$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/9d8cf1b7-7df8-3aae-9770-6d63d26471cf.roa File: 9d8cf1b7-7df8-3aae-9770-6d63d26471cf.roa (raw, json) Hash identifier: BWxCjmgNsQBlEAP2ceH/x5ow/RLMBphYpFSvdpdiQhE= Subject key identifier: A3:96:69:A4:83:49:15:E5:6F:70:37:A0:91:B1:68:0F:CF:A3:41:14 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584A3EFF7863EAB5F64A3B7C8F80 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/9d8cf1b7-7df8-3aae-9770-6d63d26471cf.roa Signing time: Thu 19 Jun 2025 19:15:37 +0000 ROA not before: Thu 19 Jun 2025 19:15:37 +0000 ROA not after: Wed 17 Sep 2025 19:15:37 +0000 asID: 5650 IP address blocks: 198.1.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:ff:78:63:ea:b5:f6:4a:3b:7c:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Jun 19 19:15:37 2025 GMT Not After : Sep 17 19:15:37 2025 GMT Subject: CN=0dd5b606-1723-4a95-ae7a-866308712ece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6b:48:a0:a5:41:4a:6b:44:ca:9c:31:37:2d: d1:96:49:ea:0e:72:90:5e:96:ae:f9:83:18:1b:bb: f1:80:79:c5:57:47:08:58:26:67:84:40:10:bb:70: 66:ce:02:f3:15:99:95:c6:2a:3d:d7:d7:a6:d8:6e: c4:7e:69:f2:12:e4:75:5d:1d:8b:28:b8:07:50:7e: c6:4c:d4:26:a9:8b:6e:34:2c:cc:88:bd:fb:4f:d1: 48:47:b7:3b:de:1a:ac:84:9a:52:d5:15:dd:0a:aa: f8:d7:39:fb:f4:6c:02:69:92:e0:15:33:44:ce:08: 03:ff:cb:d8:28:e9:67:12:a7:02:34:9a:8d:a9:f1: a0:0f:de:26:7d:f3:13:a8:6e:e9:e0:e7:f3:21:0e: ff:af:c5:c2:ee:a5:25:12:25:ea:6e:3c:8e:2c:3d: b4:fd:43:43:bd:4b:28:11:40:c7:7f:de:06:a6:eb: 31:98:db:b2:39:be:d4:d3:8e:35:41:a2:9f:4d:2c: de:cd:63:56:1a:fb:f3:9f:a7:53:62:35:19:38:e0: 7e:07:bc:84:f1:15:14:2e:4c:10:f1:1f:95:6f:87: 28:c3:e5:8f:e8:dd:73:96:4c:bb:ac:cf:ff:96:62: c5:6d:a8:97:a0:82:6c:d3:5a:e6:20:d4:d6:17:d3: c9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:96:69:A4:83:49:15:E5:6F:70:37:A0:91:B1:68:0F:CF:A3:41:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/9d8cf1b7-7df8-3aae-9770-6d63d26471cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:41:1b:6b:73:f3:21:c4:a8:d1:bf:90:f0:d5:7c:3a:ea:36: e2:1a:c5:3f:18:a4:b5:ea:96:52:4a:df:fc:89:72:e3:bd:f0: 21:dc:db:b1:e6:e1:fa:b4:de:be:9c:fa:87:74:76:06:4b:c9: 67:76:93:2a:74:91:93:2a:f5:9a:19:ca:67:60:a7:0b:ed:08: 52:f0:98:58:57:a7:35:e2:92:47:7b:77:4a:f1:77:60:28:40: bc:cd:2a:0e:5e:f8:46:63:da:6d:2b:28:9e:ef:0c:49:b3:e8: 81:6d:6f:45:3e:d5:88:93:7e:24:39:91:ac:63:09:06:4f:82: d5:c3:d7:9c:82:f4:05:17:40:82:e8:86:e9:56:bd:9d:99:7f: 9a:ea:b8:e4:c5:e3:cb:8e:8d:f7:67:29:89:a5:64:9f:ba:6e: 08:83:ea:db:83:38:d0:06:73:d8:15:92:6c:95:4f:13:5f:76: 28:08:b4:3d:2e:f7:e8:d1:2f:08:dc:9d:77:57:c1:c7:45:5e: 4b:3e:6f:03:38:bd:51:98:d3:e0:3e:83:32:aa:c9:8e:d9:ac: e0:97:aa:3b:70:a2:96:5d:36:c0:99:67:08:51:b1:6e:f7:f9: 9b:22:28:85:2e:34:b0:cb:9e:c3:18:23:6d:d9:58:af:ff:30: c9:42:a0:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+/3hj6rX2Sjt8j4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDYxOTE5MTUzN1oXDTI1MDkxNzE5MTUzN1owLzEtMCsGA1UEAxMk MGRkNWI2MDYtMTcyMy00YTk1LWFlN2EtODY2MzA4NzEyZWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmtIoKVBSmtEypwxNy3RlknqDnKQXpau+YMY G7vxgHnFV0cIWCZnhEAQu3BmzgLzFZmVxio919em2G7EfmnyEuR1XR2LKLgHUH7G TNQmqYtuNCzMiL37T9FIR7c73hqshJpS1RXdCqr41zn79GwCaZLgFTNEzggD/8vY KOlnEqcCNJqNqfGgD94mffMTqG7p4OfzIQ7/r8XC7qUlEiXqbjyOLD20/UNDvUso EUDHf94GpusxmNuyOb7U0441QaKfTSzezWNWGvvzn6dTYjUZOOB+B7yE8RUULkwQ 8R+Vb4cow+WP6N1zlky7rM//lmLFbaiXoIJs01rmINTWF9PJLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOWaaSDSRXlb3A3oJGxaA/Po0EUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvOWQ4Y2YxYjctN2RmOC0z YWFlLTk3NzAtNmQ2M2QyNjQ3MWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElBG2tz8yHEqNG/kPDVfDrqNuIaxT8YpLXqllJK3/yJcuO98CHc27Hm 4fq03r6c+od0dgZLyWd2kyp0kZMq9ZoZymdgpwvtCFLwmFhXpzXikkd7d0rxd2Ao QLzNKg5e+EZj2m0rKJ7vDEmz6IFtb0U+1YiTfiQ5kaxjCQZPgtXD15yC9AUXQILo hulWvZ2Zf5rquOTF48uOjfdnKYmlZJ+6bgiD6tuDONAGc9gVkmyVTxNfdigItD0u 9+jRLwjcnXdXwcdFXks+bwM4vVGY0+A+gzKqyY7ZrOCXqjtwopZdNsCZZwhRsW73 +ZsiKIUuNLDLnsMYI23ZWK//MMlCoHs= -----END CERTIFICATE-----Generated at Sun Jun 29 14:18:52 2025 by rpki-client