$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/4a98f038-d297-3838-953a-f34c5fe38c5f.roa File: 4a98f038-d297-3838-953a-f34c5fe38c5f.roa (raw, json) Hash identifier: JdU6lGmjKp5YliaszqWxTEF1NTgL93hHWCmGtxEu4wk= Subject key identifier: 72:D1:EC:21:FC:4A:7E:E8:66:73:BC:57:26:1F:3E:F8:87:80:16:0F Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584A4A3ACE4A21F20DAC52ED6100 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/4a98f038-d297-3838-953a-f34c5fe38c5f.roa Signing time: Mon 23 Jun 2025 19:49:04 +0000 ROA not before: Mon 23 Jun 2025 19:49:04 +0000 ROA not after: Sun 21 Sep 2025 19:49:04 +0000 asID: 20001 IP address blocks: 198.1.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4a:3a:ce:4a:21:f2:0d:ac:52:ed:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Jun 23 19:49:04 2025 GMT Not After : Sep 21 19:49:04 2025 GMT Subject: CN=18d0060a-0d19-4c88-a87a-13d02d92fb82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:55:93:a1:25:6c:d3:52:d9:40:5a:29:19:8c: 96:25:64:b5:80:fb:91:13:7c:fa:2e:22:a4:86:03: 17:a7:1e:50:4c:f9:91:7f:62:88:a4:32:5c:7d:88: f7:e2:93:da:cf:0d:4b:7a:3e:34:82:76:20:56:d3: 46:10:4c:59:f7:a1:8f:83:16:05:e1:67:9e:a1:40: 7b:ee:6c:43:f3:ce:1d:2b:79:02:02:d3:9b:4c:60: 73:96:1d:f7:a6:69:c5:70:2a:34:0d:ff:6a:67:32: 1a:ef:11:fc:8d:10:a2:76:a4:c9:05:9e:93:bd:85: 55:bd:0a:d4:84:f2:72:9f:91:55:a1:b4:81:e3:40: e4:78:87:dc:4f:bb:ab:a3:30:b7:f8:ce:97:86:02: f3:ae:bd:5a:ca:80:69:93:98:17:bb:b8:53:4b:7e: 39:13:66:0e:14:a1:00:54:fe:31:db:1d:63:c6:1e: 71:84:19:ac:a8:d1:6a:0b:77:6d:6d:c1:28:47:9c: d7:4b:f3:96:b0:17:e3:af:71:dc:24:ab:fc:2a:8d: e0:bf:fe:af:e2:76:2b:e9:a1:a6:ff:fa:2a:7a:6f: a0:09:4d:4b:6d:aa:5e:91:39:7b:53:5e:1f:8a:fa: 11:d2:1d:50:6e:85:89:a6:21:61:f3:78:97:85:2b: bf:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D1:EC:21:FC:4A:7E:E8:66:73:BC:57:26:1F:3E:F8:87:80:16:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/4a98f038-d297-3838-953a-f34c5fe38c5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:06:06:e2:4c:b4:e0:21:f3:c0:bc:49:90:4e:34:e4:5d:ba: 57:5b:c2:3d:71:a6:5c:70:61:b3:08:b5:85:fd:c8:b9:79:dc: a4:57:5d:7a:c5:dd:50:56:9f:a4:02:e2:49:fe:ce:9b:53:c4: 52:14:07:fe:f1:32:96:49:99:f6:fe:38:6f:fb:c6:de:f4:26: 03:b0:ae:38:81:28:da:a1:bb:1d:61:fa:ed:ae:53:30:c4:27: 57:a0:5d:c2:81:31:f6:40:ff:d2:1f:32:07:73:49:42:f0:34: cb:b5:26:35:df:60:af:80:6b:14:d5:49:f7:c5:fe:00:24:13: 74:b4:39:93:b9:ce:9a:9a:24:94:91:f8:fa:b7:cc:4f:80:31: 04:c6:5e:1c:8e:22:3b:dd:54:7a:5a:78:58:51:83:d4:16:90: 40:20:f4:4c:e3:fc:69:cf:59:d7:ab:fb:bb:08:9d:9c:e9:cf: cf:39:bb:f8:86:5e:62:9f:2d:39:0d:56:e6:4f:78:7c:a7:25: c7:9e:bc:4f:ed:d5:d4:cf:c2:b6:0e:15:b7:9a:3e:53:57:71: 08:36:86:8a:8b:c7:c5:f6:0b:9e:da:30:31:8b:00:37:c2:4d: 7d:bd:fc:3e:11:1e:2f:0c:9a:5b:ee:3d:fd:88:2a:45:49:e4: b4:66:c8:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpKOs5KIfINrFLtYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDYyMzE5NDkwNFoXDTI1MDkyMTE5NDkwNFowLzEtMCsGA1UEAxMk MThkMDA2MGEtMGQxOS00Yzg4LWE4N2EtMTNkMDJkOTJmYjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFWToSVs01LZQFopGYyWJWS1gPuRE3z6LiKk hgMXpx5QTPmRf2KIpDJcfYj34pPazw1Lej40gnYgVtNGEExZ96GPgxYF4WeeoUB7 7mxD884dK3kCAtObTGBzlh33pmnFcCo0Df9qZzIa7xH8jRCidqTJBZ6TvYVVvQrU hPJyn5FVobSB40DkeIfcT7urozC3+M6XhgLzrr1ayoBpk5gXu7hTS345E2YOFKEA VP4x2x1jxh5xhBmsqNFqC3dtbcEoR5zXS/OWsBfjr3HcJKv8Ko3gv/6v4nYr6aGm //oqem+gCU1LbapekTl7U14fivoR0h1QboWJpiFh83iXhSu/fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLR7CH8Sn7oZnO8VyYfPviHgBYPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvNGE5OGYwMzgtZDI5Ny0z ODM4LTk1M2EtZjM0YzVmZTM4YzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYGBuJMtOAh88C8SZBONORduldbwj1xplxwYbMItYX9yLl53KRXXXrF 3VBWn6QC4kn+zptTxFIUB/7xMpZJmfb+OG/7xt70JgOwrjiBKNqhux1h+u2uUzDE J1egXcKBMfZA/9IfMgdzSULwNMu1JjXfYK+AaxTVSffF/gAkE3S0OZO5zpqaJJSR +Pq3zE+AMQTGXhyOIjvdVHpaeFhRg9QWkEAg9Ezj/GnPWder+7sInZzpz885u/iG XmKfLTkNVuZPeHynJceevE/t1dTPwrYOFbeaPlNXcQg2hoqLx8X2C57aMDGLADfC TX29/D4RHi8MmlvuPf2IKkVJ5LRmyDo= -----END CERTIFICATE-----Generated at Sun Jun 29 17:46:51 2025 by rpki-client