$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/baf8d5da-429f-3160-a33b-0e1fd0b8387c.roa File: baf8d5da-429f-3160-a33b-0e1fd0b8387c.roa (raw, json) Hash identifier: lM4HbrTKxJJPNM65uEXqQ87vgTVwG3gLUsgsFH1cnMQ= Subject key identifier: 7D:96:8F:97:25:1A:00:F0:50:09:2F:B0:25:E2:CE:30:B1:DE:86:58 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584AE6284C4A2B63682AE31FA780 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/baf8d5da-429f-3160-a33b-0e1fd0b8387c.roa Signing time: Mon 18 Aug 2025 16:17:53 +0000 ROA not before: Mon 18 Aug 2025 16:17:53 +0000 ROA not after: Sun 16 Nov 2025 17:17:53 +0000 asID: 9304 IP address blocks: 198.1.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e6:28:4c:4a:2b:63:68:2a:e3:1f:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Aug 18 16:17:53 2025 GMT Not After : Nov 16 17:17:53 2025 GMT Subject: CN=21a52250-0ca2-4117-8805-6f5fad1227fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:64:5d:f5:2e:5d:90:97:c7:c3:59:b0:f6:8a: 3f:f5:2a:58:66:52:57:21:3c:bd:5a:5e:bd:f7:11: 99:f4:3d:bd:80:0b:ac:95:bc:2c:7a:f5:64:22:d7: 83:89:b7:ce:89:50:81:ea:8b:2a:7b:50:59:c9:a0: 56:2d:c6:f1:87:5f:b0:3c:60:0c:c3:33:54:4f:c0: 1b:c4:45:87:91:06:c8:7f:cb:a2:d5:5c:1e:1d:47: bf:c0:77:37:2d:1e:ed:39:6a:f8:66:9a:8c:7b:ad: 5a:cf:9d:69:d8:6d:4a:f5:42:e4:25:f0:89:48:c1: a7:94:b4:f1:87:e7:63:b2:b5:49:29:0b:93:fe:36: 3d:36:b5:b3:d6:d2:e6:d1:e0:d2:d3:f9:74:09:2d: 6d:80:34:f8:84:6a:47:46:01:cf:85:49:43:5c:d6: 66:fa:aa:00:3b:0b:21:85:45:0b:a6:45:b2:57:c0: db:4c:49:b8:77:44:9e:61:a9:c9:28:05:e7:71:4b: 5d:04:87:4e:0d:fb:44:23:84:14:19:5b:46:e9:34: a6:d4:00:cd:fd:2d:a8:59:b5:8e:4b:ee:0e:9d:0d: 11:3e:b0:fc:a9:37:18:88:ec:4d:69:b4:9a:c3:d3: e7:7c:02:ac:d6:fd:c1:1c:dd:2b:82:09:a5:93:55: 42:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:96:8F:97:25:1A:00:F0:50:09:2F:B0:25:E2:CE:30:B1:DE:86:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/baf8d5da-429f-3160-a33b-0e1fd0b8387c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:0f:83:96:7c:25:c1:0e:76:5c:35:51:b9:3f:d4:50:20:f4: 38:24:6f:1d:11:6d:c2:55:84:65:d5:62:8c:0b:e1:c8:23:4c: 8f:60:9c:30:ad:08:20:b3:69:35:df:d7:c9:22:4d:fa:14:05: 9a:22:22:58:2b:85:5f:01:d6:7c:b6:85:99:14:3d:02:d3:66: 83:e4:59:8c:34:6d:c2:c5:b8:24:e4:41:cd:af:71:34:a3:1a: 13:ea:0c:52:73:43:b8:fd:c6:11:46:2a:07:ae:ea:e0:eb:b3: d2:cb:d4:c6:7a:35:88:be:f9:34:60:c4:0b:c9:5f:11:d7:ec: 8f:35:6f:09:a8:fe:6f:f1:c6:a9:a8:5a:80:e3:96:a9:e0:59: ad:4e:cf:5c:d3:50:93:09:2f:d1:a9:ab:c5:cb:bf:c7:24:b9: 9f:58:9b:1a:93:25:55:fc:d0:d7:29:db:ce:25:06:97:bc:6a: 44:80:53:66:1d:13:61:f7:84:a3:6f:8e:49:18:53:30:aa:7a: 68:b0:ed:70:20:d6:fb:c0:26:0b:9b:ee:e0:f8:8d:8e:c7:a2: 82:97:0c:ac:77:e2:9a:e3:56:3b:d7:7a:71:86:df:ca:10:09: 6a:91:79:6f:98:e0:06:49:ab:90:ed:d7:a3:30:74:d3:21:a9: 94:99:89:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErmKExKK2NoKuMfp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDgxODE2MTc1M1oXDTI1MTExNjE3MTc1M1owLzEtMCsGA1UEAxMk MjFhNTIyNTAtMGNhMi00MTE3LTg4MDUtNmY1ZmFkMTIyN2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWRd9S5dkJfHw1mw9oo/9SpYZlJXITy9Wl69 9xGZ9D29gAuslbwsevVkIteDibfOiVCB6osqe1BZyaBWLcbxh1+wPGAMwzNUT8Ab xEWHkQbIf8ui1VweHUe/wHc3LR7tOWr4ZpqMe61az51p2G1K9ULkJfCJSMGnlLTx h+djsrVJKQuT/jY9NrWz1tLm0eDS0/l0CS1tgDT4hGpHRgHPhUlDXNZm+qoAOwsh hUULpkWyV8DbTEm4d0SeYanJKAXncUtdBIdODftEI4QUGVtG6TSm1ADN/S2oWbWO S+4OnQ0RPrD8qTcYiOxNabSaw9PnfAKs1v3BHN0rggmlk1VCLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2Wj5clGgDwUAkvsCXizjCx3oZYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvYmFmOGQ1ZGEtNDI5Zi0z MTYwLWEzM2ItMGUxZmQwYjgzODdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQPg5Z8JcEOdlw1Ubk/1FAg9Dgkbx0RbcJVhGXVYowL4cgjTI9gnDCt CCCzaTXf18kiTfoUBZoiIlgrhV8B1ny2hZkUPQLTZoPkWYw0bcLFuCTkQc2vcTSj GhPqDFJzQ7j9xhFGKgeu6uDrs9LL1MZ6NYi++TRgxAvJXxHX7I81bwmo/m/xxqmo WoDjlqngWa1Oz1zTUJMJL9Gpq8XLv8ckuZ9YmxqTJVX80Ncp284lBpe8akSAU2Yd E2H3hKNvjkkYUzCqemiw7XAg1vvAJgub7uD4jY7HooKXDKx34prjVjvXenGG38oQ CWqReW+Y4AZJq5Dt16MwdNMhqZSZifo= -----END CERTIFICATE-----Generated at Sat Aug 23 17:54:22 2025 by rpki-client