$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/bd5ea1b4-9c63-33aa-83e9-ae6824fe7fa6.roa File: bd5ea1b4-9c63-33aa-83e9-ae6824fe7fa6.roa (raw, json) Hash identifier: 7qhyu4psPmykbZ/5Q3xXUZf6j4AUI9Q6Hlp+jn9Bgy8= Subject key identifier: 1C:10:BD:3A:1D:04:A5:C4:6C:E6:D2:48:25:D1:C0:5E:9F:C8:1F:70 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584A6561477A39F776593FB3DD20 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/bd5ea1b4-9c63-33aa-83e9-ae6824fe7fa6.roa Signing time: Thu 03 Jul 2025 13:13:25 +0000 ROA not before: Thu 03 Jul 2025 13:13:25 +0000 ROA not after: Wed 01 Oct 2025 13:13:25 +0000 asID: 212238 IP address blocks: 198.1.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:65:61:47:7a:39:f7:76:59:3f:b3:dd:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Jul 3 13:13:25 2025 GMT Not After : Oct 1 13:13:25 2025 GMT Subject: CN=88d7ef5b-2e35-45fd-afcb-23aef48700c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:47:4f:18:b3:b1:83:f9:73:14:08:04:f0:7a: ea:05:cd:5c:99:11:59:80:22:df:56:d2:dd:7c:13: 46:23:ef:48:e1:55:20:8d:0b:d9:31:3d:af:01:e7: 0d:1c:4b:79:c3:27:f3:3a:47:68:83:d7:ad:42:d0: cc:17:2f:00:9c:f3:cd:5a:cb:e6:56:c4:a2:41:74: 4a:90:db:78:a4:7d:67:8c:0b:23:fb:a3:3b:8e:b8: da:8a:8d:dc:a5:98:40:07:55:6f:9a:b0:5d:6a:a2: f5:21:25:ea:94:11:00:7e:2a:41:bd:46:be:39:d7: 16:83:f0:03:74:fe:a3:b9:95:43:2a:04:f5:1c:28: 3a:8f:19:ca:18:fc:70:36:9c:06:58:24:ae:a7:07: f4:9d:e2:45:dc:e2:58:5b:70:18:c1:0b:66:35:39: b3:a7:08:f1:53:3b:55:fb:85:4c:b4:2b:82:ba:c4: 4b:7b:b5:87:97:3a:5a:65:ba:3c:d3:0d:1b:ee:d8: 05:bb:86:7b:22:8e:af:b8:9e:7a:a3:52:f6:e6:22: 84:16:b1:d3:3c:d6:d5:cb:36:7b:b8:f2:c4:5a:c9: a9:9e:4d:af:de:2c:d2:c2:e6:c5:56:b9:36:95:ef: bf:a9:3f:93:3f:d4:65:0a:3d:76:53:7e:33:2b:f3: f5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:10:BD:3A:1D:04:A5:C4:6C:E6:D2:48:25:D1:C0:5E:9F:C8:1F:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/bd5ea1b4-9c63-33aa-83e9-ae6824fe7fa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:4f:80:f9:8d:51:c2:db:8d:d0:f6:2f:db:a7:0f:e4:2e:82: 0a:92:38:78:e4:0c:ce:c4:2a:f4:28:5a:66:13:35:fb:ec:df: f8:bc:8f:f7:52:30:ac:67:c7:7c:a9:cc:20:8d:18:bf:24:b0: 18:ae:55:32:96:9d:51:42:ab:96:00:c3:eb:a1:d2:de:4f:31: 1f:a2:14:fe:06:9a:61:e7:e0:68:46:9c:28:cd:13:bb:de:d4: ee:b3:57:ef:8d:3d:57:43:82:bd:1d:0d:9c:e2:27:22:91:0d: f2:c0:e2:b7:56:2c:60:be:20:dd:71:28:75:aa:67:29:6c:e9: 07:e1:0c:9b:5d:e0:f3:b2:1a:cc:e9:e9:25:58:d0:85:f0:f8: 34:a6:30:17:b5:80:1e:40:7d:1f:9f:f9:34:7b:6f:71:b5:63: 5e:43:21:1f:59:90:b2:65:22:6c:77:35:3d:98:2f:48:dc:2f: 77:40:0d:84:b7:e2:c0:48:c7:dc:63:03:65:3d:69:1c:6c:a2: f3:be:72:6a:1e:e0:60:a6:21:7a:94:64:a1:6b:89:48:b8:37: e8:bf:27:77:83:3b:38:77:86:e9:6e:7e:4d:fa:80:a0:fc:d2: 8a:ec:3d:fa:85:78:88:ad:e4:a2:85:c4:42:69:47:14:1a:49: 19:b9:9e:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEplYUd6Ofd2WT+z3SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDcwMzEzMTMyNVoXDTI1MTAwMTEzMTMyNVowLzEtMCsGA1UEAxMk ODhkN2VmNWItMmUzNS00NWZkLWFmY2ItMjNhZWY0ODcwMGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEdPGLOxg/lzFAgE8HrqBc1cmRFZgCLfVtLd fBNGI+9I4VUgjQvZMT2vAecNHEt5wyfzOkdog9etQtDMFy8AnPPNWsvmVsSiQXRK kNt4pH1njAsj+6M7jrjaio3cpZhAB1VvmrBdaqL1ISXqlBEAfipBvUa+OdcWg/AD dP6juZVDKgT1HCg6jxnKGPxwNpwGWCSupwf0neJF3OJYW3AYwQtmNTmzpwjxUztV +4VMtCuCusRLe7WHlzpaZbo80w0b7tgFu4Z7Io6vuJ56o1L25iKEFrHTPNbVyzZ7 uPLEWsmpnk2v3izSwubFVrk2le+/qT+TP9RlCj12U34zK/P1/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBwQvTodBKXEbObSSCXRwF6fyB9wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvYmQ1ZWExYjQtOWM2My0z M2FhLTgzZTktYWU2ODI0ZmU3ZmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdPgPmNUcLbjdD2L9unD+QuggqSOHjkDM7EKvQoWmYTNfvs3/i8j/dS MKxnx3ypzCCNGL8ksBiuVTKWnVFCq5YAw+uh0t5PMR+iFP4GmmHn4GhGnCjNE7ve 1O6zV++NPVdDgr0dDZziJyKRDfLA4rdWLGC+IN1xKHWqZyls6QfhDJtd4POyGszp 6SVY0IXw+DSmMBe1gB5AfR+f+TR7b3G1Y15DIR9ZkLJlImx3NT2YL0jcL3dADYS3 4sBIx9xjA2U9aRxsovO+cmoe4GCmIXqUZKFriUi4N+i/J3eDOzh3hulufk36gKD8 0orsPfqFeIit5KKFxEJpRxQaSRm5nsI= -----END CERTIFICATE-----Generated at Tue Jul 8 20:06:47 2025 by rpki-client