$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/febe543e-3daa-31ec-b26f-dc13260c6840.roa File: febe543e-3daa-31ec-b26f-dc13260c6840.roa (raw, json) Hash identifier: dFy3QMcImHnJFtM2mKq4A8kQ5zX0KNG7UZMCFWBteYk= Subject key identifier: E0:4A:C3:33:2C:71:34:4B:26:6C:97:73:18:27:39:0F:D0:33:C5:80 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584A3F0369DF0D63D9A82B2FA560 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/febe543e-3daa-31ec-b26f-dc13260c6840.roa Signing time: Thu 19 Jun 2025 19:23:34 +0000 ROA not before: Thu 19 Jun 2025 19:23:34 +0000 ROA not after: Wed 17 Sep 2025 19:23:34 +0000 asID: 13347 IP address blocks: 198.1.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3f:03:69:df:0d:63:d9:a8:2b:2f:a5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Jun 19 19:23:34 2025 GMT Not After : Sep 17 19:23:34 2025 GMT Subject: CN=7b2eff1d-8b11-4c62-8ced-275bb8b4ed8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:51:4d:56:22:d2:3e:ed:03:22:9d:4c:7d:87: b5:98:7b:bc:63:9e:fb:de:82:e7:8d:02:4b:c9:b8: b9:e8:8c:d1:9e:96:69:ea:92:72:83:54:d2:df:eb: 42:f7:1e:e6:56:c6:a1:23:57:3f:56:42:d1:a6:11: 8f:ea:81:94:0a:07:a2:20:a0:ff:a4:43:7e:fc:19: 2c:7c:a6:f2:81:f6:23:5d:a7:fe:d5:2f:74:60:9a: 15:35:3a:41:b1:04:09:a5:12:35:97:8a:b1:55:4a: 1e:52:53:ad:ea:ea:6c:45:0f:ed:2a:2a:4c:b5:58: e0:e6:be:2b:46:a3:2f:d0:dd:ee:98:dd:64:0d:fb: 13:94:ac:87:94:c5:0f:0c:6f:bd:c3:18:c9:d2:6a: 6c:dc:07:79:98:7c:b9:32:26:32:ce:83:c1:27:00: 73:23:38:88:e4:e8:1e:14:f1:bb:47:1d:38:1f:0a: 03:8a:ba:36:cd:8e:c9:e7:26:03:69:41:2c:29:78: 17:74:dd:5e:fc:83:42:92:b7:06:db:cf:56:76:da: 78:3b:b8:af:93:7b:5d:de:76:65:bd:ec:a3:bd:e1: aa:98:65:eb:a6:96:97:40:92:bc:4a:88:33:3c:7b: db:b3:02:db:23:3b:64:2f:81:45:71:a7:ee:be:7b: 99:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:4A:C3:33:2C:71:34:4B:26:6C:97:73:18:27:39:0F:D0:33:C5:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/febe543e-3daa-31ec-b26f-dc13260c6840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:fc:c7:7c:64:8a:6d:43:2e:5b:de:61:65:a5:d4:24:aa:88: f1:57:ea:32:8c:78:84:c3:8d:22:3d:77:0b:ef:13:c6:5f:b5: 27:f3:49:ba:42:89:b6:1e:02:42:28:27:49:21:68:ee:5c:31: 32:57:96:72:7e:a6:b2:4f:54:75:2a:1f:16:7f:c1:9c:e9:e9: b3:59:45:e2:70:96:e0:e6:e0:89:8c:62:fa:9f:e7:92:3b:fa: 72:02:64:e7:d9:92:3b:58:99:df:ab:28:9f:3b:85:ae:24:23: 11:8a:b5:cc:f3:e0:aa:f8:16:51:5c:e0:e0:04:03:82:36:1c: eb:e9:64:f1:3f:e5:d1:52:79:21:e6:5e:14:28:5b:33:0c:fd: fa:6e:a1:10:86:b2:58:12:32:e4:51:91:1b:44:65:32:ff:e7: 53:1a:e1:85:ba:dd:aa:b6:4e:a9:0a:0f:0b:ca:32:9e:bf:28: d1:12:00:d2:d8:9e:bf:ac:eb:c2:7f:dc:ca:67:97:9e:85:d9: 27:3a:b9:5d:79:10:36:30:90:a0:fd:89:e7:91:83:7f:2c:59: fd:aa:b7:51:88:9d:47:d7:c6:e7:0a:06:44:8e:f8:7c:b6:80: 5f:f9:a6:c5:a5:84:d5:6e:14:cf:83:d6:e7:35:d0:2c:47:12: 4f:dc:7d:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo/A2nfDWPZqCsvpWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDYxOTE5MjMzNFoXDTI1MDkxNzE5MjMzNFowLzEtMCsGA1UEAxMk N2IyZWZmMWQtOGIxMS00YzYyLThjZWQtMjc1YmI4YjRlZDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1FNViLSPu0DIp1MfYe1mHu8Y5773oLnjQJL ybi56IzRnpZp6pJyg1TS3+tC9x7mVsahI1c/VkLRphGP6oGUCgeiIKD/pEN+/Bks fKbygfYjXaf+1S90YJoVNTpBsQQJpRI1l4qxVUoeUlOt6upsRQ/tKipMtVjg5r4r RqMv0N3umN1kDfsTlKyHlMUPDG+9wxjJ0mps3Ad5mHy5MiYyzoPBJwBzIziI5Oge FPG7Rx04HwoDiro2zY7J5yYDaUEsKXgXdN1e/INCkrcG289Wdtp4O7ivk3td3nZl veyjveGqmGXrppaXQJK8SogzPHvbswLbIztkL4FFcafuvnuZZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBKwzMscTRLJmyXcxgnOQ/QM8WAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvZmViZTU0M2UtM2RhYS0z MWVjLWIyNmYtZGMxMzI2MGM2ODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAET8x3xkim1DLlveYWWl1CSqiPFX6jKMeITDjSI9dwvvE8ZftSfzSbpC ibYeAkIoJ0khaO5cMTJXlnJ+prJPVHUqHxZ/wZzp6bNZReJwluDm4ImMYvqf55I7 +nICZOfZkjtYmd+rKJ87ha4kIxGKtczz4Kr4FlFc4OAEA4I2HOvpZPE/5dFSeSHm XhQoWzMM/fpuoRCGslgSMuRRkRtEZTL/51Ma4YW63aq2TqkKDwvKMp6/KNESANLY nr+s68J/3Mpnl56F2Sc6uV15EDYwkKD9ieeRg38sWf2qt1GInUfXxucKBkSO+Hy2 gF/5psWlhNVuFM+D1uc10CxHEk/cfZ4= -----END CERTIFICATE-----Generated at Sun Jun 29 16:36:51 2025 by rpki-client