$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/c1e1d41f-5495-313a-b47f-faba1b1ebf3d.roa File: c1e1d41f-5495-313a-b47f-faba1b1ebf3d.roa (raw, json) Hash identifier: OvAdpQK9eKMPxCfhYgV9uHDD5WJbPrMMwao/S8C0UYc= Subject key identifier: 0C:A7:12:4D:0A:7F:DB:60:74:E5:E0:FF:67:13:40:02:DB:D1:20:5C Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584AE9634EC1031B5DE610BD9E80 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/c1e1d41f-5495-313a-b47f-faba1b1ebf3d.roa Signing time: Tue 19 Aug 2025 20:04:12 +0000 ROA not before: Tue 19 Aug 2025 20:04:12 +0000 ROA not after: Mon 17 Nov 2025 21:04:12 +0000 asID: 401163 IP address blocks: 198.1.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:63:4e:c1:03:1b:5d:e6:10:bd:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Aug 19 20:04:12 2025 GMT Not After : Nov 17 21:04:12 2025 GMT Subject: CN=a63fc4f4-a338-46db-80a7-9da3b7333810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:7c:b9:47:61:61:1b:2d:62:e1:41:5e:5e:38: 9d:03:42:c1:fa:3f:7b:24:ec:21:d3:8b:a6:b6:ac: 3f:c2:0e:c3:02:3b:21:ca:58:ba:6f:29:4e:18:52: b5:e4:22:fd:28:f7:b5:f0:f2:a9:f1:da:fb:3b:b3: 85:af:a2:54:d9:34:ef:ac:38:46:dd:3e:cb:5e:12: a2:fc:21:a3:c4:59:8e:2e:84:11:93:3f:90:4c:e7: 8b:6c:5d:e9:22:f5:9a:f2:e4:7a:1f:72:9f:fa:ba: a4:d3:91:a3:9c:e2:73:4b:67:77:67:2f:3a:57:9f: 36:af:de:55:80:da:4f:ae:ca:62:5f:97:ef:24:f2: 74:cd:c2:41:5a:2c:e7:02:2c:e9:a7:1b:03:bc:0c: 81:b6:49:ea:03:01:09:19:7a:66:10:f1:ea:95:10: be:e8:8f:09:83:9a:b4:db:28:35:6a:d7:f3:2d:56: 17:83:5d:fb:98:24:1e:c2:64:40:dc:37:7e:26:0c: 7e:f5:64:50:33:c9:33:36:07:b8:51:d5:b7:e8:ef: 9d:3b:13:95:23:2f:af:2b:ce:4b:e4:3c:29:3e:e8: f5:58:5e:1e:52:a1:52:f8:14:f0:dc:fe:c3:dd:61: 6e:24:d6:bb:ad:e8:52:94:de:e4:10:8f:cc:4c:2c: 62:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A7:12:4D:0A:7F:DB:60:74:E5:E0:FF:67:13:40:02:DB:D1:20:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/c1e1d41f-5495-313a-b47f-faba1b1ebf3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:1b:fe:0f:02:04:db:37:e2:82:d5:5a:f7:73:36:59:36:33: 6d:a4:03:02:e4:ff:5c:18:72:e5:a6:6c:a4:2a:2a:71:1b:cc: 98:bb:e9:20:5b:49:86:c6:2a:87:00:42:17:ad:ec:f1:ce:fc: b8:48:a8:39:db:c8:8b:4e:df:33:7f:94:b0:03:12:05:fa:e9: 11:03:17:ee:ef:3c:21:a7:9a:6d:09:9d:c2:2e:a8:c3:82:56: 0f:10:8e:77:66:ac:16:01:ac:be:fe:be:56:e2:d5:10:ce:c8: 4d:66:49:c4:5c:eb:94:80:96:e8:68:c7:af:35:53:69:65:5a: e3:c4:51:05:e0:d6:e2:87:b4:d0:18:17:9e:bd:30:e6:0d:91: a3:27:bd:13:f8:f8:62:ec:1d:fb:13:9a:5a:ba:f7:6f:4c:a9: 56:72:62:80:7a:e3:d6:6f:bc:39:87:38:67:56:44:33:78:ea: 79:f3:49:83:8b:f1:fe:32:cc:31:1b:57:17:e9:f7:49:eb:69: 81:08:f6:6f:c1:74:b5:11:de:f4:8d:1e:33:29:c3:c2:90:4e: cf:f9:db:30:4d:51:52:07:97:87:ff:af:44:f2:03:92:72:80: 99:ec:d9:0b:52:c6:dc:67:c2:9a:1c:86:38:2d:e2:c0:7e:f7: e2:79:30:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpY07BAxtd5hC9noAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDgxOTIwMDQxMloXDTI1MTExNzIxMDQxMlowLzEtMCsGA1UEAxMk YTYzZmM0ZjQtYTMzOC00NmRiLTgwYTctOWRhM2I3MzMzODEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3y5R2FhGy1i4UFeXjidA0LB+j97JOwh04um tqw/wg7DAjshyli6bylOGFK15CL9KPe18PKp8dr7O7OFr6JU2TTvrDhG3T7LXhKi /CGjxFmOLoQRkz+QTOeLbF3pIvWa8uR6H3Kf+rqk05GjnOJzS2d3Zy86V582r95V gNpPrspiX5fvJPJ0zcJBWiznAizppxsDvAyBtknqAwEJGXpmEPHqlRC+6I8Jg5q0 2yg1atfzLVYXg137mCQewmRA3Dd+Jgx+9WRQM8kzNge4UdW36O+dOxOVIy+vK85L 5DwpPuj1WF4eUqFS+BTw3P7D3WFuJNa7rehSlN7kEI/MTCxi9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAynEk0Kf9tgdOXg/2cTQALb0SBcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvYzFlMWQ0MWYtNTQ5NS0z MTNhLWI0N2YtZmFiYTFiMWViZjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUb/g8CBNs34oLVWvdzNlk2M22kAwLk/1wYcuWmbKQqKnEbzJi76SBb SYbGKocAQhet7PHO/LhIqDnbyItO3zN/lLADEgX66REDF+7vPCGnmm0JncIuqMOC Vg8QjndmrBYBrL7+vlbi1RDOyE1mScRc65SAluhox681U2llWuPEUQXg1uKHtNAY F569MOYNkaMnvRP4+GLsHfsTmlq6929MqVZyYoB649ZvvDmHOGdWRDN46nnzSYOL 8f4yzDEbVxfp90nraYEI9m/BdLUR3vSNHjMpw8KQTs/52zBNUVIHl4f/r0TyA5Jy gJns2QtSxtxnwpochjgt4sB+9+J5MIU= -----END CERTIFICATE-----Generated at Sat Aug 23 17:48:58 2025 by rpki-client