$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/d5b19925-cf29-3a55-96bf-485dfd87a9e2.roa File: d5b19925-cf29-3a55-96bf-485dfd87a9e2.roa (raw, json) Hash identifier: jFiCUh8lWrSeIhy5TBrghA8uTjy+p07Fh1uFIdlAHX8= Subject key identifier: F3:AC:2E:1F:59:E0:9F:A6:FD:C5:B2:40:7A:D8:B5:4E:09:D7:2D:9B Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584A7BB5FAECB3762C4E14CF42C0 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/d5b19925-cf29-3a55-96bf-485dfd87a9e2.roa Signing time: Fri 11 Jul 2025 13:11:51 +0000 ROA not before: Fri 11 Jul 2025 13:11:51 +0000 ROA not after: Thu 09 Oct 2025 13:11:51 +0000 asID: 5650 IP address blocks: 198.1.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b5:fa:ec:b3:76:2c:4e:14:cf:42:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Jul 11 13:11:51 2025 GMT Not After : Oct 9 13:11:51 2025 GMT Subject: CN=9d31aa29-a555-4f26-9284-d53cd1972bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6c:9a:34:15:76:bd:1d:3a:eb:cc:84:3d:c7: ae:eb:88:10:19:b8:cc:45:4e:df:df:42:14:3d:54: 39:72:16:fc:70:ee:40:34:45:bd:74:f1:8e:4f:2e: fd:b5:e3:c6:50:b8:54:6d:f2:e2:d3:e0:c5:ab:72: 71:06:e1:a0:3e:1e:2a:93:96:06:3d:06:63:33:53: c2:12:6d:42:86:55:83:12:9b:ee:e7:18:3f:d7:3a: bd:81:84:76:2e:99:0b:fc:a5:7a:d0:ab:b5:82:20: 00:50:f4:08:04:2a:aa:26:2d:2e:fa:61:a4:cc:fc: 42:96:c6:6d:a1:37:ef:88:18:d5:17:85:8f:9c:85: 7f:d4:1c:da:f2:db:36:c0:2e:d6:a4:fc:81:7a:38: f6:f5:2e:ff:32:4c:bf:c3:3e:e0:8e:2c:b5:31:e2: 97:8e:d5:10:a7:61:99:b0:54:01:79:a4:3b:ab:01: 4d:6b:16:2e:94:ab:6c:53:39:ac:b4:8f:2e:0c:69: c0:1f:48:61:4c:7b:d9:40:4a:ca:46:8a:c4:a1:1f: 47:b1:a7:d0:62:ec:d7:64:c2:9f:b7:e3:f1:36:c2: 58:c2:d7:f5:5d:7c:f5:90:25:2b:83:42:37:46:2a: 22:0d:6a:55:c5:bb:4d:d2:55:94:f4:44:ae:a9:76: 6c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:AC:2E:1F:59:E0:9F:A6:FD:C5:B2:40:7A:D8:B5:4E:09:D7:2D:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/d5b19925-cf29-3a55-96bf-485dfd87a9e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:c6:db:d5:62:bb:5f:5e:01:63:72:6a:2a:83:2c:56:33:7e: d2:db:50:97:c9:d0:85:5b:77:a2:9e:3b:f1:ce:80:c3:85:94: 25:11:63:7a:2b:cf:85:a2:2a:c8:b4:70:e9:95:64:07:8e:a2: ca:a4:28:31:51:5d:db:d1:6b:2f:c7:1b:c3:5f:fa:0e:0e:fc: 6d:82:94:12:f4:6b:db:f2:3c:90:60:d8:65:7e:14:23:68:64: ec:c0:db:9c:19:c7:92:0a:76:26:0a:fa:20:26:16:fc:31:da: 4a:39:ac:7e:8f:ed:7b:71:23:45:2b:81:aa:a2:80:09:22:81: 33:44:5b:80:c4:c4:6d:0a:54:94:f6:33:56:e2:30:a3:6d:80: 1a:fc:fd:ad:de:b5:f6:7c:8a:42:8a:44:25:6c:ce:20:bd:70: f7:b4:16:23:51:c3:b1:54:a6:a2:07:04:d2:01:0c:f9:41:b4: d0:47:4c:65:67:29:86:7d:6b:87:8a:6e:cf:e1:6a:94:6f:e7: 96:47:44:1d:b3:3f:48:3e:cf:53:ca:66:9b:ce:a5:b4:00:16: 86:76:a4:df:b6:e0:4c:54:da:9b:e4:00:94:97:ab:fb:d9:26: ed:3d:fe:4e:dc:82:b6:0f:df:ab:64:93:c3:a3:b5:2a:52:2b: d0:4e:ca:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7tfrss3YsThTPQsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDcxMTEzMTE1MVoXDTI1MTAwOTEzMTE1MVowLzEtMCsGA1UEAxMk OWQzMWFhMjktYTU1NS00ZjI2LTkyODQtZDUzY2QxOTcyYmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WyaNBV2vR0668yEPceu64gQGbjMRU7f30IU PVQ5chb8cO5ANEW9dPGOTy79tePGULhUbfLi0+DFq3JxBuGgPh4qk5YGPQZjM1PC Em1ChlWDEpvu5xg/1zq9gYR2LpkL/KV60Ku1giAAUPQIBCqqJi0u+mGkzPxClsZt oTfviBjVF4WPnIV/1Bza8ts2wC7WpPyBejj29S7/Mky/wz7gjiy1MeKXjtUQp2GZ sFQBeaQ7qwFNaxYulKtsUzmstI8uDGnAH0hhTHvZQErKRorEoR9HsafQYuzXZMKf t+PxNsJYwtf1XXz1kCUrg0I3RioiDWpVxbtN0lWU9ESuqXZsVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOsLh9Z4J+m/cWyQHrYtU4J1y2bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvZDViMTk5MjUtY2YyOS0z YTU1LTk2YmYtNDg1ZGZkODdhOWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7G29Viu19eAWNyaiqDLFYzftLbUJfJ0IVbd6KeO/HOgMOFlCURY3or z4WiKsi0cOmVZAeOosqkKDFRXdvRay/HG8Nf+g4O/G2ClBL0a9vyPJBg2GV+FCNo ZOzA25wZx5IKdiYK+iAmFvwx2ko5rH6P7XtxI0UrgaqigAkigTNEW4DExG0KVJT2 M1biMKNtgBr8/a3etfZ8ikKKRCVsziC9cPe0FiNRw7FUpqIHBNIBDPlBtNBHTGVn KYZ9a4eKbs/hapRv55ZHRB2zP0g+z1PKZpvOpbQAFoZ2pN+24ExU2pvkAJSXq/vZ Ju09/k7cgrYP36tkk8OjtSpSK9BOyoA= -----END CERTIFICATE-----Generated at Mon Jul 21 02:20:33 2025 by rpki-client