$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/e6e0bc93-6e10-3beb-b3d7-2758f3538a6d.roa File: e6e0bc93-6e10-3beb-b3d7-2758f3538a6d.roa (raw, json) Hash identifier: CL2lJq8BzA0Zy0O4qGjcXZhkEFWq8VDpJRoes8bMwtw= Subject key identifier: 3E:07:B9:E0:F3:FE:F4:96:D1:45:3A:C4:4C:C0:E5:8B:1D:07:12:F3 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584B196C11F8E5F67D75E5F17480 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/e6e0bc93-6e10-3beb-b3d7-2758f3538a6d.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 7029 IP address blocks: 198.1.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:11:f8:e5:f6:7d:75:e5:f1:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=e9ad37a2-33a3-433b-ae96-743dd6fb6097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c6:80:b3:28:8c:ee:ec:74:68:23:97:9d:da: 7a:58:c8:1c:80:57:85:5d:9c:17:90:ef:d1:f3:aa: e5:11:52:0d:6f:98:61:18:1e:e4:3e:5c:39:f8:ee: 37:b8:08:e7:e0:44:c7:d4:1b:a1:da:3d:34:99:2d: 7c:3a:77:17:82:5d:43:35:4b:7e:00:9c:15:84:cc: 7b:71:97:a3:66:a0:04:1a:98:7b:bf:7d:59:f3:46: 42:a5:1d:c6:16:b2:2c:f6:ef:a8:50:e3:92:8b:52: 74:ce:f9:17:00:76:d0:5b:ab:a2:ae:ef:85:ff:b6: f5:50:05:71:02:c9:d4:60:12:52:9c:9a:00:5d:11: 25:24:5b:75:51:79:0b:c9:19:b6:1b:61:8b:16:be: 4d:71:fb:eb:c7:62:88:c7:95:76:f4:a3:d3:7e:32: 14:9f:80:3e:55:54:5a:94:4e:77:8a:b0:22:ca:e1: ee:a1:5d:4c:c5:1e:dd:5b:98:36:c7:3a:99:22:20: c0:79:40:79:eb:b3:48:21:7c:1f:4b:ff:ef:e9:56: 5d:b7:52:22:9c:c8:de:db:e0:28:19:82:ff:cc:c1: f7:0d:41:e1:5f:5d:c4:3c:df:89:fe:0a:45:87:0e: cc:a2:cb:f5:cc:2d:69:a5:df:1b:51:cc:0a:3b:a8: 5a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:07:B9:E0:F3:FE:F4:96:D1:45:3A:C4:4C:C0:E5:8B:1D:07:12:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/e6e0bc93-6e10-3beb-b3d7-2758f3538a6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:6a:6f:a3:8d:3d:8a:de:e6:e4:c0:24:6e:59:e4:45:7f:a0: 8d:59:37:c5:55:e1:9c:e7:a4:dc:03:9f:2a:c2:59:89:3e:86: 36:d7:d1:c6:6e:ba:d4:bd:aa:d9:89:07:ab:15:81:f1:1e:e1: 51:ca:a2:5f:6b:a7:02:c6:c8:4c:f9:9b:4a:80:a4:87:ca:41: df:3e:8b:c1:16:01:d8:90:f8:d2:4a:2a:60:e2:9b:a0:44:9d: a1:ea:a8:8a:92:2a:58:d1:d9:ca:5a:52:ad:18:40:26:a2:cf: b2:cd:1e:83:3f:f9:6a:42:eb:db:b5:ca:79:8a:fc:cd:1c:dc: 2b:b2:29:9d:90:eb:1b:9e:a4:80:c1:1c:74:bc:5b:bb:e5:5f: 13:a5:12:60:0f:c2:e2:c4:b2:e7:7f:07:47:54:b5:4a:15:fb: 8e:ca:16:3e:0e:01:f9:83:aa:e9:2c:1e:fb:e1:c9:23:9a:e6: 5f:3a:2b:9f:bc:30:c7:4e:42:ed:ca:3f:b5:ba:f3:4d:09:8a: 88:3f:b3:db:a1:75:a1:ab:b6:a6:fc:7a:87:26:62:87:64:cd: 56:2f:ae:34:24:4c:2f:36:5d:44:e2:a7:f0:64:90:d6:1e:14: be:a7:46:ed:63:81:00:55:f2:fe:52:6c:b9:85:d9:df:62:59: 8c:5f:1f:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbBH45fZ9deXxdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk ZTlhZDM3YTItMzNhMy00MzNiLWFlOTYtNzQzZGQ2ZmI2MDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcaAsyiM7ux0aCOXndp6WMgcgFeFXZwXkO/R 86rlEVINb5hhGB7kPlw5+O43uAjn4ETH1Buh2j00mS18OncXgl1DNUt+AJwVhMx7 cZejZqAEGph7v31Z80ZCpR3GFrIs9u+oUOOSi1J0zvkXAHbQW6uiru+F/7b1UAVx AsnUYBJSnJoAXRElJFt1UXkLyRm2G2GLFr5Ncfvrx2KIx5V29KPTfjIUn4A+VVRa lE53irAiyuHuoV1MxR7dW5g2xzqZIiDAeUB567NIIXwfS//v6VZdt1IinMje2+Ao GYL/zMH3DUHhX13EPN+J/gpFhw7Mosv1zC1ppd8bUcwKO6haSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4HueDz/vSW0UU6xEzA5YsdBxLzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvZTZlMGJjOTMtNmUxMC0z YmViLWIzZDctMjc1OGYzNTM4YTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlqb6ONPYre5uTAJG5Z5EV/oI1ZN8VV4ZznpNwDnyrCWYk+hjbX0cZu utS9qtmJB6sVgfEe4VHKol9rpwLGyEz5m0qApIfKQd8+i8EWAdiQ+NJKKmDim6BE naHqqIqSKljR2cpaUq0YQCaiz7LNHoM/+WpC69u1ynmK/M0c3CuyKZ2Q6xuepIDB HHS8W7vlXxOlEmAPwuLEsud/B0dUtUoV+47KFj4OAfmDquksHvvhySOa5l86K5+8 MMdOQu3KP7W6800Jiog/s9uhdaGrtqb8eocmYodkzVYvrjQkTC82XUTip/BkkNYe FL6nRu1jgQBV8v5SbLmF2d9iWYxfHyo= -----END CERTIFICATE-----Generated at Mon Oct 20 03:29:04 2025 by rpki-client