803a2aa-249f-369e-b316-88947c4204b0.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 16698 IP address blocks: 199.21.192.0/21 maxlen: 21 199.21.192.0/22 maxlen: 22 199.21.192.0/24 maxlen: 24 199.21.193.0/24 maxlen: 24 199.21.194.0/24 maxlen: 24 199.21.195.0/24 maxlen: 24 199.21.196.0/23 maxlen: 23 199.21.196.0/24 maxlen: 24 199.21.197.0/24 maxlen: 24 199.21.198.0/24 maxlen: 24 199.21.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:41:ba:23:76:6f:d4:d5:b9:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=825cfe23-b081-414c-8b52-3fcab24a6c37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f3:92:41:53:da:af:7e:9c:5c:9e:39:96:54: d0:a0:8b:b4:29:3f:09:7d:87:aa:a9:af:e7:84:4f: 6d:5f:a6:c6:20:3d:12:c4:0a:56:b1:65:10:9e:ff: a0:04:9c:88:ea:50:f8:2d:5b:d2:de:91:57:c2:ae: d2:9b:d0:86:22:48:27:4f:53:62:47:19:e6:da:a9: 06:c3:c5:51:78:72:20:af:93:84:9e:74:5b:88:b5: b0:b0:fe:c7:68:74:9a:63:03:00:33:d8:39:86:b3: 08:94:83:f0:2c:09:4d:b9:48:7c:30:0a:87:3b:f5: e4:75:8c:45:ef:26:06:13:dc:ba:4e:78:9b:56:05: 06:45:4b:b7:1a:4f:02:c8:9f:96:07:67:02:c4:c2: c6:75:32:95:c5:b2:fc:22:b8:ab:b4:0a:43:4f:a6: 80:69:46:ef:4f:c1:e2:67:72:ce:02:db:bf:cb:53: 71:46:d0:2f:ed:4f:c1:6e:ec:2c:e7:c8:b6:3f:80: 46:7d:be:8d:c1:5c:e4:ba:99:c8:54:db:61:d2:4e: dd:2c:09:22:0e:f9:ce:95:f5:13:c4:e4:3f:cb:8f: 02:cd:12:0b:60:00:d5:0f:8f:3f:24:62:34:0a:d6: e0:25:8c:a2:4f:be:24:dc:9e:ca:21:60:2a:9f:fa: 3f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:4D:FB:55:10:12:9E:64:79:ED:25:3C:D4:5C:1F:1C:C8:43:4D:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/b803a2aa-249f-369e-b316-88947c4204b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.crl X509v3 Authority Key Identifier: keyid:83:88:B3:BC:24:88:CC:99:8F:F1:E8:77:05:FB:2A:C3:E9:A0:B3:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.cer sbgp-ipAddrBlock: critical IPv4: 199.21.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:3a:36:33:d1:56:0e:67:a0:c2:c3:17:d2:8b:1e:61:ba:f8: da:d2:1b:3d:47:c5:8a:45:68:d3:dd:17:b0:cc:3e:15:87:0b: a5:56:5c:19:a0:50:14:e9:a0:d7:9e:3d:0b:a9:28:d1:b6:17: 94:07:5e:53:ac:20:39:b3:03:9a:7a:23:26:68:f1:18:c4:1c: e2:6a:b9:e5:36:9d:ed:b7:65:7b:2e:8b:0f:a8:ed:09:41:ad: 0e:62:35:30:63:a6:58:25:6a:cd:ae:21:aa:41:ef:74:a0:e2: 4b:67:3a:71:75:8a:5c:66:55:52:cf:8d:ef:28:12:99:59:bd: 44:4c:1c:55:26:0c:0f:53:f5:ba:d6:69:3e:77:7a:03:78:5d: ae:2c:a0:f2:4b:d0:e2:0a:4f:2d:fa:ce:2b:84:19:22:d2:db: bf:0f:bc:b9:ff:c5:ea:17:bf:63:3d:af:a1:62:9b:c6:b7:59: 27:65:82:b4:79:dc:55:61:45:23:e1:16:52:c2:8e:39:80:ec: 68:37:b2:90:83:80:84:c2:a5:92:4a:7e:95:95:30:13:3c:e2: f5:47:78:cb:e7:a9:0f:05:ac:ba:05:2b:4a:07:c0:d1:6c:a0: e5:35:3a:b3:37:f1:83:b8:b5:23:04:f1:60:b9:c5:61:7d:c3: ba:fb:dc:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCkG6I3Zv1NW5goAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE4YzFkNDEtMmM3Yy00OTA1LThkZWItYzZhNTBlMWQ3 ZTJmMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ODI1Y2ZlMjMtYjA4MS00MTRjLThiNTItM2ZjYWIyNGE2YzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvOSQVPar36cXJ45llTQoIu0KT8JfYeqqa/n hE9tX6bGID0SxApWsWUQnv+gBJyI6lD4LVvS3pFXwq7Sm9CGIkgnT1NiRxnm2qkG w8VReHIgr5OEnnRbiLWwsP7HaHSaYwMAM9g5hrMIlIPwLAlNuUh8MAqHO/XkdYxF 7yYGE9y6TnibVgUGRUu3Gk8CyJ+WB2cCxMLGdTKVxbL8IrirtApDT6aAaUbvT8Hi Z3LOAtu/y1NxRtAv7U/Bbuws58i2P4BGfb6NwVzkupnIVNth0k7dLAkiDvnOlfUT xOQ/y48CzRILYADVD48/JGI0CtbgJYyiT74k3J7KIWAqn/o/pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVN+1UQEp5kee0lPNRcHxzIQ01SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iYThj MWQ0MS0yYzdjLTQ5MDUtOGRlYi1jNmE1MGUxZDdlMmYvYjgwM2EyYWEtMjQ5Zi0z NjllLWIzMTYtODg5NDdjNDIwNGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYmE4YzFkNDEtMmM3Yy00OTA1LThk ZWItYzZhNTBlMWQ3ZTJmL2JhOGMxZDQxLTJjN2MtNDkwNS04ZGViLWM2YTUwZTFk N2UyZi5jcmwwHwYDVR0jBBgwFoAUg4izvCSIzJmP8eh3Bfsqw+mgs84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iYThjMWQ0MS0yYzdjLTQ5MDUtOGRlYi1jNmE1 MGUxZDdlMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxxXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACc6NjPRVg5noMLDF9KLHmG6+NrSGz1HxYpFaNPdF7DMPhWHC6VWXBmg UBTpoNeePQupKNG2F5QHXlOsIDmzA5p6IyZo8RjEHOJqueU2ne23ZXsuiw+o7QlB rQ5iNTBjplglas2uIapB73Sg4ktnOnF1ilxmVVLPje8oEplZvURMHFUmDA9T9brW aT53egN4Xa4soPJL0OIKTy36ziuEGSLS278PvLn/xeoXv2M9r6Fim8a3WSdlgrR5 3FVhRSPhFlLCjjmA7Gg3spCDgITCpZJKfpWVMBM84vVHeMvnqQ8FrLoFK0oHwNFs oOU1OrM38YO4tSME8WC5xWF9w7r73CA= -----END CERTIFICATE-----Generated at Thu Mar 26 17:07:03 2026 by rpki-client