$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/b803a2aa-249f-369e-b316-88947c4204b0.roa File: b803a2aa-249f-369e-b316-88947c4204b0.roa (raw, json) Hash identifier: kV9cxpGFWnSriZ7F7TqO4xTYQ1disaXFkhjQ6gbjSFY= Subject key identifier: 70:AA:58:B3:A5:34:2E:9B:32:48:82:76:49:AD:16:A1:0C:EF:7E:F6 Certificate issuer: /CN=ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f Certificate serial: 010D0C9F4328584A8DD5F3DDB3FE857EB7813600 Authority key identifier: 83:88:B3:BC:24:88:CC:99:8F:F1:E8:77:05:FB:2A:C3:E9:A0:B3:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/b803a2aa-249f-369e-b316-88947c4204b0.roa Signing time: Fri 18 Jul 2025 01:00:48 +0000 ROA not before: Fri 18 Jul 2025 01:00:48 +0000 ROA not after: Thu 16 Oct 2025 01:00:48 +0000 asID: 16698 IP address blocks: 199.21.192.0/21 maxlen: 21 199.21.192.0/22 maxlen: 22 199.21.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8d:d5:f3:dd:b3:fe:85:7e:b7:81:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f Validity Not Before: Jul 18 01:00:48 2025 GMT Not After : Oct 16 01:00:48 2025 GMT Subject: CN=69b7b3e2-110c-4d76-925d-d088445f520a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:16:c2:44:0d:f9:0f:53:ed:14:2b:2d:30:17: ec:8e:f3:e6:a7:b9:d7:b4:76:bc:51:96:2c:db:71: a7:8f:8b:e4:55:52:45:12:11:d3:1d:2c:44:15:61: 14:6a:8f:6a:09:5d:51:8a:61:e5:1b:6f:78:d7:6a: a6:0e:fb:3c:a3:d8:e5:ee:05:f7:d9:f6:cc:59:33: 71:f9:b6:94:15:a6:62:ba:25:27:12:18:81:76:40: 7c:54:0d:be:0f:65:e0:f0:86:25:15:6d:92:2f:d6: ff:03:2a:79:ec:93:62:4a:58:29:f7:0f:46:b1:bb: 8e:25:db:03:70:21:b5:e0:16:07:f9:18:f0:90:08: 0a:cd:75:67:4a:74:12:5d:32:e7:21:6e:58:7c:d6: ce:ae:c7:51:e1:ba:f6:d3:0e:1d:d8:b1:2d:26:3d: 7e:4b:c1:ca:a6:d5:b4:a2:ca:4a:2b:2e:b0:95:09: 8c:be:05:44:a1:57:9a:1a:57:18:04:c8:32:03:5a: 52:59:2a:57:68:9f:e2:93:9c:a4:d9:47:a4:88:d7: 5e:23:64:02:88:ea:89:30:ac:8f:17:44:99:87:76: 2a:54:17:e1:1c:6e:61:3f:cf:a5:bd:76:02:35:db: 2a:eb:b9:02:4d:61:44:ba:34:20:e0:40:b6:3a:9f: fc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:AA:58:B3:A5:34:2E:9B:32:48:82:76:49:AD:16:A1:0C:EF:7E:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/b803a2aa-249f-369e-b316-88947c4204b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.crl X509v3 Authority Key Identifier: keyid:83:88:B3:BC:24:88:CC:99:8F:F1:E8:77:05:FB:2A:C3:E9:A0:B3:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.cer sbgp-ipAddrBlock: critical IPv4: 199.21.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:ae:e9:bb:95:24:89:19:f3:66:e8:38:38:3a:bd:7c:e6:30: a9:9e:a4:94:da:18:9c:c4:aa:6b:d8:70:f5:07:9a:db:6c:36: 13:fe:75:9c:f5:53:ee:32:6f:0a:df:ee:ca:d7:13:6e:4d:b4: 5c:7d:be:b0:b1:73:9b:93:0a:7f:b0:83:55:25:c6:91:a1:6e: e7:dc:58:a1:26:14:14:61:a7:f8:da:fb:3a:18:1a:be:4d:6f: e1:87:29:26:cb:a0:b4:f8:e0:6d:b9:06:73:d5:47:76:c6:97: 6b:d7:03:39:8a:ed:13:47:5d:bb:0c:c1:7d:8a:f9:ae:b0:45: a2:8e:cf:13:ae:01:1d:4a:05:c5:ac:56:4f:d1:d2:d6:bb:ff: 13:73:6c:54:0f:a4:cb:c3:92:a8:a9:b4:2e:2a:81:ed:cc:01: 67:e0:cc:8a:77:38:7f:d2:bd:b4:f6:94:e9:f6:bf:86:e0:80: 11:d9:c6:04:86:92:8c:e1:1e:cd:16:ae:f6:f6:7d:b8:7c:b7: 33:71:78:ea:5d:e8:dd:1f:ac:65:7f:ac:2f:e9:44:66:98:5f: 1b:bd:93:2a:79:1c:bd:b0:d1:8c:f3:68:ec:69:f3:05:d6:4a: d6:f5:8f:e8:e0:d4:92:3b:97:00:70:fa:d7:3f:5e:45:c2:9c: 40:13:3b:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqN1fPds/6FfreBNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE4YzFkNDEtMmM3Yy00OTA1LThkZWItYzZhNTBlMWQ3 ZTJmMB4XDTI1MDcxODAxMDA0OFoXDTI1MTAxNjAxMDA0OFowLzEtMCsGA1UEAxMk NjliN2IzZTItMTEwYy00ZDc2LTkyNWQtZDA4ODQ0NWY1MjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhbCRA35D1PtFCstMBfsjvPmp7nXtHa8UZYs 23Gnj4vkVVJFEhHTHSxEFWEUao9qCV1RimHlG29412qmDvs8o9jl7gX32fbMWTNx +baUFaZiuiUnEhiBdkB8VA2+D2Xg8IYlFW2SL9b/Ayp57JNiSlgp9w9GsbuOJdsD cCG14BYH+RjwkAgKzXVnSnQSXTLnIW5YfNbOrsdR4br20w4d2LEtJj1+S8HKptW0 ospKKy6wlQmMvgVEoVeaGlcYBMgyA1pSWSpXaJ/ik5yk2UekiNdeI2QCiOqJMKyP F0SZh3YqVBfhHG5hP8+lvXYCNdsq67kCTWFEujQg4EC2Op/8ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCqWLOlNC6bMkiCdkmtFqEM7372MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iYThj MWQ0MS0yYzdjLTQ5MDUtOGRlYi1jNmE1MGUxZDdlMmYvYjgwM2EyYWEtMjQ5Zi0z NjllLWIzMTYtODg5NDdjNDIwNGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYmE4YzFkNDEtMmM3Yy00OTA1LThk ZWItYzZhNTBlMWQ3ZTJmL2JhOGMxZDQxLTJjN2MtNDkwNS04ZGViLWM2YTUwZTFk N2UyZi5jcmwwHwYDVR0jBBgwFoAUg4izvCSIzJmP8eh3Bfsqw+mgs84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iYThjMWQ0MS0yYzdjLTQ5MDUtOGRlYi1jNmE1 MGUxZDdlMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxxXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGu6buVJIkZ82boODg6vXzmMKmepJTaGJzEqmvYcPUHmttsNhP+dZz1 U+4ybwrf7srXE25NtFx9vrCxc5uTCn+wg1UlxpGhbufcWKEmFBRhp/ja+zoYGr5N b+GHKSbLoLT44G25BnPVR3bGl2vXAzmK7RNHXbsMwX2K+a6wRaKOzxOuAR1KBcWs Vk/R0ta7/xNzbFQPpMvDkqiptC4qge3MAWfgzIp3OH/SvbT2lOn2v4bggBHZxgSG kozhHs0Wrvb2fbh8tzNxeOpd6N0frGV/rC/pRGaYXxu9kyp5HL2w0YzzaOxp8wXW Stb1j+jg1JI7lwBw+tc/XkXCnEATO+Q= -----END CERTIFICATE-----Generated at Sat Aug 9 20:43:26 2025 by rpki-client