$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3ed0a849-5c89-35d7-985e-41e808da21c8.roa File: 3ed0a849-5c89-35d7-985e-41e808da21c8.roa (raw, json) Hash identifier: nsQrhHxjnrkWNSxixBygyJy1cRIF/PAJf2N6KlipdzU= Subject key identifier: 4E:A9:61:09:3D:1D:17:4C:BC:5F:57:63:CD:ED:FF:15:57:13:F0:E3 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584AE6286DEAB35F18F06DE2DEC0 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3ed0a849-5c89-35d7-985e-41e808da21c8.roa Signing time: Mon 18 Aug 2025 16:18:09 +0000 ROA not before: Mon 18 Aug 2025 16:18:09 +0000 ROA not after: Sun 16 Nov 2025 17:18:09 +0000 asID: 9304 IP address blocks: 198.1.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e6:28:6d:ea:b3:5f:18:f0:6d:e2:de:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Aug 18 16:18:09 2025 GMT Not After : Nov 16 17:18:09 2025 GMT Subject: CN=a5ebbfb9-dcc0-4f7a-b4d1-c7ac2c1c2e94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4c:c9:a8:f1:de:7d:30:9b:5c:33:3f:12:11: b7:ee:1a:4e:f1:14:4d:5c:89:09:69:97:80:13:99: f3:88:a1:2d:f6:b5:a2:4b:5d:c6:67:3c:a3:cb:2c: 6c:86:8c:6d:33:c6:b1:e6:52:5f:b1:a6:87:c7:df: 80:db:19:ac:4c:1e:98:4c:27:43:7d:7b:c2:47:a3: 46:b7:cc:48:7c:62:38:af:fd:33:b3:af:c7:b8:5b: 1d:38:9c:fb:04:1a:bc:06:eb:fe:e6:48:96:80:ae: a6:4b:91:96:66:a3:ea:63:11:be:10:1d:fc:f2:bf: 58:42:57:1a:e7:0a:14:51:8d:b8:d3:25:3c:86:d5: 96:ed:bf:d0:40:db:84:bb:0d:7b:2f:4a:78:52:e6: 2a:e7:67:35:53:f4:6d:27:cf:7e:54:c0:69:89:4e: 93:91:1d:a5:7c:7b:c8:74:57:dd:a8:00:1c:44:9e: d3:14:75:d3:83:d2:31:4a:64:57:c9:8f:21:77:3b: fc:47:d4:7d:95:d3:2d:c2:b2:46:dd:35:48:d8:97: 77:8c:1a:69:78:85:cc:a2:8b:63:91:46:0e:1a:11: fc:54:9a:5e:af:fb:ef:45:f9:a0:0b:89:41:df:81: 54:e3:c2:5f:ae:1d:80:a8:4a:8c:ad:1c:fd:6a:dd: ed:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A9:61:09:3D:1D:17:4C:BC:5F:57:63:CD:ED:FF:15:57:13:F0:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3ed0a849-5c89-35d7-985e-41e808da21c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:25:c9:48:ea:8c:45:b5:5b:5c:c2:02:d9:a7:e9:76:90:73: 62:c8:f9:d4:e2:5d:a2:e9:df:26:29:23:65:d5:eb:ca:b0:42: b6:67:69:dd:f7:27:50:3b:de:12:fb:9d:f7:52:a4:70:ba:de: 5d:07:1b:fc:4b:7e:87:cc:ae:47:c1:89:12:8b:81:0d:5c:fe: aa:a3:d5:d4:14:ef:f7:4a:d6:5e:b2:57:7f:c5:d7:17:58:45: a5:c8:cd:e7:fa:f0:ac:53:75:9b:49:62:06:8b:1f:52:7a:54: 3c:76:9d:c6:06:d4:fa:5f:2a:42:1b:6e:7c:b0:ec:39:db:f2: c7:65:f9:33:8d:01:03:c6:67:9c:8b:37:fe:65:7e:64:6c:7b: 9f:11:fd:37:07:a8:01:fc:76:bc:b7:20:72:c5:19:6b:7a:18: 62:24:77:0c:ab:43:97:2c:19:c0:c0:cc:bb:8c:ba:22:45:4e: f6:54:99:43:d7:70:cd:9a:f8:fa:1f:88:e8:75:eb:04:e2:8b: b4:c2:94:ae:60:be:b9:ab:4b:5b:4f:64:95:4e:cf:ef:82:48: eb:51:c3:42:e6:4e:9d:eb:26:91:48:32:7d:aa:d4:5e:d9:3d: 54:68:f5:f9:51:28:01:fa:9c:ac:e1:4a:c0:2c:d3:09:be:a4: 99:cf:95:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErmKG3qs18Y8G3i3sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDgxODE2MTgwOVoXDTI1MTExNjE3MTgwOVowLzEtMCsGA1UEAxMk YTVlYmJmYjktZGNjMC00ZjdhLWI0ZDEtYzdhYzJjMWMyZTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkzJqPHefTCbXDM/EhG37hpO8RRNXIkJaZeA E5nziKEt9rWiS13GZzyjyyxshoxtM8ax5lJfsaaHx9+A2xmsTB6YTCdDfXvCR6NG t8xIfGI4r/0zs6/HuFsdOJz7BBq8Buv+5kiWgK6mS5GWZqPqYxG+EB388r9YQlca 5woUUY240yU8htWW7b/QQNuEuw17L0p4UuYq52c1U/RtJ89+VMBpiU6TkR2lfHvI dFfdqAAcRJ7TFHXTg9IxSmRXyY8hdzv8R9R9ldMtwrJG3TVI2Jd3jBppeIXMootj kUYOGhH8VJper/vvRfmgC4lB34FU48Jfrh2AqEqMrRz9at3tBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6pYQk9HRdMvF9XY83t/xVXE/DjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvM2VkMGE4NDktNWM4OS0z NWQ3LTk4NWUtNDFlODA4ZGEyMWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAlyUjqjEW1W1zCAtmn6XaQc2LI+dTiXaLp3yYpI2XV68qwQrZnad33 J1A73hL7nfdSpHC63l0HG/xLfofMrkfBiRKLgQ1c/qqj1dQU7/dK1l6yV3/F1xdY RaXIzef68KxTdZtJYgaLH1J6VDx2ncYG1PpfKkIbbnyw7Dnb8sdl+TONAQPGZ5yL N/5lfmRse58R/TcHqAH8dry3IHLFGWt6GGIkdwyrQ5csGcDAzLuMuiJFTvZUmUPX cM2a+PofiOh16wTii7TClK5gvrmrS1tPZJVOz++CSOtRw0LmTp3rJpFIMn2q1F7Z PVRo9flRKAH6nKzhSsAs0wm+pJnPlew= -----END CERTIFICATE-----Generated at Sat Aug 23 15:47:49 2025 by rpki-client