$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3356bbde-9a79-3668-b9b1-9618599f6036.roa File: 3356bbde-9a79-3668-b9b1-9618599f6036.roa (raw, json) Hash identifier: 38EvHzPs3mInWy/ySe2b12+ods1SX+K+bIOX7Rc7w3s= Subject key identifier: 08:CB:5E:4F:8C:01:9E:B3:37:20:AD:01:84:46:89:89:6A:78:91:E9 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584A3B7EFC9268A3F4662AF06880 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3356bbde-9a79-3668-b9b1-9618599f6036.roa Signing time: Wed 18 Jun 2025 13:09:19 +0000 ROA not before: Wed 18 Jun 2025 13:09:19 +0000 ROA not after: Tue 16 Sep 2025 13:09:19 +0000 asID: 151373 IP address blocks: 198.1.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7e:fc:92:68:a3:f4:66:2a:f0:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Jun 18 13:09:19 2025 GMT Not After : Sep 16 13:09:19 2025 GMT Subject: CN=77b2db5c-d3fb-4a5f-87d2-cc95b9808fc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d6:6f:75:ed:29:56:6e:b4:b3:b6:56:5e:10: d9:00:58:c1:95:3f:80:9c:5d:0d:c0:68:f4:c9:10: 7c:56:e3:eb:d5:2c:5d:00:e8:3d:8c:23:fa:af:c0: 58:dd:8e:e2:aa:44:f3:89:93:ca:a2:d7:b2:0d:1b: ac:e8:bd:26:0a:8c:70:6f:55:fc:04:14:24:69:9f: ef:4f:65:98:e0:6f:04:14:ae:ad:27:fd:31:bb:35: f8:c7:46:57:53:08:b9:43:48:08:0b:21:bf:b9:13: 5a:23:0a:46:e8:38:65:ca:45:ce:ec:2c:b2:bb:f8: 15:86:7a:d6:12:26:de:8a:a1:3f:9d:ef:10:4f:7f: e7:5e:2e:b5:3c:04:14:e3:9f:6b:ff:74:8c:45:35: f7:9b:f2:80:66:60:cc:3f:18:0a:77:72:2d:b6:18: 6f:77:b8:66:dd:e5:85:ec:fb:a7:43:39:be:93:25: 2a:ba:77:56:1e:ff:7f:a5:9c:2b:85:bb:8f:c3:f2: 44:74:d5:4b:aa:59:5d:a4:ea:d7:c9:c3:0d:a3:10: 71:69:c3:c4:80:65:34:db:cd:f0:a3:b6:c9:1c:e7: 6e:e8:bc:59:4c:a3:ef:40:1e:30:87:4a:75:d7:3c: cf:f7:bc:67:2b:15:1a:cb:dd:a8:4f:eb:05:c6:90: db:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:CB:5E:4F:8C:01:9E:B3:37:20:AD:01:84:46:89:89:6A:78:91:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3356bbde-9a79-3668-b9b1-9618599f6036.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:dd:14:09:0f:02:3a:29:15:6b:2f:e6:25:f2:30:c6:98:11: 3c:58:d1:03:91:e4:92:42:53:e1:91:15:a1:83:5c:00:bb:a3: 85:4c:08:38:5f:fb:fc:03:b8:c4:98:99:51:d8:7b:3a:35:db: 8e:d3:fc:8c:39:e9:49:46:a8:23:ab:32:94:a3:14:6d:ba:3c: 42:94:2d:07:85:61:ab:2e:28:58:2e:01:98:29:83:5c:ec:83: a6:82:27:c3:80:69:dd:48:98:18:95:6b:49:fa:cb:b5:e8:4f: 58:c4:ca:a5:07:33:d1:96:16:51:ac:e8:ae:b9:9d:f8:c2:f2: 68:ac:4e:98:e1:99:a1:3c:64:fa:3c:ee:7f:8f:1e:28:a6:ea: 1a:89:df:e4:35:aa:d6:43:8d:24:f9:74:07:4a:62:c7:ef:37: 12:4d:f7:b9:8b:e9:7e:75:57:36:85:30:97:9a:38:8d:97:d9: a0:b0:a8:b2:f3:61:50:5c:71:40:fc:5d:1b:52:c5:6a:99:dd: 3a:b1:84:77:0e:46:e8:ad:23:4d:a5:e0:1b:aa:69:b0:5f:a4: 00:95:da:46:09:6e:06:d9:08:af:52:fe:bd:de:b5:0f:c6:36: df:cd:a7:de:62:61:9d:84:30:85:f7:5f:e3:a7:76:89:51:86: 95:c2:03:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7fvySaKP0ZirwaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDYxODEzMDkxOVoXDTI1MDkxNjEzMDkxOVowLzEtMCsGA1UEAxMk NzdiMmRiNWMtZDNmYi00YTVmLTg3ZDItY2M5NWI5ODA4ZmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNZvde0pVm60s7ZWXhDZAFjBlT+AnF0NwGj0 yRB8VuPr1SxdAOg9jCP6r8BY3Y7iqkTziZPKoteyDRus6L0mCoxwb1X8BBQkaZ/v T2WY4G8EFK6tJ/0xuzX4x0ZXUwi5Q0gICyG/uRNaIwpG6DhlykXO7Cyyu/gVhnrW EibeiqE/ne8QT3/nXi61PAQU459r/3SMRTX3m/KAZmDMPxgKd3Itthhvd7hm3eWF 7PunQzm+kyUqundWHv9/pZwrhbuPw/JEdNVLqlldpOrXycMNoxBxacPEgGU0283w o7bJHOdu6LxZTKPvQB4wh0p11zzP97xnKxUay92oT+sFxpDb6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjLXk+MAZ6zNyCtAYRGiYlqeJHpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvMzM1NmJiZGUtOWE3OS0z NjY4LWI5YjEtOTYxODU5OWY2MDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgH1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3dFAkPAjopFWsv5iXyMMaYETxY0QOR5JJCU+GRFaGDXAC7o4VMCDhf +/wDuMSYmVHYezo1247T/Iw56UlGqCOrMpSjFG26PEKULQeFYasuKFguAZgpg1zs g6aCJ8OAad1ImBiVa0n6y7XoT1jEyqUHM9GWFlGs6K65nfjC8misTpjhmaE8ZPo8 7n+PHiim6hqJ3+Q1qtZDjST5dAdKYsfvNxJN97mL6X51VzaFMJeaOI2X2aCwqLLz YVBccUD8XRtSxWqZ3TqxhHcORuitI02l4BuqabBfpACV2kYJbgbZCK9S/r3etQ/G Nt/Np95iYZ2EMIX3X+OndolRhpXCA/I= -----END CERTIFICATE-----Generated at Tue Jul 1 06:49:13 2025 by rpki-client