$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/21bf5113-e55b-37f7-adc9-8cd87af0160b.roa File: 21bf5113-e55b-37f7-adc9-8cd87af0160b.roa (raw, json) Hash identifier: sWoX40XHJZTvwZ/LTJ8yXhxswT/jqFFje0mfIpG1On8= Subject key identifier: 0B:25:7A:4F:CA:51:05:A2:8A:66:C7:8D:93:B9:A4:37:EA:42:7A:31 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584AE8912BD6FCCB0654FF4A4780 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/21bf5113-e55b-37f7-adc9-8cd87af0160b.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 197537 IP address blocks: 198.1.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:2b:d6:fc:cb:06:54:ff:4a:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=4c7d7536-600a-4a8b-b32e-0c3e4acfe444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9c:33:59:08:50:e2:9f:6c:d5:ed:50:07:5c: 0b:bc:d0:31:20:b7:1a:01:27:cf:0c:fe:de:ff:97: 28:cc:2f:d4:ac:9c:26:ba:d8:85:79:c0:14:e6:bf: f2:c0:8c:03:71:e4:1a:64:0b:80:17:38:26:3f:77: 45:6c:59:5c:62:e5:9f:ec:1c:0e:cb:d6:21:94:b7: fd:a3:03:3c:8f:a8:dd:6f:49:e1:74:37:39:db:3c: 5b:6c:70:63:22:88:56:a9:dc:bb:f8:1a:65:eb:3a: cf:af:39:77:4d:77:d8:06:8b:63:0b:f8:8d:61:fc: 51:61:98:05:9b:d6:d7:5c:51:22:32:a5:0f:1f:80: d6:eb:d6:10:51:ab:6c:c2:11:85:da:93:6a:ad:40: 5f:f0:98:8e:17:dd:f7:17:f2:49:42:5f:bc:b4:1d: fb:c0:7f:f9:c2:97:65:61:f7:44:12:e6:40:b3:7f: 09:e8:8d:ba:6e:62:40:f0:2b:c6:5b:e0:c7:04:cb: ea:a8:79:69:18:b6:bb:7e:a7:f0:b4:df:5a:07:a4: f3:88:b9:05:20:a8:48:8e:59:67:c3:50:76:75:02: 8b:0f:71:c1:79:4d:54:e8:c7:7f:e2:b6:b1:68:de: fb:87:31:ad:35:2e:a8:ca:fe:a1:36:34:57:8f:fc: d0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:25:7A:4F:CA:51:05:A2:8A:66:C7:8D:93:B9:A4:37:EA:42:7A:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/21bf5113-e55b-37f7-adc9-8cd87af0160b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:99:5e:f2:7a:79:af:b8:4f:00:ac:ff:8f:94:b0:42:ef:48: 35:1d:48:7b:89:0c:a2:7e:4d:24:9e:e2:81:de:7e:10:5b:21: fe:75:0f:69:e5:a0:f9:be:e6:d1:bf:df:41:90:09:17:59:ae: 46:3e:0c:2a:56:d1:19:76:71:4c:61:6b:38:1f:e1:e2:d9:88: c6:b6:1b:00:22:13:b5:d1:f1:fb:fd:6e:ce:57:f4:41:33:b6: 1c:0f:9e:cf:2f:4d:06:6d:67:02:0a:ea:5b:36:34:79:cd:38: 4d:41:43:d4:60:bd:81:df:d4:a4:05:7f:48:de:c6:bd:36:10: 6c:4e:ac:2e:8d:08:94:81:90:60:23:53:e4:7b:1d:72:20:20: bf:ff:8c:1b:13:97:2d:a2:40:4a:06:6a:5b:81:5f:5b:4f:d3: 12:27:5a:53:e2:dd:22:05:04:18:1c:9e:a2:1d:c8:5a:79:60: d8:f2:5d:5a:bc:71:dc:4b:a9:c3:ae:68:9e:90:3c:b3:13:4e: b0:0a:b4:48:70:19:df:16:f2:7c:6f:58:dd:c3:01:31:fe:7e: ac:33:3f:04:34:8a:53:7a:fa:58:e9:07:7c:9b:17:94:17:b8: 40:1e:65:27:9b:4a:77:d9:28:8c:2f:8b:04:09:0d:9a:69:07: 1e:1e:68:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokSvW/MsGVP9KR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk NGM3ZDc1MzYtNjAwYS00YThiLWIzMmUtMGMzZTRhY2ZlNDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZwzWQhQ4p9s1e1QB1wLvNAxILcaASfPDP7e /5cozC/UrJwmutiFecAU5r/ywIwDceQaZAuAFzgmP3dFbFlcYuWf7BwOy9YhlLf9 owM8j6jdb0nhdDc52zxbbHBjIohWqdy7+Bpl6zrPrzl3TXfYBotjC/iNYfxRYZgF m9bXXFEiMqUPH4DW69YQUatswhGF2pNqrUBf8JiOF933F/JJQl+8tB37wH/5wpdl YfdEEuZAs38J6I26bmJA8CvGW+DHBMvqqHlpGLa7fqfwtN9aB6TziLkFIKhIjlln w1B2dQKLD3HBeU1U6Md/4raxaN77hzGtNS6oyv6hNjRXj/zQQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAslek/KUQWiimbHjZO5pDfqQnoxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvMjFiZjUxMTMtZTU1Yi0z N2Y3LWFkYzktOGNkODdhZjAxNjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqZXvJ6ea+4TwCs/4+UsELvSDUdSHuJDKJ+TSSe4oHefhBbIf51D2nl oPm+5tG/30GQCRdZrkY+DCpW0Rl2cUxhazgf4eLZiMa2GwAiE7XR8fv9bs5X9EEz thwPns8vTQZtZwIK6ls2NHnNOE1BQ9RgvYHf1KQFf0jexr02EGxOrC6NCJSBkGAj U+R7HXIgIL//jBsTly2iQEoGaluBX1tP0xInWlPi3SIFBBgcnqIdyFp5YNjyXVq8 cdxLqcOuaJ6QPLMTTrAKtEhwGd8W8nxvWN3DATH+fqwzPwQ0ilN6+ljpB3ybF5QX uEAeZSebSnfZKIwviwQJDZppBx4eaNE= -----END CERTIFICATE-----Generated at Sat Aug 23 17:52:56 2025 by rpki-client