$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/a3c31877-dad2-39b4-a7ef-2037f5489018.roa File: a3c31877-dad2-39b4-a7ef-2037f5489018.roa (raw, json) Hash identifier: 7o57vh7CA0FBp66T5SsDIR/VQdDR9X8aJL6QB8TU4mg= Subject key identifier: 3A:F8:00:AC:B7:F2:EA:E4:E1:15:E7:EA:26:45:DE:1B:DB:E1:FA:BD Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584AE8912C0D2AC06CFE56B1F340 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/a3c31877-dad2-39b4-a7ef-2037f5489018.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 55201 IP address blocks: 198.1.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:2c:0d:2a:c0:6c:fe:56:b1:f3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=9f80d8ce-94e2-4476-a4e0-8b95957a668e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:67:46:e0:e4:52:ff:60:9b:49:72:9d:b2:9b: 61:9c:34:ff:0f:cb:a7:05:8b:10:bc:20:ec:30:5e: f6:27:0a:61:e0:dc:fb:2a:27:b1:88:78:63:e5:e7: 88:71:16:35:99:1a:1a:8d:9f:82:43:fb:c7:ab:d0: fa:73:dc:3d:8b:11:68:40:a3:cd:73:0f:02:8a:93: 9a:62:43:51:99:1e:f8:43:6d:05:76:7b:7b:02:2c: f4:00:79:c2:99:37:23:b6:7f:25:5b:3f:bc:e0:71: a0:cf:f3:18:0e:72:0e:53:0b:cb:10:eb:60:d9:3e: b5:95:2a:32:02:8b:c6:7a:8d:56:94:14:2d:3a:d5: 1d:ec:e1:6a:12:d2:7c:0f:1e:09:0f:19:ad:1d:1c: c9:c1:b6:ff:09:9c:54:28:86:0d:9d:e7:9b:80:24: f8:85:61:5d:74:c6:af:91:2b:29:d3:34:91:f8:2e: 32:6c:6b:0c:65:87:24:79:39:43:c5:dc:ec:c2:4e: 38:35:3d:38:7f:7c:f8:d7:bf:25:85:ec:8b:f6:f7: 25:28:f6:bb:c2:29:12:08:fe:0b:f7:5a:87:03:f3: 63:eb:75:28:6e:df:a7:13:e0:d2:93:ad:64:fe:18: 16:4b:4e:ea:a9:83:c5:e0:ec:55:70:68:51:b1:55: fe:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F8:00:AC:B7:F2:EA:E4:E1:15:E7:EA:26:45:DE:1B:DB:E1:FA:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/a3c31877-dad2-39b4-a7ef-2037f5489018.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:06:29:14:dd:aa:c0:a8:59:c8:27:ba:8d:5d:ea:8d:14:82: fa:87:d5:c9:31:d0:ff:e2:1c:be:f1:74:9c:85:07:a5:73:c4: 6c:01:ae:b8:1a:90:8a:e7:d3:de:f2:16:12:dc:62:34:3b:08: a8:78:2a:96:99:0b:4f:b4:bf:d6:4d:6f:b6:21:43:34:65:ff: f9:88:27:15:96:e2:23:3d:54:2f:0b:c5:ba:31:ae:fb:da:27: 71:ce:e0:4a:f8:bf:c3:dc:87:9a:2a:2a:67:e8:0b:cf:4e:71: 15:24:a3:d8:6b:1f:62:8f:b3:06:42:19:9f:c1:3e:33:92:32: 3a:85:6e:99:b5:5f:ff:31:c9:a8:45:79:5c:b7:a3:24:b6:c3: 83:ab:ff:c0:1c:5d:3f:53:7e:01:99:8c:57:ec:41:e0:fe:9a: 62:1d:c0:5f:71:2c:99:39:c2:22:2d:51:c6:73:bf:e0:a7:92: 98:ee:bf:14:ba:45:4a:18:9c:78:2e:44:99:f6:02:c5:86:49: 5f:d9:24:40:31:f0:85:3b:1e:68:c4:98:a6:04:40:82:06:b7: b0:cd:da:92:c8:c0:f9:17:b4:70:50:84:48:ce:87:95:90:08: b6:8d:48:75:0d:88:01:b9:5c:ca:e8:fa:97:54:65:72:51:f4: 05:5b:60:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokSwNKsBs/lax80AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk OWY4MGQ4Y2UtOTRlMi00NDc2LWE0ZTAtOGI5NTk1N2E2NjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWdG4ORS/2CbSXKdspthnDT/D8unBYsQvCDs MF72Jwph4Nz7KiexiHhj5eeIcRY1mRoajZ+CQ/vHq9D6c9w9ixFoQKPNcw8CipOa YkNRmR74Q20Fdnt7Aiz0AHnCmTcjtn8lWz+84HGgz/MYDnIOUwvLEOtg2T61lSoy AovGeo1WlBQtOtUd7OFqEtJ8Dx4JDxmtHRzJwbb/CZxUKIYNneebgCT4hWFddMav kSsp0zSR+C4ybGsMZYckeTlDxdzswk44NT04f3z4178lheyL9vclKPa7wikSCP4L 91qHA/Nj63Uobt+nE+DSk61k/hgWS07qqYPF4OxVcGhRsVX+jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDr4AKy38urk4RXn6iZF3hvb4fq9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvYTNjMzE4NzctZGFkMi0z OWI0LWE3ZWYtMjAzN2Y1NDg5MDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEGKRTdqsCoWcgnuo1d6o0UgvqH1ckx0P/iHL7xdJyFB6VzxGwBrrga kIrn097yFhLcYjQ7CKh4KpaZC0+0v9ZNb7YhQzRl//mIJxWW4iM9VC8Lxboxrvva J3HO4Er4v8Pch5oqKmfoC89OcRUko9hrH2KPswZCGZ/BPjOSMjqFbpm1X/8xyahF eVy3oyS2w4Or/8AcXT9TfgGZjFfsQeD+mmIdwF9xLJk5wiItUcZzv+CnkpjuvxS6 RUoYnHguRJn2AsWGSV/ZJEAx8IU7HmjEmKYEQIIGt7DN2pLIwPkXtHBQhEjOh5WQ CLaNSHUNiAG5XMro+pdUZXJR9AVbYFY= -----END CERTIFICATE-----Generated at Sat Aug 23 18:09:07 2025 by rpki-client