$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/0b1c3364-e87a-3b7d-af93-e0c89841b720.roa File: 0b1c3364-e87a-3b7d-af93-e0c89841b720.roa (raw, json) Hash identifier: K1ylvTNtIMUGh76HeZ+jLR6Ct41eUQVEXGkb6lzrTkI= Subject key identifier: E3:50:A1:24:63:E8:2D:9A:AD:48:13:44:0C:DE:91:05:F4:DD:6B:BA Certificate issuer: /CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5 Certificate serial: 010D0C9F4328584BA667A92CBAF7D20B452E20F0 Authority key identifier: 91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/0b1c3364-e87a-3b7d-af93-e0c89841b720.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 32762 IP address blocks: 198.96.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:a9:2c:ba:f7:d2:0b:45:2e:20:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=0ae60f93-c342-4a94-83a0-1ae1ddead697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:72:c2:97:6a:ef:ae:6c:82:b9:14:93:0c:13: 1d:b3:de:4b:1b:78:c1:30:24:c6:f8:b0:ef:ff:e8: 81:07:2f:53:3c:6b:9d:f3:3a:a8:3e:94:2d:9f:83: d0:72:3f:4f:4e:16:36:e2:9e:14:4b:21:00:bc:13: 09:8c:54:8c:be:d7:c0:66:6c:82:39:02:d5:98:b4: fe:85:e5:07:37:98:38:21:4b:d3:61:9e:93:69:93: 69:5e:3c:9b:9e:b7:ec:8d:92:33:d1:0f:b8:1e:bd: 45:1d:d5:dc:95:87:35:b6:35:89:ca:b4:a2:9d:26: 8e:1e:5e:cd:3a:1f:1a:71:c1:02:d3:bd:42:cb:a3: 8e:f2:3f:c4:90:21:db:b1:59:e4:92:6c:40:49:59: 13:74:1f:5a:d7:05:23:c6:27:0d:b1:5a:48:1a:8d: c0:c1:1f:79:cc:35:7c:90:bc:5f:e2:30:9a:43:c2: 94:8d:58:63:9f:76:9d:fe:fb:51:28:06:9a:88:fa: 5d:44:d5:34:aa:47:84:58:d5:fc:7c:aa:85:b0:cf: 01:ac:7e:a0:09:5a:0a:a1:5c:57:58:96:32:75:b9: a6:ca:63:d9:2d:58:0e:86:32:b7:17:b5:80:69:8d: 04:92:36:96:8a:35:e1:b3:63:da:da:cb:d0:a4:24: b8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:50:A1:24:63:E8:2D:9A:AD:48:13:44:0C:DE:91:05:F4:DD:6B:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/0b1c3364-e87a-3b7d-af93-e0c89841b720.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.crl X509v3 Authority Key Identifier: keyid:91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer sbgp-ipAddrBlock: critical IPv4: 198.96.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:dd:c8:b9:dc:75:8b:f5:38:45:aa:db:2e:2b:c2:00:9c:2b: e2:60:ab:d6:74:9a:38:26:ce:32:5e:42:53:94:ad:c1:bb:18: 05:09:66:8b:9e:ee:1a:e3:9e:ef:fe:cf:d6:19:4a:2a:83:ff: f6:89:f1:f6:92:bb:ed:f6:fa:77:b0:f3:8e:73:42:29:df:92: 0a:51:30:ec:12:46:93:24:cf:f4:cb:a1:b0:e0:30:7b:8e:d7: f0:3c:15:46:97:19:1d:aa:c9:e8:4a:da:68:b4:5d:53:1b:66: f2:69:c9:96:67:b4:22:9a:c2:11:9d:8f:2e:92:ce:d4:98:03: 1b:e8:7b:8f:3d:2a:ca:42:fd:5e:ad:14:7a:c8:f1:f3:ce:38: 2e:38:a0:50:d5:e8:b4:c7:24:61:8c:67:6a:4c:84:02:32:a1: 9a:85:15:b9:73:09:b4:b8:cd:69:81:c2:13:26:24:c5:a1:aa: 7c:59:78:1f:8f:b4:ff:86:2c:c2:14:ad:1f:cd:a1:81:5a:78: 5b:35:ca:c4:a1:0a:95:35:82:27:74:7e:e1:55:62:7e:da:d1: 7e:06:a8:4a:ca:74:f2:1d:f5:b1:ac:94:e2:82:b1:26:bc:cc: c6:82:dd:01:5a:bf:cc:51:17:aa:a9:7e:ea:42:67:fe:a6:68: 49:b3:42:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ6ksuvfSC0UuIPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE1NzAzZmMtYjBlMi00ZGQzLWFiYmMtNzFkMDhlMWM2 N2M1MB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk MGFlNjBmOTMtYzM0Mi00YTk0LTgzYTAtMWFlMWRkZWFkNjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnLCl2rvrmyCuRSTDBMds95LG3jBMCTG+LDv /+iBBy9TPGud8zqoPpQtn4PQcj9PThY24p4USyEAvBMJjFSMvtfAZmyCOQLVmLT+ heUHN5g4IUvTYZ6TaZNpXjybnrfsjZIz0Q+4Hr1FHdXclYc1tjWJyrSinSaOHl7N Oh8accEC071Cy6OO8j/EkCHbsVnkkmxASVkTdB9a1wUjxicNsVpIGo3AwR95zDV8 kLxf4jCaQ8KUjVhjn3ad/vtRKAaaiPpdRNU0qkeEWNX8fKqFsM8BrH6gCVoKoVxX WJYydbmmymPZLVgOhjK3F7WAaY0EkjaWijXhs2Pa2svQpCS4RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONQoSRj6C2arUgTRAzekQX03Wu6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iYTU3 MDNmYy1iMGUyLTRkZDMtYWJiYy03MWQwOGUxYzY3YzUvMGIxYzMzNjQtZTg3YS0z YjdkLWFmOTMtZTBjODk4NDFiNzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmE1NzAzZmMtYjBlMi00ZGQzLWFi YmMtNzFkMDhlMWM2N2M1L2JhNTcwM2ZjLWIwZTItNGRkMy1hYmJjLTcxZDA4ZTFj NjdjNS5jcmwwHwYDVR0jBBgwFoAUkaMiLb6LWI+0+yzNjJHeFoQNiAswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iYTU3MDNmYy1iMGUyLTRkZDMtYWJiYy03MWQw OGUxYzY3YzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmAGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjdyLncdYv1OEWq2y4rwgCcK+Jgq9Z0mjgmzjJeQlOUrcG7GAUJZoue 7hrjnu/+z9YZSiqD//aJ8faSu+32+new845zQinfkgpRMOwSRpMkz/TLobDgMHuO 1/A8FUaXGR2qyehK2mi0XVMbZvJpyZZntCKawhGdjy6SztSYAxvoe489KspC/V6t FHrI8fPOOC44oFDV6LTHJGGMZ2pMhAIyoZqFFblzCbS4zWmBwhMmJMWhqnxZeB+P tP+GLMIUrR/NoYFaeFs1ysShCpU1gid0fuFVYn7a0X4GqErKdPId9bGslOKCsSa8 zMaC3QFav8xRF6qpfupCZ/6maEmzQoI= -----END CERTIFICATE-----Generated at Tue Oct 28 02:22:02 2025 by rpki-client