$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/f12c2c52-fcb6-3b1d-b674-2a732a5650b2.roa File: f12c2c52-fcb6-3b1d-b674-2a732a5650b2.roa (raw, json) Hash identifier: I+jKDpXXnVI9rP302bdvm39RLCjrmGIL1nthfF/0D/A= Subject key identifier: 80:E5:C6:87:D9:6A:07:DC:5D:65:3A:AE:07:94:02:E9:9A:D2:17:B5 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584BAEE2B079223CCE94FFC1B1C0 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/f12c2c52-fcb6-3b1d-b674-2a732a5650b2.roa Signing time: Wed 29 Oct 2025 13:55:06 +0000 ROA not before: Wed 29 Oct 2025 13:55:06 +0000 ROA not after: Tue 27 Jan 2026 14:55:06 +0000 asID: 205886 IP address blocks: 198.1.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:e2:b0:79:22:3c:ce:94:ff:c1:b1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Oct 29 13:55:06 2025 GMT Not After : Jan 27 14:55:06 2026 GMT Subject: CN=171e4b8d-6138-468c-b132-5908b0f87c54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:de:f8:7e:4c:39:23:60:83:42:a4:21:17:80: 52:54:33:30:be:54:23:0f:68:6b:f0:82:92:59:29: 0c:29:5b:56:07:a7:bf:99:65:85:98:30:60:3d:f6: 90:f8:4d:d3:a9:01:0c:dd:e7:ab:f0:f1:6c:27:bd: ae:81:b7:16:d0:a0:e6:13:30:9d:23:a3:eb:59:fe: 7f:3f:94:e5:73:d6:f3:e8:a6:12:83:86:09:05:b7: a2:64:63:e2:3a:79:2e:81:23:90:2b:01:f9:99:d9: ac:61:1f:19:ae:44:13:7a:5f:8c:1b:96:73:3d:61: 9a:8b:79:6c:b9:9a:cc:f0:da:3c:75:50:f0:35:73: 88:6d:06:bf:81:2c:3e:ac:22:67:5d:2e:59:be:e3: 04:e9:41:6d:a3:f6:8e:25:d7:2b:eb:08:1d:76:b0: 08:9d:38:35:db:f5:1f:6e:f6:d7:b2:15:60:7e:c3: 97:36:ac:73:8b:a1:5b:87:b5:47:01:78:e3:3c:dd: 1e:a8:c7:08:f6:30:32:ee:ca:05:f3:fc:64:47:95: b5:2a:9b:b4:9f:75:a2:e1:e8:70:d2:2a:c1:70:5e: d8:41:46:76:30:fd:a0:97:18:ab:f8:95:97:d0:4d: 1b:30:bc:07:05:c9:91:fc:81:35:06:78:44:45:4f: f5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:E5:C6:87:D9:6A:07:DC:5D:65:3A:AE:07:94:02:E9:9A:D2:17:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/f12c2c52-fcb6-3b1d-b674-2a732a5650b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:8b:85:46:e7:38:b2:25:af:68:3e:d2:75:be:96:94:b4:7b: 67:83:49:77:75:8e:79:b0:ca:ba:b2:a2:ee:1b:53:a2:88:4b: e0:06:a9:ff:d2:3e:a5:fc:56:f3:e8:88:d5:d6:fb:d5:86:75: 03:aa:f9:0a:7a:a2:9d:69:a3:1a:75:c6:33:66:4d:5a:48:ac: 5c:14:c8:13:f3:2c:44:5b:0f:8c:41:fd:26:fe:cf:eb:04:a5: ce:5f:69:e1:32:d6:f7:b3:7d:db:34:63:3b:38:b8:36:c6:ca: a0:b2:d1:19:f3:65:8d:07:57:dd:30:31:4a:40:6d:ee:ec:0d: b3:c9:d6:5d:ee:ba:ab:78:86:11:c5:2e:eb:d9:7a:c2:39:d4: 7a:72:3b:d4:35:15:d6:59:18:02:de:38:68:32:c9:02:46:35: 88:7f:ee:ac:7b:c9:0f:10:b8:8b:ee:b2:6f:d9:c3:49:0d:0a: 3d:47:e2:e8:27:f4:ad:13:60:bf:94:20:e4:cd:c9:03:84:24: 03:78:9c:1f:46:70:cf:d1:17:d8:d7:79:2f:a6:b3:33:f6:52: a2:98:ad:38:28:bb:62:4b:24:6c:85:70:16:f7:b5:b5:9c:e3: 39:b8:4d:86:25:fe:6b:de:f2:3a:af:0c:7e:fb:7d:4e:92:ba: cf:c9:1a:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuu4rB5IjzOlP/BscAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MTAyOTEzNTUwNloXDTI2MDEyNzE0NTUwNlowLzEtMCsGA1UEAxMk MTcxZTRiOGQtNjEzOC00NjhjLWIxMzItNTkwOGIwZjg3YzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvN74fkw5I2CDQqQhF4BSVDMwvlQjD2hr8IKS WSkMKVtWB6e/mWWFmDBgPfaQ+E3TqQEM3eer8PFsJ72ugbcW0KDmEzCdI6PrWf5/ P5Tlc9bz6KYSg4YJBbeiZGPiOnkugSOQKwH5mdmsYR8ZrkQTel+MG5ZzPWGai3ls uZrM8No8dVDwNXOIbQa/gSw+rCJnXS5ZvuME6UFto/aOJdcr6wgddrAInTg12/Uf bvbXshVgfsOXNqxzi6Fbh7VHAXjjPN0eqMcI9jAy7soF8/xkR5W1Kpu0n3Wi4ehw 0irBcF7YQUZ2MP2glxir+JWX0E0bMLwHBcmR/IE1BnhERU/1hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIDlxofZagfcXWU6rgeUAuma0he1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvZjEyYzJjNTItZmNiNi0z YjFkLWI2NzQtMmE3MzJhNTY1MGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgH0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKLhUbnOLIlr2g+0nW+lpS0e2eDSXd1jnmwyrqyou4bU6KIS+AGqf/S PqX8VvPoiNXW+9WGdQOq+Qp6op1poxp1xjNmTVpIrFwUyBPzLERbD4xB/Sb+z+sE pc5faeEy1vezfds0Yzs4uDbGyqCy0RnzZY0HV90wMUpAbe7sDbPJ1l3uuqt4hhHF LuvZesI51HpyO9Q1FdZZGALeOGgyyQJGNYh/7qx7yQ8QuIvusm/Zw0kNCj1H4ugn 9K0TYL+UIOTNyQOEJAN4nB9GcM/RF9jXeS+mszP2UqKYrTgou2JLJGyFcBb3tbWc 4zm4TYYl/mve8jqvDH77fU6Sus/JGok= -----END CERTIFICATE-----Generated at Sat Nov 1 08:29:44 2025 by rpki-client