$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/a3865717-c823-344d-be2f-29795c5d9104.roa File: a3865717-c823-344d-be2f-29795c5d9104.roa (raw, json) Hash identifier: KJcbhJrFAsDIRWhbvM47NfHVWTV3VcPST88NUCPBG40= Subject key identifier: AE:4F:25:0D:C5:0A:7E:7C:9E:E8:D5:6B:A8:54:81:F3:D5:FE:CD:DE Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584B2A2C5FD63C2138F22590AF40 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/a3865717-c823-344d-be2f-29795c5d9104.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 20001 IP address blocks: 198.1.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:5f:d6:3c:21:38:f2:25:90:af:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=32fb4d1d-d164-4682-a2cc-17ceb803f9a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:79:53:ac:0b:b7:55:f3:2b:14:da:9b:e0:96: 9c:11:dd:5e:32:4a:fd:b0:fc:7a:8e:ad:12:ee:e4: 3b:67:7b:6c:dc:c9:af:9a:18:e2:47:80:99:a3:32: 34:b8:f9:31:c3:2f:34:41:28:55:20:d2:5f:e2:65: db:99:18:c1:e6:4e:93:ba:37:86:66:5c:39:49:e5: 78:64:58:f6:10:e6:ff:70:2e:a7:b2:88:00:4f:9a: e7:98:c7:ac:28:2d:a9:d5:a5:d0:bb:11:e3:85:bb: ce:65:5d:7f:2b:4f:d7:d7:27:f8:bc:9c:c7:93:e2: e2:79:e8:d0:66:04:66:9b:0b:c0:d7:e2:94:fb:60: e0:c6:b6:d2:d0:19:d3:f3:f0:3b:f6:05:13:12:f8: 52:c7:c1:30:17:06:44:fa:f6:f0:a9:90:8b:c6:26: 6c:82:b6:86:cc:27:e6:09:7a:ab:4d:d9:37:9e:6a: 60:02:9b:a3:b2:7e:0e:e4:09:ee:87:94:35:d6:c7: 75:91:65:64:b6:3d:2b:1b:85:b0:ef:ab:9a:30:02: 36:ab:00:ec:a3:18:69:c2:5c:9a:1d:44:0b:17:3e: f7:64:84:26:9a:21:45:fa:ec:40:6b:b9:e2:09:7d: ae:5e:13:d7:7e:e0:0d:76:1f:f2:9b:43:b4:7f:a6: 60:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:4F:25:0D:C5:0A:7E:7C:9E:E8:D5:6B:A8:54:81:F3:D5:FE:CD:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/a3865717-c823-344d-be2f-29795c5d9104.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:a9:d5:e3:ab:0f:8c:0b:b7:2e:cf:cb:5c:04:68:a5:cf:08: 41:2c:d1:8d:c8:a0:6e:ef:1f:ae:b4:22:06:99:96:a6:28:6b: 1f:0e:ce:e9:6a:fe:f1:c6:0b:93:7e:2e:70:8e:18:84:69:f4: 06:50:4e:a0:08:28:66:69:e3:d2:7d:c3:a1:17:b6:f2:e5:ce: 28:70:5d:c1:c4:de:4a:d2:be:b1:d5:ac:70:85:c0:16:7b:91: db:7c:42:3f:a3:09:48:35:3f:28:12:33:61:ec:ef:53:ab:ba: 86:95:f2:56:fd:36:ef:16:dd:81:d6:89:98:62:9d:c3:67:08: d1:8a:9e:1d:5b:5a:d3:cd:18:4c:92:76:a8:27:7e:75:a6:02: 95:3e:4f:61:ad:36:63:b6:cc:90:26:bd:22:d4:b4:2f:71:45: d6:87:20:fe:79:6f:a8:67:89:6e:20:09:4a:3e:54:2b:93:b2: b3:f3:cf:8a:3a:ff:83:f2:8e:ac:e5:57:bd:d5:cf:f6:8b:51: 5c:12:3a:e6:65:9e:77:74:f3:8c:98:b8:59:b8:cb:10:99:33: 16:9f:79:a8:71:07:cd:e0:e6:80:1c:6e:ac:e4:f4:a7:47:c0: c0:34:7f:9a:99:ba:19:2d:d4:a6:73:49:5b:f9:ab:e9:15:ed: 1d:58:70:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLF/WPCE48iWQr0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk MzJmYjRkMWQtZDE2NC00NjgyLWEyY2MtMTdjZWI4MDNmOWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nlTrAu3VfMrFNqb4JacEd1eMkr9sPx6jq0S 7uQ7Z3ts3MmvmhjiR4CZozI0uPkxwy80QShVINJf4mXbmRjB5k6TujeGZlw5SeV4 ZFj2EOb/cC6nsogAT5rnmMesKC2p1aXQuxHjhbvOZV1/K0/X1yf4vJzHk+LieejQ ZgRmmwvA1+KU+2DgxrbS0BnT8/A79gUTEvhSx8EwFwZE+vbwqZCLxiZsgraGzCfm CXqrTdk3nmpgApujsn4O5Anuh5Q11sd1kWVktj0rG4Ww76uaMAI2qwDsoxhpwlya HUQLFz73ZIQmmiFF+uxAa7niCX2uXhPXfuANdh/ym0O0f6ZgBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5PJQ3FCn58nujVa6hUgfPV/s3eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvYTM4NjU3MTctYzgyMy0z NDRkLWJlMmYtMjk3OTVjNWQ5MTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6p1eOrD4wLty7Py1wEaKXPCEEs0Y3IoG7vH660IgaZlqYoax8Ozulq /vHGC5N+LnCOGIRp9AZQTqAIKGZp49J9w6EXtvLlzihwXcHE3krSvrHVrHCFwBZ7 kdt8Qj+jCUg1PygSM2Hs71OruoaV8lb9Nu8W3YHWiZhincNnCNGKnh1bWtPNGEyS dqgnfnWmApU+T2GtNmO2zJAmvSLUtC9xRdaHIP55b6hniW4gCUo+VCuTsrPzz4o6 /4PyjqzlV73Vz/aLUVwSOuZlnnd084yYuFm4yxCZMxafeahxB83g5oAcbqzk9KdH wMA0f5qZuhkt1KZzSVv5q+kV7R1YcIM= -----END CERTIFICATE-----Generated at Fri Oct 10 17:57:28 2025 by rpki-client