$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/e8c43b33-b478-3a01-b446-86da3c797462.roa File: e8c43b33-b478-3a01-b446-86da3c797462.roa (raw, json) Hash identifier: 7JyAahsmwA5EA+UqqFULO0Se8+/WAjClWLa/S3YIWjc= Subject key identifier: A3:FA:12:67:AA:8D:95:C5:30:88:20:F6:08:25:85:18:64:F4:31:32 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584B196C0CD98D249B1EA5E55800 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/e8c43b33-b478-3a01-b446-86da3c797462.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 22516 IP address blocks: 198.1.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:0c:d9:8d:24:9b:1e:a5:e5:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=bee55c7c-6a33-47df-8d52-62a6c97c899d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0f:25:9f:b7:cf:3e:ef:e6:ed:89:57:19:17: e3:a7:69:0b:6a:4c:85:f0:18:49:c1:e1:1b:17:45: c6:01:6c:66:d5:4e:d5:98:2d:3a:69:83:85:55:1e: 9d:c8:a2:ab:33:4f:6f:50:8a:33:c6:38:3e:17:89: 30:52:d0:77:10:e9:46:af:67:fd:56:88:93:93:20: da:75:81:6d:5c:5c:6e:52:ea:67:0e:f3:dc:25:7c: cc:7a:4d:b7:14:1e:ad:65:9e:08:93:d3:24:c4:5e: 1e:62:a6:e8:e4:7d:df:63:0e:8f:eb:ba:a1:75:d7: ba:57:f3:23:71:20:fb:ae:5b:b4:bb:51:4e:82:e5: 41:b4:c5:fb:91:01:57:5a:45:f3:65:87:07:c3:2d: f4:d0:14:41:2f:55:8f:1f:ba:2c:bb:5e:63:86:91: 6c:74:22:36:89:e9:e9:b1:00:b7:10:15:b2:ea:ee: 8e:b0:cf:46:56:79:0f:6b:28:52:27:f9:88:c8:6f: 89:25:3c:f0:06:82:e9:b2:52:c6:cc:61:50:20:8d: 79:76:87:2a:13:ae:8d:f0:2a:c9:2b:e0:37:2b:34: 4c:b9:1f:0a:5a:41:73:5a:18:e8:f8:b2:8e:1f:3c: 38:7d:e0:e1:62:f7:53:ea:df:c5:73:79:5e:d8:11: 83:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:FA:12:67:AA:8D:95:C5:30:88:20:F6:08:25:85:18:64:F4:31:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/e8c43b33-b478-3a01-b446-86da3c797462.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:86:ce:15:18:f4:4c:0b:b4:65:33:de:f7:8f:37:59:d0:fa: fd:29:33:b2:08:e0:cd:b0:af:0c:25:03:91:b3:d7:05:6c:80: 8a:4e:17:c2:f8:d9:86:c1:b6:a0:07:11:b6:0c:fe:df:80:be: ff:b7:ba:2b:fc:5c:cb:26:42:03:0b:5d:0a:7b:3c:b3:c7:8b: ea:59:48:dd:98:d4:0c:f5:de:76:ea:15:be:87:a3:ed:62:11: ac:30:94:01:1f:67:50:da:cd:29:dc:0a:5f:32:bc:94:83:3d: 0e:09:91:52:e3:b5:28:e0:b7:8e:47:aa:5a:cb:16:13:b6:09: 72:a5:bd:0f:2e:55:02:6d:86:db:96:40:e1:2c:7e:3e:b7:91: 76:a5:17:27:03:d6:2d:26:f9:19:14:14:dd:37:0a:cf:e2:d8: 0f:8a:47:7c:e6:f7:a1:52:61:87:d9:72:a5:5b:21:d5:10:c7: 9f:42:d8:1f:18:03:5a:67:88:52:ab:fe:87:3d:b2:b9:7d:48: 41:c8:35:49:9e:e3:59:8e:92:5b:e8:3a:8d:df:8c:5f:37:56: 27:45:6e:b1:f8:3b:cc:24:ca:58:05:5a:3a:89:8f:af:2d:a7: 33:b5:23:c8:30:be:1e:29:fc:7a:a2:76:5d:01:82:f5:52:f5: c8:b8:0f:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbAzZjSSbHqXlWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk YmVlNTVjN2MtNmEzMy00N2RmLThkNTItNjJhNmM5N2M4OTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2g8ln7fPPu/m7YlXGRfjp2kLakyF8BhJweEb F0XGAWxm1U7VmC06aYOFVR6dyKKrM09vUIozxjg+F4kwUtB3EOlGr2f9VoiTkyDa dYFtXFxuUupnDvPcJXzMek23FB6tZZ4Ik9MkxF4eYqbo5H3fYw6P67qhdde6V/Mj cSD7rlu0u1FOguVBtMX7kQFXWkXzZYcHwy300BRBL1WPH7osu15jhpFsdCI2ienp sQC3EBWy6u6OsM9GVnkPayhSJ/mIyG+JJTzwBoLpslLGzGFQII15docqE66N8CrJ K+A3KzRMuR8KWkFzWhjo+LKOHzw4feDhYvdT6t/Fc3le2BGDYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKP6EmeqjZXFMIgg9gglhRhk9DEyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvZThjNDNiMzMtYjQ3OC0z YTAxLWI0NDYtODZkYTNjNzk3NDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOGzhUY9EwLtGUz3vePN1nQ+v0pM7II4M2wrwwlA5Gz1wVsgIpOF8L4 2YbBtqAHEbYM/t+Avv+3uiv8XMsmQgMLXQp7PLPHi+pZSN2Y1Az13nbqFb6Ho+1i EawwlAEfZ1DazSncCl8yvJSDPQ4JkVLjtSjgt45HqlrLFhO2CXKlvQ8uVQJthtuW QOEsfj63kXalFycD1i0m+RkUFN03Cs/i2A+KR3zm96FSYYfZcqVbIdUQx59C2B8Y A1pniFKr/oc9srl9SEHINUme41mOklvoOo3fjF83VidFbrH4O8wkylgFWjqJj68t pzO1I8gwvh4p/Hqidl0BgvVS9ci4D2o= -----END CERTIFICATE-----Generated at Fri Oct 10 20:07:24 2025 by rpki-client