$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/8fdafa17-5d3d-36ae-be97-e4414ced8d66.roa File: 8fdafa17-5d3d-36ae-be97-e4414ced8d66.roa (raw, json) Hash identifier: B3+71SpeLklf8RRCONml86DEZHFy3xhlHIVL64Oz48s= Subject key identifier: 05:EC:76:84:C1:6B:C2:A2:04:B7:D2:A6:9E:29:FE:88:DD:F2:87:97 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584A7A9B17274F42B901E1EC4380 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/8fdafa17-5d3d-36ae-be97-e4414ced8d66.roa Signing time: Fri 11 Jul 2025 03:41:52 +0000 ROA not before: Fri 11 Jul 2025 03:41:52 +0000 ROA not after: Thu 09 Oct 2025 03:41:52 +0000 asID: 834 IP address blocks: 198.1.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:9b:17:27:4f:42:b9:01:e1:ec:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Jul 11 03:41:52 2025 GMT Not After : Oct 9 03:41:52 2025 GMT Subject: CN=f2a85638-8c97-40bb-ae36-d90b1f0ceaed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:3a:15:3e:d1:d0:e9:76:f3:ec:05:90:8e:b5: a8:a5:de:29:7f:3b:16:48:c0:c2:8f:68:0a:55:e3: e9:51:08:90:ba:ff:ba:52:0c:f2:8f:fe:ec:26:62: d9:44:29:30:a1:c0:13:8d:5e:68:3b:16:54:9f:3f: b5:bf:10:82:a1:ab:80:56:36:53:26:f7:26:97:cc: f9:cc:cb:bf:89:da:14:ba:1d:f6:0b:f1:cc:3e:ef: 22:6a:7f:50:be:13:0a:28:5d:9a:8b:4e:22:0a:08: 23:e6:a7:01:66:d7:e6:5a:50:fb:c0:69:9f:34:3e: 17:f3:fd:76:2d:2d:a9:20:36:82:16:2d:03:d2:4b: d0:f9:ea:71:3f:ab:9c:0d:ee:33:46:94:41:35:33: ac:85:f1:f1:a6:64:78:3f:53:64:07:74:34:6d:86: 4a:56:3e:36:6a:0b:fa:25:7d:eb:1b:ae:06:bd:61: e2:6b:30:8a:5e:88:66:6c:b8:4c:f2:f9:b5:73:8b: e2:67:d6:ce:54:fe:07:99:ac:f6:e1:e5:b0:fa:9f: d6:55:dc:aa:86:0d:24:95:cb:43:54:b5:14:4a:ca: 6b:19:a4:36:e1:32:18:9a:a9:1b:94:2f:13:1a:be: 3d:ec:56:bf:c9:91:95:b2:61:4f:ce:de:96:e4:cb: 72:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:EC:76:84:C1:6B:C2:A2:04:B7:D2:A6:9E:29:FE:88:DD:F2:87:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/8fdafa17-5d3d-36ae-be97-e4414ced8d66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:bc:5e:45:13:34:4e:50:99:a6:d3:23:75:6d:e1:34:1d:0b: 54:1c:8c:74:70:c8:a1:e4:c6:a9:73:96:9a:80:5f:7b:d0:be: 78:3c:fd:e4:c1:40:67:a7:53:41:f7:6c:66:c0:d4:78:ef:82: 51:f6:d3:7c:d1:2c:f3:da:8e:85:f3:a7:ff:77:83:f0:f5:d2: c5:3b:38:d5:75:22:17:98:3c:84:21:4f:41:37:0a:4b:cd:83: 6e:af:db:01:a0:22:ba:c4:14:a6:07:ab:f6:b3:e8:22:da:68: 75:73:46:cd:90:4d:ba:3d:4b:de:38:21:85:21:c4:5c:2d:d1: bf:bc:20:73:fa:03:92:67:38:cb:17:d5:e0:39:8c:f0:49:39: 65:fd:28:f9:57:5e:5b:35:a7:ad:12:30:60:f8:97:af:b6:6b: 1e:94:dc:04:52:86:94:8e:99:45:30:39:d0:0b:5f:05:c3:3d: 45:97:e2:5f:91:83:dc:04:db:ff:fd:ac:59:f5:bc:00:a3:45: 19:74:1d:db:d5:68:6b:88:c2:46:59:97:d2:7b:62:76:a9:b2: 2a:b5:a5:77:1d:1c:c2:ca:ed:bd:fb:1e:56:bd:e7:0b:47:cb: c8:61:80:b1:c7:a7:2b:af:0c:85:86:08:08:c7:b5:fd:cc:5d: d8:f7:93:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6mxcnT0K5AeHsQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDcxMTAzNDE1MloXDTI1MTAwOTAzNDE1MlowLzEtMCsGA1UEAxMk ZjJhODU2MzgtOGM5Ny00MGJiLWFlMzYtZDkwYjFmMGNlYWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDoVPtHQ6Xbz7AWQjrWopd4pfzsWSMDCj2gK VePpUQiQuv+6Ugzyj/7sJmLZRCkwocATjV5oOxZUnz+1vxCCoauAVjZTJvcml8z5 zMu/idoUuh32C/HMPu8ian9QvhMKKF2ai04iCggj5qcBZtfmWlD7wGmfND4X8/12 LS2pIDaCFi0D0kvQ+epxP6ucDe4zRpRBNTOshfHxpmR4P1NkB3Q0bYZKVj42agv6 JX3rG64GvWHiazCKXohmbLhM8vm1c4viZ9bOVP4Hmaz24eWw+p/WVdyqhg0klctD VLUUSsprGaQ24TIYmqkblC8TGr497Fa/yZGVsmFPzt6W5Mty4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXsdoTBa8KiBLfSpp4p/ojd8oeXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvOGZkYWZhMTctNWQzZC0z NmFlLWJlOTctZTQ0MTRjZWQ4ZDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAy8XkUTNE5QmabTI3Vt4TQdC1QcjHRwyKHkxqlzlpqAX3vQvng8/eTB QGenU0H3bGbA1HjvglH203zRLPPajoXzp/93g/D10sU7ONV1IheYPIQhT0E3CkvN g26v2wGgIrrEFKYHq/az6CLaaHVzRs2QTbo9S944IYUhxFwt0b+8IHP6A5JnOMsX 1eA5jPBJOWX9KPlXXls1p60SMGD4l6+2ax6U3ARShpSOmUUwOdALXwXDPUWX4l+R g9wE2//9rFn1vACjRRl0HdvVaGuIwkZZl9J7Ynapsiq1pXcdHMLK7b37Hla95wtH y8hhgLHHpyuvDIWGCAjHtf3MXdj3k3k= -----END CERTIFICATE-----Generated at Thu Jul 31 23:34:13 2025 by rpki-client