$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/1fdbd5b7-955d-3e66-a82c-48250bee21b0.roa File: 1fdbd5b7-955d-3e66-a82c-48250bee21b0.roa (raw, json) Hash identifier: 9Oow+A4GD5CL/fPykd+U6yzE/ERNgxUR1/K2vlP2l+Q= Subject key identifier: F5:55:5F:A1:22:4F:21:FE:6B:5A:DB:87:B3:11:93:09:3C:5E:96:E0 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584B21CC3FD666D38A5B4369B180 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/1fdbd5b7-955d-3e66-a82c-48250bee21b0.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 151373 IP address blocks: 198.1.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:3f:d6:66:d3:8a:5b:43:69:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=d86e9e2f-5869-460a-9f98-ed97c7098346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:48:ac:4b:5b:e7:0e:b1:9c:69:ff:cb:f2:94: 13:ef:98:43:21:08:9f:27:43:74:66:01:14:0e:d2: 56:2b:fc:69:14:52:33:48:3d:f6:a1:e2:2f:61:8f: 27:ea:36:2a:e6:a5:48:6c:e5:f5:71:27:f1:18:d1: 35:ff:73:6c:d2:3d:bd:11:dc:2a:68:76:53:9a:03: aa:05:27:c7:41:13:df:6c:8f:46:cb:01:19:48:6e: e6:db:e7:ff:37:fb:51:da:06:83:e6:b2:2b:74:ce: c3:6d:7e:c0:f3:75:69:0c:13:f4:a3:0f:41:27:73: 4c:e7:da:33:a7:1d:9a:a6:91:85:e0:e8:be:be:8e: e1:27:39:4f:aa:02:bb:7a:b9:76:47:9b:23:39:0b: 75:fb:b9:09:e7:f1:18:9b:fa:4a:c1:c2:60:80:32: b8:38:97:a6:3c:7b:c1:80:40:37:34:00:de:68:04: 24:c3:c8:7a:b8:08:b0:aa:82:38:c5:68:68:3b:ad: 9b:b7:84:f9:66:f3:ec:17:81:2b:a1:f5:0a:e0:e3: b8:0b:04:5d:34:45:43:6d:bd:3a:e8:7c:98:14:84: 5a:8a:62:8d:e2:ec:68:91:61:25:6b:75:b9:27:9b: dc:ec:41:07:44:6c:0a:a4:65:72:2a:91:11:07:0b: 1b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:55:5F:A1:22:4F:21:FE:6B:5A:DB:87:B3:11:93:09:3C:5E:96:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/1fdbd5b7-955d-3e66-a82c-48250bee21b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:a9:a5:19:a0:c2:af:68:c2:51:46:4a:a3:02:bd:02:3a:d5: 7e:42:00:53:dc:0d:41:66:0c:74:a7:b7:08:46:2b:ca:cd:45: 10:e4:8b:01:ba:3f:b3:95:f9:68:05:54:32:db:0d:21:85:e3: f9:04:ec:b3:9f:1d:ce:d2:a5:dc:79:d1:68:6e:91:0e:c9:51: 04:6e:86:64:18:54:3c:17:e1:d5:75:88:52:97:65:4c:ed:dc: 57:af:8d:60:6a:ce:68:87:16:f6:6c:d2:eb:0a:61:cd:40:10: 5d:82:6d:eb:70:61:08:cc:0e:73:4a:40:bb:e6:3b:2f:39:14: 6a:8d:ce:a9:06:ca:73:b2:3b:a0:d1:64:42:b4:9b:ab:d7:9e: 0a:a5:d6:c0:62:6f:58:80:79:53:54:f7:08:ca:43:ae:43:7b: 6f:50:0b:4a:79:01:70:f7:fa:d9:03:6a:7d:bd:76:82:54:11: 7d:52:a2:f1:3b:57:07:7e:9e:4e:90:bf:72:ca:4f:89:d9:be: 08:01:b1:7d:a1:1f:7f:32:24:cc:68:9f:f4:d8:71:b3:03:e2: 4e:92:fb:a8:28:dc:87:6f:62:55:cd:2f:5e:71:df:07:e1:00: af:83:76:36:e7:d5:22:2b:39:0a:ba:b3:d9:71:b7:60:06:e5: 69:d4:a1:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzD/WZtOKW0NpsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk ZDg2ZTllMmYtNTg2OS00NjBhLTlmOTgtZWQ5N2M3MDk4MzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEisS1vnDrGcaf/L8pQT75hDIQifJ0N0ZgEU DtJWK/xpFFIzSD32oeIvYY8n6jYq5qVIbOX1cSfxGNE1/3Ns0j29EdwqaHZTmgOq BSfHQRPfbI9GywEZSG7m2+f/N/tR2gaD5rIrdM7DbX7A83VpDBP0ow9BJ3NM59oz px2appGF4Oi+vo7hJzlPqgK7erl2R5sjOQt1+7kJ5/EYm/pKwcJggDK4OJemPHvB gEA3NADeaAQkw8h6uAiwqoI4xWhoO62bt4T5ZvPsF4ErofUK4OO4CwRdNEVDbb06 6HyYFIRaimKN4uxokWEla3W5J5vc7EEHRGwKpGVyKpERBwsbkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVVX6EiTyH+a1rbh7MRkwk8XpbgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvMWZkYmQ1YjctOTU1ZC0z ZTY2LWE4MmMtNDgyNTBiZWUyMWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgH3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGppRmgwq9owlFGSqMCvQI61X5CAFPcDUFmDHSntwhGK8rNRRDkiwG6 P7OV+WgFVDLbDSGF4/kE7LOfHc7Spdx50WhukQ7JUQRuhmQYVDwX4dV1iFKXZUzt 3FevjWBqzmiHFvZs0usKYc1AEF2CbetwYQjMDnNKQLvmOy85FGqNzqkGynOyO6DR ZEK0m6vXngql1sBib1iAeVNU9wjKQ65De29QC0p5AXD3+tkDan29doJUEX1SovE7 Vwd+nk6Qv3LKT4nZvggBsX2hH38yJMxon/TYcbMD4k6S+6go3IdvYlXNL15x3wfh AK+Ddjbn1SIrOQq6s9lxt2AG5WnUobQ= -----END CERTIFICATE-----Generated at Tue Nov 4 23:00:13 2025 by rpki-client