$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/8c2fb4e4-b30a-3653-9a68-aae31f9bfbd3.roa File: 8c2fb4e4-b30a-3653-9a68-aae31f9bfbd3.roa (raw, json) Hash identifier: Qao7VHOQkuccmEPVIHQ/AUauB5X57V3NXuq+tv7l8OM= Subject key identifier: 3C:E8:DC:8F:34:C5:C9:22:16:DB:59:42:98:60:92:A0:88:E7:5E:0B Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584B5B0763157B3F432CE7839580 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/8c2fb4e4-b30a-3653-9a68-aae31f9bfbd3.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 21949 IP address blocks: 198.1.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:63:15:7b:3f:43:2c:e7:83:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=7e1cd6f9-067a-40e2-a2f6-ac33781d39b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:34:f5:24:5b:1a:6e:98:b9:1f:d0:d4:88:10: 09:9d:e3:22:6a:86:a1:95:da:b2:e5:af:0a:da:5b: 7b:31:76:2b:91:91:dc:5d:b5:08:13:25:84:81:a9: 82:01:c8:8d:14:87:79:d3:eb:8b:35:12:b0:04:db: 51:66:9e:eb:f5:e2:59:11:fd:2e:da:6c:8e:88:3e: 72:c3:cb:42:16:ea:12:35:2f:6b:41:b0:01:5d:5b: 89:97:82:4f:cb:a8:7f:ab:c4:37:1b:a2:09:f2:02: a5:a4:a2:ed:cb:62:0b:0c:c6:72:19:f0:a6:c9:6d: 82:ff:6f:0c:af:2f:32:a3:ac:f7:39:6c:4a:e1:dd: 4c:8c:fd:9d:1f:ec:bd:b9:7b:ae:1e:06:ab:db:79: 61:da:c0:63:fe:ed:81:41:da:7a:ad:a0:5e:af:9a: b5:ba:1c:cc:8c:c3:32:29:1b:c7:cf:33:d6:75:f2: bf:0f:02:22:20:de:fe:d8:f8:37:3b:ab:ec:2b:9f: 64:a2:9d:c7:21:fb:9e:c1:cd:c7:67:49:fe:31:2c: 54:4c:3f:b0:dc:ae:3a:90:78:37:68:7f:a5:93:67: dc:fe:9f:49:60:07:6e:1f:3b:49:1c:44:b4:4d:eb: c5:14:b2:4e:e5:92:60:78:17:7a:72:7e:bf:d9:7b: 89:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E8:DC:8F:34:C5:C9:22:16:DB:59:42:98:60:92:A0:88:E7:5E:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/8c2fb4e4-b30a-3653-9a68-aae31f9bfbd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:83:b2:76:6c:8c:8f:dc:c2:a9:6c:55:0c:69:41:bc:1f:53: d2:e3:b1:77:77:5c:66:8f:cc:e2:74:92:2c:14:4b:e0:59:c8: 41:cd:23:b5:e9:d5:e8:69:de:b1:7c:53:a2:23:62:65:02:59: 83:a2:a3:a2:c1:c3:98:72:77:43:0a:36:31:cc:70:e5:1f:ad: 34:25:a2:f4:83:d6:0d:2b:5b:1e:a6:61:f9:e3:fe:73:47:3a: be:8d:e7:95:4b:b0:ca:72:6f:ec:6e:a1:87:4a:57:1c:d5:ac: 4b:04:d9:22:ba:0a:a9:0c:f2:ea:dd:10:aa:29:f4:71:6a:15: cc:73:a2:ec:a2:48:bb:d5:e8:0c:dc:d1:2e:dc:c3:0f:41:8a: d8:6a:f6:71:34:7e:46:1f:cb:ce:ef:6f:ae:b0:ee:86:e3:b3: a0:d4:93:30:33:b9:8e:10:fd:4c:e4:ea:28:8a:3d:ae:73:67: 7b:0f:cf:19:9e:96:7e:10:34:cd:4e:33:d4:8f:90:17:49:3b: 90:ef:f7:a9:64:59:2a:3f:d7:3f:00:d1:b7:d7:45:c7:fa:97: d3:96:5d:d3:8e:62:d2:8c:57:8c:a8:83:b8:cf:86:a7:cf:b9: 64:49:0c:cf:47:f0:ef:4e:d3:c4:b8:63:00:0b:c9:af:e1:b6: 5c:c9:b8:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB2MVez9DLOeDlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk N2UxY2Q2ZjktMDY3YS00MGUyLWEyZjYtYWMzMzc4MWQzOWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDT1JFsabpi5H9DUiBAJneMiaoahldqy5a8K 2lt7MXYrkZHcXbUIEyWEgamCAciNFId50+uLNRKwBNtRZp7r9eJZEf0u2myOiD5y w8tCFuoSNS9rQbABXVuJl4JPy6h/q8Q3G6IJ8gKlpKLty2ILDMZyGfCmyW2C/28M ry8yo6z3OWxK4d1MjP2dH+y9uXuuHgar23lh2sBj/u2BQdp6raBer5q1uhzMjMMy KRvHzzPWdfK/DwIiIN7+2Pg3O6vsK59kop3HIfuewc3HZ0n+MSxUTD+w3K46kHg3 aH+lk2fc/p9JYAduHztJHES0TevFFLJO5ZJgeBd6cn6/2XuJhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzo3I80xckiFttZQphgkqCI514LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvOGMyZmI0ZTQtYjMwYS0z NjUzLTlhNjgtYWFlMzFmOWJmYmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJODsnZsjI/cwqlsVQxpQbwfU9LjsXd3XGaPzOJ0kiwUS+BZyEHNI7Xp 1ehp3rF8U6IjYmUCWYOio6LBw5hyd0MKNjHMcOUfrTQlovSD1g0rWx6mYfnj/nNH Or6N55VLsMpyb+xuoYdKVxzVrEsE2SK6CqkM8urdEKop9HFqFcxzouyiSLvV6Azc 0S7cww9Bithq9nE0fkYfy87vb66w7objs6DUkzAzuY4Q/Uzk6iiKPa5zZ3sPzxme ln4QNM1OM9SPkBdJO5Dv96lkWSo/1z8A0bfXRcf6l9OWXdOOYtKMV4yog7jPhqfP uWRJDM9H8O9O08S4YwALya/htlzJuA0= -----END CERTIFICATE-----Generated at Fri Oct 10 19:57:34 2025 by rpki-client