$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/32cd9e6a-6b08-3b0e-8210-f35c47b3cea7.roa File: 32cd9e6a-6b08-3b0e-8210-f35c47b3cea7.roa (raw, json) Hash identifier: 0INCVTgxgPudsftTpd/Ejn5lhKpEJIYcq69LP20rH8g= Subject key identifier: 55:D1:C9:48:53:86:E6:00:94:0F:5F:31:DC:C1:7F:83:90:55:64:69 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584AEB5BCE051E35519AF37B2E00 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/32cd9e6a-6b08-3b0e-8210-f35c47b3cea7.roa Signing time: Wed 20 Aug 2025 13:00:41 +0000 ROA not before: Wed 20 Aug 2025 13:00:41 +0000 ROA not after: Tue 18 Nov 2025 14:00:41 +0000 asID: 64267 IP address blocks: 198.1.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:5b:ce:05:1e:35:51:9a:f3:7b:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Aug 20 13:00:41 2025 GMT Not After : Nov 18 14:00:41 2025 GMT Subject: CN=ed4778ca-f34a-4b2b-8e5a-389e7e9815c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e2:7f:3b:f6:f0:fd:ad:da:b6:5b:b2:2a:50: 08:3d:c7:d8:3c:62:78:fe:1b:94:d3:cd:de:a0:bf: 93:12:6f:50:62:eb:c1:44:90:dc:ae:34:e6:1d:66: 1d:16:41:91:98:bf:d6:40:74:0a:fe:f0:72:70:e1: e9:5e:57:65:2d:a7:2b:89:c4:4a:f1:b4:bb:01:b6: 2f:f2:22:6a:d1:02:e5:13:fa:11:c9:e8:9b:ec:b9: b6:02:66:98:4c:c8:2e:e6:83:99:b1:4a:e0:3d:38: aa:c8:02:74:1c:98:33:e6:9f:13:c2:c7:79:64:de: a0:87:53:a7:8b:cb:b6:cc:fb:bd:14:f7:d5:eb:a7: 5d:e8:4d:89:75:53:86:5d:23:a4:fb:f1:a9:d5:46: 11:71:6d:18:12:9f:3e:dc:2f:ff:38:74:57:e4:9e: 3b:8c:66:b2:80:56:b9:ad:a4:f9:b9:53:a0:33:5d: e5:62:97:ca:ca:e7:92:0d:bc:39:1a:59:6d:f1:26: 0d:2e:b6:e7:9e:e1:97:38:97:16:20:60:63:94:dd: e5:34:c8:2b:04:4e:0e:f5:a7:ce:20:43:ec:b9:cc: 0d:81:28:91:42:a7:ac:82:60:51:3f:ba:a5:cd:8a: 97:46:4a:f3:ab:b0:75:25:3e:cc:1a:e7:08:f0:93: 54:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:D1:C9:48:53:86:E6:00:94:0F:5F:31:DC:C1:7F:83:90:55:64:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/32cd9e6a-6b08-3b0e-8210-f35c47b3cea7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:7e:de:06:c0:69:a0:2a:ae:5e:5d:4e:ab:bc:af:f3:9f:a6: 39:a5:4e:52:5e:f0:c2:54:ae:6a:b5:71:86:71:37:b5:fa:ed: 7b:06:86:9f:a4:d4:5f:bb:63:8d:83:62:fb:85:8f:2d:04:b2: 42:83:6c:e1:a6:fb:96:93:5c:e2:f9:37:f1:6e:6f:c1:96:77: 80:1b:f3:de:95:ff:29:9b:c6:c5:e2:14:7f:c7:e0:70:65:66: ca:cf:ed:9f:3e:3f:df:59:66:f0:4d:d1:64:1c:8e:bc:46:b9: 2f:e5:d6:b6:4e:da:90:47:4b:a6:fd:7f:c0:18:93:af:54:d9: 2a:0b:0f:70:65:fc:e5:22:2a:81:ba:f0:68:16:f8:f7:07:9b: fd:05:d4:5e:d9:5e:20:ee:6d:c0:c1:b0:4e:8c:07:ef:f1:9e: 7e:0f:47:8c:e2:dd:17:a6:84:bd:5f:dc:95:a9:b9:3e:92:71: 38:e1:94:8c:ec:20:fa:53:05:4f:b8:43:8a:9e:93:f9:93:eb: 01:a3:a4:cf:5b:7c:84:02:94:2c:b7:f9:36:cd:51:b9:b6:cb: b3:aa:34:7f:73:20:32:4d:48:38:c5:b5:bd:0d:87:d3:41:dd: d0:e1:b5:98:55:19:27:18:0b:47:0d:d0:a9:48:79:e4:08:d8: 27:38:17:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErrW84FHjVRmvN7LgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDgyMDEzMDA0MVoXDTI1MTExODE0MDA0MVowLzEtMCsGA1UEAxMk ZWQ0Nzc4Y2EtZjM0YS00YjJiLThlNWEtMzg5ZTdlOTgxNWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+J/O/bw/a3atluyKlAIPcfYPGJ4/huU083e oL+TEm9QYuvBRJDcrjTmHWYdFkGRmL/WQHQK/vBycOHpXldlLacricRK8bS7AbYv 8iJq0QLlE/oRyeib7Lm2AmaYTMgu5oOZsUrgPTiqyAJ0HJgz5p8Twsd5ZN6gh1On i8u2zPu9FPfV66dd6E2JdVOGXSOk+/Gp1UYRcW0YEp8+3C//OHRX5J47jGaygFa5 raT5uVOgM13lYpfKyueSDbw5Gllt8SYNLrbnnuGXOJcWIGBjlN3lNMgrBE4O9afO IEPsucwNgSiRQqesgmBRP7qlzYqXRkrzq7B1JT7MGucI8JNUCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFXRyUhThuYAlA9fMdzBf4OQVWRpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvMzJjZDllNmEtNmIwOC0z YjBlLTgyMTAtZjM1YzQ3YjNjZWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEh+3gbAaaAqrl5dTqu8r/OfpjmlTlJe8MJUrmq1cYZxN7X67XsGhp+k 1F+7Y42DYvuFjy0EskKDbOGm+5aTXOL5N/Fub8GWd4Ab896V/ymbxsXiFH/H4HBl ZsrP7Z8+P99ZZvBN0WQcjrxGuS/l1rZO2pBHS6b9f8AYk69U2SoLD3Bl/OUiKoG6 8GgW+PcHm/0F1F7ZXiDubcDBsE6MB+/xnn4PR4zi3RemhL1f3JWpuT6ScTjhlIzs IPpTBU+4Q4qek/mT6wGjpM9bfIQClCy3+TbNUbm2y7OqNH9zIDJNSDjFtb0Nh9NB 3dDhtZhVGScYC0cN0KlIeeQI2Cc4F5E= -----END CERTIFICATE-----Generated at Sat Aug 23 13:33:36 2025 by rpki-client