$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b48db56c-1894-3082-b233-6b1ebda52106.roa File: b48db56c-1894-3082-b233-6b1ebda52106.roa (raw, json) Hash identifier: Hk5mmbxgFhFHmvFv9s8FL7uN8uw3ZVmfD1nSvUyJpFw= Subject key identifier: B6:AC:32:F0:59:8A:5E:77:07:4D:4A:38:89:3F:C5:4B:C2:64:CF:57 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584A7BB77720422F42E0716C2880 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b48db56c-1894-3082-b233-6b1ebda52106.roa Signing time: Fri 11 Jul 2025 13:14:51 +0000 ROA not before: Fri 11 Jul 2025 13:14:51 +0000 ROA not after: Thu 09 Oct 2025 13:14:51 +0000 asID: 5650 IP address blocks: 198.1.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b7:77:20:42:2f:42:e0:71:6c:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Jul 11 13:14:51 2025 GMT Not After : Oct 9 13:14:51 2025 GMT Subject: CN=ca495a8c-7afe-429c-8e65-33e923d8a4f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8c:a2:32:e7:cd:5b:56:6f:a4:93:ae:f6:24: 81:d2:ef:bc:28:52:03:8e:c9:d4:b6:68:0a:8e:9a: 52:96:9d:59:58:f0:35:5f:01:9a:6f:da:34:d7:b6: 64:f7:20:3e:70:40:0f:00:9b:f0:7e:79:b4:f8:03: 6d:b9:64:af:09:d9:12:30:a3:36:8a:69:9f:24:c7: da:8e:0c:17:be:80:30:f0:ca:b3:3a:b5:ec:a9:d3: 06:90:25:37:2f:f4:8e:cc:c5:42:a4:3e:44:85:12: 33:a5:29:10:1e:63:65:4b:19:06:8a:b5:06:56:da: 01:0d:51:13:47:7a:f5:51:48:5a:e9:57:c7:96:a5: fd:b6:b5:9f:09:05:4f:b3:76:94:91:95:fa:e7:f5: bc:a5:67:6f:26:c3:97:72:c1:39:f0:34:89:27:b4: 11:2c:13:04:8a:ac:e4:13:71:58:c0:dd:20:84:7b: 35:6a:14:1b:d9:1c:71:ff:17:f8:43:c2:66:36:c7: a1:03:af:ac:62:6a:d0:a7:68:42:c4:3a:fd:e1:31: ff:09:32:2e:ba:9e:c2:d5:35:2a:a1:ba:c0:1a:80: e2:a5:ba:9e:9f:a1:3c:d4:ae:6d:c9:f0:f1:bd:c3: ae:fa:b7:17:ea:ec:55:93:1f:6f:5a:47:3a:ea:55: ed:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:AC:32:F0:59:8A:5E:77:07:4D:4A:38:89:3F:C5:4B:C2:64:CF:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b48db56c-1894-3082-b233-6b1ebda52106.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:8c:8f:89:04:45:a7:e4:fc:0c:9b:2c:ba:72:26:3a:f5:eb: bd:36:a5:76:1d:f7:8c:fd:ab:6e:5c:54:4c:8f:c2:28:c2:b2: e7:fb:a9:21:a0:bc:6e:10:02:0d:13:66:1e:f8:7d:f5:6a:23: c1:3d:7e:c0:71:c6:35:69:56:a8:3a:4f:f2:dd:0c:8c:c4:4c: ff:b3:1d:5b:4c:ff:16:19:0d:20:e6:94:04:dc:8b:75:67:39: 99:54:b6:3d:b0:78:0e:3b:96:da:b4:a7:bc:6a:26:a6:92:1c: 2a:be:ee:5e:2c:43:b1:d4:6f:ca:01:a3:69:a8:ef:96:9d:c1: 62:e6:ae:f5:ea:2c:3d:ff:b2:8f:ef:7c:71:68:50:79:45:28: 01:90:ac:27:3e:34:53:51:a4:f7:b7:a3:eb:8c:42:12:fa:1d: d7:8f:1f:a4:40:c6:5c:df:2a:61:98:24:95:57:72:7e:fa:18: d8:4a:62:5e:7e:b6:43:f2:ff:46:91:b7:1b:e4:a7:f9:26:48: 50:31:79:54:e7:af:18:42:22:cc:16:de:bb:5f:90:a8:62:a0: 2a:41:bc:54:4a:da:84:b4:2a:12:f1:99:68:23:aa:f2:ac:fc: c5:7d:be:3d:e1:d9:68:53:5d:3b:ed:8d:c5:07:79:22:5c:e8: 5a:04:56:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7t3cgQi9C4HFsKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDcxMTEzMTQ1MVoXDTI1MTAwOTEzMTQ1MVowLzEtMCsGA1UEAxMk Y2E0OTVhOGMtN2FmZS00MjljLThlNjUtMzNlOTIzZDhhNGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoyiMufNW1ZvpJOu9iSB0u+8KFIDjsnUtmgK jppSlp1ZWPA1XwGab9o017Zk9yA+cEAPAJvwfnm0+ANtuWSvCdkSMKM2immfJMfa jgwXvoAw8MqzOrXsqdMGkCU3L/SOzMVCpD5EhRIzpSkQHmNlSxkGirUGVtoBDVET R3r1UUha6VfHlqX9trWfCQVPs3aUkZX65/W8pWdvJsOXcsE58DSJJ7QRLBMEiqzk E3FYwN0ghHs1ahQb2Rxx/xf4Q8JmNsehA6+sYmrQp2hCxDr94TH/CTIuup7C1TUq obrAGoDipbqen6E81K5tyfDxvcOu+rcX6uxVkx9vWkc66lXtXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLasMvBZil53B01KOIk/xUvCZM9XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvYjQ4ZGI1NmMtMTg5NC0z MDgyLWIyMzMtNmIxZWJkYTUyMTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASMj4kERafk/AybLLpyJjr16702pXYd94z9q25cVEyPwijCsuf7qSGg vG4QAg0TZh74ffVqI8E9fsBxxjVpVqg6T/LdDIzETP+zHVtM/xYZDSDmlATci3Vn OZlUtj2weA47ltq0p7xqJqaSHCq+7l4sQ7HUb8oBo2mo75adwWLmrvXqLD3/so/v fHFoUHlFKAGQrCc+NFNRpPe3o+uMQhL6HdePH6RAxlzfKmGYJJVXcn76GNhKYl5+ tkPy/0aRtxvkp/kmSFAxeVTnrxhCIswW3rtfkKhioCpBvFRK2oS0KhLxmWgjqvKs /MV9vj3h2WhTXTvtjcUHeSJc6FoEVgg= -----END CERTIFICATE-----Generated at Sun Jul 20 14:13:02 2025 by rpki-client