$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/cb2fdef3-69d3-33f1-a276-0ebf0c220d49.roa File: cb2fdef3-69d3-33f1-a276-0ebf0c220d49.roa (raw, json) Hash identifier: bWaHE37NiJvBG7Fw6Ap2DWRVg6WuK8EADRM59SzhcB8= Subject key identifier: B1:14:CF:93:FE:FC:BB:63:BF:14:29:32:59:58:98:98:42:76:30:94 Certificate issuer: /CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5 Certificate serial: 010D0C9F4328584905B6B23FA6D80DD2F32B8C40 Authority key identifier: 91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/cb2fdef3-69d3-33f1-a276-0ebf0c220d49.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 32762 IP address blocks: 198.96.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:b2:3f:a6:d8:0d:d2:f3:2b:8c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5 Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=1add4c05-2b1e-40ab-8c0e-0eaa50143507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d6:aa:11:cf:20:e9:ab:19:af:d5:d4:2c:2f: 9b:5a:8f:09:57:d3:6d:55:21:cb:06:67:a6:75:41: 83:09:64:8f:35:6d:c2:4d:3b:81:46:2c:e9:dc:c1: 0a:44:b5:8a:bb:a3:85:03:25:d9:66:21:c5:43:02: ed:d7:0a:5d:0c:92:b6:d8:c2:14:87:39:c3:e7:53: f3:94:83:85:a1:6e:f5:c9:2b:ce:e4:62:c5:8b:81: 9a:1f:7f:13:70:f7:4c:a4:a9:ea:e2:5e:a0:7a:ae: c2:b4:ee:d3:88:3b:37:68:ae:1f:e9:b6:42:44:46: 33:76:3c:e5:4b:ef:df:fe:bd:31:61:47:cc:4a:a5: 00:81:c9:12:ad:6b:e5:86:85:d8:8c:88:53:4b:9a: 63:36:21:49:58:30:26:af:05:06:d3:f5:9f:88:52: 70:06:ba:81:85:ab:dc:3b:3c:78:5e:de:4b:04:63: 03:57:16:9f:d3:e1:82:fa:1b:a0:25:db:b2:28:40: 36:2c:63:ce:e9:57:15:03:9a:5e:51:0c:cb:e8:d8: 3a:8f:f0:66:3e:43:9a:49:cc:49:db:a4:cd:45:56: 0a:cd:e0:e3:26:2b:45:d7:be:e6:70:91:52:24:7e: 7d:0e:66:ab:10:01:5f:6b:ac:53:44:b2:ad:7a:e2: 20:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:14:CF:93:FE:FC:BB:63:BF:14:29:32:59:58:98:98:42:76:30:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/cb2fdef3-69d3-33f1-a276-0ebf0c220d49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.crl X509v3 Authority Key Identifier: keyid:91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer sbgp-ipAddrBlock: critical IPv4: 198.96.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:ce:4c:cb:2e:73:a0:f5:fb:13:f0:6a:f1:6c:db:98:9b:b6: 2b:fb:5a:08:ff:30:a6:0c:e0:92:4f:65:1c:f2:51:2d:a7:c6: ec:95:fd:ae:fb:ad:e4:a0:12:a5:19:5e:82:0a:47:bf:01:e5: e2:e2:75:fe:9d:49:00:61:66:21:3f:d2:d2:34:6f:d2:bc:36: d8:4e:20:5e:18:eb:5c:3d:fd:4d:0d:f5:a2:2a:4b:fd:a5:7c: 4a:fb:6b:88:41:7b:3f:69:f4:e1:d8:07:35:97:29:33:0f:ac: 3c:8c:f1:3a:34:93:ed:96:94:63:47:8a:2f:29:c8:6e:fc:42: cc:ed:53:d6:cc:37:18:88:9c:a3:39:8f:0c:33:ec:c7:e7:46: e1:49:97:17:82:32:34:a3:63:68:47:ca:1d:5b:91:d9:d1:db: 44:c2:46:46:0a:0c:c0:89:5d:ea:72:3d:16:a1:4e:52:8d:ce: f4:1d:33:b0:96:64:2f:05:21:55:24:fe:c4:3f:53:d8:b9:3b: 5e:20:15:57:db:01:e3:82:a1:85:93:f7:f6:11:05:4c:ec:fb: e0:09:eb:8b:67:a9:52:20:7b:f4:02:c1:97:9e:40:b6:f9:e4: 48:d3:e6:86:5e:9d:81:68:44:82:c0:de:95:c8:2b:69:98:c1: e7:ca:26:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtrI/ptgN0vMrjEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE1NzAzZmMtYjBlMi00ZGQzLWFiYmMtNzFkMDhlMWM2 N2M1MB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk MWFkZDRjMDUtMmIxZS00MGFiLThjMGUtMGVhYTUwMTQzNTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstaqEc8g6asZr9XULC+bWo8JV9NtVSHLBmem dUGDCWSPNW3CTTuBRizp3MEKRLWKu6OFAyXZZiHFQwLt1wpdDJK22MIUhznD51Pz lIOFoW71ySvO5GLFi4GaH38TcPdMpKnq4l6geq7CtO7TiDs3aK4f6bZCREYzdjzl S+/f/r0xYUfMSqUAgckSrWvlhoXYjIhTS5pjNiFJWDAmrwUG0/WfiFJwBrqBhavc Ozx4Xt5LBGMDVxaf0+GC+hugJduyKEA2LGPO6VcVA5peUQzL6Ng6j/BmPkOaScxJ 26TNRVYKzeDjJitF177mcJFSJH59DmarEAFfa6xTRLKteuIgIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEUz5P+/LtjvxQpMllYmJhCdjCUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iYTU3 MDNmYy1iMGUyLTRkZDMtYWJiYy03MWQwOGUxYzY3YzUvY2IyZmRlZjMtNjlkMy0z M2YxLWEyNzYtMGViZjBjMjIwZDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmE1NzAzZmMtYjBlMi00ZGQzLWFi YmMtNzFkMDhlMWM2N2M1L2JhNTcwM2ZjLWIwZTItNGRkMy1hYmJjLTcxZDA4ZTFj NjdjNS5jcmwwHwYDVR0jBBgwFoAUkaMiLb6LWI+0+yzNjJHeFoQNiAswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iYTU3MDNmYy1iMGUyLTRkZDMtYWJiYy03MWQw OGUxYzY3YzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXOTMsuc6D1+xPwavFs25ibtiv7Wgj/MKYM4JJPZRzyUS2nxuyV/a77 reSgEqUZXoIKR78B5eLidf6dSQBhZiE/0tI0b9K8NthOIF4Y61w9/U0N9aIqS/2l fEr7a4hBez9p9OHYBzWXKTMPrDyM8To0k+2WlGNHii8pyG78QsztU9bMNxiInKM5 jwwz7MfnRuFJlxeCMjSjY2hHyh1bkdnR20TCRkYKDMCJXepyPRahTlKNzvQdM7CW ZC8FIVUk/sQ/U9i5O14gFVfbAeOCoYWT9/YRBUzs++AJ64tnqVIge/QCwZeeQLb5 5EjT5oZenYFoRILA3pXIK2mYwefKJiE= -----END CERTIFICATE-----Generated at Fri Apr 11 21:34:43 2025 by rpki-client