$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/72c2bce9-bbd0-3e46-b5a7-dcf037b588ed.roa File: 72c2bce9-bbd0-3e46-b5a7-dcf037b588ed.roa (raw, json) Hash identifier: G2aDe2fuSkdUMPCQvRJldqooEHc7LL7HE/M1uJWr7ao= Subject key identifier: BC:BC:0F:67:E1:51:7B:AA:3D:28:C4:6C:80:A9:19:4E:7C:5D:F2:17 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584B2A2C5F6010BC8BF6638F7780 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/72c2bce9-bbd0-3e46-b5a7-dcf037b588ed.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 20001 IP address blocks: 198.1.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:5f:60:10:bc:8b:f6:63:8f:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=05540658-a9ed-483a-a1c3-e9d3898165d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a6:ac:d3:8b:f9:5a:4b:0c:7d:f1:bc:96:cd: c9:84:42:f5:2a:48:87:51:19:10:be:32:c3:d1:a5: 5a:31:32:0e:09:c6:a4:06:96:ab:33:ac:8f:65:ad: 9f:c7:59:d2:8f:4b:88:fc:fa:0c:08:80:e1:3e:80: b2:ce:21:38:99:84:f2:4d:a2:9d:fd:9d:08:45:8e: 7e:8e:f6:e4:69:d9:e8:6e:1b:2d:86:db:49:08:a2: 8e:e0:fb:ac:15:d3:2c:25:79:10:ae:61:94:57:a1: 2b:bf:96:96:00:9b:4f:d9:b9:39:a6:8d:0d:14:b8: 06:83:d8:b2:28:65:3b:71:47:34:50:10:66:ae:6b: 5e:2d:5c:6f:2d:d1:ad:2b:d9:22:fa:59:a3:2c:8e: 22:7d:ff:c1:6c:0f:8f:61:13:01:ea:90:aa:11:b3: d9:6a:f5:18:ac:57:8b:6a:2a:20:c8:cf:e9:cc:a4: b9:b7:7a:13:e1:e0:0a:9d:24:95:d9:fa:28:ee:3b: f6:63:93:48:eb:96:ef:b6:22:34:56:5b:f8:5b:3b: 4f:f0:e9:83:02:a6:e1:95:c0:85:85:e7:68:39:a8: 66:79:41:5c:bf:33:cd:4c:75:0c:29:06:0d:96:87: b3:9c:9f:14:12:6a:d8:26:cc:72:3b:a4:59:68:93: 8e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:BC:0F:67:E1:51:7B:AA:3D:28:C4:6C:80:A9:19:4E:7C:5D:F2:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/72c2bce9-bbd0-3e46-b5a7-dcf037b588ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:04:a2:17:e5:b5:fa:b6:3b:bf:31:aa:97:27:04:2c:9e:c9: 63:4c:f5:5e:fa:e7:bc:0b:ee:67:25:bd:76:04:e3:fa:db:c4: b5:f6:b0:67:2e:aa:82:81:94:8e:2a:cc:c1:5b:40:8d:e8:92: c9:96:59:57:8f:c1:cd:5c:f1:64:4c:16:02:c2:08:66:6c:85: 3a:39:01:54:40:9e:4d:17:5e:0a:fe:22:5b:57:a4:82:36:22: fb:ef:fc:a4:f0:1c:a0:8b:f6:da:dc:48:1a:1e:e2:95:c9:77: b7:5b:41:b4:13:f0:e0:1e:0e:23:a9:62:c3:b7:89:c8:3e:6a: 5b:8e:ae:d0:33:5b:12:45:7e:60:cd:2d:2b:8a:6d:87:b4:e9: 9f:37:6e:eb:12:1c:ce:7c:86:fc:9c:6d:55:d4:98:3e:41:d3: 6a:69:60:6e:f4:b1:ab:85:da:a1:58:08:71:3f:5c:83:fa:c3: 8d:57:96:3b:af:96:c6:78:9e:73:58:ae:55:cf:58:62:1c:c3: ec:93:25:44:16:36:10:23:1a:88:73:53:34:a3:3e:f5:9c:aa: be:a6:bb:36:0e:f5:06:09:08:91:46:ce:39:12:46:78:5b:05: 43:51:10:9f:30:8b:e9:39:0c:a1:2f:93:9c:37:e5:b7:ac:b2: 0a:5c:7c:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLF9gELyL9mOPd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk MDU1NDA2NTgtYTllZC00ODNhLWExYzMtZTlkMzg5ODE2NWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqas04v5WksMffG8ls3JhEL1KkiHURkQvjLD 0aVaMTIOCcakBparM6yPZa2fx1nSj0uI/PoMCIDhPoCyziE4mYTyTaKd/Z0IRY5+ jvbkadnobhsthttJCKKO4PusFdMsJXkQrmGUV6Erv5aWAJtP2bk5po0NFLgGg9iy KGU7cUc0UBBmrmteLVxvLdGtK9ki+lmjLI4iff/BbA+PYRMB6pCqEbPZavUYrFeL aiogyM/pzKS5t3oT4eAKnSSV2foo7jv2Y5NI65bvtiI0Vlv4WztP8OmDAqbhlcCF hedoOahmeUFcvzPNTHUMKQYNloeznJ8UEmrYJsxyO6RZaJOOfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLy8D2fhUXuqPSjEbICpGU58XfIXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvNzJjMmJjZTktYmJkMC0z ZTQ2LWI1YTctZGNmMDM3YjU4OGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIEohfltfq2O78xqpcnBCyeyWNM9V7657wL7mclvXYE4/rbxLX2sGcu qoKBlI4qzMFbQI3oksmWWVePwc1c8WRMFgLCCGZshTo5AVRAnk0XXgr+IltXpII2 Ivvv/KTwHKCL9trcSBoe4pXJd7dbQbQT8OAeDiOpYsO3icg+aluOrtAzWxJFfmDN LSuKbYe06Z83busSHM58hvycbVXUmD5B02ppYG70sauF2qFYCHE/XIP6w41Xljuv lsZ4nnNYrlXPWGIcw+yTJUQWNhAjGohzUzSjPvWcqr6muzYO9QYJCJFGzjkSRnhb BUNREJ8wi+k5DKEvk5w35bessgpcfL0= -----END CERTIFICATE-----Generated at Fri Oct 10 22:21:11 2025 by rpki-client