$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/7e0650d0-458f-374e-afd2-1976a9954e2d.roa File: 7e0650d0-458f-374e-afd2-1976a9954e2d.roa (raw, json) Hash identifier: YWH0L7aJqQ3TyF0quqvCeCEJ9p7Y40uEErlx+lQ2/L8= Subject key identifier: 20:63:FA:64:EC:0C:9C:03:ED:95:E2:41:76:17:EC:32:9C:0B:35:57 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584A38D777E85D6220FF8BD5FD00 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/7e0650d0-458f-374e-afd2-1976a9954e2d.roa Signing time: Tue 17 Jun 2025 14:20:10 +0000 ROA not before: Tue 17 Jun 2025 14:20:10 +0000 ROA not after: Mon 15 Sep 2025 14:20:10 +0000 asID: 22516 IP address blocks: 198.1.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:38:d7:77:e8:5d:62:20:ff:8b:d5:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Jun 17 14:20:10 2025 GMT Not After : Sep 15 14:20:10 2025 GMT Subject: CN=186bf749-0120-4491-9c74-b36fe7627cf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:35:e7:99:94:20:16:8e:53:fa:07:35:0f:42: ac:02:e8:b8:d6:76:a0:b3:ea:f5:ad:5f:aa:71:2c: 94:ab:08:12:fd:8e:ab:78:09:ba:5f:df:77:28:62: 96:96:db:c0:f9:dc:8f:48:74:af:47:e8:cb:30:3e: a9:62:10:6d:e1:c7:2b:24:e1:ce:06:2d:9d:8e:49: e7:88:76:5d:94:d9:cd:62:15:51:cd:0f:fc:bf:e1: f6:c5:aa:e9:d7:c4:7b:e7:4b:38:8a:af:42:2b:37: a2:aa:2b:0b:cb:a6:97:74:97:5e:9d:3f:87:46:eb: 1c:c2:98:1c:a8:86:15:7b:40:de:70:4f:d9:f6:1e: 26:29:3f:fd:d5:6b:fd:29:55:4e:22:1a:ea:4d:87: 53:92:cb:55:50:91:57:f3:27:e6:5e:b7:67:78:b2: b6:dd:28:f5:a0:0d:d0:ec:8f:44:91:60:fe:47:2e: f1:4e:06:3a:e9:38:8c:34:92:b3:6e:06:9e:b1:66: 4a:c6:7b:d1:9f:eb:92:0f:37:0f:3b:06:e3:16:26: 4f:42:79:e2:b8:bf:49:fd:d7:0d:ed:e9:c1:e9:6a: 68:93:c0:b5:82:d3:b9:13:fd:46:08:19:50:c4:f7: 49:a2:87:56:8f:ad:ea:9d:d8:2e:5e:1a:81:d0:ec: cf:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:63:FA:64:EC:0C:9C:03:ED:95:E2:41:76:17:EC:32:9C:0B:35:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/7e0650d0-458f-374e-afd2-1976a9954e2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:7d:9e:1e:22:2f:70:35:43:4b:2f:f9:0c:07:fc:5a:69:d8: 60:0c:5d:fd:59:d3:ba:7a:a0:ac:ce:8b:de:8f:95:3e:f2:98: 44:76:9b:4a:cf:9d:83:5f:3c:63:27:7f:ee:3c:93:af:ab:d9: 28:ae:30:52:7b:e9:b7:8b:d2:55:63:64:6b:de:bf:d7:ff:c1: 60:ee:ac:57:a2:e3:4b:b9:e7:3a:1d:02:45:08:3c:84:ac:9d: 23:b6:47:b9:f4:b9:e3:6d:50:2d:10:ba:39:1c:55:94:34:15: 9c:e3:b5:ef:b4:0a:62:b9:8e:90:07:6c:c1:02:7b:0f:5b:2e: d0:21:fd:e8:c5:e9:6d:ef:16:c1:c8:2d:c9:0b:35:a0:a6:ac: a9:83:1b:f7:90:92:98:a5:02:86:f7:10:e4:e0:b1:b1:ea:a1: 51:cf:76:9e:21:f1:23:e6:38:b3:f1:91:47:40:6e:22:6c:d0: 8a:11:43:57:9f:63:3a:b9:75:de:fa:05:b8:f8:38:8f:d5:9c: f9:b9:2b:5f:bb:88:ae:81:53:32:5e:e2:45:4e:c7:37:e6:bf: ec:23:d6:13:db:55:3f:60:73:69:56:50:7d:43:2d:e7:02:4b: d7:6b:a2:cd:41:a1:c5:d9:c6:61:3f:f2:f9:79:9c:a9:bc:25: 83:45:7c:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo413foXWIg/4vV/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDYxNzE0MjAxMFoXDTI1MDkxNTE0MjAxMFowLzEtMCsGA1UEAxMk MTg2YmY3NDktMDEyMC00NDkxLTljNzQtYjM2ZmU3NjI3Y2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDXnmZQgFo5T+gc1D0KsAui41nags+r1rV+q cSyUqwgS/Y6reAm6X993KGKWltvA+dyPSHSvR+jLMD6pYhBt4ccrJOHOBi2djknn iHZdlNnNYhVRzQ/8v+H2xarp18R750s4iq9CKzeiqisLy6aXdJdenT+HRuscwpgc qIYVe0DecE/Z9h4mKT/91Wv9KVVOIhrqTYdTkstVUJFX8yfmXrdneLK23Sj1oA3Q 7I9EkWD+Ry7xTgY66TiMNJKzbgaesWZKxnvRn+uSDzcPOwbjFiZPQnniuL9J/dcN 7enB6Wpok8C1gtO5E/1GCBlQxPdJoodWj63qndguXhqB0OzPYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBj+mTsDJwD7ZXiQXYX7DKcCzVXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvN2UwNjUwZDAtNDU4Zi0z NzRlLWFmZDItMTk3NmE5OTU0ZTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHB9nh4iL3A1Q0sv+QwH/Fpp2GAMXf1Z07p6oKzOi96PlT7ymER2m0rP nYNfPGMnf+48k6+r2SiuMFJ76beL0lVjZGvev9f/wWDurFei40u55zodAkUIPISs nSO2R7n0ueNtUC0QujkcVZQ0FZzjte+0CmK5jpAHbMECew9bLtAh/ejF6W3vFsHI LckLNaCmrKmDG/eQkpilAob3EOTgsbHqoVHPdp4h8SPmOLPxkUdAbiJs0IoRQ1ef Yzq5dd76Bbj4OI/VnPm5K1+7iK6BUzJe4kVOxzfmv+wj1hPbVT9gc2lWUH1DLecC S9dros1BocXZxmE/8vl5nKm8JYNFfHw= -----END CERTIFICATE-----Generated at Sun Jun 29 17:58:16 2025 by rpki-client