$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/687acae9-fe7e-34db-85f0-9177bb6eef65.roa File: 687acae9-fe7e-34db-85f0-9177bb6eef65.roa (raw, json) Hash identifier: JmG5DNkI5vsvGfnRL8h21nRQ7fY6ONEPlkoc8grObKk= Subject key identifier: 50:D3:71:50:EA:76:4D:DE:B9:EF:D8:93:65:37:42:11:E9:94:E9:22 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584B7A319BDE8EBF63D35C847E80 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/687acae9-fe7e-34db-85f0-9177bb6eef65.roa Signing time: Fri 10 Oct 2025 16:56:16 +0000 ROA not before: Fri 10 Oct 2025 16:56:16 +0000 ROA not after: Thu 08 Jan 2026 17:56:16 +0000 asID: 9304 IP address blocks: 198.1.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:31:9b:de:8e:bf:63:d3:5c:84:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Oct 10 16:56:16 2025 GMT Not After : Jan 8 17:56:16 2026 GMT Subject: CN=fd9d706b-96b7-410e-a5e1-92e1a13bb2ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0f:82:b5:50:20:9f:68:f3:13:a9:83:25:6f: 19:b9:9b:98:a1:8e:d2:ae:3f:4d:a3:a3:65:5a:4e: 9d:29:22:10:22:8c:2b:49:6f:31:19:a9:3f:72:d0: 3e:ab:0f:fc:08:e3:5d:bf:c0:ad:9d:0d:18:f0:65: d1:fa:92:d8:bb:bb:f0:94:57:cb:5c:07:e6:ee:12: 85:3b:38:fe:58:d5:3c:a4:19:88:cc:5e:38:37:21: a9:97:07:ea:90:1a:34:f5:b1:fb:28:69:3b:b7:e8: 04:0f:dc:6c:a5:e0:1a:12:a5:1f:43:31:d7:e1:90: d7:f1:29:77:cf:2c:8d:03:1e:8a:60:20:3e:ae:a5: f0:4f:f8:d2:d2:e2:7f:4a:51:dc:b2:d2:c7:f7:65: c7:c5:a7:da:68:6c:6b:d9:5e:f2:73:3f:2c:88:84: ca:d7:37:a6:34:58:ff:23:17:df:b2:9d:a2:b2:32: e0:ea:47:ae:e6:cf:9a:fc:a0:de:a3:24:2c:1a:98: cc:d0:2e:b3:48:55:8c:1b:d7:a7:30:90:26:0d:4b: 12:86:f0:74:eb:9e:f5:da:06:43:7e:4f:68:1f:57: 8c:80:f1:c6:08:12:37:53:6f:ea:43:1b:30:95:d8: b3:cc:90:d5:31:f7:6a:d4:22:3c:b7:b5:aa:93:78: ab:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D3:71:50:EA:76:4D:DE:B9:EF:D8:93:65:37:42:11:E9:94:E9:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/687acae9-fe7e-34db-85f0-9177bb6eef65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:70:09:1d:ec:49:a4:86:86:d6:d6:f9:1d:2b:67:85:1d:a1: ba:bb:0c:93:47:65:fd:e6:d0:29:44:bf:d4:e6:90:8b:ba:40: d5:ea:eb:42:dc:0f:37:7c:6f:26:d9:39:70:3d:f6:90:6e:e1: b8:16:52:af:2c:be:05:92:e7:41:1e:58:01:21:d7:23:e1:95: 4c:34:cd:28:a8:d1:cd:4f:83:51:1d:ed:41:5f:27:11:bc:ed: 09:6a:f6:07:39:64:01:8f:24:74:f7:86:57:10:71:38:c7:a3: 72:e9:7a:25:97:35:29:6f:8e:bd:76:ea:7d:a0:86:30:7c:26: e0:f1:43:65:d9:5b:59:87:4e:0f:d3:e9:7f:63:5a:c7:2d:89: 40:0c:e5:c5:ae:6b:ba:10:97:06:e1:7c:28:e3:af:97:c2:01: 74:25:20:23:67:87:a7:8d:40:56:b1:88:a3:9d:0e:42:ba:e8: 31:0a:aa:7e:b5:36:0e:8d:f9:6b:40:9b:90:d3:17:d7:b2:5b: 14:01:41:58:62:39:bd:d6:c6:82:99:89:7d:4f:79:53:96:06: fa:90:6a:d8:61:ff:3e:d2:aa:df:47:ef:bd:ea:e2:06:88:d5: 02:e3:5f:7a:63:bf:22:32:af:09:93:f7:c8:4c:62:d5:3f:2b: f1:15:6f:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6MZvejr9j01yEfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MTAxMDE2NTYxNloXDTI2MDEwODE3NTYxNlowLzEtMCsGA1UEAxMk ZmQ5ZDcwNmItOTZiNy00MTBlLWE1ZTEtOTJlMWExM2JiMmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ+CtVAgn2jzE6mDJW8ZuZuYoY7Srj9No6Nl Wk6dKSIQIowrSW8xGak/ctA+qw/8CONdv8CtnQ0Y8GXR+pLYu7vwlFfLXAfm7hKF Ozj+WNU8pBmIzF44NyGplwfqkBo09bH7KGk7t+gED9xspeAaEqUfQzHX4ZDX8Sl3 zyyNAx6KYCA+rqXwT/jS0uJ/SlHcstLH92XHxafaaGxr2V7ycz8siITK1zemNFj/ Ixffsp2isjLg6keu5s+a/KDeoyQsGpjM0C6zSFWMG9enMJAmDUsShvB065712gZD fk9oH1eMgPHGCBI3U2/qQxswldizzJDVMfdq1CI8t7Wqk3irMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDTcVDqdk3eue/Yk2U3QhHplOkiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvNjg3YWNhZTktZmU3ZS0z NGRiLTg1ZjAtOTE3N2JiNmVlZjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgH8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1wCR3sSaSGhtbW+R0rZ4Udobq7DJNHZf3m0ClEv9TmkIu6QNXq60Lc Dzd8bybZOXA99pBu4bgWUq8svgWS50EeWAEh1yPhlUw0zSio0c1Pg1Ed7UFfJxG8 7Qlq9gc5ZAGPJHT3hlcQcTjHo3LpeiWXNSlvjr126n2ghjB8JuDxQ2XZW1mHTg/T 6X9jWsctiUAM5cWua7oQlwbhfCjjr5fCAXQlICNnh6eNQFaxiKOdDkK66DEKqn61 Ng6N+WtAm5DTF9eyWxQBQVhiOb3WxoKZiX1PeVOWBvqQathh/z7Sqt9H773q4gaI 1QLjX3pjvyIyrwmT98hMYtU/K/EVb8E= -----END CERTIFICATE-----Generated at Sun Oct 19 18:34:32 2025 by rpki-client