$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/4f19d48c-bca7-3d74-92c5-2cb1353a86fc.roa File: 4f19d48c-bca7-3d74-92c5-2cb1353a86fc.roa (raw, json) Hash identifier: CHf9W33x0HVSDgWbOvDeQS5TX9T6hJ1tMN0HSmdnnbc= Subject key identifier: 1E:DC:99:23:25:B5:AD:71:46:B6:D4:68:C5:E8:52:4E:61:89:53:9F Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584A4AD5916A41D68FA3B8B16BC0 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/4f19d48c-bca7-3d74-92c5-2cb1353a86fc.roa Signing time: Tue 24 Jun 2025 01:00:50 +0000 ROA not before: Tue 24 Jun 2025 01:00:50 +0000 ROA not after: Mon 22 Sep 2025 01:00:50 +0000 asID: 9232 IP address blocks: 198.1.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4a:d5:91:6a:41:d6:8f:a3:b8:b1:6b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Jun 24 01:00:50 2025 GMT Not After : Sep 22 01:00:50 2025 GMT Subject: CN=bfd91ced-c87a-44b5-9e8d-45077c4628e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:80:a1:45:a1:9c:be:d2:d8:d5:b1:48:b3:1f: de:0c:9d:f0:26:cb:04:64:a0:13:d3:38:90:50:d9: b9:4c:49:96:4f:45:9d:51:69:37:40:b4:34:51:4f: 1f:ef:d8:01:c4:cf:9f:63:23:41:18:05:97:d5:64: 15:c8:f9:32:eb:6d:d3:78:cf:30:92:75:6b:0a:ae: a4:59:72:64:0f:97:64:8b:ea:27:22:f5:b4:66:a6: fa:19:7d:8e:de:f8:8b:38:8f:c3:ec:74:45:70:7b: af:cd:fe:be:49:e7:57:b3:4b:92:54:70:d6:85:c7: a8:4d:ee:46:20:a1:71:f7:a6:7c:75:5b:56:42:67: 16:c4:7b:0f:6a:d8:4d:4b:00:96:6a:35:0a:c9:38: 72:58:3f:fb:a6:4e:98:25:78:ce:df:61:8b:e9:db: 12:2a:66:0c:e2:81:0e:84:a9:cd:12:0e:8f:8a:a3: 43:5c:e4:4a:d4:83:72:bd:45:8d:18:c1:c8:6c:0b: 32:42:d1:e7:1d:6f:24:e4:b5:ff:4d:bd:d2:6d:53: 70:79:2e:9c:42:e8:c7:c8:61:28:cd:7b:d7:61:cd: d9:59:89:be:6a:18:80:97:68:3f:25:d8:c2:68:98: eb:18:71:47:28:0f:33:dd:2f:0b:b8:6f:e2:7a:c3: 87:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:DC:99:23:25:B5:AD:71:46:B6:D4:68:C5:E8:52:4E:61:89:53:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/4f19d48c-bca7-3d74-92c5-2cb1353a86fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:68:1b:11:c1:9a:96:d8:69:5e:54:a8:4e:b6:65:af:6b:4b: b7:c5:09:54:29:1a:9f:11:98:ce:c6:91:c4:0b:63:70:48:1c: dd:cb:f2:6a:91:8e:44:32:3a:a2:ca:42:4d:26:59:1f:9e:83: 47:44:8b:50:4d:36:d9:05:46:53:e3:89:bd:83:af:e9:71:95: d1:a2:b1:df:30:1b:c6:28:d5:79:f0:0a:c5:8e:4b:ad:a2:c1: bd:9c:df:a3:44:66:49:e2:e4:78:3e:a7:8c:a0:c3:30:f6:db: a2:e9:eb:69:15:45:1d:2b:c9:eb:d5:46:c3:47:22:60:df:d8: f3:cd:45:ba:d5:42:0b:33:d5:35:c1:ad:5f:ce:77:e8:c3:80: 04:e5:62:02:5d:a3:87:6d:6e:c1:81:a5:88:f2:bd:41:b8:69: 30:a8:3d:e2:91:44:22:3f:74:4a:2f:b2:3b:ec:79:71:83:ce: 86:0a:d3:4d:e6:c4:56:ac:07:63:4b:9a:23:a5:06:d0:94:c9: 8e:da:63:e2:e1:39:3d:ed:96:e8:47:15:80:2b:df:6c:92:b3: 54:0f:2f:ab:12:bb:f2:53:50:d2:ec:64:17:f3:82:47:45:ca: 7c:19:76:a0:90:c9:6b:d9:d1:78:ff:ce:95:98:2e:88:8f:09: ff:dd:de:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpK1ZFqQdaPo7ixa8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDYyNDAxMDA1MFoXDTI1MDkyMjAxMDA1MFowLzEtMCsGA1UEAxMk YmZkOTFjZWQtYzg3YS00NGI1LTllOGQtNDUwNzdjNDYyOGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYChRaGcvtLY1bFIsx/eDJ3wJssEZKAT0ziQ UNm5TEmWT0WdUWk3QLQ0UU8f79gBxM+fYyNBGAWX1WQVyPky623TeM8wknVrCq6k WXJkD5dki+onIvW0Zqb6GX2O3viLOI/D7HRFcHuvzf6+SedXs0uSVHDWhceoTe5G IKFx96Z8dVtWQmcWxHsPathNSwCWajUKyThyWD/7pk6YJXjO32GL6dsSKmYM4oEO hKnNEg6PiqNDXORK1INyvUWNGMHIbAsyQtHnHW8k5LX/Tb3SbVNweS6cQujHyGEo zXvXYc3ZWYm+ahiAl2g/JdjCaJjrGHFHKA8z3S8LuG/iesOHnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB7cmSMlta1xRrbUaMXoUk5hiVOfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvNGYxOWQ0OGMtYmNhNy0z ZDc0LTkyYzUtMmNiMTM1M2E4NmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpoGxHBmpbYaV5UqE62Za9rS7fFCVQpGp8RmM7GkcQLY3BIHN3L8mqR jkQyOqLKQk0mWR+eg0dEi1BNNtkFRlPjib2Dr+lxldGisd8wG8Yo1XnwCsWOS62i wb2c36NEZkni5Hg+p4ygwzD226Lp62kVRR0ryevVRsNHImDf2PPNRbrVQgsz1TXB rV/Od+jDgATlYgJdo4dtbsGBpYjyvUG4aTCoPeKRRCI/dEovsjvseXGDzoYK003m xFasB2NLmiOlBtCUyY7aY+LhOT3tluhHFYAr32ySs1QPL6sSu/JTUNLsZBfzgkdF ynwZdqCQyWvZ0Xj/zpWYLoiPCf/d3qs= -----END CERTIFICATE-----Generated at Sun Jun 29 15:58:54 2025 by rpki-client