$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/0465f668-086c-33ba-9bf9-e3dfdf71956b.roa File: 0465f668-086c-33ba-9bf9-e3dfdf71956b.roa (raw, json) Hash identifier: WiEi7SnXk/f9xIP1OxJHDJbsPSD21BipF/Hj0++jEOw= Subject key identifier: 94:1B:83:81:7C:55:B2:EB:54:20:D3:8B:48:F3:C2:C3:58:8D:06:30 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584A4A386C6236A4BBBEB4711680 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/0465f668-086c-33ba-9bf9-e3dfdf71956b.roa Signing time: Mon 23 Jun 2025 19:44:16 +0000 ROA not before: Mon 23 Jun 2025 19:44:16 +0000 ROA not after: Sun 21 Sep 2025 19:44:16 +0000 asID: 20001 IP address blocks: 198.1.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4a:38:6c:62:36:a4:bb:be:b4:71:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Jun 23 19:44:16 2025 GMT Not After : Sep 21 19:44:16 2025 GMT Subject: CN=08aa65bb-8283-4b80-9338-0d520a5d8e21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a9:d4:36:3c:fd:25:3a:9d:8c:92:79:d0:f4: 3c:2f:ab:34:a2:c6:af:f8:9b:b7:fa:82:a1:a6:b6: b6:eb:51:34:5c:6c:39:8b:ac:8e:2c:9c:b1:35:69: ea:ec:0b:91:2b:0b:17:1c:ac:bc:90:29:6f:bc:d2: 12:68:dc:d6:41:ac:d4:f2:87:4a:4e:0b:e4:97:51: 8d:01:4b:c1:78:4f:0a:14:49:98:0f:ed:1c:03:07: 99:29:89:cb:13:5c:f7:cb:4a:33:1d:56:35:4a:66: 91:e7:53:01:c8:37:5a:9a:3a:9a:40:5d:32:3f:dd: 73:8e:7b:6c:09:59:24:02:69:3e:a0:be:86:94:c4: 23:96:61:cf:ac:da:42:40:34:ff:bd:53:7d:78:1e: 8e:12:e5:87:d4:e9:94:f4:eb:16:72:d5:ce:89:24: f6:c7:90:86:d5:bd:cb:e7:4b:18:8b:63:ab:5b:1b: 56:fa:a9:39:8a:03:65:95:71:93:8f:9d:36:72:50: 43:ec:63:da:29:dd:5b:9d:4c:10:0c:c1:86:9d:76: d0:77:b9:1e:74:0d:91:99:a1:fd:2f:08:18:13:aa: a7:a3:2c:05:7a:36:df:11:ec:4b:e2:df:11:fd:74: c0:9e:ab:d6:e2:08:a3:dd:d3:cb:79:66:27:39:9f: be:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:1B:83:81:7C:55:B2:EB:54:20:D3:8B:48:F3:C2:C3:58:8D:06:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/0465f668-086c-33ba-9bf9-e3dfdf71956b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:85:31:43:94:5b:5f:0d:65:26:e5:a7:aa:11:52:37:06:c2: 5f:26:e4:5c:a1:d8:89:78:a9:49:68:46:25:58:01:f7:78:d2: e1:a7:14:c8:1a:de:47:8b:a5:72:c4:dd:30:98:c3:b3:30:48: 7b:c1:11:07:9f:c2:c1:55:02:92:fa:c0:40:1a:60:c1:37:47: 58:93:8a:f8:a1:19:c5:e5:41:b0:80:bd:5d:41:11:0f:cb:bd: b4:b2:12:a6:46:d4:a2:0c:04:67:80:54:b5:5a:18:a0:72:b3: 7f:22:b6:76:dc:1a:07:50:fb:97:85:d4:1e:73:1c:1d:c3:78: 1c:50:0b:d8:6a:8b:7c:8a:26:66:d5:59:90:bb:9d:05:e9:30: 56:02:f3:fe:ce:70:34:f3:c5:6e:c9:90:2d:29:d4:51:f0:b4: 9a:4a:49:f3:64:37:69:ef:31:40:8f:ce:9e:be:2d:b0:d4:1c: bf:e3:1d:32:0c:75:88:0d:fb:44:5b:f2:22:70:79:40:57:5b: 95:32:fe:92:c8:82:6a:e9:5e:f6:19:c6:77:57:57:08:a7:0d: 0d:ff:e8:27:f1:e8:52:c2:69:12:df:53:ff:ab:63:b6:56:80: 0c:98:70:30:46:47:94:ba:15:65:17:c0:d3:de:9d:94:21:a7: c7:9b:4a:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpKOGxiNqS7vrRxFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDYyMzE5NDQxNloXDTI1MDkyMTE5NDQxNlowLzEtMCsGA1UEAxMk MDhhYTY1YmItODI4My00YjgwLTkzMzgtMGQ1MjBhNWQ4ZTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKnUNjz9JTqdjJJ50PQ8L6s0osav+Ju3+oKh pra261E0XGw5i6yOLJyxNWnq7AuRKwsXHKy8kClvvNISaNzWQazU8odKTgvkl1GN AUvBeE8KFEmYD+0cAweZKYnLE1z3y0ozHVY1SmaR51MByDdamjqaQF0yP91zjnts CVkkAmk+oL6GlMQjlmHPrNpCQDT/vVN9eB6OEuWH1OmU9OsWctXOiST2x5CG1b3L 50sYi2OrWxtW+qk5igNllXGTj502clBD7GPaKd1bnUwQDMGGnXbQd7kedA2RmaH9 LwgYE6qnoywFejbfEexL4t8R/XTAnqvW4gij3dPLeWYnOZ++pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQbg4F8VbLrVCDTi0jzwsNYjQYwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvMDQ2NWY2NjgtMDg2Yy0z M2JhLTliZjktZTNkZmRmNzE5NTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOFMUOUW18NZSblp6oRUjcGwl8m5Fyh2Il4qUloRiVYAfd40uGnFMga 3keLpXLE3TCYw7MwSHvBEQefwsFVApL6wEAaYME3R1iTivihGcXlQbCAvV1BEQ/L vbSyEqZG1KIMBGeAVLVaGKBys38itnbcGgdQ+5eF1B5zHB3DeBxQC9hqi3yKJmbV WZC7nQXpMFYC8/7OcDTzxW7JkC0p1FHwtJpKSfNkN2nvMUCPzp6+LbDUHL/jHTIM dYgN+0Rb8iJweUBXW5Uy/pLIgmrpXvYZxndXVwinDQ3/6Cfx6FLCaRLfU/+rY7ZW gAyYcDBGR5S6FWUXwNPenZQhp8ebSrY= -----END CERTIFICATE-----Generated at Mon Jun 30 03:29:27 2025 by rpki-client