$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/bf179ea4-7f18-3e09-bf20-2e52eb4dd1e6.roa File: bf179ea4-7f18-3e09-bf20-2e52eb4dd1e6.roa (raw, json) Hash identifier: lrZFMJyBCdPrHG00XX284EVIHsssVsVPXh2FUaks62o= Subject key identifier: 1F:AF:00:56:55:B8:67:D2:1E:80:AD:9D:97:EF:A7:0A:20:6F:17:D5 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584A7BB73767E9B2A1EC3010B700 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/bf179ea4-7f18-3e09-bf20-2e52eb4dd1e6.roa Signing time: Fri 11 Jul 2025 13:14:21 +0000 ROA not before: Fri 11 Jul 2025 13:14:21 +0000 ROA not after: Thu 09 Oct 2025 13:14:21 +0000 asID: 7029 IP address blocks: 198.1.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b7:37:67:e9:b2:a1:ec:30:10:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Jul 11 13:14:21 2025 GMT Not After : Oct 9 13:14:21 2025 GMT Subject: CN=9cd531fc-b8ee-4de9-b1fb-c532aad70597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b2:fe:da:46:a7:ed:c5:70:03:69:37:1d:d7: d0:4d:3a:d8:91:1c:5f:ee:6f:ed:58:ed:f9:1b:24: 2e:9c:15:c6:ed:88:b0:f9:e0:54:7c:84:94:55:6c: b8:79:81:8e:55:85:f0:ce:af:89:52:94:08:16:79: 10:81:40:ad:3d:25:c4:14:6a:5b:f4:d4:6c:f5:fb: 13:f8:17:5f:72:9f:b7:9c:aa:f8:2a:d9:2d:c4:13: 63:5f:53:4b:aa:49:43:de:a3:8e:ab:32:da:0e:41: da:6d:fb:45:7d:b3:5b:84:1e:7b:96:aa:ef:c0:97: e0:19:69:2d:19:df:e9:c4:3a:d5:7b:94:54:ef:29: ec:44:ef:29:9d:ed:b6:f0:f8:97:78:49:28:47:ff: 3a:c4:19:62:07:ab:a8:ba:51:8f:08:50:0d:67:6b: 6b:77:63:97:a0:bf:38:99:0d:3b:62:24:a7:f6:76: e5:ef:2c:92:dc:63:19:24:4f:76:94:9a:65:f3:93: f8:2b:a6:ea:6e:fd:98:b1:51:58:81:40:22:c9:23: 05:03:7b:76:af:8e:6f:a0:2a:26:ca:08:32:d8:d5: 90:e0:33:d7:15:8b:84:67:6e:6e:41:b8:54:fe:6e: d2:66:5a:ac:12:01:0a:9f:58:5e:26:e6:90:ad:f9: 1e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:AF:00:56:55:B8:67:D2:1E:80:AD:9D:97:EF:A7:0A:20:6F:17:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/bf179ea4-7f18-3e09-bf20-2e52eb4dd1e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:97:1a:32:61:b1:41:0c:d5:1c:b5:7d:6c:75:68:6b:fe:7e: 83:5c:0d:f1:41:15:97:27:aa:84:71:bc:21:05:e2:b8:d2:38: e7:ff:b5:0a:54:7a:85:a8:c9:ed:66:20:46:f8:49:ef:08:dd: e6:f8:ce:63:ae:93:59:62:1f:19:83:ed:b9:e9:03:bc:16:aa: 43:8e:37:23:6d:27:08:a7:a5:f5:46:d7:f8:0c:84:39:c8:55: 94:67:9c:35:e3:b3:eb:6b:dc:c5:b2:06:af:2f:c7:88:62:50: 1e:28:90:22:11:c2:b1:86:31:ec:82:9e:98:ac:ea:15:13:d0: c6:9d:e8:cf:ff:0f:38:0d:30:45:d2:14:8c:e9:36:89:94:88: 6e:c1:b4:8f:b8:de:9e:49:f9:d9:01:36:36:5a:8b:4a:7e:bf: 45:3e:2d:3f:bc:b7:05:89:d1:59:45:27:8e:1f:29:9d:4e:56: 78:3f:2d:79:cb:0c:67:5b:61:c7:6b:48:6f:8a:39:a6:1b:77: 69:e5:80:18:ad:be:81:1c:c6:25:63:ff:e9:b3:48:a5:2f:f2: 74:75:0c:8e:86:79:8e:2b:88:bd:17:4a:d3:ce:c9:81:fc:19: 53:6e:c2:c8:ba:4d:41:8d:63:02:89:f6:cf:76:94:84:c6:58: a9:99:31:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7tzdn6bKh7DAQtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDcxMTEzMTQyMVoXDTI1MTAwOTEzMTQyMVowLzEtMCsGA1UEAxMk OWNkNTMxZmMtYjhlZS00ZGU5LWIxZmItYzUzMmFhZDcwNTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbL+2kan7cVwA2k3HdfQTTrYkRxf7m/tWO35 GyQunBXG7Yiw+eBUfISUVWy4eYGOVYXwzq+JUpQIFnkQgUCtPSXEFGpb9NRs9fsT +Bdfcp+3nKr4KtktxBNjX1NLqklD3qOOqzLaDkHabftFfbNbhB57lqrvwJfgGWkt Gd/pxDrVe5RU7ynsRO8pne228PiXeEkoR/86xBliB6uoulGPCFANZ2trd2OXoL84 mQ07YiSn9nbl7yyS3GMZJE92lJpl85P4K6bqbv2YsVFYgUAiySMFA3t2r45voCom yggy2NWQ4DPXFYuEZ25uQbhU/m7SZlqsEgEKn1heJuaQrfkeFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+vAFZVuGfSHoCtnZfvpwogbxfVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvYmYxNzllYTQtN2YxOC0z ZTA5LWJmMjAtMmU1MmViNGRkMWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSXGjJhsUEM1Ry1fWx1aGv+foNcDfFBFZcnqoRxvCEF4rjSOOf/tQpU eoWoye1mIEb4Se8I3eb4zmOuk1liHxmD7bnpA7wWqkOONyNtJwinpfVG1/gMhDnI VZRnnDXjs+tr3MWyBq8vx4hiUB4okCIRwrGGMeyCnpis6hUT0Mad6M//DzgNMEXS FIzpNomUiG7BtI+43p5J+dkBNjZai0p+v0U+LT+8twWJ0VlFJ44fKZ1OVng/LXnL DGdbYcdrSG+KOaYbd2nlgBitvoEcxiVj/+mzSKUv8nR1DI6GeY4riL0XStPOyYH8 GVNuwsi6TUGNYwKJ9s92lITGWKmZMYs= -----END CERTIFICATE-----Generated at Sun Jul 20 14:08:50 2025 by rpki-client