$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/ed228a8f-468d-3b59-9911-7a10a77404b7.roa File: ed228a8f-468d-3b59-9911-7a10a77404b7.roa (raw, json) Hash identifier: qREPSR7sujYZCPeA3Oo7HYv0XSTayxu4bUtDyfQZzVs= Subject key identifier: C2:CD:6A:60:E0:16:9D:41:A0:F1:09:AE:DC:82:02:22:41:10:C8:A7 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584A7BB7EFC9313F24994D242500 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/ed228a8f-468d-3b59-9911-7a10a77404b7.roa Signing time: Fri 11 Jul 2025 13:15:48 +0000 ROA not before: Fri 11 Jul 2025 13:15:48 +0000 ROA not after: Thu 09 Oct 2025 13:15:48 +0000 asID: 7029 IP address blocks: 198.1.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b7:ef:c9:31:3f:24:99:4d:24:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Jul 11 13:15:48 2025 GMT Not After : Oct 9 13:15:48 2025 GMT Subject: CN=f61e4cb6-ed84-450b-962b-72ccf766f2f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:75:f4:a4:88:2a:db:85:ca:46:36:61:a3:10: 3b:61:e7:93:5b:fa:83:28:0b:f1:b5:74:13:2e:21: cc:34:a9:66:39:91:3e:0a:31:fa:80:bd:c8:e5:7e: 6c:16:d3:c5:19:d0:45:35:b4:85:61:29:74:7e:51: a9:88:14:a6:70:e1:c1:bb:fc:05:eb:a3:76:df:4f: 6d:36:59:aa:b4:72:9d:df:8b:a3:f9:45:e1:6e:14: 7c:42:1a:1f:de:c1:d0:72:ca:50:7f:24:96:e8:a9: 3a:90:1f:34:f8:6b:3e:f2:65:ba:e2:d3:43:b0:d6: 5b:46:47:9f:dc:8a:1b:d4:ba:05:db:21:95:18:d1: e9:91:9a:f4:72:37:42:5c:d9:1c:6e:69:10:5f:30: 4b:cb:6d:3b:f3:94:93:c4:8f:77:5e:d5:54:b7:b9: 4f:94:66:d6:2e:ba:dd:b4:23:8e:a4:14:a1:19:7e: 96:c8:bf:8d:5d:df:de:2b:3b:b7:f8:86:5f:d6:7c: ef:23:ad:1a:96:75:1e:e9:fd:97:3d:92:ad:52:db: da:20:1c:0d:98:b3:d6:9a:da:45:50:5c:30:bc:55: 2c:5b:1f:55:53:54:2b:b1:7b:22:b1:b9:2d:12:07: be:72:a3:0b:1e:b1:10:f0:bc:c9:f5:d1:d2:a6:3e: 6f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:CD:6A:60:E0:16:9D:41:A0:F1:09:AE:DC:82:02:22:41:10:C8:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/ed228a8f-468d-3b59-9911-7a10a77404b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:5a:62:0e:aa:f1:be:4d:66:18:fe:fb:22:5f:4c:68:b3:99: ba:b6:44:91:62:29:4d:80:62:d2:1c:38:51:74:83:c8:72:40: c7:7f:cb:a2:9c:2e:5c:2f:2b:d4:d9:b0:fd:2e:41:f8:e5:72: a9:b2:ef:a3:ce:46:b5:d9:3d:57:ba:6a:f3:b0:0e:57:ff:16: 7e:52:be:ed:3c:0b:cd:60:46:fc:b5:b1:e8:b5:08:f9:ff:88: 07:2b:de:f5:d6:3e:e0:31:0d:2c:cd:b1:d9:13:f2:7d:3d:43: 8a:6f:4a:15:e7:70:99:8f:39:3d:a0:4f:29:8e:7b:00:3c:a6: cf:c8:d4:e6:a5:17:7b:69:6b:5d:d7:52:a0:01:80:4e:37:5c: f4:10:c9:1e:f0:4b:8a:02:e0:12:59:85:34:4b:6b:89:de:67: cb:e5:45:3f:3e:50:b9:6c:3a:40:7e:0c:08:4a:44:62:db:a6: 2f:b7:45:c1:67:53:48:78:02:a9:02:5c:a8:88:5b:42:82:8e: cb:19:ec:15:55:05:ac:a2:80:4e:f1:d3:4d:4a:fc:6f:54:2f: aa:b2:df:d9:31:b1:bc:ef:22:25:83:7f:07:df:0e:3e:54:bb: b5:18:1a:fe:06:e4:58:72:3e:3f:4e:a5:84:fc:c9:a7:6f:67: 2f:97:cd:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7t+/JMT8kmU0kJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDcxMTEzMTU0OFoXDTI1MTAwOTEzMTU0OFowLzEtMCsGA1UEAxMk ZjYxZTRjYjYtZWQ4NC00NTBiLTk2MmItNzJjY2Y3NjZmMmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnX0pIgq24XKRjZhoxA7YeeTW/qDKAvxtXQT LiHMNKlmOZE+CjH6gL3I5X5sFtPFGdBFNbSFYSl0flGpiBSmcOHBu/wF66N2309t NlmqtHKd34uj+UXhbhR8Qhof3sHQcspQfySW6Kk6kB80+Gs+8mW64tNDsNZbRkef 3Iob1LoF2yGVGNHpkZr0cjdCXNkcbmkQXzBLy20785STxI93XtVUt7lPlGbWLrrd tCOOpBShGX6WyL+NXd/eKzu3+IZf1nzvI60alnUe6f2XPZKtUtvaIBwNmLPWmtpF UFwwvFUsWx9VU1QrsXsisbktEge+cqMLHrEQ8LzJ9dHSpj5vEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLNamDgFp1BoPEJrtyCAiJBEMinMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvZWQyMjhhOGYtNDY4ZC0z YjU5LTk5MTEtN2ExMGE3NzQwNGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRaYg6q8b5NZhj++yJfTGizmbq2RJFiKU2AYtIcOFF0g8hyQMd/y6Kc LlwvK9TZsP0uQfjlcqmy76PORrXZPVe6avOwDlf/Fn5Svu08C81gRvy1sei1CPn/ iAcr3vXWPuAxDSzNsdkT8n09Q4pvShXncJmPOT2gTymOewA8ps/I1OalF3tpa13X UqABgE43XPQQyR7wS4oC4BJZhTRLa4neZ8vlRT8+ULlsOkB+DAhKRGLbpi+3RcFn U0h4AqkCXKiIW0KCjssZ7BVVBayigE7x001K/G9UL6qy39kxsbzvIiWDfwffDj5U u7UYGv4G5FhyPj9OpYT8yadvZy+Xza4= -----END CERTIFICATE-----Generated at Sun Jul 20 14:12:59 2025 by rpki-client