$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3af862da-851f-39d9-9db1-d644ee402747.roa File: 3af862da-851f-39d9-9db1-d644ee402747.roa (raw, json) Hash identifier: Mq1z+WyfqoLco0UZKM4bd658WzlHEWn3rRbYKxsTmh8= Subject key identifier: FE:00:8B:49:F4:3A:69:85:9D:3A:32:F2:64:80:5F:6C:3A:E3:5F:02 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584A4A3A5F16D009BC5ACAAE3580 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3af862da-851f-39d9-9db1-d644ee402747.roa Signing time: Mon 23 Jun 2025 19:48:11 +0000 ROA not before: Mon 23 Jun 2025 19:48:11 +0000 ROA not after: Sun 21 Sep 2025 19:48:11 +0000 asID: 20001 IP address blocks: 198.1.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4a:3a:5f:16:d0:09:bc:5a:ca:ae:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Jun 23 19:48:11 2025 GMT Not After : Sep 21 19:48:11 2025 GMT Subject: CN=66b3824c-0e57-4593-bc82-8d96fff5c692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:34:91:e7:97:d5:7c:73:94:d9:5a:c9:ed:eb: f6:6c:67:f7:cd:3f:13:1e:46:7f:27:9e:cd:e5:09: 32:b8:5e:51:d5:39:70:45:6b:21:61:78:07:c3:ef: 7d:52:58:21:5b:f5:ec:5b:df:36:4a:5c:94:d1:76: da:de:d9:43:b8:8b:e1:64:08:bd:4d:3b:06:3a:81: 36:25:20:4e:d4:00:5e:73:39:69:7d:8e:fe:a1:78: 90:01:74:17:e3:88:dd:63:7a:8c:7c:a0:02:1d:4d: d0:0e:ad:10:73:17:ec:2a:bd:a8:20:56:6b:5b:88: 2e:cb:2d:82:bd:33:68:0f:de:1c:a8:de:30:18:c4: d0:ba:0c:66:2d:1d:31:3c:6b:ed:2b:15:74:b0:74: dd:f6:f7:b5:f9:ec:a5:c4:c7:06:02:1a:17:ef:86: d9:8b:28:c2:b4:f1:c0:fb:b0:4f:6a:5a:c3:63:88: cc:17:c4:ed:d9:8a:f6:12:8e:35:7d:ff:9f:bd:a8: 91:47:01:96:02:cf:3e:3b:87:04:41:70:0b:2f:ef: 6a:55:24:96:cc:6a:93:de:95:6a:6c:6f:32:04:83: aa:9e:34:29:78:50:42:fd:3d:7f:28:4e:6b:b6:aa: 5d:9e:41:ce:2d:06:46:53:65:32:2d:0d:2b:48:93: 8d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:00:8B:49:F4:3A:69:85:9D:3A:32:F2:64:80:5F:6C:3A:E3:5F:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3af862da-851f-39d9-9db1-d644ee402747.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:68:f4:dc:66:f1:0e:2c:d8:a4:95:b7:0e:83:0c:8d:3e:bc: 7e:72:88:35:51:bb:c6:55:62:61:1d:ad:f7:2b:8c:0e:de:46: 4a:35:3d:8e:27:b6:79:62:c6:b1:42:18:f6:b2:f0:b2:b5:20: 79:64:71:b9:34:67:5c:c5:b2:45:60:bd:a4:49:dc:3b:f4:86: 65:44:cc:24:63:48:bb:4a:65:73:5e:24:03:e7:0a:31:57:ca: 9d:b7:c8:fc:57:9d:c2:df:74:00:65:3b:8d:98:72:60:12:42: 42:f0:69:2c:a8:bd:51:ee:12:99:e4:fc:eb:46:f2:9a:62:41: 8a:79:f4:6e:48:42:62:55:db:d8:6d:05:25:a1:af:ce:55:5e: a4:5f:27:43:90:b4:38:ae:94:7e:10:c9:6c:01:92:1d:59:1b: da:ba:35:52:65:d1:4e:f8:6c:b2:77:86:65:bd:75:72:a5:93: f0:05:d3:6f:fc:fc:fd:8d:55:27:d7:3f:9a:34:80:cb:e0:ae: 4c:80:93:40:4c:5c:02:02:ee:96:71:4c:36:ac:60:ef:ed:5e: 52:b6:70:83:9e:64:77:5d:6f:93:74:03:db:3f:6a:5c:3a:ee: 4d:59:c4:57:a2:6c:a8:0e:f5:fc:86:5b:4d:97:01:c7:cb:20: 41:ed:f6:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpKOl8W0Am8WsquNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDYyMzE5NDgxMVoXDTI1MDkyMTE5NDgxMVowLzEtMCsGA1UEAxMk NjZiMzgyNGMtMGU1Ny00NTkzLWJjODItOGQ5NmZmZjVjNjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTSR55fVfHOU2VrJ7ev2bGf3zT8THkZ/J57N 5QkyuF5R1TlwRWshYXgHw+99UlghW/XsW982SlyU0Xba3tlDuIvhZAi9TTsGOoE2 JSBO1ABeczlpfY7+oXiQAXQX44jdY3qMfKACHU3QDq0QcxfsKr2oIFZrW4guyy2C vTNoD94cqN4wGMTQugxmLR0xPGvtKxV0sHTd9ve1+eylxMcGAhoX74bZiyjCtPHA +7BPalrDY4jMF8Tt2Yr2Eo41ff+fvaiRRwGWAs8+O4cEQXALL+9qVSSWzGqT3pVq bG8yBIOqnjQpeFBC/T1/KE5rtqpdnkHOLQZGU2UyLQ0rSJONxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP4Ai0n0OmmFnToy8mSAX2w6418CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvM2FmODYyZGEtODUxZi0z OWQ5LTlkYjEtZDY0NGVlNDAyNzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxo9Nxm8Q4s2KSVtw6DDI0+vH5yiDVRu8ZVYmEdrfcrjA7eRko1PY4n tnlixrFCGPay8LK1IHlkcbk0Z1zFskVgvaRJ3Dv0hmVEzCRjSLtKZXNeJAPnCjFX yp23yPxXncLfdABlO42YcmASQkLwaSyovVHuEpnk/OtG8ppiQYp59G5IQmJV29ht BSWhr85VXqRfJ0OQtDiulH4QyWwBkh1ZG9q6NVJl0U74bLJ3hmW9dXKlk/AF02/8 /P2NVSfXP5o0gMvgrkyAk0BMXAIC7pZxTDasYO/tXlK2cIOeZHddb5N0A9s/alw6 7k1ZxFeibKgO9fyGW02XAcfLIEHt9tA= -----END CERTIFICATE-----Generated at Mon Jun 30 15:29:14 2025 by rpki-client