$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/f8840e39-1744-3eb2-932f-45880a1e4285.roa File: f8840e39-1744-3eb2-932f-45880a1e4285.roa (raw, json) Hash identifier: bty3tQFGoLrbI/ugQJXRCsBdwYUbcuSiSq55SqID2q8= Subject key identifier: 70:44:92:D8:53:C1:C2:E7:AC:DB:06:B7:08:CD:A3:29:D5:6E:CC:D8 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584A6029308C1C0ECE96665DA640 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/f8840e39-1744-3eb2-932f-45880a1e4285.roa Signing time: Tue 01 Jul 2025 16:21:21 +0000 ROA not before: Tue 01 Jul 2025 16:21:21 +0000 ROA not after: Mon 29 Sep 2025 16:21:21 +0000 asID: 210554 IP address blocks: 198.1.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:60:29:30:8c:1c:0e:ce:96:66:5d:a6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Jul 1 16:21:21 2025 GMT Not After : Sep 29 16:21:21 2025 GMT Subject: CN=b9d222e2-fe47-4e34-b814-310c8e4321d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6a:21:c6:17:b3:18:09:ce:1d:a1:59:ff:0f: 3b:0f:5f:56:0a:ea:0d:4b:a2:59:48:e6:e7:df:cf: 7d:0c:ae:41:b2:65:75:b4:e0:3a:e5:5d:79:47:da: f9:78:82:e5:73:a8:c5:62:11:9f:d5:0a:bc:ef:1e: c6:f7:28:f2:19:dd:60:e3:d1:51:68:a8:ef:5a:6e: e1:51:6b:a7:85:f6:8a:a5:98:83:72:ff:ba:62:54: 5d:63:ec:cb:82:5d:6a:c8:7f:40:da:12:cf:00:7f: a0:b1:32:70:59:09:a5:9f:9e:24:a2:7a:83:46:03: b4:47:ab:c4:75:cf:83:f2:64:49:7d:ca:99:94:04: 38:df:d2:3e:e1:35:f1:18:62:73:28:d2:6a:e0:23: f4:12:69:cd:8a:f2:f0:f7:85:5a:8a:6c:8c:01:d2: f6:9f:ca:fd:52:bd:de:b2:e4:52:6e:50:b0:a9:65: 9c:64:9c:81:1b:35:2d:16:1e:95:c6:b9:91:d4:2b: 0d:8a:ef:9f:b8:78:a0:f2:d8:5c:42:a0:eb:84:aa: 11:5d:a2:10:64:80:c1:7b:57:9f:51:4e:07:7d:b0: ea:bd:87:0f:3c:11:e1:70:dc:11:09:be:96:70:48: 9b:3b:06:52:77:f0:8e:10:81:d7:fd:e6:14:20:df: 2a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:44:92:D8:53:C1:C2:E7:AC:DB:06:B7:08:CD:A3:29:D5:6E:CC:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/f8840e39-1744-3eb2-932f-45880a1e4285.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:60:ba:37:31:fe:ca:d5:f0:ab:f8:c1:3a:85:47:d0:03:64: 76:41:6d:82:80:64:bf:34:74:35:3c:42:47:bd:7d:91:bc:c4: 0e:71:55:cc:d2:bd:4d:7b:d9:8a:30:31:83:8a:bb:e7:95:a7: 24:79:b1:78:e5:af:a3:a6:fd:b5:c2:f7:e0:f9:a8:98:f6:16: 32:e1:ae:c1:07:df:08:6b:bb:7c:33:66:10:61:b4:24:64:ed: 9c:ef:eb:00:c6:46:89:18:14:35:1b:6a:0a:f9:0b:9a:8f:8d: de:be:07:08:b6:50:65:60:8b:c0:4b:2e:fd:f0:c9:0c:7d:fd: 82:3b:8f:0e:8a:81:a3:de:de:48:18:2d:db:50:03:a0:85:b6: 9b:11:7b:ca:00:64:02:87:fd:0f:23:ce:98:8e:59:3d:05:cd: 66:dc:f6:c0:58:9a:83:55:1b:77:80:dc:76:09:82:f2:00:00: 54:d7:79:e4:13:bd:c0:5a:76:75:4a:5c:5f:46:79:97:32:f1: 3a:43:0f:eb:9f:c3:ad:4e:f9:0e:f4:8f:23:d5:03:ad:f7:c7: 40:b1:40:fb:2a:a3:75:d8:7e:fd:88:cf:40:0f:c6:4b:8e:15: b6:3e:2d:fa:13:e8:ca:16:94:79:fb:96:13:8a:18:97:88:5a: 7e:4e:2d:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpgKTCMHA7OlmZdpkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDcwMTE2MjEyMVoXDTI1MDkyOTE2MjEyMVowLzEtMCsGA1UEAxMk YjlkMjIyZTItZmU0Ny00ZTM0LWI4MTQtMzEwYzhlNDMyMWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWohxhezGAnOHaFZ/w87D19WCuoNS6JZSObn 3899DK5BsmV1tOA65V15R9r5eILlc6jFYhGf1Qq87x7G9yjyGd1g49FRaKjvWm7h UWunhfaKpZiDcv+6YlRdY+zLgl1qyH9A2hLPAH+gsTJwWQmln54konqDRgO0R6vE dc+D8mRJfcqZlAQ439I+4TXxGGJzKNJq4CP0EmnNivLw94VaimyMAdL2n8r9Ur3e suRSblCwqWWcZJyBGzUtFh6VxrmR1CsNiu+fuHig8thcQqDrhKoRXaIQZIDBe1ef UU4HfbDqvYcPPBHhcNwRCb6WcEibOwZSd/COEIHX/eYUIN8qowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBEkthTwcLnrNsGtwjNoynVbszYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvZjg4NDBlMzktMTc0NC0z ZWIyLTkzMmYtNDU4ODBhMWU0Mjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJgujcx/srV8Kv4wTqFR9ADZHZBbYKAZL80dDU8Qke9fZG8xA5xVczS vU172YowMYOKu+eVpyR5sXjlr6Om/bXC9+D5qJj2FjLhrsEH3whru3wzZhBhtCRk 7Zzv6wDGRokYFDUbagr5C5qPjd6+Bwi2UGVgi8BLLv3wyQx9/YI7jw6KgaPe3kgY LdtQA6CFtpsRe8oAZAKH/Q8jzpiOWT0FzWbc9sBYmoNVG3eA3HYJgvIAAFTXeeQT vcBadnVKXF9GeZcy8TpDD+ufw61O+Q70jyPVA633x0CxQPsqo3XYfv2Iz0APxkuO FbY+LfoT6MoWlHn7lhOKGJeIWn5OLa0= -----END CERTIFICATE-----Generated at Tue Jul 8 19:40:12 2025 by rpki-client