$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/8aee78c8-9dae-3b66-a089-8536cf1dff84.roa File: 8aee78c8-9dae-3b66-a089-8536cf1dff84.roa (raw, json) Hash identifier: 7eHJM08C29kKFPRCFWzEXxcvl3QV+hj+hxtx/0bvi80= Subject key identifier: 2B:FD:96:1E:84:66:0B:1C:6C:ED:8D:83:CD:43:2D:76:E8:2B:F8:D0 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584A7BB6E1EF15BFBA5D38342F00 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/8aee78c8-9dae-3b66-a089-8536cf1dff84.roa Signing time: Fri 11 Jul 2025 13:13:40 +0000 ROA not before: Fri 11 Jul 2025 13:13:40 +0000 ROA not after: Thu 09 Oct 2025 13:13:40 +0000 asID: 13347 IP address blocks: 198.1.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b6:e1:ef:15:bf:ba:5d:38:34:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Jul 11 13:13:40 2025 GMT Not After : Oct 9 13:13:40 2025 GMT Subject: CN=4870d05c-98b0-4945-a046-107b54d56f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:96:d8:50:4b:10:a0:d6:67:17:91:bc:f5:6c: b5:fc:18:f7:ff:10:58:78:db:36:8a:e7:e3:da:64: 29:4d:e5:71:13:7e:cf:aa:c8:79:0a:db:0a:d0:0a: b2:22:a0:80:6a:b6:b6:13:9f:a3:f2:c1:25:3f:62: 0b:4e:58:33:f3:2f:d9:a0:5b:7d:50:14:98:6f:52: 1b:33:ae:07:b6:2d:50:00:03:bd:07:6d:bb:1e:54: 8b:85:36:ef:a0:3f:1b:eb:c0:04:09:8e:03:6e:d4: 81:1d:28:5f:e1:a2:f5:4b:94:bc:2e:27:40:4c:3e: a5:c8:d5:e2:d7:22:41:5a:92:bf:b5:50:fc:6a:f5: 3f:b1:33:2e:6c:c1:34:28:3a:22:74:06:dc:f2:01: 5f:6f:96:3b:67:52:91:20:a6:e3:60:c4:e3:ad:6c: bf:d5:a3:e0:69:07:32:75:65:e9:37:d4:29:b0:08: 85:f8:8b:5d:ca:59:a1:92:78:94:e0:7a:26:20:d5: a5:76:ad:de:c0:83:5f:16:55:0f:16:d3:46:90:ee: d3:74:60:3c:78:39:b9:d8:0e:32:74:39:b7:cf:8e: 91:a2:93:e7:b1:fc:2d:bb:7f:a8:08:e3:6f:c0:d0: c3:37:ad:8c:66:1a:ba:53:62:da:45:8d:ce:1e:01: b4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:FD:96:1E:84:66:0B:1C:6C:ED:8D:83:CD:43:2D:76:E8:2B:F8:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/8aee78c8-9dae-3b66-a089-8536cf1dff84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:09:4f:eb:44:79:0b:35:8f:87:58:f4:a8:90:1a:3b:ac:dc: 21:fd:e8:43:16:77:92:04:a3:c4:68:5e:b7:d6:3d:36:96:4a: 2e:1f:4e:1c:ce:61:ce:2c:0e:d9:31:3d:e0:0e:33:62:9f:e7: c9:b4:2a:26:ca:6d:c8:42:ce:36:24:37:cb:ea:f2:db:89:da: d9:45:2d:8f:de:9e:48:54:ed:13:dc:0c:c1:14:6f:3c:ea:e5: 54:7b:86:97:e7:63:66:8d:0f:69:0a:93:ba:23:81:d1:ae:06: b7:3f:ea:51:9c:89:2a:32:60:58:77:fa:40:cf:f5:4e:8a:29: 0c:64:ca:b2:a7:72:84:67:79:45:fc:ee:c8:49:0a:0f:c2:0a: 1e:17:89:12:03:a6:0e:47:c3:2f:6d:02:00:89:56:e6:c8:04: c5:e2:ec:f3:c3:e6:5b:8e:ed:0d:d1:6f:68:40:ed:b3:84:78: 6f:d5:f8:7a:69:ec:3b:78:9d:d9:c7:67:4c:d0:85:3e:55:8a: f1:24:3b:57:2c:9c:f8:6a:80:ed:aa:c4:0f:a8:b7:3e:18:38: 5c:2c:3c:f6:75:ab:66:7f:e8:3b:ae:7b:0d:22:0e:4d:5d:f3: 4c:47:7a:1f:ee:b1:fb:ae:8a:c5:b3:a1:0d:ef:69:ab:10:0c: 4a:78:23:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7tuHvFb+6XTg0LwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDcxMTEzMTM0MFoXDTI1MTAwOTEzMTM0MFowLzEtMCsGA1UEAxMk NDg3MGQwNWMtOThiMC00OTQ1LWEwNDYtMTA3YjU0ZDU2ZjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZbYUEsQoNZnF5G89Wy1/Bj3/xBYeNs2iufj 2mQpTeVxE37Pqsh5CtsK0AqyIqCAara2E5+j8sElP2ILTlgz8y/ZoFt9UBSYb1Ib M64Hti1QAAO9B227HlSLhTbvoD8b68AECY4DbtSBHShf4aL1S5S8LidATD6lyNXi 1yJBWpK/tVD8avU/sTMubME0KDoidAbc8gFfb5Y7Z1KRIKbjYMTjrWy/1aPgaQcy dWXpN9QpsAiF+ItdylmhkniU4HomINWldq3ewINfFlUPFtNGkO7TdGA8eDm52A4y dDm3z46RopPnsfwtu3+oCONvwNDDN62MZhq6U2LaRY3OHgG0PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCv9lh6EZgscbO2Ng81DLXboK/jQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvOGFlZTc4YzgtOWRhZS0z YjY2LWEwODktODUzNmNmMWRmZjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8JT+tEeQs1j4dY9KiQGjus3CH96EMWd5IEo8RoXrfWPTaWSi4fThzO Yc4sDtkxPeAOM2Kf58m0KibKbchCzjYkN8vq8tuJ2tlFLY/enkhU7RPcDMEUbzzq 5VR7hpfnY2aND2kKk7ojgdGuBrc/6lGciSoyYFh3+kDP9U6KKQxkyrKncoRneUX8 7shJCg/CCh4XiRIDpg5Hwy9tAgCJVubIBMXi7PPD5luO7Q3Rb2hA7bOEeG/V+Hpp 7Dt4ndnHZ0zQhT5VivEkO1csnPhqgO2qxA+otz4YOFwsPPZ1q2Z/6Duuew0iDk1d 80xHeh/usfuuisWzoQ3vaasQDEp4I+w= -----END CERTIFICATE-----Generated at Mon Jul 21 23:26:28 2025 by rpki-client