$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/4689ed48-7376-3a8a-892f-5bc4880d4d87.roa File: 4689ed48-7376-3a8a-892f-5bc4880d4d87.roa (raw, json) Hash identifier: Nx9NddRGSn3QeV7JBzUnWQBo0fYyLl1ku9bJ71z47vo= Subject key identifier: A9:D5:6C:FB:96:D8:23:88:F7:CD:E1:FB:31:3C:08:EA:CE:21:05:82 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584A38D83928856094DA8728CA40 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/4689ed48-7376-3a8a-892f-5bc4880d4d87.roa Signing time: Tue 17 Jun 2025 14:21:42 +0000 ROA not before: Tue 17 Jun 2025 14:21:42 +0000 ROA not after: Mon 15 Sep 2025 14:21:42 +0000 asID: 22516 IP address blocks: 198.1.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:38:d8:39:28:85:60:94:da:87:28:ca:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Jun 17 14:21:42 2025 GMT Not After : Sep 15 14:21:42 2025 GMT Subject: CN=a1374b47-1731-47af-8721-a90bf0ccbb63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5f:45:f5:8a:7d:2f:eb:60:bf:63:77:38:ba: 89:19:65:3a:7e:96:54:e9:da:fc:19:8a:e0:67:d5: 0e:d1:dd:56:a1:e4:c5:3a:07:28:c3:91:77:ca:53: 37:aa:dd:cc:68:dc:d8:23:57:6c:6f:94:4f:50:31: 08:24:e0:56:db:79:92:ac:2d:4e:ed:20:ab:04:f8: 82:0f:00:03:a9:04:b3:00:be:fc:1f:16:62:df:2b: 91:7c:1a:a4:85:35:95:e1:22:90:d1:16:cd:f1:17: 83:53:3b:64:94:7b:f9:a5:94:9f:99:ee:ec:6d:1b: 53:1e:f1:fc:7f:a4:50:a7:d5:44:02:ee:ec:e2:8b: 03:b6:be:e8:5d:5e:e5:5c:46:d5:f2:cb:6f:49:be: 07:b1:3c:f6:fa:12:66:16:11:8a:ba:df:75:4d:04: 83:be:b1:f7:39:e5:7e:fa:ea:0a:65:80:38:84:f0: 43:f5:67:2e:26:15:c5:d0:39:95:c9:89:ce:3e:cb: f7:c4:54:61:ae:dd:f7:8f:47:a3:6b:20:15:15:98: c3:9e:15:5e:46:c0:b9:7e:94:02:aa:ff:b5:50:36: c0:80:fb:fe:76:6b:b6:5f:dd:df:c6:27:4b:7b:53: 9f:ec:5d:fb:e4:ce:76:07:52:94:98:e9:3e:dd:31: cc:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D5:6C:FB:96:D8:23:88:F7:CD:E1:FB:31:3C:08:EA:CE:21:05:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/4689ed48-7376-3a8a-892f-5bc4880d4d87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:4b:68:ba:60:ae:79:5c:95:51:58:75:a1:cc:85:fe:bf:39: 93:df:ce:6d:51:9e:09:a9:62:4d:b2:4f:24:9b:79:45:26:1f: b9:ca:a9:bf:16:ea:38:f7:74:1a:09:04:fd:67:76:ed:26:c4: b6:77:4e:62:60:bc:f5:a8:0a:22:0b:40:c5:5d:bb:05:ac:6c: 12:8d:24:2b:3d:59:eb:be:39:82:77:c8:de:7e:1a:6a:0a:a7: 6c:29:5f:6e:5e:53:88:3f:f9:16:56:da:30:f9:aa:5a:5a:e8: 5e:93:2f:c5:04:4a:22:46:99:26:13:da:86:a6:6d:26:c3:b3: f5:55:ed:17:37:61:91:2e:0a:60:a3:75:09:7b:36:03:06:87: 17:14:14:55:01:c3:dd:b3:a1:74:c6:e6:50:24:18:db:f6:fe: 6b:94:01:0b:59:29:03:74:30:41:65:46:b9:b2:6e:f7:c4:e5: a4:b7:4f:72:28:4c:bd:37:31:6d:1b:ab:ec:b7:2e:83:9d:49: b2:86:de:c0:b1:a5:ea:b8:93:f9:68:2f:5b:85:55:83:35:7f: 27:a8:03:48:12:df:6b:ad:74:71:f0:d2:5d:33:c3:ab:c4:40: fb:f7:16:bf:81:58:af:90:ee:e3:d9:ec:b4:9d:9e:5e:cc:d1: 2f:cd:23:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo42DkohWCU2ocoykAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDYxNzE0MjE0MloXDTI1MDkxNTE0MjE0MlowLzEtMCsGA1UEAxMk YTEzNzRiNDctMTczMS00N2FmLTg3MjEtYTkwYmYwY2NiYjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxl9F9Yp9L+tgv2N3OLqJGWU6fpZU6dr8GYrg Z9UO0d1WoeTFOgcow5F3ylM3qt3MaNzYI1dsb5RPUDEIJOBW23mSrC1O7SCrBPiC DwADqQSzAL78HxZi3yuRfBqkhTWV4SKQ0RbN8ReDUztklHv5pZSfme7sbRtTHvH8 f6RQp9VEAu7s4osDtr7oXV7lXEbV8stvSb4HsTz2+hJmFhGKut91TQSDvrH3OeV+ +uoKZYA4hPBD9WcuJhXF0DmVyYnOPsv3xFRhrt33j0ejayAVFZjDnhVeRsC5fpQC qv+1UDbAgPv+dmu2X93fxidLe1Of7F375M52B1KUmOk+3THM/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnVbPuW2COI983h+zE8COrOIQWCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvNDY4OWVkNDgtNzM3Ni0z YThhLTg5MmYtNWJjNDg4MGQ0ZDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVLaLpgrnlclVFYdaHMhf6/OZPfzm1RngmpYk2yTySbeUUmH7nKqb8W 6jj3dBoJBP1ndu0mxLZ3TmJgvPWoCiILQMVduwWsbBKNJCs9Weu+OYJ3yN5+GmoK p2wpX25eU4g/+RZW2jD5qlpa6F6TL8UESiJGmSYT2oambSbDs/VV7Rc3YZEuCmCj dQl7NgMGhxcUFFUBw92zoXTG5lAkGNv2/muUAQtZKQN0MEFlRrmybvfE5aS3T3Io TL03MW0bq+y3LoOdSbKG3sCxpeq4k/loL1uFVYM1fyeoA0gS32utdHHw0l0zw6vE QPv3Fr+BWK+Q7uPZ7LSdnl7M0S/NI1M= -----END CERTIFICATE-----Generated at Sun Jun 29 17:47:11 2025 by rpki-client