$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3597fa41-0807-3147-8c7b-86c72ed87a96.roa File: 3597fa41-0807-3147-8c7b-86c72ed87a96.roa (raw, json) Hash identifier: 8R8Rg2U1P/ezoklpS5t0m5ApnwLIb9ZWVHjra+4lLvw= Subject key identifier: BE:66:21:7C:31:79:AE:BF:EC:CD:45:9E:35:3A:D5:2B:15:C9:DD:CF Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584B2E5C5EEED8A2844A72015200 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3597fa41-0807-3147-8c7b-86c72ed87a96.roa Signing time: Sat 13 Sep 2025 13:00:41 +0000 ROA not before: Sat 13 Sep 2025 13:00:41 +0000 ROA not after: Fri 12 Dec 2025 14:00:41 +0000 asID: 399672 IP address blocks: 198.1.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2e:5c:5e:ee:d8:a2:84:4a:72:01:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Sep 13 13:00:41 2025 GMT Not After : Dec 12 14:00:41 2025 GMT Subject: CN=9b3b1c74-0f6a-4f4a-b2e1-d26f0d22b40e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:19:6b:53:f1:19:77:c7:dd:9d:ab:42:40:a5: ca:5b:f1:d3:1d:a4:3e:ce:32:ff:66:2e:f2:51:c1: 91:06:f7:ad:c5:b8:c8:91:52:12:b8:46:53:2b:ff: b5:96:40:1e:53:d6:e3:36:65:26:a7:7b:2a:f7:cc: 3d:09:f9:74:78:51:5e:31:ae:0c:03:31:7d:ff:0a: 93:98:f4:fe:37:4c:5e:6b:93:0e:fb:0b:09:17:5e: 70:f3:ba:96:32:b9:9f:93:09:5a:2e:77:e9:a9:91: f4:31:3f:c8:26:6f:4c:74:09:3b:2c:ad:26:84:d2: 20:5f:4f:89:c5:3b:0b:97:fa:8d:12:59:db:83:ab: 9c:e6:8c:db:ec:7a:b0:8c:12:ff:c0:7e:c1:5c:f6: 12:2b:2b:cf:f6:7f:ef:3c:41:a6:63:c5:5a:ef:7f: 0f:5f:5e:26:3d:9b:3c:c0:79:db:3a:a4:4e:86:09: 97:ad:39:8f:32:ff:d8:b6:03:86:ca:f5:b1:50:cf: 27:62:fe:7b:cc:9c:9e:6e:98:65:97:7d:11:32:03: 96:22:89:ae:27:e2:70:1b:04:34:d2:e2:63:df:4c: 25:76:70:13:62:12:c7:f1:85:93:2e:9f:0e:6d:e9: 3c:63:ce:1b:a6:c2:2f:34:dc:0c:99:1b:7b:c5:b9: 23:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:66:21:7C:31:79:AE:BF:EC:CD:45:9E:35:3A:D5:2B:15:C9:DD:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3597fa41-0807-3147-8c7b-86c72ed87a96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:dd:fd:3c:57:43:8d:27:aa:7f:39:73:bf:c8:09:57:1f:f0: 15:86:9c:da:4e:98:b4:e2:23:e2:01:a4:22:a4:3a:4f:d9:bb: 6a:2e:4a:41:7b:9b:ee:e6:93:6b:44:e4:ce:46:f6:66:94:21: eb:ed:18:00:56:4f:d2:48:1c:99:e5:41:5f:a9:40:ad:13:6b: 21:1c:30:81:ef:77:37:c4:a6:d3:79:0b:f8:75:9a:9d:37:00: 0c:f1:88:22:1d:1e:9f:9e:f3:a3:88:4b:8a:2e:16:99:b1:4e: a1:96:d1:4e:79:57:67:1b:3c:f2:a7:62:8a:77:b6:3f:d6:f1: 6b:0f:6c:60:ec:f8:29:31:65:cf:f6:0a:9b:7d:5f:58:b7:66: 10:fc:f9:b2:a9:a2:c0:ac:8c:27:bf:be:6b:e9:6c:06:d4:85: 37:75:b2:4c:79:99:37:dc:60:d6:92:b6:4e:fa:76:f4:32:0f: c3:77:d4:46:fd:af:c7:dd:79:f7:7e:24:46:9b:47:7c:ea:d1: fc:ba:24:50:19:46:21:43:ff:72:f7:21:8f:b3:a1:99:46:eb: 3f:a4:ab:84:08:13:19:34:62:6d:2e:f1:32:d7:b0:b5:46:80: 0d:7e:e6:6c:3e:39:c7:ca:25:73:1f:ac:79:df:3f:6c:c9:e9: 85:45:7d:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsuXF7u2KKESnIBUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDkxMzEzMDA0MVoXDTI1MTIxMjE0MDA0MVowLzEtMCsGA1UEAxMk OWIzYjFjNzQtMGY2YS00ZjRhLWIyZTEtZDI2ZjBkMjJiNDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBlrU/EZd8fdnatCQKXKW/HTHaQ+zjL/Zi7y UcGRBvetxbjIkVISuEZTK/+1lkAeU9bjNmUmp3sq98w9Cfl0eFFeMa4MAzF9/wqT mPT+N0xea5MO+wsJF15w87qWMrmfkwlaLnfpqZH0MT/IJm9MdAk7LK0mhNIgX0+J xTsLl/qNElnbg6uc5ozb7HqwjBL/wH7BXPYSKyvP9n/vPEGmY8Va738PX14mPZs8 wHnbOqROhgmXrTmPMv/YtgOGyvWxUM8nYv57zJyebphll30RMgOWIomuJ+JwGwQ0 0uJj30wldnATYhLH8YWTLp8Obek8Y84bpsIvNNwMmRt7xbkjyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5mIXwxea6/7M1FnjU61SsVyd3PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvMzU5N2ZhNDEtMDgwNy0z MTQ3LThjN2ItODZjNzJlZDg3YTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzd/TxXQ40nqn85c7/ICVcf8BWGnNpOmLTiI+IBpCKkOk/Zu2ouSkF7 m+7mk2tE5M5G9maUIevtGABWT9JIHJnlQV+pQK0TayEcMIHvdzfEptN5C/h1mp03 AAzxiCIdHp+e86OIS4ouFpmxTqGW0U55V2cbPPKnYop3tj/W8WsPbGDs+CkxZc/2 Cpt9X1i3ZhD8+bKposCsjCe/vmvpbAbUhTd1skx5mTfcYNaStk76dvQyD8N31Eb9 r8fdefd+JEabR3zq0fy6JFAZRiFD/3L3IY+zoZlG6z+kq4QIExk0Ym0u8TLXsLVG gA1+5mw+OcfKJXMfrHnfP2zJ6YVFfcs= -----END CERTIFICATE-----Generated at Fri Oct 10 17:49:22 2025 by rpki-client