$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/4bd33f04-b5c6-346e-b906-9ee93857cfc7.roa File: 4bd33f04-b5c6-346e-b906-9ee93857cfc7.roa (raw, json) Hash identifier: VuEVV5174/upyWwAo0N+QqGXulBIgfFC1JJm3b0drRc= Subject key identifier: A6:5F:6D:F1:3B:79:09:B7:FF:BE:94:41:7A:79:03:7D:84:B5:5D:5E Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584A3F0322F64519FE1F8436B300 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/4bd33f04-b5c6-346e-b906-9ee93857cfc7.roa Signing time: Thu 19 Jun 2025 19:23:00 +0000 ROA not before: Thu 19 Jun 2025 19:23:00 +0000 ROA not after: Wed 17 Sep 2025 19:23:00 +0000 asID: 7029 IP address blocks: 198.1.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3f:03:22:f6:45:19:fe:1f:84:36:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Jun 19 19:23:00 2025 GMT Not After : Sep 17 19:23:00 2025 GMT Subject: CN=19e44e7c-b035-423a-aa7b-0e6c90c816f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1b:80:35:64:70:60:09:3b:b8:a7:e5:75:6b: 3f:52:e0:01:27:dd:c9:2b:a4:72:2f:df:6b:1d:05: 14:cf:73:7c:ff:96:ca:e8:ce:44:16:88:e9:00:57: 86:94:3b:fb:72:dc:7e:ff:0a:79:4c:14:1f:fd:f4: 70:5c:80:65:41:94:96:fb:54:36:02:7e:08:8d:61: cf:70:75:7c:df:99:ef:6c:86:ea:9c:8e:b7:83:59: 30:5c:de:2f:03:4f:00:90:ea:c3:47:f4:83:5a:58: 48:ad:cb:54:14:53:81:7d:ce:05:d8:5b:ac:50:6d: e2:c1:b5:9b:63:9e:eb:ca:41:8c:15:68:d9:1e:3e: 27:e7:28:45:d8:bf:66:d6:d2:82:6d:6f:54:cb:4d: 74:83:eb:39:46:1c:8e:6b:fb:dd:9f:e3:06:25:12: d7:6c:0c:a9:71:16:07:b8:2f:ac:90:e6:b1:c7:58: 46:33:b0:93:75:27:26:92:69:d1:78:2b:56:df:5d: 26:79:fb:be:1c:0f:2e:89:00:76:b0:0a:cf:50:4e: b3:ef:4c:ba:ce:91:88:65:c1:ed:b4:44:fe:41:bf: 41:ee:14:53:37:d7:aa:17:95:9f:de:25:51:7d:ea: 5f:8f:c5:83:bc:e2:92:43:f2:df:f5:c4:48:88:1c: ef:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:5F:6D:F1:3B:79:09:B7:FF:BE:94:41:7A:79:03:7D:84:B5:5D:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/4bd33f04-b5c6-346e-b906-9ee93857cfc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:d3:fb:4a:cd:99:dc:49:52:9b:89:ed:dd:da:99:ce:67:3b: 48:2f:d5:00:b2:c0:91:15:5d:f3:83:e5:c2:a9:f0:3a:9b:91: b2:84:94:48:c0:de:f7:17:60:79:24:36:c8:12:be:df:75:52: c2:bf:8b:57:d2:79:43:df:01:1a:89:68:0f:0e:81:aa:05:26: 5c:64:e6:08:fc:d4:e9:42:d7:d1:7b:25:0c:79:50:82:1e:cd: 19:ea:0b:33:11:2f:9d:10:58:da:6e:c0:b7:97:fc:f1:84:1b: dd:59:ba:6a:80:92:09:8f:75:92:3f:1a:9a:cb:56:a0:fc:21: 30:31:67:a1:4c:35:52:6c:81:12:6b:bc:d8:7d:1f:d3:78:47: 1b:07:45:d4:18:70:db:70:c8:18:98:be:e3:65:e7:e2:64:e3: 30:40:0b:56:5d:cb:7b:43:f9:46:2a:f8:ad:fc:05:5d:42:0f: 0b:31:51:a8:de:51:80:ac:45:79:51:ee:7d:f9:b5:f9:30:d8: 16:98:d2:4d:76:aa:e4:91:ff:e2:1e:74:f3:c3:f3:78:e2:ef: 4a:72:10:6b:bf:de:b2:7b:9c:8c:ec:b4:b2:be:fe:2b:92:60: d8:12:0f:d2:66:a7:df:ec:3b:4a:c0:33:f8:d5:43:16:6a:5c: 19:86:df:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo/AyL2RRn+H4Q2swAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDYxOTE5MjMwMFoXDTI1MDkxNzE5MjMwMFowLzEtMCsGA1UEAxMk MTllNDRlN2MtYjAzNS00MjNhLWFhN2ItMGU2YzkwYzgxNmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxuANWRwYAk7uKfldWs/UuABJ93JK6RyL99r HQUUz3N8/5bK6M5EFojpAFeGlDv7ctx+/wp5TBQf/fRwXIBlQZSW+1Q2An4IjWHP cHV835nvbIbqnI63g1kwXN4vA08AkOrDR/SDWlhIrctUFFOBfc4F2FusUG3iwbWb Y57rykGMFWjZHj4n5yhF2L9m1tKCbW9Uy010g+s5RhyOa/vdn+MGJRLXbAypcRYH uC+skOaxx1hGM7CTdScmkmnReCtW310mefu+HA8uiQB2sArPUE6z70y6zpGIZcHt tET+Qb9B7hRTN9eqF5Wf3iVRfepfj8WDvOKSQ/Lf9cRIiBzv0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZfbfE7eQm3/76UQXp5A32EtV1eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvNGJkMzNmMDQtYjVjNi0z NDZlLWI5MDYtOWVlOTM4NTdjZmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvT+0rNmdxJUpuJ7d3amc5nO0gv1QCywJEVXfOD5cKp8DqbkbKElEjA 3vcXYHkkNsgSvt91UsK/i1fSeUPfARqJaA8OgaoFJlxk5gj81OlC19F7JQx5UIIe zRnqCzMRL50QWNpuwLeX/PGEG91ZumqAkgmPdZI/GprLVqD8ITAxZ6FMNVJsgRJr vNh9H9N4RxsHRdQYcNtwyBiYvuNl5+Jk4zBAC1Zdy3tD+UYq+K38BV1CDwsxUaje UYCsRXlR7n35tfkw2BaY0k12quSR/+IedPPD83ji70pyEGu/3rJ7nIzstLK+/iuS YNgSD9Jmp9/sO0rAM/jVQxZqXBmG378= -----END CERTIFICATE-----Generated at Sun Jun 29 01:24:35 2025 by rpki-client