$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/2021ca11-bb53-3b76-82ac-95fa09e690a3.roa File: 2021ca11-bb53-3b76-82ac-95fa09e690a3.roa (raw, json) Hash identifier: cFP68yRxI77Ta5ZGn4Kpnxggbv9271xiv0/8TnBoiJw= Subject key identifier: 5C:3C:63:4B:E3:4D:15:B8:15:A0:AA:09:BE:E0:8E:6E:B0:6A:87:F7 Certificate issuer: /CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5 Certificate serial: 010D0C9F4328584BA667A9193F84C91FCB5BA300 Authority key identifier: 91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/2021ca11-bb53-3b76-82ac-95fa09e690a3.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 32762 IP address blocks: 192.197.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:a9:19:3f:84:c9:1f:cb:5b:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=7fca1486-5884-4731-8ad9-505eb0567e05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4f:51:32:bb:cf:6c:f5:b4:f8:36:9f:77:61: 9e:16:92:cb:19:ec:0a:b1:6f:0d:f4:76:9d:c2:25: c2:a6:b6:4c:fe:5b:e3:e8:88:af:cc:a4:fb:44:8e: 46:3e:29:90:33:7c:33:f0:78:9f:3b:43:48:62:e4: 47:0c:33:e4:94:e9:b2:bf:6f:f3:3e:51:a4:48:6f: e0:2a:28:a4:a6:e3:9d:ea:11:c2:82:47:a5:51:7f: ad:80:9d:83:33:6e:5d:e0:a2:f7:1b:35:6d:93:b6: 5e:56:ce:ea:a9:ea:ac:b1:b2:87:4d:88:26:dc:17: 09:59:28:33:0f:15:25:17:66:9e:a8:d2:80:d8:08: 1d:21:d1:5a:d5:b8:ce:f7:46:34:8d:3e:4e:e7:23: 79:72:b2:e3:57:a3:ea:55:04:de:eb:c5:a1:c5:b9: 1a:3f:3e:c0:d8:9e:b8:da:ba:0e:02:19:9a:18:1a: d5:d8:c2:56:95:e3:de:27:2a:23:1b:ba:a0:1b:60: 55:02:06:b5:27:7f:8e:73:6c:fd:a2:2f:35:30:e1: 35:81:30:9a:c3:4e:f0:a3:b0:66:1d:bd:07:7d:bf: 69:e7:3c:26:e5:a7:d5:ad:5c:5e:e7:ec:37:63:4a: 7b:9e:51:25:94:52:db:9f:ac:9f:b0:41:4c:5e:2e: a5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:3C:63:4B:E3:4D:15:B8:15:A0:AA:09:BE:E0:8E:6E:B0:6A:87:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/2021ca11-bb53-3b76-82ac-95fa09e690a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.crl X509v3 Authority Key Identifier: keyid:91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer sbgp-ipAddrBlock: critical IPv4: 192.197.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:e0:54:98:74:0b:c4:3c:64:77:f7:7d:e8:73:25:d0:d7:0d: 5a:03:d0:c4:a0:d1:66:65:6b:5a:18:dc:67:14:95:77:fa:cf: 57:12:39:da:8d:55:7a:7e:bb:21:1e:96:be:61:74:e7:32:40: 21:8a:6a:59:f8:11:13:09:34:6f:9b:25:c0:24:3c:80:60:2a: f7:9e:36:b1:6e:d1:c4:1b:4b:14:8b:69:22:36:a8:01:2e:06: 5f:65:b5:45:03:47:6a:08:bb:1e:b2:1d:d4:48:82:64:4d:5d: d4:c6:d3:eb:11:40:7e:7e:2b:0f:62:d5:19:8d:3b:e4:e5:bf: 5d:d5:9d:a8:03:bc:a0:96:5f:50:db:bf:ec:6c:ab:2c:23:6e: 28:0b:a6:54:09:2d:f1:2d:5a:1d:b8:70:19:de:bc:cd:69:94: af:9e:80:de:bb:8e:a9:b9:e4:41:90:51:f2:50:84:ea:d3:4c: cf:a0:00:6d:5f:70:e5:35:bb:40:d7:99:33:6b:4f:e5:42:53: 45:6b:39:dc:bb:21:be:99:96:65:e0:5a:86:62:83:d9:63:1a: 27:26:20:97:1b:27:25:f8:0a:08:5f:be:36:f7:d2:fa:9e:df: aa:99:9e:06:36:94:c9:05:77:b4:cb:3e:9e:9b:69:d2:24:fd: a3:da:e7:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ6kZP4TJH8tbowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE1NzAzZmMtYjBlMi00ZGQzLWFiYmMtNzFkMDhlMWM2 N2M1MB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk N2ZjYTE0ODYtNTg4NC00NzMxLThhZDktNTA1ZWIwNTY3ZTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtU9RMrvPbPW0+Dafd2GeFpLLGewKsW8N9Had wiXCprZM/lvj6IivzKT7RI5GPimQM3wz8HifO0NIYuRHDDPklOmyv2/zPlGkSG/g KiikpuOd6hHCgkelUX+tgJ2DM25d4KL3GzVtk7ZeVs7qqeqssbKHTYgm3BcJWSgz DxUlF2aeqNKA2AgdIdFa1bjO90Y0jT5O5yN5crLjV6PqVQTe68WhxbkaPz7A2J64 2roOAhmaGBrV2MJWlePeJyojG7qgG2BVAga1J3+Oc2z9oi81MOE1gTCaw07wo7Bm Hb0Hfb9p5zwm5afVrVxe5+w3Y0p7nlEllFLbn6yfsEFMXi6lJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFw8Y0vjTRW4FaCqCb7gjm6waof3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iYTU3 MDNmYy1iMGUyLTRkZDMtYWJiYy03MWQwOGUxYzY3YzUvMjAyMWNhMTEtYmI1My0z Yjc2LTgyYWMtOTVmYTA5ZTY5MGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmE1NzAzZmMtYjBlMi00ZGQzLWFi YmMtNzFkMDhlMWM2N2M1L2JhNTcwM2ZjLWIwZTItNGRkMy1hYmJjLTcxZDA4ZTFj NjdjNS5jcmwwHwYDVR0jBBgwFoAUkaMiLb6LWI+0+yzNjJHeFoQNiAswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iYTU3MDNmYy1iMGUyLTRkZDMtYWJiYy03MWQw OGUxYzY3YzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMVaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3gVJh0C8Q8ZHf3fehzJdDXDVoD0MSg0WZla1oY3GcUlXf6z1cSOdqN VXp+uyEelr5hdOcyQCGKaln4ERMJNG+bJcAkPIBgKveeNrFu0cQbSxSLaSI2qAEu Bl9ltUUDR2oIux6yHdRIgmRNXdTG0+sRQH5+Kw9i1RmNO+Tlv13VnagDvKCWX1Db v+xsqywjbigLplQJLfEtWh24cBnevM1plK+egN67jqm55EGQUfJQhOrTTM+gAG1f cOU1u0DXmTNrT+VCU0VrOdy7Ib6ZlmXgWoZig9ljGicmIJcbJyX4Cghfvjb30vqe 36qZngY2lMkFd7TLPp6badIk/aPa55Y= -----END CERTIFICATE-----Generated at Tue Oct 28 02:21:41 2025 by rpki-client