$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/ebdbc886-534d-30c7-b222-dc3d598d0362.roa File: ebdbc886-534d-30c7-b222-dc3d598d0362.roa (raw, json) Hash identifier: mAAJYBMuw1YHY36fz8kVQgJHmkTSuoWM5ORAf5Qydxg= Subject key identifier: CD:66:D1:33:4E:9D:8E:C5:83:C7:73:81:98:69:41:B2:C6:75:AF:06 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584AEB5BD0C661E537297336FDC0 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/ebdbc886-534d-30c7-b222-dc3d598d0362.roa Signing time: Wed 20 Aug 2025 13:00:41 +0000 ROA not before: Wed 20 Aug 2025 13:00:41 +0000 ROA not after: Tue 18 Nov 2025 14:00:41 +0000 asID: 64267 IP address blocks: 198.1.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:5b:d0:c6:61:e5:37:29:73:36:fd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Aug 20 13:00:41 2025 GMT Not After : Nov 18 14:00:41 2025 GMT Subject: CN=378353f8-719a-4ba8-aba2-b9d32c9522a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0a:ff:06:25:f2:00:3d:cb:6c:a8:45:1c:e4: fa:09:7f:47:ed:de:99:75:a9:7a:17:ae:dd:9d:c5: d0:fe:52:57:c5:ab:6a:03:89:6b:db:c1:7e:46:8f: 49:fa:d8:63:00:08:15:06:6a:71:84:6b:96:12:f4: 98:51:cd:b8:2c:8d:a1:8c:66:15:e3:d3:fe:dd:0f: c0:74:f9:34:7a:b6:5f:61:4c:bd:37:fe:48:b5:a3: 1b:02:91:5c:2d:8c:c5:80:5f:d9:01:92:7e:2f:c9: 94:f8:57:8c:33:ba:9b:d5:21:9f:a7:be:8d:ff:8c: 73:4a:a9:58:c9:94:ff:66:14:26:e9:b5:d1:08:0c: 53:6f:1b:93:95:14:cf:f3:0f:0c:56:89:8c:0e:96: f2:8b:15:6a:32:43:1f:bf:6d:4b:d6:ba:ea:f7:68: 9f:20:9f:34:ef:44:99:0f:e3:0e:be:d7:f6:a4:36: ba:d9:73:af:95:9d:99:0f:02:e9:84:4f:51:50:70: 8b:c7:96:89:dc:e9:21:88:60:bb:7d:5e:b2:1d:cb: c3:c6:2f:98:ed:04:75:85:8e:37:ca:46:eb:16:b4: 5e:a2:9a:2f:de:4e:86:23:0d:ed:98:4a:62:fc:0f: 24:9b:96:71:f5:2d:2d:6c:c1:60:61:59:cd:5a:bb: 25:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:66:D1:33:4E:9D:8E:C5:83:C7:73:81:98:69:41:B2:C6:75:AF:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/ebdbc886-534d-30c7-b222-dc3d598d0362.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:6a:89:4c:11:64:f1:bc:ee:9b:c7:60:3f:1f:df:3f:aa:f1: 9a:f8:48:36:52:c0:f2:20:25:a9:82:dd:df:bb:7f:2d:c3:fa: 9c:b8:14:b8:5a:6b:1f:8f:c3:2a:62:a3:f5:5b:eb:76:a8:62: ba:f1:d4:f7:a7:8f:be:d8:c2:82:2e:8f:ec:c5:8d:5a:26:83: 9f:c8:69:00:6a:19:53:10:62:20:5c:e4:b6:18:e0:c2:9e:45: df:66:50:bf:e2:5f:35:d6:b3:36:f1:cf:57:b6:70:c3:3a:d5: dc:cb:d3:8c:8f:86:e8:86:31:fc:04:be:84:83:14:6b:e3:c9: 42:1e:5b:c8:7a:5b:34:e4:81:4e:e6:04:44:3f:4d:c5:10:33: d9:d8:a4:f1:32:a9:59:b0:44:77:29:86:3e:93:df:b1:7b:86: 7b:76:de:47:b3:24:6e:e5:65:74:74:7d:ae:c3:50:3e:c2:3f: 2a:a8:e2:12:20:c7:1f:db:9d:2a:1f:dc:39:01:2b:de:bb:3a: 7f:63:21:d8:28:a0:91:70:40:b5:08:38:ef:27:8a:60:07:f3: 67:0d:b0:8f:5d:a4:44:c8:9a:fa:b3:08:d6:de:fa:3b:13:b5: 7c:90:9e:6e:ef:66:ad:52:7f:ad:09:46:0f:ef:d7:c7:f9:d1: be:d0:1a:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErrW9DGYeU3KXM2/cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDgyMDEzMDA0MVoXDTI1MTExODE0MDA0MVowLzEtMCsGA1UEAxMk Mzc4MzUzZjgtNzE5YS00YmE4LWFiYTItYjlkMzJjOTUyMmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAr/BiXyAD3LbKhFHOT6CX9H7d6Zdal6F67d ncXQ/lJXxatqA4lr28F+Ro9J+thjAAgVBmpxhGuWEvSYUc24LI2hjGYV49P+3Q/A dPk0erZfYUy9N/5ItaMbApFcLYzFgF/ZAZJ+L8mU+FeMM7qb1SGfp76N/4xzSqlY yZT/ZhQm6bXRCAxTbxuTlRTP8w8MVomMDpbyixVqMkMfv21L1rrq92ifIJ8070SZ D+MOvtf2pDa62XOvlZ2ZDwLphE9RUHCLx5aJ3OkhiGC7fV6yHcvDxi+Y7QR1hY43 ykbrFrReopov3k6GIw3tmEpi/A8km5Zx9S0tbMFgYVnNWrslHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1m0TNOnY7Fg8dzgZhpQbLGda8GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvZWJkYmM4ODYtNTM0ZC0z MGM3LWIyMjItZGMzZDU5OGQwMzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApqiUwRZPG87pvHYD8f3z+q8Zr4SDZSwPIgJamC3d+7fy3D+py4FLha ax+Pwypio/Vb63aoYrrx1Penj77YwoIuj+zFjVomg5/IaQBqGVMQYiBc5LYY4MKe Rd9mUL/iXzXWszbxz1e2cMM61dzL04yPhuiGMfwEvoSDFGvjyUIeW8h6WzTkgU7m BEQ/TcUQM9nYpPEyqVmwRHcphj6T37F7hnt23kezJG7lZXR0fa7DUD7CPyqo4hIg xx/bnSof3DkBK967On9jIdgooJFwQLUIOO8nimAH82cNsI9dpETImvqzCNbe+jsT tXyQnm7vZq1Sf60JRg/v18f50b7QGg4= -----END CERTIFICATE-----Generated at Sat Aug 23 13:53:01 2025 by rpki-client