$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/ef5d24b2-16b7-33ee-951c-957eba05bc08.roa File: ef5d24b2-16b7-33ee-951c-957eba05bc08.roa (raw, json) Hash identifier: d5jlTkUpFjTSuCxKDLZ4XiprBMQbRWOHa2eAECXyvXI= Subject key identifier: 49:09:67:FC:32:A6:58:71:B3:7D:59:F9:12:FE:60:34:1B:9B:40:80 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584AF3BBDD4D138FB68698D3AC00 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/ef5d24b2-16b7-33ee-951c-957eba05bc08.roa Signing time: Sat 23 Aug 2025 13:00:41 +0000 ROA not before: Sat 23 Aug 2025 13:00:41 +0000 ROA not after: Fri 21 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 198.1.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f3:bb:dd:4d:13:8f:b6:86:98:d3:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Aug 23 13:00:41 2025 GMT Not After : Nov 21 14:00:41 2025 GMT Subject: CN=f60cc285-78e6-43d5-aa64-1ec3bed20b5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:78:d2:f2:6b:7f:c4:73:af:bf:e4:33:1a:13: 7e:5b:11:d1:fb:04:1e:e0:56:5c:7d:7d:56:71:db: ad:58:a7:04:64:0d:32:58:b4:c9:79:d3:6d:49:1e: 7f:be:29:f8:22:41:e2:21:aa:19:5b:32:15:8e:34: 1e:fb:e5:91:d2:30:72:17:25:e0:90:a7:52:4e:8f: 98:05:49:12:30:e6:7e:24:86:36:44:13:47:83:81: 68:2f:9c:35:7a:c4:00:11:00:58:c2:19:06:8b:32: 83:99:96:33:08:c9:7d:ca:87:df:e9:9d:07:40:69: 08:d4:51:8f:07:d2:a1:d9:28:75:9c:62:4d:27:27: 08:0a:50:44:90:0c:4c:9c:c3:c1:a7:0d:57:b5:6a: c3:0f:d4:5d:66:be:ec:6a:44:fd:8b:da:eb:4f:68: e2:41:1a:33:43:6b:54:af:93:8a:fd:f4:f4:f3:3b: 69:fd:20:36:0f:53:39:f9:cd:78:e4:d4:e7:85:59: 9b:8c:56:d0:79:44:45:85:e7:88:47:59:c3:3c:73: 24:79:ae:0d:86:ad:19:60:25:20:d9:e2:a8:18:4a: 8f:11:b6:21:ad:3e:68:f5:6d:4e:1c:f5:b6:5b:86: 30:f9:0d:31:c9:ca:9b:3e:d7:13:02:83:cf:d0:95: a9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:09:67:FC:32:A6:58:71:B3:7D:59:F9:12:FE:60:34:1B:9B:40:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/ef5d24b2-16b7-33ee-951c-957eba05bc08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:d8:fd:2a:ea:6b:58:25:ad:eb:d6:ba:bc:be:a1:54:02:1d: 53:35:38:f0:94:6d:06:8f:92:18:74:0e:e8:7d:ca:b8:f8:68: bf:ce:06:91:c9:68:3d:4d:9f:12:1e:68:a2:b4:3f:2e:a8:91: e5:be:72:c8:92:1a:62:b6:df:4e:ba:87:04:e2:9a:27:a7:06: 1f:9d:00:d0:00:21:f3:b7:26:54:e7:bf:c3:c8:53:95:ef:84: 00:f3:fc:46:eb:fc:94:82:93:7e:7a:a2:fc:57:36:9d:68:c8: a6:66:0b:fd:8b:95:c7:c6:41:f6:26:6f:d0:35:95:53:ec:b6: f5:91:94:ec:d7:6c:ba:5d:fe:94:33:a8:de:30:6e:3b:8b:fb: c3:3d:fc:3f:46:4f:42:0a:6a:75:41:a3:9c:e4:cb:23:a0:2c: da:e4:d6:7f:79:7e:73:2d:6e:73:ec:c8:6b:ff:6c:16:57:59: 37:5e:97:2d:46:42:3d:55:68:74:73:6f:97:99:4e:3a:05:cf: 42:77:24:26:af:3e:87:eb:7b:51:14:a3:29:5b:fe:9a:48:ed: 6d:24:57:d4:a4:3a:aa:f8:be:28:8f:80:e4:35:1e:2d:09:56: cd:a7:ce:25:44:e8:50:dd:05:01:ec:f4:b1:3e:ca:5a:6a:d4: 73:9d:f4:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErzu91NE4+2hpjTrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDgyMzEzMDA0MVoXDTI1MTEyMTE0MDA0MVowLzEtMCsGA1UEAxMk ZjYwY2MyODUtNzhlNi00M2Q1LWFhNjQtMWVjM2JlZDIwYjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA73jS8mt/xHOvv+QzGhN+WxHR+wQe4FZcfX1W cdutWKcEZA0yWLTJedNtSR5/vin4IkHiIaoZWzIVjjQe++WR0jByFyXgkKdSTo+Y BUkSMOZ+JIY2RBNHg4FoL5w1esQAEQBYwhkGizKDmZYzCMl9yoff6Z0HQGkI1FGP B9Kh2Sh1nGJNJycIClBEkAxMnMPBpw1XtWrDD9RdZr7sakT9i9rrT2jiQRozQ2tU r5OK/fT08ztp/SA2D1M5+c145NTnhVmbjFbQeURFheeIR1nDPHMkea4Nhq0ZYCUg 2eKoGEqPEbYhrT5o9W1OHPW2W4Yw+Q0xycqbPtcTAoPP0JWp/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkJZ/wyplhxs31Z+RL+YDQbm0CAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvZWY1ZDI0YjItMTZiNy0z M2VlLTk1MWMtOTU3ZWJhMDViYzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDY/Srqa1glrevWury+oVQCHVM1OPCUbQaPkhh0Duh9yrj4aL/OBpHJ aD1NnxIeaKK0Py6okeW+csiSGmK23066hwTimienBh+dANAAIfO3JlTnv8PIU5Xv hADz/Ebr/JSCk356ovxXNp1oyKZmC/2LlcfGQfYmb9A1lVPstvWRlOzXbLpd/pQz qN4wbjuL+8M9/D9GT0IKanVBo5zkyyOgLNrk1n95fnMtbnPsyGv/bBZXWTdely1G Qj1VaHRzb5eZTjoFz0J3JCavPofre1EUoylb/ppI7W0kV9SkOqr4viiPgOQ1Hi0J Vs2nziVE6FDdBQHs9LE+ylpq1HOd9ME= -----END CERTIFICATE-----Generated at Sat Aug 23 17:47:08 2025 by rpki-client