$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/cb2fdef3-69d3-33f1-a276-0ebf0c220d49.roa File: cb2fdef3-69d3-33f1-a276-0ebf0c220d49.roa (raw, json) Hash identifier: pgOzokyLgzDuXoK1wsj2Rgq7z8OaBDV8lCdVffVy0Ek= Subject key identifier: 73:77:4F:36:C9:4E:71:66:60:2C:76:D5:E3:FA:D2:60:2D:03:D3:A2 Certificate issuer: /CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5 Certificate serial: 010D0C9F4328584BA667A94045A7CA03609BD540 Authority key identifier: 91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/cb2fdef3-69d3-33f1-a276-0ebf0c220d49.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 32762 IP address blocks: 198.96.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:a9:40:45:a7:ca:03:60:9b:d5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=efcd7e86-ca4e-4a7e-b928-415a0ea672c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b1:52:33:36:6a:90:59:9c:e1:0f:f1:1f:f9: f7:f6:e2:ff:5a:e8:9b:56:3d:3c:18:d5:58:99:ff: 01:9d:b3:81:2c:52:1c:b4:a9:ab:b5:01:db:8c:4c: 26:85:4c:e6:3d:10:2d:dc:65:fa:e6:2a:a1:2b:9c: 25:bb:29:c2:07:97:ef:90:46:4f:67:af:06:7c:1c: be:a9:3a:45:64:55:82:09:86:9f:83:9c:89:63:63: c7:e5:51:7a:a9:f5:ec:cd:83:e7:38:b4:48:54:91: ee:9a:c8:a7:fa:44:6b:0d:b4:aa:2b:02:b0:57:c1: ce:05:7f:8c:58:7b:95:e9:31:1c:73:d5:d7:e5:87: 3a:7e:ce:f5:09:38:a5:64:68:87:bd:c3:00:4b:80: b6:3d:cd:68:e6:94:df:e8:69:40:31:3f:09:b9:1f: 87:45:62:60:90:f8:59:a2:82:9d:cb:7b:64:3a:30: a5:1b:aa:55:f8:84:2a:66:79:89:d6:f6:86:4f:6e: a0:01:8e:9b:26:3b:d1:ef:3e:d6:6b:5a:f7:da:1f: 42:5c:25:95:76:4c:b6:1e:27:5e:36:10:08:3a:5a: 0e:7e:b6:d9:e0:04:1c:a5:81:68:86:7e:97:db:f9: cd:5a:f8:f8:2d:35:04:59:b8:09:e9:55:c2:f6:b2: bb:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:77:4F:36:C9:4E:71:66:60:2C:76:D5:E3:FA:D2:60:2D:03:D3:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/cb2fdef3-69d3-33f1-a276-0ebf0c220d49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.crl X509v3 Authority Key Identifier: keyid:91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer sbgp-ipAddrBlock: critical IPv4: 198.96.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:f6:ca:44:83:66:82:72:d6:cb:66:14:8a:44:db:74:52:1f: 99:35:89:f7:b5:80:d5:98:38:aa:21:c0:5d:b4:0e:c2:68:6a: ed:93:7d:13:ba:a1:c6:b4:99:7e:fd:8e:21:2f:e9:d6:60:3f: 52:12:47:ad:20:e3:1c:49:ed:d5:66:3a:42:f6:7b:25:7d:67: 01:c4:e9:50:07:67:46:3d:08:71:5c:f2:8d:bc:58:c0:4a:79: be:5b:38:0d:9f:91:90:fe:70:3b:e5:01:c0:af:d0:56:36:5b: 62:d2:ed:65:cc:cc:ca:86:26:47:96:47:14:83:f1:59:a6:0c: 41:a3:54:47:de:c9:75:e1:79:16:fa:9e:3d:86:e9:9d:dc:ce: dc:bc:de:de:5e:82:9e:de:15:96:85:b1:0b:c4:d8:7f:47:7f: 0c:0e:61:9d:65:fc:75:5c:00:41:44:9e:bf:79:e3:66:ed:59: c5:5e:df:0d:4e:25:3d:4d:bb:01:8f:7e:1b:3c:30:fe:8d:db: 40:c0:94:dd:d5:a3:2d:dd:cb:7d:c0:fe:4f:db:29:ab:66:75: 6c:5c:c7:19:7d:ee:61:39:80:71:d6:8a:8a:53:8d:f4:4e:f8: 62:01:7a:68:1c:ea:e7:fa:b1:fe:9b:01:ea:f0:3a:da:0d:84: 16:43:e4:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ6lARafKA2Cb1UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE1NzAzZmMtYjBlMi00ZGQzLWFiYmMtNzFkMDhlMWM2 N2M1MB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk ZWZjZDdlODYtY2E0ZS00YTdlLWI5MjgtNDE1YTBlYTY3MmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLFSMzZqkFmc4Q/xH/n39uL/WuibVj08GNVY mf8BnbOBLFIctKmrtQHbjEwmhUzmPRAt3GX65iqhK5wluynCB5fvkEZPZ68GfBy+ qTpFZFWCCYafg5yJY2PH5VF6qfXszYPnOLRIVJHumsin+kRrDbSqKwKwV8HOBX+M WHuV6TEcc9XX5Yc6fs71CTilZGiHvcMAS4C2Pc1o5pTf6GlAMT8JuR+HRWJgkPhZ ooKdy3tkOjClG6pV+IQqZnmJ1vaGT26gAY6bJjvR7z7Wa1r32h9CXCWVdky2Hide NhAIOloOfrbZ4AQcpYFohn6X2/nNWvj4LTUEWbgJ6VXC9rK7/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHN3TzbJTnFmYCx21eP60mAtA9OiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iYTU3 MDNmYy1iMGUyLTRkZDMtYWJiYy03MWQwOGUxYzY3YzUvY2IyZmRlZjMtNjlkMy0z M2YxLWEyNzYtMGViZjBjMjIwZDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmE1NzAzZmMtYjBlMi00ZGQzLWFi YmMtNzFkMDhlMWM2N2M1L2JhNTcwM2ZjLWIwZTItNGRkMy1hYmJjLTcxZDA4ZTFj NjdjNS5jcmwwHwYDVR0jBBgwFoAUkaMiLb6LWI+0+yzNjJHeFoQNiAswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iYTU3MDNmYy1iMGUyLTRkZDMtYWJiYy03MWQw OGUxYzY3YzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJr2ykSDZoJy1stmFIpE23RSH5k1ife1gNWYOKohwF20DsJoau2TfRO6 oca0mX79jiEv6dZgP1ISR60g4xxJ7dVmOkL2eyV9ZwHE6VAHZ0Y9CHFc8o28WMBK eb5bOA2fkZD+cDvlAcCv0FY2W2LS7WXMzMqGJkeWRxSD8VmmDEGjVEfeyXXheRb6 nj2G6Z3czty83t5egp7eFZaFsQvE2H9HfwwOYZ1l/HVcAEFEnr9542btWcVe3w1O JT1NuwGPfhs8MP6N20DAlN3Voy3dy33A/k/bKatmdWxcxxl97mE5gHHWiopTjfRO +GIBemgc6uf6sf6bAerwOtoNhBZD5NM= -----END CERTIFICATE-----Generated at Tue Oct 28 02:22:02 2025 by rpki-client