$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3597fa41-0807-3147-8c7b-86c72ed87a96.roa File: 3597fa41-0807-3147-8c7b-86c72ed87a96.roa (raw, json) Hash identifier: 6OwGsD5uN/ZOKEPhPHveTHLQdKCHHEgvusE/odjwtHk= Subject key identifier: FF:19:29:4C:BF:7F:9E:20:8A:AB:83:4D:E5:3A:A1:A4:84:70:77:5D Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584A4DA05372B094FE767E554B40 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3597fa41-0807-3147-8c7b-86c72ed87a96.roa Signing time: Wed 25 Jun 2025 01:00:49 +0000 ROA not before: Wed 25 Jun 2025 01:00:49 +0000 ROA not after: Tue 23 Sep 2025 01:00:49 +0000 asID: 399672 IP address blocks: 198.1.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4d:a0:53:72:b0:94:fe:76:7e:55:4b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Jun 25 01:00:49 2025 GMT Not After : Sep 23 01:00:49 2025 GMT Subject: CN=af9efddc-f31c-421d-a668-1a65cb7ff278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:0b:76:96:90:ad:bf:1f:92:56:5c:5d:e5:e3: b7:4e:3d:f2:aa:5d:eb:a5:9e:c1:b3:cc:89:f7:c5: f6:a6:8c:b3:17:40:d9:7e:3f:ca:0b:d6:ef:e7:f4: d5:0f:a6:1b:21:5b:c8:8d:f2:91:fc:b3:97:ec:32: d3:96:7b:66:d3:74:a0:92:5a:a7:a8:14:78:fb:94: f2:06:c0:38:bf:75:d4:80:a5:24:ba:9e:db:71:d0: 3a:6f:20:84:ad:64:dc:6b:ca:52:b9:76:3c:cc:c1: 08:76:e2:30:21:a8:34:fd:a2:77:b4:93:42:40:57: a0:73:73:5c:71:92:67:15:6b:88:f8:c6:4e:fa:52: ec:b5:32:59:6d:36:bd:68:7e:ba:f9:f7:99:20:21: 03:4a:b2:a5:71:a5:45:1d:42:b2:47:71:91:6e:23: 82:e9:9b:81:0b:d2:fc:13:ae:f0:40:a9:8a:9f:39: 43:a2:37:22:45:68:4c:d2:4e:b1:ed:49:46:c3:bf: 12:8b:d2:d5:86:c7:6a:57:c9:15:ba:a3:06:42:b5: cd:39:5c:ad:d7:42:46:74:a2:b7:95:4b:f6:eb:6d: 60:98:ff:a5:35:64:73:91:55:b3:05:f0:ef:f8:71: d9:9a:b3:61:d1:70:48:4c:f3:4a:47:e4:48:33:ff: 44:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:19:29:4C:BF:7F:9E:20:8A:AB:83:4D:E5:3A:A1:A4:84:70:77:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3597fa41-0807-3147-8c7b-86c72ed87a96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:5f:d0:12:d1:b4:3b:f1:53:51:74:11:e1:f6:fe:b7:2b:b3: 38:31:a1:e5:00:e5:55:2e:a4:27:dc:f4:31:14:5d:2f:97:c2: 92:c3:1b:23:9d:0a:e5:80:25:f5:20:c8:c5:aa:ce:77:3b:6c: 17:26:df:0b:a1:6a:be:0e:4c:6b:35:dc:97:3e:ab:7f:40:84: 99:92:fd:1b:70:b1:a1:ba:d9:1a:f0:77:80:27:62:80:2b:a5: 3e:bd:b6:83:0e:e8:02:af:f0:3b:9c:99:cc:87:d0:7e:70:70: d2:77:62:80:54:14:37:10:a7:bc:f2:42:d6:4c:10:3f:07:f7: 68:3a:e6:c9:dd:15:57:c1:19:e8:f8:33:c2:8a:b3:65:dd:be: b6:4f:b1:e7:d9:16:9a:5c:92:93:14:1c:30:37:a0:91:d3:2f: 0c:a7:d3:ca:ee:cb:e9:05:fe:b4:a0:2c:d0:ff:4d:36:64:e7: 8d:96:7e:e6:27:a4:17:0d:e4:aa:ad:43:60:0b:c3:a7:53:f7: 75:10:d9:a2:52:78:0c:39:e4:eb:0a:63:02:a4:4f:c9:56:ba: 33:3c:5e:ac:15:06:aa:dd:07:95:00:1a:d3:21:2a:4d:54:d4: ec:03:d3:99:a1:df:21:17:42:0d:26:33:13:2c:f3:89:4e:21: 0c:30:99:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpNoFNysJT+dn5VS0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDYyNTAxMDA0OVoXDTI1MDkyMzAxMDA0OVowLzEtMCsGA1UEAxMk YWY5ZWZkZGMtZjMxYy00MjFkLWE2NjgtMWE2NWNiN2ZmMjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwt2lpCtvx+SVlxd5eO3Tj3yql3rpZ7Bs8yJ 98X2poyzF0DZfj/KC9bv5/TVD6YbIVvIjfKR/LOX7DLTlntm03SgklqnqBR4+5Ty BsA4v3XUgKUkup7bcdA6byCErWTca8pSuXY8zMEIduIwIag0/aJ3tJNCQFegc3Nc cZJnFWuI+MZO+lLstTJZbTa9aH66+feZICEDSrKlcaVFHUKyR3GRbiOC6ZuBC9L8 E67wQKmKnzlDojciRWhM0k6x7UlGw78Si9LVhsdqV8kVuqMGQrXNOVyt10JGdKK3 lUv2621gmP+lNWRzkVWzBfDv+HHZmrNh0XBITPNKR+RIM/9EjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8ZKUy/f54giquDTeU6oaSEcHddMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvMzU5N2ZhNDEtMDgwNy0z MTQ3LThjN2ItODZjNzJlZDg3YTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhf0BLRtDvxU1F0EeH2/rcrszgxoeUA5VUupCfc9DEUXS+XwpLDGyOd CuWAJfUgyMWqznc7bBcm3wuhar4OTGs13Jc+q39AhJmS/RtwsaG62Rrwd4AnYoAr pT69toMO6AKv8DucmcyH0H5wcNJ3YoBUFDcQp7zyQtZMED8H92g65sndFVfBGej4 M8KKs2XdvrZPsefZFppckpMUHDA3oJHTLwyn08ruy+kF/rSgLND/TTZk542WfuYn pBcN5KqtQ2ALw6dT93UQ2aJSeAw55OsKYwKkT8lWujM8XqwVBqrdB5UAGtMhKk1U 1OwD05mh3yEXQg0mMxMs84lOIQwwmYk= -----END CERTIFICATE-----Generated at Mon Jun 30 12:01:32 2025 by rpki-client