$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/e8af44a2-79e9-33f0-92de-300f325035ba.roa File: e8af44a2-79e9-33f0-92de-300f325035ba.roa (raw, json) Hash identifier: IvnPmm5AqLwuv9r5EciXRvVTcD+qNkXeQoQP7Z9i5mQ= Subject key identifier: 95:B8:55:A6:40:8C:46:91:7D:C8:63:83:F7:2B:55:0D:B6:9F:EB:01 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584B2A2C5FF409698EBB47C66D00 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/e8af44a2-79e9-33f0-92de-300f325035ba.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 20001 IP address blocks: 198.1.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:5f:f4:09:69:8e:bb:47:c6:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=12bb4ace-2602-45a5-af80-d05d0cce65c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9f:b1:70:0a:dd:46:31:7a:6b:c3:f5:44:8a: c1:80:32:01:de:73:d6:0a:df:66:a0:44:a1:59:29: e5:36:6d:91:13:38:0b:e6:82:04:d6:d3:62:90:1c: 50:04:ce:84:5a:26:94:bf:6f:a0:20:bb:26:e9:da: a7:1a:12:a7:d7:66:93:97:07:42:6d:3c:ca:0d:d2: c9:5c:39:50:c7:37:c2:3d:19:8d:3a:3e:a1:c7:b9: 00:ee:2b:5f:6c:88:7e:fa:a2:2c:6c:4e:7f:6b:53: f8:10:b3:38:39:ee:68:24:74:0d:eb:8b:ce:2c:91: 8a:a4:6d:22:2c:7a:be:7d:19:af:95:4c:00:df:df: 65:c3:4f:67:cf:39:a5:97:8c:56:3d:5e:8c:b6:d0: 3f:2f:0a:02:6e:c2:c2:80:ea:11:8b:4c:28:e4:a1: e7:ca:49:a8:05:7d:2e:06:69:a0:3e:b5:a9:ca:68: 4e:6b:d4:f9:b3:14:28:fa:4f:db:cf:86:61:a2:2a: c4:09:07:8b:7c:27:80:9e:55:5a:d4:d5:40:7f:7c: f8:b1:d3:49:be:ae:c1:90:48:81:69:8a:68:1d:4e: dd:ac:7e:a3:fb:40:f7:b4:5f:ec:54:bf:b0:21:0d: 26:d2:2a:74:b1:ae:32:6e:9e:31:56:6e:d9:d9:f5: fc:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B8:55:A6:40:8C:46:91:7D:C8:63:83:F7:2B:55:0D:B6:9F:EB:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/e8af44a2-79e9-33f0-92de-300f325035ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:93:2c:e2:9c:a3:11:b7:56:4b:84:06:56:c7:4e:b1:63:9e: 9b:e7:1c:b3:12:8b:b1:6b:d3:25:88:66:fd:6a:06:48:90:5f: b8:19:40:97:4a:2d:3d:43:c5:7f:de:5c:94:6c:32:97:42:09: 37:b6:6f:c9:d6:ba:a2:09:cf:ec:df:b7:ad:29:31:50:b4:3d: b9:a7:03:81:2a:54:5e:5a:46:56:a2:88:7d:7d:e6:35:5e:cc: 2b:64:9d:1d:0a:58:12:5b:ae:b4:9e:13:cb:7c:d9:bc:36:63: 8e:69:8c:4b:9c:64:73:dd:20:5e:e3:09:f0:77:46:49:fd:b1: a8:64:ea:f7:17:00:78:f1:a0:80:04:ae:91:1c:90:45:51:e0: 38:ed:01:82:b9:a0:23:54:c6:3e:df:62:d0:be:b9:27:81:d8: 88:08:d7:2a:03:89:83:85:fc:27:4a:0f:3a:db:f8:f5:64:b2: ec:24:d8:26:d4:eb:24:85:b1:a0:47:e6:ef:57:eb:74:62:f2: 6c:36:59:42:fa:ca:34:35:d1:6e:aa:cb:5c:09:17:5b:c1:07: 90:5a:a9:84:9e:5d:d1:38:2e:38:33:40:b8:e7:86:f5:7e:ca: 06:72:85:36:87:74:4e:b0:f3:cd:1c:b7:ea:af:56:c9:3f:60: 2c:34:c0:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLF/0CWmOu0fGbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk MTJiYjRhY2UtMjYwMi00NWE1LWFmODAtZDA1ZDBjY2U2NWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15+xcArdRjF6a8P1RIrBgDIB3nPWCt9moESh WSnlNm2REzgL5oIE1tNikBxQBM6EWiaUv2+gILsm6dqnGhKn12aTlwdCbTzKDdLJ XDlQxzfCPRmNOj6hx7kA7itfbIh++qIsbE5/a1P4ELM4Oe5oJHQN64vOLJGKpG0i LHq+fRmvlUwA399lw09nzzmll4xWPV6MttA/LwoCbsLCgOoRi0wo5KHnykmoBX0u BmmgPrWpymhOa9T5sxQo+k/bz4ZhoirECQeLfCeAnlVa1NVAf3z4sdNJvq7BkEiB aYpoHU7drH6j+0D3tF/sVL+wIQ0m0ip0sa4ybp4xVm7Z2fX80QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJW4VaZAjEaRfchjg/crVQ22n+sBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvZThhZjQ0YTItNzllOS0z M2YwLTkyZGUtMzAwZjMyNTAzNWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqTLOKcoxG3VkuEBlbHTrFjnpvnHLMSi7Fr0yWIZv1qBkiQX7gZQJdK LT1DxX/eXJRsMpdCCTe2b8nWuqIJz+zft60pMVC0PbmnA4EqVF5aRlaiiH195jVe zCtknR0KWBJbrrSeE8t82bw2Y45pjEucZHPdIF7jCfB3Rkn9sahk6vcXAHjxoIAE rpEckEVR4DjtAYK5oCNUxj7fYtC+uSeB2IgI1yoDiYOF/CdKDzrb+PVksuwk2CbU 6ySFsaBH5u9X63Ri8mw2WUL6yjQ10W6qy1wJF1vBB5BaqYSeXdE4LjgzQLjnhvV+ ygZyhTaHdE6w880ct+qvVsk/YCw0wOk= -----END CERTIFICATE-----Generated at Fri Oct 10 20:00:37 2025 by rpki-client