$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3d8b4dcb-7751-3984-a936-8ae629d5a62f.roa File: 3d8b4dcb-7751-3984-a936-8ae629d5a62f.roa (raw, json) Hash identifier: La9KfP5uC4cyj7h4hhQmGNlQb+VR+C9fblLfueXhZns= Subject key identifier: DA:7D:AB:07:7E:FA:F7:8D:B2:93:26:60:85:ED:40:C4:90:85:C2:6F Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584A3F04530716BC2E2A9D49D220 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3d8b4dcb-7751-3984-a936-8ae629d5a62f.roa Signing time: Thu 19 Jun 2025 19:25:24 +0000 ROA not before: Thu 19 Jun 2025 19:25:24 +0000 ROA not after: Wed 17 Sep 2025 19:25:24 +0000 asID: 7029 IP address blocks: 198.1.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3f:04:53:07:16:bc:2e:2a:9d:49:d2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Jun 19 19:25:24 2025 GMT Not After : Sep 17 19:25:24 2025 GMT Subject: CN=3e2a1844-3acb-4e56-ad9e-82c7549f59c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3f:bf:9b:79:d1:bd:f7:2d:61:76:3f:a9:6d: 9c:98:67:cd:d5:ac:9a:59:e9:b6:64:b8:de:b2:f1: 0f:59:eb:ad:c2:f9:01:f0:fa:c5:3d:67:25:87:05: 8e:83:af:66:b5:bf:09:e9:e1:73:cf:55:a7:21:f9: f1:e4:12:1f:4e:ca:fa:bd:f9:4f:e6:2d:eb:79:d0: 92:0c:35:5e:17:ff:7c:ee:cf:fe:f2:09:e7:d6:34: 50:ad:37:51:ef:f5:ae:fe:30:22:c5:33:4f:16:7a: 9f:d7:1e:a9:a2:70:27:62:51:0f:0b:3d:d8:3f:4f: ba:72:5c:79:35:17:e8:d4:1d:04:57:43:bf:2a:b3: 92:70:db:74:69:c8:cc:ce:40:a4:47:27:61:04:6a: 84:3f:ed:9c:74:e4:08:92:71:7b:58:98:e8:e9:16: 67:89:c4:05:53:61:ca:d1:2a:53:34:b5:17:fe:39: 2d:cb:02:08:91:c8:d2:73:c6:53:59:9f:c5:22:51: d0:c1:db:c8:6c:31:3e:1b:ee:2c:a9:71:c7:2c:9e: 4c:13:ae:11:f8:f5:53:4b:42:40:da:2b:6f:85:1c: 26:be:a0:a8:52:be:57:8b:dc:a2:55:f1:63:df:59: f7:72:0e:94:3b:39:3e:09:bd:b5:14:40:65:59:a3: 1b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:7D:AB:07:7E:FA:F7:8D:B2:93:26:60:85:ED:40:C4:90:85:C2:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3d8b4dcb-7751-3984-a936-8ae629d5a62f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:f8:f6:4e:58:4d:f8:3c:18:14:cc:6c:e8:77:a7:42:33:3b: 56:e7:49:b3:b9:e6:4a:f5:78:ea:da:58:fa:3e:39:05:48:be: 6e:6d:e1:c6:42:07:b2:89:54:ea:aa:dd:66:44:23:67:8a:87: 3b:05:79:0f:9e:f8:93:f1:21:f6:62:8a:3a:5f:87:e1:1c:3d: 96:8c:ca:8c:72:80:02:5c:5b:63:14:db:9d:f4:14:67:46:68: fb:bf:17:50:fa:55:75:9d:3b:79:40:17:bf:68:29:d6:09:4e: 97:8c:d9:b4:9d:88:39:90:a5:3e:9b:f1:1b:09:61:de:ca:8b: 96:a4:7f:ef:e6:b2:f8:a3:4a:81:79:ef:f8:8a:f7:6a:e9:dd: 32:6a:f4:3c:5b:19:a2:23:7c:3f:b4:f7:f8:b0:05:fd:0a:41: bf:aa:0a:15:74:16:5d:e7:fa:0e:e8:f3:95:23:34:d8:a6:7a: 77:de:a8:73:fa:4a:b4:e1:fb:4b:00:c5:06:52:71:a2:71:02: be:84:40:b7:c9:76:f5:a6:a5:72:1e:cf:f9:73:23:61:23:bb: db:62:6f:f8:4e:75:a5:32:80:b0:98:0b:26:b2:80:f1:c4:e9: 9e:4c:a2:f3:eb:5a:b9:15:be:b2:0b:76:08:bd:10:78:90:28: 68:f9:25:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo/BFMHFrwuKp1J0iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDYxOTE5MjUyNFoXDTI1MDkxNzE5MjUyNFowLzEtMCsGA1UEAxMk M2UyYTE4NDQtM2FjYi00ZTU2LWFkOWUtODJjNzU0OWY1OWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkj+/m3nRvfctYXY/qW2cmGfN1ayaWem2ZLje svEPWeutwvkB8PrFPWclhwWOg69mtb8J6eFzz1WnIfnx5BIfTsr6vflP5i3redCS DDVeF/987s/+8gnn1jRQrTdR7/Wu/jAixTNPFnqf1x6ponAnYlEPCz3YP0+6clx5 NRfo1B0EV0O/KrOScNt0acjMzkCkRydhBGqEP+2cdOQIknF7WJjo6RZnicQFU2HK 0SpTNLUX/jktywIIkcjSc8ZTWZ/FIlHQwdvIbDE+G+4sqXHHLJ5ME64R+PVTS0JA 2itvhRwmvqCoUr5Xi9yiVfFj31n3cg6UOzk+Cb21FEBlWaMbMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNp9qwd++veNspMmYIXtQMSQhcJvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvM2Q4YjRkY2ItNzc1MS0z OTg0LWE5MzYtOGFlNjI5ZDVhNjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADn49k5YTfg8GBTMbOh3p0IzO1bnSbO55kr1eOraWPo+OQVIvm5t4cZC B7KJVOqq3WZEI2eKhzsFeQ+e+JPxIfZiijpfh+EcPZaMyoxygAJcW2MU2530FGdG aPu/F1D6VXWdO3lAF79oKdYJTpeM2bSdiDmQpT6b8RsJYd7Ki5akf+/msvijSoF5 7/iK92rp3TJq9DxbGaIjfD+09/iwBf0KQb+qChV0Fl3n+g7o85UjNNimenfeqHP6 SrTh+0sAxQZScaJxAr6EQLfJdvWmpXIez/lzI2Eju9tib/hOdaUygLCYCyaygPHE 6Z5MovPrWrkVvrILdgi9EHiQKGj5Jbc= -----END CERTIFICATE-----Generated at Sun Jun 29 09:17:34 2025 by rpki-client