$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/433a28ef-4a2f-32fb-afad-0362cb74c7e7.roa File: 433a28ef-4a2f-32fb-afad-0362cb74c7e7.roa (raw, json) Hash identifier: 1tvtRmvmO+H6fWN4EvsLjRK73P8qZesp0fxd0+J0vHI= Subject key identifier: 93:61:47:FB:DB:DA:A8:F9:31:55:AF:36:22:9D:98:4B:F4:95:73:90 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584A6029793993F3C24421A16380 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/433a28ef-4a2f-32fb-afad-0362cb74c7e7.roa Signing time: Tue 01 Jul 2025 16:21:56 +0000 ROA not before: Tue 01 Jul 2025 16:21:56 +0000 ROA not after: Mon 29 Sep 2025 16:21:56 +0000 asID: 270764 IP address blocks: 198.1.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:60:29:79:39:93:f3:c2:44:21:a1:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Jul 1 16:21:56 2025 GMT Not After : Sep 29 16:21:56 2025 GMT Subject: CN=cda0c86e-fd7f-4e91-b332-5009b5c35762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:72:b3:04:8f:9e:b7:b0:55:d1:b0:53:10:45: e2:f1:dc:09:47:c8:31:b1:7e:60:ba:ce:68:bd:62: 04:f7:a6:0f:90:14:7d:08:3a:87:ef:27:87:9e:19: 24:2a:13:99:0c:80:c6:ff:51:5d:94:17:bf:7b:43: a1:9b:c5:ea:4f:20:81:63:bf:81:08:30:49:96:a9: 32:03:2d:8d:43:12:21:08:b6:38:9e:60:c2:d3:73: 40:e2:ce:4b:73:8e:89:86:e7:9e:b9:5b:16:3f:81: 00:61:17:08:f8:e8:60:a6:22:ba:cb:b7:9f:25:aa: dd:cb:f4:2f:17:91:2b:8a:e3:f7:2c:d5:83:ad:97: 55:16:b1:f9:3e:56:be:48:05:76:88:5a:2a:e7:d8: 7d:6d:7e:aa:62:f9:32:c1:43:fe:b5:94:fd:98:69: 1c:0d:4e:d9:75:cb:c7:9a:e9:1c:98:10:68:d8:94: 81:47:65:94:6f:86:c4:da:fb:9b:01:56:1b:5e:ce: 03:4b:67:fb:85:32:03:7b:8e:2f:54:c0:27:23:27: 2b:fd:61:33:cc:20:20:b9:50:cc:54:7b:8a:31:01: fb:3b:a0:74:ae:7c:51:b9:f6:5f:3f:3a:da:af:6a: 68:4d:ff:4b:00:69:8a:73:d5:71:d8:f4:82:07:46: 52:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:61:47:FB:DB:DA:A8:F9:31:55:AF:36:22:9D:98:4B:F4:95:73:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/433a28ef-4a2f-32fb-afad-0362cb74c7e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:54:ba:53:7b:23:33:4a:f5:ef:e1:3c:fd:ca:9e:73:9d:8b: 2a:12:b6:51:ce:36:6e:05:cf:4c:d5:e1:37:09:04:41:3a:c4: ca:da:72:69:a5:6f:dc:9e:70:22:45:f8:c8:dd:8b:08:65:f9: 5b:85:48:12:64:45:a9:fb:b0:2f:82:a6:a1:f0:2d:77:0d:40: 09:01:6b:2c:9e:4d:9f:d7:aa:6a:0d:66:7d:ae:21:f2:99:95: 65:b6:ef:5c:e7:35:ef:57:2c:20:a3:82:3f:90:e4:0b:4c:55: 34:f3:4e:34:dc:ce:8c:61:18:e8:81:0b:7d:0a:1a:da:65:c9: 7a:b9:2d:b9:e2:ee:7c:78:fc:92:56:15:61:33:9f:55:a1:70: 1c:dd:d0:48:22:be:94:85:53:11:bf:cc:98:a4:8c:fd:d5:47: af:08:e2:8c:9c:3e:7c:81:d4:05:58:93:b3:1c:7a:d2:7f:b5: b6:cc:bd:24:c2:61:bf:98:18:89:7e:db:ac:6e:c4:74:c7:45: 31:df:8c:74:89:be:50:81:06:dc:03:d0:cb:96:0d:30:39:f3: a8:7d:3c:3a:c3:41:85:d3:a2:79:3c:d3:a4:8f:c3:17:10:fa: a3:7d:dc:ec:db:36:02:78:7a:eb:26:3e:2d:02:4d:e1:8d:62: 19:64:6d:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpgKXk5k/PCRCGhY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDcwMTE2MjE1NloXDTI1MDkyOTE2MjE1NlowLzEtMCsGA1UEAxMk Y2RhMGM4NmUtZmQ3Zi00ZTkxLWIzMzItNTAwOWI1YzM1NzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnKzBI+et7BV0bBTEEXi8dwJR8gxsX5gus5o vWIE96YPkBR9CDqH7yeHnhkkKhOZDIDG/1FdlBe/e0Ohm8XqTyCBY7+BCDBJlqky Ay2NQxIhCLY4nmDC03NA4s5Lc46JhueeuVsWP4EAYRcI+OhgpiK6y7efJardy/Qv F5EriuP3LNWDrZdVFrH5Pla+SAV2iFoq59h9bX6qYvkywUP+tZT9mGkcDU7ZdcvH mukcmBBo2JSBR2WUb4bE2vubAVYbXs4DS2f7hTIDe44vVMAnIycr/WEzzCAguVDM VHuKMQH7O6B0rnxRufZfPzrar2poTf9LAGmKc9Vx2PSCB0ZSwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJNhR/vb2qj5MVWvNiKdmEv0lXOQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvNDMzYTI4ZWYtNGEyZi0z MmZiLWFmYWQtMDM2MmNiNzRjN2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlUulN7IzNK9e/hPP3KnnOdiyoStlHONm4Fz0zV4TcJBEE6xMracmml b9yecCJF+Mjdiwhl+VuFSBJkRan7sC+CpqHwLXcNQAkBayyeTZ/XqmoNZn2uIfKZ lWW271znNe9XLCCjgj+Q5AtMVTTzTjTczoxhGOiBC30KGtplyXq5Lbni7nx4/JJW FWEzn1WhcBzd0EgivpSFUxG/zJikjP3VR68I4oycPnyB1AVYk7McetJ/tbbMvSTC Yb+YGIl+26xuxHTHRTHfjHSJvlCBBtwD0MuWDTA586h9PDrDQYXTonk806SPwxcQ +qN93OzbNgJ4eusmPi0CTeGNYhlkbfI= -----END CERTIFICATE-----Generated at Tue Jul 8 18:29:03 2025 by rpki-client