$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/af315970-dd21-3e5f-bb31-702b9199ae7b.roa File: af315970-dd21-3e5f-bb31-702b9199ae7b.roa (raw, json) Hash identifier: Ehs+Zbs1IEnTBpX6QLA6XLhJsmfwZvpVUL9Vt9Jf1B0= Subject key identifier: B6:4E:99:1C:68:23:E2:B6:C5:07:4C:20:79:4D:4A:0D:6F:20:37:95 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584AE6288F15A480FFFCFF8EE1C0 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/af315970-dd21-3e5f-bb31-702b9199ae7b.roa Signing time: Mon 18 Aug 2025 16:18:24 +0000 ROA not before: Mon 18 Aug 2025 16:18:24 +0000 ROA not after: Sun 16 Nov 2025 17:18:24 +0000 asID: 9304 IP address blocks: 198.1.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e6:28:8f:15:a4:80:ff:fc:ff:8e:e1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Aug 18 16:18:24 2025 GMT Not After : Nov 16 17:18:24 2025 GMT Subject: CN=d6183201-dd20-42db-b49e-45cdceef557c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4d:7d:37:ad:76:85:eb:57:90:bb:03:43:86: 13:2c:31:84:98:37:85:e5:84:7d:0b:fa:0d:ca:12: da:21:31:da:0e:f1:33:b1:ad:d6:f6:24:02:6d:25: 46:fa:42:a2:f5:86:2d:1a:c6:6e:50:50:f9:b1:88: cb:78:30:80:14:72:79:bd:00:73:13:1d:57:66:a4: d7:be:15:b1:46:ed:a4:17:06:90:cb:34:43:70:87: af:5e:f2:55:c5:92:93:cf:99:cc:08:ee:c5:55:6c: ae:3a:d6:e0:6a:7e:e1:7f:84:fa:14:5f:7b:ef:e0: 43:a3:f0:37:62:94:e0:90:55:03:f3:44:79:5c:a8: cf:a4:49:cc:54:7a:8b:3f:ed:f7:3b:c9:d7:bd:8e: b4:13:7e:50:05:a3:a9:5c:33:8d:74:bf:0e:5f:78: 1f:27:28:f2:83:ba:19:ea:a6:c9:65:42:d0:f7:51: 59:ea:b6:b4:ca:2e:c8:d3:45:63:81:a5:4f:0d:63: 7b:49:ad:bb:9f:1f:b6:96:c7:93:67:ba:e1:a4:6a: c1:c0:34:e0:0c:ae:e4:80:c1:af:87:5d:c6:af:b8: 0a:eb:c8:1c:5d:f2:0c:f6:af:c3:9a:38:8d:4f:40: 6c:7d:5f:77:94:f3:e3:14:5c:9f:2a:e7:db:a2:33: 19:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:4E:99:1C:68:23:E2:B6:C5:07:4C:20:79:4D:4A:0D:6F:20:37:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/af315970-dd21-3e5f-bb31-702b9199ae7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:b6:43:ac:af:fe:57:03:cf:40:50:fa:ff:9c:e6:7e:a3:7a: 84:28:a3:b6:eb:cf:fa:f2:6c:03:50:1c:d9:e0:f0:dd:e4:11: df:ae:53:4f:aa:61:cc:0e:52:2e:65:01:b1:62:c5:10:59:da: 5b:f5:67:12:28:ed:d0:e5:eb:25:6f:a4:cc:59:cc:dc:35:fd: 42:0b:bd:24:68:99:be:ff:98:e5:8c:fa:c0:df:6a:1a:43:d6: 07:7c:7a:13:e6:1c:83:95:19:0d:95:0e:c1:8a:7f:e6:85:00: 35:fa:62:f4:f1:60:b3:3f:c5:56:be:36:ea:7f:0c:ad:3d:68: 3e:84:ab:44:c8:2d:25:a1:e4:ec:e9:e4:73:dc:49:cd:6e:4d: 94:6e:cf:0a:02:85:f2:ee:e5:ca:a1:83:02:2e:29:bf:53:33: 68:33:1e:7a:b7:6f:ba:7d:54:e3:d7:a0:bb:22:39:17:17:12: 02:8e:64:53:b4:ff:16:b4:62:d7:55:25:b2:d2:1d:95:2f:36: 96:34:6b:85:32:19:4a:d8:35:19:fd:e4:d6:78:cd:ce:26:25: 4a:7a:2a:db:ec:8d:49:f4:94:ae:d9:39:01:04:93:ee:9e:02: 30:26:e0:2e:2b:a9:fd:7a:4e:81:10:e7:c0:0f:01:36:9e:ac: 64:0d:74:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErmKI8VpID//P+O4cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDgxODE2MTgyNFoXDTI1MTExNjE3MTgyNFowLzEtMCsGA1UEAxMk ZDYxODMyMDEtZGQyMC00MmRiLWI0OWUtNDVjZGNlZWY1NTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlE19N612hetXkLsDQ4YTLDGEmDeF5YR9C/oN yhLaITHaDvEzsa3W9iQCbSVG+kKi9YYtGsZuUFD5sYjLeDCAFHJ5vQBzEx1XZqTX vhWxRu2kFwaQyzRDcIevXvJVxZKTz5nMCO7FVWyuOtbgan7hf4T6FF977+BDo/A3 YpTgkFUD80R5XKjPpEnMVHqLP+33O8nXvY60E35QBaOpXDONdL8OX3gfJyjyg7oZ 6qbJZULQ91FZ6ra0yi7I00VjgaVPDWN7Sa27nx+2lseTZ7rhpGrBwDTgDK7kgMGv h13Gr7gK68gcXfIM9q/DmjiNT0BsfV93lPPjFFyfKufbojMZAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZOmRxoI+K2xQdMIHlNSg1vIDeVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvYWYzMTU5NzAtZGQyMS0z ZTVmLWJiMzEtNzAyYjkxOTlhZTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHK2Q6yv/lcDz0BQ+v+c5n6jeoQoo7brz/rybANQHNng8N3kEd+uU0+q YcwOUi5lAbFixRBZ2lv1ZxIo7dDl6yVvpMxZzNw1/UILvSRomb7/mOWM+sDfahpD 1gd8ehPmHIOVGQ2VDsGKf+aFADX6YvTxYLM/xVa+Nup/DK09aD6Eq0TILSWh5Ozp 5HPcSc1uTZRuzwoChfLu5cqhgwIuKb9TM2gzHnq3b7p9VOPXoLsiORcXEgKOZFO0 /xa0YtdVJbLSHZUvNpY0a4UyGUrYNRn95NZ4zc4mJUp6KtvsjUn0lK7ZOQEEk+6e AjAm4C4rqf16ToEQ58APATaerGQNdC0= -----END CERTIFICATE-----Generated at Sat Aug 23 15:48:17 2025 by rpki-client