$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/da95dd06-00b0-32f1-9c22-4d2ecf9b3f50.roa File: da95dd06-00b0-32f1-9c22-4d2ecf9b3f50.roa (raw, json) Hash identifier: //y2Ci7kJbi7LuBUER9qQ/gDi80LqeF3gyGqeE306yk= Subject key identifier: F2:0C:59:59:CD:6D:8B:4E:6B:E7:3A:5D:B6:F2:A6:85:C0:54:EC:59 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584B1AD197C9FB28A0F9865219C0 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/da95dd06-00b0-32f1-9c22-4d2ecf9b3f50.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 6079 IP address blocks: 198.1.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:97:c9:fb:28:a0:f9:86:52:19:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=e24fb8fa-6710-4e73-82ca-4626846d3b2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ea:63:55:54:f5:60:b1:af:dc:a5:b8:d5:4a: 9a:30:f0:2d:86:c4:84:a5:95:9e:a9:05:6f:e7:f1: ac:56:77:66:61:da:ad:cb:df:cb:dc:e3:de:db:56: 26:a1:1e:0a:41:57:8d:23:37:39:e6:c6:ae:99:e2: e9:94:b6:fa:70:27:f5:74:af:39:93:6c:1a:7e:67: 70:c0:53:cc:88:a3:b7:d2:44:11:36:1b:e8:fd:68: 2d:89:2c:2a:7d:0b:8a:bf:46:9e:e2:bb:ef:db:06: 47:1a:53:17:2d:54:55:1e:e2:a8:74:7b:06:f1:40: 06:1f:1b:02:f2:54:36:1e:a4:6a:d9:ab:fe:5c:26: 4e:94:66:af:fb:e5:66:5a:c7:39:5f:b4:4b:0c:35: ad:a1:94:a1:08:37:6e:5e:75:f8:49:c9:57:16:26: 56:ab:e6:d6:a4:d6:a7:79:2f:91:8b:9c:73:84:23: a5:09:b2:fe:ea:ad:3f:5d:21:8a:80:94:03:e8:ca: 65:6e:91:92:0d:75:60:d0:00:7a:3f:49:03:4d:43: ce:9e:e4:a0:41:91:35:80:35:f2:d5:38:5b:80:df: 5e:dc:e7:b5:ac:bb:b8:ef:0f:13:da:3e:95:00:f0: 65:49:ef:32:79:ba:8a:71:47:31:b3:ba:60:91:b4: 68:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:0C:59:59:CD:6D:8B:4E:6B:E7:3A:5D:B6:F2:A6:85:C0:54:EC:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/da95dd06-00b0-32f1-9c22-4d2ecf9b3f50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:ec:c2:15:1d:c8:10:cf:8b:22:8c:a3:cb:a4:cd:a2:96:0b: 5f:bd:fc:d3:7c:54:bb:b5:b6:4c:0e:ab:8e:7a:d3:46:bd:07: 5e:18:1e:f7:16:9a:a1:78:b2:1b:7c:96:0c:3c:bf:3c:11:90: d1:04:48:ff:80:e4:c9:d4:a3:02:70:87:88:26:94:d1:b2:05: b8:c2:67:57:8e:e3:39:48:9a:25:50:8d:ae:e0:e0:50:17:e3: 4e:55:c1:e3:f2:bf:d5:d1:bf:35:14:ff:23:b6:cf:6b:d6:89: 3c:1d:c0:21:70:4a:6e:cb:6f:dd:52:aa:6d:e4:ef:d3:1a:54: 70:f5:e3:2d:91:b0:95:99:9e:65:ec:16:15:9c:5f:b2:a9:c9: 0f:f4:cb:e4:22:d7:2d:df:c1:e2:b0:ee:33:5f:63:c4:2f:87: e9:1f:a0:0f:15:c3:8e:08:e8:c4:5b:fd:2f:43:96:4d:06:dd: 66:6f:b6:c6:2f:30:8a:59:64:a5:42:c2:2a:ec:1a:c3:85:84: fc:10:02:fe:66:8d:74:f8:c7:50:4c:c1:37:80:75:79:4b:73: e1:e3:59:76:30:b5:5b:bc:72:54:74:65:2d:61:ae:f1:6d:71: 64:0e:61:43:c6:ad:cf:6e:f8:bf:a3:88:9d:2f:df:5a:11:5f: 4a:6b:c6:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0ZfJ+yig+YZSGcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk ZTI0ZmI4ZmEtNjcxMC00ZTczLTgyY2EtNDYyNjg0NmQzYjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOpjVVT1YLGv3KW41UqaMPAthsSEpZWeqQVv 5/GsVndmYdqty9/L3OPe21YmoR4KQVeNIzc55saumeLplLb6cCf1dK85k2wafmdw wFPMiKO30kQRNhvo/WgtiSwqfQuKv0ae4rvv2wZHGlMXLVRVHuKodHsG8UAGHxsC 8lQ2HqRq2av+XCZOlGav++VmWsc5X7RLDDWtoZShCDduXnX4SclXFiZWq+bWpNan eS+Ri5xzhCOlCbL+6q0/XSGKgJQD6MplbpGSDXVg0AB6P0kDTUPOnuSgQZE1gDXy 1ThbgN9e3Oe1rLu47w8T2j6VAPBlSe8yebqKcUcxs7pgkbRoTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIMWVnNbYtOa+c6XbbypoXAVOxZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvZGE5NWRkMDYtMDBiMC0z MmYxLTljMjItNGQyZWNmOWIzZjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzswhUdyBDPiyKMo8ukzaKWC1+9/NN8VLu1tkwOq45600a9B14YHvcW mqF4sht8lgw8vzwRkNEESP+A5MnUowJwh4gmlNGyBbjCZ1eO4zlImiVQja7g4FAX 405VwePyv9XRvzUU/yO2z2vWiTwdwCFwSm7Lb91Sqm3k79MaVHD14y2RsJWZnmXs FhWcX7KpyQ/0y+Qi1y3fweKw7jNfY8Qvh+kfoA8Vw44I6MRb/S9Dlk0G3WZvtsYv MIpZZKVCwirsGsOFhPwQAv5mjXT4x1BMwTeAdXlLc+HjWXYwtVu8clR0ZS1hrvFt cWQOYUPGrc9u+L+jiJ0v31oRX0prxpg= -----END CERTIFICATE-----Generated at Fri Oct 10 19:55:04 2025 by rpki-client