$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3f4bf858-3db2-3e37-a47f-ce4307185f94.roa File: 3f4bf858-3db2-3e37-a47f-ce4307185f94.roa (raw, json) Hash identifier: mIrJ8cR5foQNO9sjyoOrStpqVyJekX7qEJ7QJ7eqGXM= Subject key identifier: F0:1E:3E:84:CA:03:E4:01:1B:C6:C3:63:CB:0C:E5:5A:8C:A2:E2:81 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584A4A3AAF60033B7CEADC790CC0 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3f4bf858-3db2-3e37-a47f-ce4307185f94.roa Signing time: Mon 23 Jun 2025 19:48:49 +0000 ROA not before: Mon 23 Jun 2025 19:48:49 +0000 ROA not after: Sun 21 Sep 2025 19:48:49 +0000 asID: 20001 IP address blocks: 198.1.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4a:3a:af:60:03:3b:7c:ea:dc:79:0c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Jun 23 19:48:49 2025 GMT Not After : Sep 21 19:48:49 2025 GMT Subject: CN=420b4c1f-9f85-4f83-b061-9473301e363d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:0e:4e:80:98:46:d5:54:46:db:48:6d:ba:23: 2d:b1:1b:87:5f:44:09:fc:ff:8e:3a:bb:dd:de:6f: 44:3c:48:9c:b8:4e:42:92:51:80:0e:ae:ec:d8:04: 74:88:03:6c:c2:4f:34:29:a3:ed:33:24:14:ab:da: 81:31:93:eb:c5:e2:41:b5:05:55:08:63:a8:e6:cb: c8:58:b6:a4:1d:ac:f8:e4:03:a6:08:55:3f:73:6a: f6:8b:99:04:e9:19:65:47:21:d3:02:df:23:04:48: e0:bf:c7:4e:64:53:b7:34:6a:73:b5:1f:b9:9d:85: 3d:ce:a6:23:a8:d7:f7:42:cb:7c:ea:d2:8d:34:1f: d4:3e:6d:7c:d9:c7:b2:3a:92:2d:8d:a3:26:56:d5: 0f:c9:9f:dd:1f:23:15:fd:b5:cd:33:c1:19:e6:39: 14:34:5b:e4:43:30:c9:b1:9b:17:00:50:19:11:62: 1d:79:1f:03:fb:db:42:d4:9f:c1:fd:72:f0:80:d6: f2:40:1f:93:d6:45:db:2f:f9:c6:0d:9f:c0:d2:2d: 42:7b:1f:a1:65:af:d9:bd:75:3c:80:ff:a9:38:d1: 49:27:af:05:c6:df:d8:c7:db:b4:38:c6:25:95:d7: 23:c1:b5:30:50:9b:ae:bf:d5:37:bd:de:15:b0:1f: 60:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:1E:3E:84:CA:03:E4:01:1B:C6:C3:63:CB:0C:E5:5A:8C:A2:E2:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3f4bf858-3db2-3e37-a47f-ce4307185f94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:e8:dc:c7:b9:28:51:fb:f7:fe:35:1e:40:55:85:59:4b:3e: d0:aa:1f:18:09:03:32:a8:8b:fb:fd:27:1d:a4:8b:fe:99:8d: b3:20:fc:66:e2:40:cb:f9:59:9c:f4:47:b8:bc:c9:bd:9b:d7: 1a:e6:91:cd:16:5c:89:09:de:f1:fa:04:20:74:c5:6a:94:05: bc:99:0e:bf:7a:9f:2a:fd:0f:ba:51:07:f5:84:fe:2c:4a:af: 1e:af:24:59:cd:b7:80:99:ea:63:de:70:1c:90:52:67:7f:27: 6a:d9:d6:25:54:7a:f2:16:1d:4e:e0:26:c3:42:de:d4:e1:e0: 26:08:82:a3:0f:32:b6:39:91:c6:d4:f2:44:72:42:90:40:d8: 25:1c:6f:cc:bd:42:ee:a0:23:e7:b3:9c:10:37:4d:3b:fc:3c: bb:3c:29:8c:39:a9:2e:1d:63:30:61:d2:2b:77:db:64:9d:e6: b8:cc:8e:a1:0c:0f:62:c7:be:d9:a8:bf:b8:27:71:eb:e4:34: 26:ff:d4:bf:a3:7b:54:27:64:71:01:7d:5b:14:c3:aa:ad:55: 62:4d:33:1b:ef:3b:46:f2:48:47:2e:63:99:af:e3:bd:21:d5: cb:47:e6:31:fa:d5:5d:3d:d6:26:91:82:43:27:0d:24:6d:88: fa:a8:dd:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpKOq9gAzt86tx5DMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDYyMzE5NDg0OVoXDTI1MDkyMTE5NDg0OVowLzEtMCsGA1UEAxMk NDIwYjRjMWYtOWY4NS00ZjgzLWIwNjEtOTQ3MzMwMWUzNjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhw5OgJhG1VRG20htuiMtsRuHX0QJ/P+OOrvd 3m9EPEicuE5CklGADq7s2AR0iANswk80KaPtMyQUq9qBMZPrxeJBtQVVCGOo5svI WLakHaz45AOmCFU/c2r2i5kE6RllRyHTAt8jBEjgv8dOZFO3NGpztR+5nYU9zqYj qNf3Qst86tKNNB/UPm182ceyOpItjaMmVtUPyZ/dHyMV/bXNM8EZ5jkUNFvkQzDJ sZsXAFAZEWIdeR8D+9tC1J/B/XLwgNbyQB+T1kXbL/nGDZ/A0i1Cex+hZa/ZvXU8 gP+pONFJJ68Fxt/Yx9u0OMYlldcjwbUwUJuuv9U3vd4VsB9gkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPAePoTKA+QBG8bDY8sM5VqMouKBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvM2Y0YmY4NTgtM2RiMi0z ZTM3LWE0N2YtY2U0MzA3MTg1Zjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3o3Me5KFH79/41HkBVhVlLPtCqHxgJAzKoi/v9Jx2ki/6ZjbMg/Gbi QMv5WZz0R7i8yb2b1xrmkc0WXIkJ3vH6BCB0xWqUBbyZDr96nyr9D7pRB/WE/ixK rx6vJFnNt4CZ6mPecByQUmd/J2rZ1iVUevIWHU7gJsNC3tTh4CYIgqMPMrY5kcbU 8kRyQpBA2CUcb8y9Qu6gI+eznBA3TTv8PLs8KYw5qS4dYzBh0it322Sd5rjMjqEM D2LHvtmov7gncevkNCb/1L+je1QnZHEBfVsUw6qtVWJNMxvvO0bySEcuY5mv470h 1ctH5jH61V091iaRgkMnDSRtiPqo3Sg= -----END CERTIFICATE-----Generated at Sun Jun 29 16:35:29 2025 by rpki-client