$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/433a28ef-4a2f-32fb-afad-0362cb74c7e7.roa File: 433a28ef-4a2f-32fb-afad-0362cb74c7e7.roa (raw, json) Hash identifier: tfY1e5E7f2FSJCQD65JXWe1XrsaZPEXjfiS2ZLeVIvI= Subject key identifier: 8A:0F:4F:D4:C3:BC:98:BD:77:15:E1:89:B8:15:D9:01:9D:53:E3:8F Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584B4081DF3C0FC6B89286773300 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/433a28ef-4a2f-32fb-afad-0362cb74c7e7.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 270764 IP address blocks: 198.1.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:df:3c:0f:c6:b8:92:86:77:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=470a7d2e-4143-42ef-b908-8bfd57004970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ab:49:8e:8a:29:18:ae:da:5d:3d:7b:59:80: a6:10:e2:f7:38:f4:36:95:80:12:81:93:b1:76:82: 57:2c:05:03:f4:b1:04:e0:0f:8c:9a:46:52:a5:ea: 50:48:ef:86:c5:b0:4e:f7:c5:55:3d:6b:33:17:86: 49:19:d8:d8:84:92:d0:55:2c:78:31:20:5b:fc:89: 9c:f7:9b:d2:61:3e:d0:d3:16:e9:d8:7e:5a:80:1f: 9e:11:1f:07:58:3e:63:8d:45:4c:25:9e:be:af:3f: 0e:21:4b:7b:a1:e0:85:a3:0f:50:4a:65:c2:bb:c2: 5c:0e:e5:ff:17:2b:79:c2:cd:5e:7f:69:f2:bf:0a: 92:e9:d8:8b:5a:0d:ad:64:d9:fe:97:ad:c1:37:ad: 60:db:ba:2a:12:38:fc:bc:01:43:74:31:4e:5e:c6: 4b:bd:ef:96:3a:e9:07:67:04:3c:8d:7d:b9:57:f0: 81:35:d0:81:89:59:d5:fc:c6:fa:cc:84:77:20:6f: d7:d6:3b:7a:24:9f:b4:18:53:96:ad:b9:3c:1e:7c: 1f:17:a1:ba:40:af:60:74:cc:73:1e:ec:cb:32:9b: 40:a9:c3:1d:5e:78:cd:9d:4a:71:74:3b:a5:b4:6d: e7:0f:ba:68:54:50:1b:65:de:6e:28:a0:b6:35:40: e1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:0F:4F:D4:C3:BC:98:BD:77:15:E1:89:B8:15:D9:01:9D:53:E3:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/433a28ef-4a2f-32fb-afad-0362cb74c7e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:1b:70:a5:23:ec:9b:1e:77:60:b5:cc:26:5c:d1:f1:73:73: 68:83:6d:c4:e3:2b:29:30:4a:48:6b:66:a8:20:ce:d3:dc:a7: 1b:a9:56:79:76:64:c7:58:30:64:ca:c3:c3:fd:27:69:f2:b7: 39:25:b0:9c:f0:d0:47:af:05:5c:07:5a:59:98:32:d3:61:5f: 31:32:c8:b5:18:3a:3a:7b:6a:12:17:18:bb:17:9e:42:c8:8f: 43:4f:35:a4:f0:09:b3:26:b2:00:ef:35:38:31:93:ba:e2:ec: 83:5b:1d:52:eb:77:c2:f5:aa:3d:ac:47:d6:50:35:d7:e8:e5: ba:cd:26:6f:92:29:fe:f1:1d:bb:cc:36:ba:13:ee:7e:d2:1f: 3e:0d:4f:21:9d:b8:83:7e:bf:ad:61:57:68:d6:14:7a:85:f1: 27:e4:79:bd:3c:03:c2:62:92:08:4c:2c:05:45:88:e3:c9:3f: a1:9c:08:d0:59:f9:85:8f:a8:12:08:8d:11:f6:9f:c9:58:19: c8:87:93:0b:2d:14:44:bc:a6:f8:e6:98:37:d4:ae:95:de:8d: d7:b6:c3:61:d5:77:60:ab:6c:55:e8:80:32:91:7d:c0:bb:ae: 3d:11:1c:0f:40:63:1a:2b:db:3e:2e:91:92:90:a2:8a:e2:9f: 62:ea:3f:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgd88D8a4koZ3MwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk NDcwYTdkMmUtNDE0My00MmVmLWI5MDgtOGJmZDU3MDA0OTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqtJjoopGK7aXT17WYCmEOL3OPQ2lYASgZOx doJXLAUD9LEE4A+MmkZSpepQSO+GxbBO98VVPWszF4ZJGdjYhJLQVSx4MSBb/Imc 95vSYT7Q0xbp2H5agB+eER8HWD5jjUVMJZ6+rz8OIUt7oeCFow9QSmXCu8JcDuX/ Fyt5ws1ef2nyvwqS6diLWg2tZNn+l63BN61g27oqEjj8vAFDdDFOXsZLve+WOukH ZwQ8jX25V/CBNdCBiVnV/Mb6zIR3IG/X1jt6JJ+0GFOWrbk8HnwfF6G6QK9gdMxz HuzLMptAqcMdXnjNnUpxdDultG3nD7poVFAbZd5uKKC2NUDhhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIoPT9TDvJi9dxXhibgV2QGdU+OPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvNDMzYTI4ZWYtNGEyZi0z MmZiLWFmYWQtMDM2MmNiNzRjN2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIbcKUj7Jsed2C1zCZc0fFzc2iDbcTjKykwSkhrZqggztPcpxupVnl2 ZMdYMGTKw8P9J2nytzklsJzw0EevBVwHWlmYMtNhXzEyyLUYOjp7ahIXGLsXnkLI j0NPNaTwCbMmsgDvNTgxk7ri7INbHVLrd8L1qj2sR9ZQNdfo5brNJm+SKf7xHbvM NroT7n7SHz4NTyGduIN+v61hV2jWFHqF8Sfkeb08A8JikghMLAVFiOPJP6GcCNBZ +YWPqBIIjRH2n8lYGciHkwstFES8pvjmmDfUrpXejde2w2HVd2CrbFXogDKRfcC7 rj0RHA9AYxor2z4ukZKQoorin2LqP7w= -----END CERTIFICATE-----Generated at Fri Oct 10 19:56:04 2025 by rpki-client