$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/0eb3420b-b6bb-3742-a0df-89fb09e6e171.roa File: 0eb3420b-b6bb-3742-a0df-89fb09e6e171.roa (raw, json) Hash identifier: WDzNx1nVZwgVr+62UdoqfXlgEQvlZffVq5qYlUt+/bg= Subject key identifier: 94:0E:4B:96:14:5C:97:0B:06:16:6D:AF:1A:B1:DB:77:5B:F2:62:5A Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584B4FE2DA831710E76471F633C0 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/0eb3420b-b6bb-3742-a0df-89fb09e6e171.roa Signing time: Thu 25 Sep 2025 13:13:38 +0000 ROA not before: Thu 25 Sep 2025 13:13:38 +0000 ROA not after: Wed 24 Dec 2025 14:13:38 +0000 asID: 214025 IP address blocks: 198.1.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:e2:da:83:17:10:e7:64:71:f6:33:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Sep 25 13:13:38 2025 GMT Not After : Dec 24 14:13:38 2025 GMT Subject: CN=fab9a46a-0dae-41f3-9f3f-d257ed0ef8fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9e:23:63:4d:4f:d1:a9:29:92:71:d7:8a:0d: e9:6a:cd:39:e1:64:70:47:09:b5:b0:50:13:ef:d7: 22:da:fd:9b:7b:30:69:e1:59:f4:ee:4f:2f:bf:97: d3:df:71:92:b5:ed:6a:41:1e:be:cb:ba:4e:2a:0e: 0f:dd:b6:b2:0d:f8:2b:69:16:5c:52:df:57:14:bf: 1b:4b:95:a0:4d:d0:38:9d:28:0d:91:a7:32:78:2b: e0:e7:6d:27:04:bf:6c:9b:2f:5e:a8:70:c8:d2:68: db:ac:11:29:b4:11:3d:28:af:b8:a2:ef:3b:8f:70: 33:02:1a:cd:da:2d:1a:c0:46:48:10:85:cc:c2:e9: 04:aa:20:ef:e0:e3:45:bc:94:32:09:d7:d3:e1:39: 28:4d:8c:c6:b1:d8:31:94:4b:b3:5c:8e:69:85:b4: da:f6:1d:9e:71:5f:6a:16:98:4c:a8:66:db:81:68: e3:fb:08:ea:f9:cd:87:d0:3e:8c:20:22:0a:f9:e3: 8a:6c:f1:3e:7d:ed:34:d0:43:90:36:e9:f5:a9:85: 69:75:0d:8d:31:21:75:6a:c7:1b:92:74:69:a8:56: 8c:59:80:4b:f7:07:71:a1:f2:d0:fc:7f:61:2b:2e: 81:cd:f3:b7:ba:53:ab:3e:06:ae:8c:c4:c7:38:79: 19:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:0E:4B:96:14:5C:97:0B:06:16:6D:AF:1A:B1:DB:77:5B:F2:62:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/0eb3420b-b6bb-3742-a0df-89fb09e6e171.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:32:8c:4c:4c:a0:2f:68:3d:94:62:08:a0:cb:47:6a:92:a0: 54:37:7d:0e:d0:5b:6a:fb:dc:b3:54:87:ee:9c:6f:ff:c4:0c: e9:97:c2:d9:d6:47:fd:36:43:a2:bc:b6:1a:6b:be:a1:5f:49: 02:f0:d2:6d:5e:5b:17:41:1a:08:26:a7:41:99:7d:48:bc:ab: 61:3c:7d:61:fc:c7:60:99:5b:7e:3f:26:27:f8:a9:a9:aa:2b: 23:d5:ca:95:6e:02:cb:4b:4e:0d:07:72:57:d7:cb:a6:cb:44: 22:49:a7:fa:d7:52:54:6c:a1:e8:0b:86:2f:78:b2:79:fd:f9: 6c:4c:21:93:e0:74:83:5b:a4:8f:7a:d4:fe:e4:f0:05:40:96: b3:67:89:36:b2:7a:ce:43:aa:7f:f2:a0:bf:be:62:3c:1f:13: 21:c5:8a:3e:83:ab:00:91:8a:3a:a4:96:75:46:e2:23:a7:23: 3d:25:51:c2:94:51:ac:ff:63:ab:fd:2c:37:68:b9:da:d2:97: 6e:24:0f:c1:e8:00:bb:1d:ed:ac:70:00:23:8e:76:d6:ae:b3: fc:3d:67:72:b5:36:fc:39:16:a9:61:5f:72:f9:f5:4d:44:22: dd:ed:af:4a:6b:6d:63:44:4f:7c:1b:72:6f:78:ba:97:ce:3a: 92:fa:5d:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtP4tqDFxDnZHH2M8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDkyNTEzMTMzOFoXDTI1MTIyNDE0MTMzOFowLzEtMCsGA1UEAxMk ZmFiOWE0NmEtMGRhZS00MWYzLTlmM2YtZDI1N2VkMGVmOGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJ4jY01P0akpknHXig3pas054WRwRwm1sFAT 79ci2v2bezBp4Vn07k8vv5fT33GSte1qQR6+y7pOKg4P3bayDfgraRZcUt9XFL8b S5WgTdA4nSgNkacyeCvg520nBL9smy9eqHDI0mjbrBEptBE9KK+4ou87j3AzAhrN 2i0awEZIEIXMwukEqiDv4ONFvJQyCdfT4TkoTYzGsdgxlEuzXI5phbTa9h2ecV9q FphMqGbbgWjj+wjq+c2H0D6MICIK+eOKbPE+fe000EOQNun1qYVpdQ2NMSF1ascb knRpqFaMWYBL9wdxofLQ/H9hKy6BzfO3ulOrPgaujMTHOHkZKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQOS5YUXJcLBhZtrxqx23db8mJaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvMGViMzQyMGItYjZiYi0z NzQyLWEwZGYtODlmYjA5ZTZlMTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcyjExMoC9oPZRiCKDLR2qSoFQ3fQ7QW2r73LNUh+6cb//EDOmXwtnW R/02Q6K8thprvqFfSQLw0m1eWxdBGggmp0GZfUi8q2E8fWH8x2CZW34/Jif4qamq KyPVypVuAstLTg0HclfXy6bLRCJJp/rXUlRsoegLhi94snn9+WxMIZPgdINbpI96 1P7k8AVAlrNniTayes5Dqn/yoL++YjwfEyHFij6DqwCRijqklnVG4iOnIz0lUcKU Uaz/Y6v9LDdoudrSl24kD8HoALsd7axwACOOdtaus/w9Z3K1Nvw5FqlhX3L59U1E It3tr0prbWNET3wbcm94upfOOpL6XXo= -----END CERTIFICATE-----Generated at Fri Oct 10 17:47:33 2025 by rpki-client