$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/a3865717-c823-344d-be2f-29795c5d9104.roa File: a3865717-c823-344d-be2f-29795c5d9104.roa (raw, json) Hash identifier: Vop9iOc1f+y8df0fjjzhy8/4q4SycrPgR3U1ZS2fTPI= Subject key identifier: 38:43:8B:8E:6C:F2:2C:78:4F:4B:02:C9:FD:9F:9C:F8:36:FA:96:F6 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584A4A3AEFC550B24D3977846280 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/a3865717-c823-344d-be2f-29795c5d9104.roa Signing time: Mon 23 Jun 2025 19:49:20 +0000 ROA not before: Mon 23 Jun 2025 19:49:20 +0000 ROA not after: Sun 21 Sep 2025 19:49:20 +0000 asID: 20001 IP address blocks: 198.1.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4a:3a:ef:c5:50:b2:4d:39:77:84:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Jun 23 19:49:20 2025 GMT Not After : Sep 21 19:49:20 2025 GMT Subject: CN=da32ddf9-5e19-48c3-b681-d2f5364e8f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:74:c8:19:ad:09:66:96:81:94:88:7b:e8:fb: 4f:17:58:ad:05:e8:0c:df:99:38:e0:4e:a6:df:bd: 03:69:aa:aa:ca:87:dd:f1:ba:c4:9e:b0:f2:9a:76: 45:87:b2:c6:ea:22:e6:6d:e6:e6:70:bf:ac:a1:c4: ac:0f:8a:19:cf:9f:f4:87:d6:09:67:b8:f1:11:ad: 5c:f8:3c:3b:59:6c:0e:85:42:20:e7:21:ad:e5:90: 3f:61:2e:af:39:e2:7a:99:a3:54:4c:76:01:62:b6: aa:66:9d:f9:72:0e:e9:18:00:b5:42:2b:0d:d2:17: dc:2c:2b:4a:1f:b5:3c:91:b6:1f:59:db:a1:a8:78: 7b:d7:81:28:51:de:b4:ac:66:98:b0:20:8b:60:35: 25:a7:c1:11:55:7d:b9:58:3e:1a:c9:58:13:ce:8c: ed:a6:bf:fd:76:5a:49:73:5d:38:68:e6:9a:6d:b4: b5:c3:37:4e:70:e6:14:cd:0f:13:f1:85:14:71:54: 2e:76:df:af:9e:8d:8d:ea:41:61:11:d6:92:53:42: a5:77:46:9f:fc:73:e1:3e:36:af:b4:79:70:c6:a2: 9e:12:2b:e3:59:6c:31:68:7f:22:a1:ee:7b:fe:a8: 71:9b:43:9f:1a:b5:69:19:33:a5:9a:06:84:2c:ba: c2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:43:8B:8E:6C:F2:2C:78:4F:4B:02:C9:FD:9F:9C:F8:36:FA:96:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/a3865717-c823-344d-be2f-29795c5d9104.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:50:5d:7a:0e:c0:a9:56:ed:d0:1e:7d:60:c1:e1:4d:60:9f: 01:1f:59:ac:fd:a4:37:0c:de:2c:33:2e:d2:62:5f:3c:be:5b: d5:ad:05:ed:a0:f6:42:f7:09:1b:cd:44:bb:01:13:06:55:e9: 1e:ca:2d:15:47:05:f7:64:6e:ce:10:e0:8e:5e:38:a9:42:1d: 4b:67:d4:cf:63:b3:66:50:3b:cf:56:6f:60:00:71:91:57:f5: fa:8b:25:98:47:c6:66:b8:8a:55:50:63:52:22:6d:77:99:05: 4f:2f:7e:6d:8b:3b:0f:9f:d4:a4:99:68:1f:5e:6e:ed:b1:27: 20:0f:cc:92:22:8e:ed:9c:e5:8c:e0:99:fe:de:d0:d4:9c:47: 8f:b6:44:2a:a0:b9:57:c7:29:7b:0c:e2:00:ac:ac:e4:47:00: a4:af:ad:33:ea:2f:1d:8a:38:62:c6:13:47:f1:22:1e:46:70: a2:7c:85:a9:aa:50:dd:4b:8f:0c:b6:c6:4a:35:cf:e9:51:3a: 9a:e5:be:a1:a0:57:96:43:d1:11:73:7a:4e:4d:cd:f2:1b:4c: a2:29:4d:18:1f:0e:ce:6e:78:b8:08:27:8a:71:8f:26:a0:49: 14:ff:10:68:16:a6:8d:c6:5c:df:d0:fc:34:29:6f:1b:63:a9: 6f:17:fc:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpKOu/FULJNOXeEYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDYyMzE5NDkyMFoXDTI1MDkyMTE5NDkyMFowLzEtMCsGA1UEAxMk ZGEzMmRkZjktNWUxOS00OGMzLWI2ODEtZDJmNTM2NGU4ZjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXTIGa0JZpaBlIh76PtPF1itBegM35k44E6m 370Daaqqyofd8brEnrDymnZFh7LG6iLmbebmcL+socSsD4oZz5/0h9YJZ7jxEa1c +Dw7WWwOhUIg5yGt5ZA/YS6vOeJ6maNUTHYBYraqZp35cg7pGAC1QisN0hfcLCtK H7U8kbYfWduhqHh714EoUd60rGaYsCCLYDUlp8ERVX25WD4ayVgTzoztpr/9dlpJ c104aOaabbS1wzdOcOYUzQ8T8YUUcVQudt+vno2N6kFhEdaSU0Kld0af/HPhPjav tHlwxqKeEivjWWwxaH8ioe57/qhxm0OfGrVpGTOlmgaELLrClQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhDi45s8ix4T0sCyf2fnPg2+pb2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvYTM4NjU3MTctYzgyMy0z NDRkLWJlMmYtMjk3OTVjNWQ5MTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtQXXoOwKlW7dAefWDB4U1gnwEfWaz9pDcM3iwzLtJiXzy+W9WtBe2g 9kL3CRvNRLsBEwZV6R7KLRVHBfdkbs4Q4I5eOKlCHUtn1M9js2ZQO89Wb2AAcZFX 9fqLJZhHxma4ilVQY1IibXeZBU8vfm2LOw+f1KSZaB9ebu2xJyAPzJIiju2c5Yzg mf7e0NScR4+2RCqguVfHKXsM4gCsrORHAKSvrTPqLx2KOGLGE0fxIh5GcKJ8hamq UN1Ljwy2xko1z+lROprlvqGgV5ZD0RFzek5NzfIbTKIpTRgfDs5ueLgIJ4pxjyag SRT/EGgWpo3GXN/Q/DQpbxtjqW8X/D0= -----END CERTIFICATE-----Generated at Sun Jun 29 11:42:50 2025 by rpki-client