$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/2f2eccd3-d777-33d0-aac7-c8fce3da7128.roa File: 2f2eccd3-d777-33d0-aac7-c8fce3da7128.roa (raw, json) Hash identifier: jHrTitqqOPbKVAEKhsl9zUqMoUR1HPBQin4u371jKJI= Subject key identifier: 64:0A:8C:81:B0:3C:FF:AE:1A:A4:6E:F1:CE:A6:AF:FA:75:CA:D0:8C Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584A44C9A58F2C66C7D435DD0030 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/2f2eccd3-d777-33d0-aac7-c8fce3da7128.roa Signing time: Sat 21 Jun 2025 21:02:01 +0000 ROA not before: Sat 21 Jun 2025 21:02:01 +0000 ROA not after: Fri 19 Sep 2025 21:02:01 +0000 asID: 214432 IP address blocks: 198.1.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:44:c9:a5:8f:2c:66:c7:d4:35:dd:00:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Jun 21 21:02:01 2025 GMT Not After : Sep 19 21:02:01 2025 GMT Subject: CN=65fd7213-1545-46f0-918c-3de9c6b97e8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:67:d1:7f:c8:6a:3e:26:19:b5:6a:05:7d:76: c8:82:1d:40:93:60:67:e7:96:ce:7a:47:d6:af:b9: 8e:d9:4e:d8:a8:ed:bd:5d:70:08:31:a6:96:0f:ee: 49:cf:09:61:b6:e6:84:68:cf:e4:ca:41:05:c4:13: 01:28:67:fc:45:8d:c0:7d:52:bb:cd:83:c0:44:20: ad:1b:6e:29:03:36:6b:46:b7:f2:5c:0a:99:bd:e6: db:aa:c7:be:ef:c0:94:2f:27:65:a7:ad:7b:11:6d: 6b:3c:a3:93:11:5a:c6:38:c9:21:dd:20:ae:85:8e: fd:98:d2:ed:b2:69:d5:f8:30:24:83:46:b1:83:57: 4d:66:ae:a9:7e:5a:37:87:c3:29:f3:22:e2:34:10: a7:26:89:81:05:9f:ec:9e:5d:fd:35:9a:63:56:e5: aa:6e:9c:c3:ff:47:5b:28:44:13:78:26:26:5d:a7: 8d:1f:2a:7a:4c:6a:70:e6:de:33:ff:8f:e5:a7:db: 0a:5f:d5:06:48:9b:36:62:7d:01:86:38:34:c2:e9: 71:4b:9e:43:ce:a0:e2:15:33:0c:16:fa:9a:92:f0: 81:37:05:07:7f:8b:ad:23:0f:87:96:f0:fd:c3:4e: 9e:03:8d:a3:90:4a:3e:74:62:68:9a:c4:53:49:06: e0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:0A:8C:81:B0:3C:FF:AE:1A:A4:6E:F1:CE:A6:AF:FA:75:CA:D0:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/2f2eccd3-d777-33d0-aac7-c8fce3da7128.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:55:59:23:95:73:e8:bf:a7:18:86:33:4d:c5:6e:26:72:bf: 54:3e:90:99:13:98:e6:da:31:af:46:20:b0:0b:1b:c5:bf:9b: 6d:a6:dd:07:34:1b:36:98:d1:42:7e:ac:91:dc:e5:62:c5:5f: 8a:01:64:db:65:3b:e7:70:36:14:05:e5:b0:92:85:ff:ba:96: db:b3:e9:3f:ea:66:c3:d2:95:4c:4b:34:b4:20:3e:ff:e6:de: 65:f5:3d:bf:ea:0b:54:0c:ba:f8:4f:e9:0d:52:10:36:6f:98: 56:99:24:aa:03:63:fe:6e:fa:d8:0e:b3:13:7f:f8:ab:3f:d5: 7d:44:d2:47:8a:a9:96:cf:03:7a:9b:d0:d0:aa:88:10:30:cf: c9:cc:63:00:8c:b8:39:16:f8:c5:97:d1:6b:07:92:5b:58:f5: 29:8d:26:10:47:f0:5e:15:67:2b:f1:2a:20:a3:69:f0:25:28: c4:25:f4:9f:dc:15:36:30:76:5c:37:d9:b1:f8:19:fd:fd:9e: 13:a2:f8:2d:f1:c6:11:4c:3b:fc:bc:b6:6c:e4:8c:5d:15:ab: 97:7a:b0:7e:aa:56:75:3a:35:ef:94:2e:6d:dd:c0:84:43:90: 4b:32:44:44:c2:a3:d6:4e:45:82:32:c0:08:90:d6:d2:ed:1e: 58:b4:d6:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpEyaWPLGbH1DXdADAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDYyMTIxMDIwMVoXDTI1MDkxOTIxMDIwMVowLzEtMCsGA1UEAxMk NjVmZDcyMTMtMTU0NS00NmYwLTkxOGMtM2RlOWM2Yjk3ZThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmfRf8hqPiYZtWoFfXbIgh1Ak2Bn55bOekfW r7mO2U7YqO29XXAIMaaWD+5JzwlhtuaEaM/kykEFxBMBKGf8RY3AfVK7zYPARCCt G24pAzZrRrfyXAqZvebbqse+78CULydlp617EW1rPKOTEVrGOMkh3SCuhY79mNLt smnV+DAkg0axg1dNZq6pflo3h8Mp8yLiNBCnJomBBZ/snl39NZpjVuWqbpzD/0db KEQTeCYmXaeNHyp6TGpw5t4z/4/lp9sKX9UGSJs2Yn0Bhjg0wulxS55DzqDiFTMM FvqakvCBNwUHf4utIw+HlvD9w06eA42jkEo+dGJomsRTSQbgNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQKjIGwPP+uGqRu8c6mr/p1ytCMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvMmYyZWNjZDMtZDc3Ny0z M2QwLWFhYzctYzhmY2UzZGE3MTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENVWSOVc+i/pxiGM03FbiZyv1Q+kJkTmObaMa9GILALG8W/m22m3Qc0 GzaY0UJ+rJHc5WLFX4oBZNtlO+dwNhQF5bCShf+6ltuz6T/qZsPSlUxLNLQgPv/m 3mX1Pb/qC1QMuvhP6Q1SEDZvmFaZJKoDY/5u+tgOsxN/+Ks/1X1E0keKqZbPA3qb 0NCqiBAwz8nMYwCMuDkW+MWX0WsHkltY9SmNJhBH8F4VZyvxKiCjafAlKMQl9J/c FTYwdlw32bH4Gf39nhOi+C3xxhFMO/y8tmzkjF0Vq5d6sH6qVnU6Ne+ULm3dwIRD kEsyRETCo9ZORYIywAiQ1tLtHli01ik= -----END CERTIFICATE-----Generated at Sun Jun 29 13:25:27 2025 by rpki-client