$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/21bf5113-e55b-37f7-adc9-8cd87af0160b.roa File: 21bf5113-e55b-37f7-adc9-8cd87af0160b.roa (raw, json) Hash identifier: 4eWFuR++z5FRdOMw8i3h/9jHjECM+Kma779PWG7GmZU= Subject key identifier: B3:D6:83:21:D4:4E:65:78:7E:65:5C:D0:D5:97:53:2D:0D:84:AE:4E Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584A07D52006D2123C940636B300 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/21bf5113-e55b-37f7-adc9-8cd87af0160b.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 197537 IP address blocks: 198.1.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:20:06:d2:12:3c:94:06:36:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=874ccaac-7dcd-4bf6-b769-f0c5305bd272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:58:72:d7:40:00:bf:21:e8:60:28:dc:79:a2: e1:56:34:33:a4:15:2c:18:ea:78:fc:8d:27:0b:bc: 7f:ed:0b:b7:36:76:58:8b:09:78:34:76:1f:7c:15: 27:3e:2b:12:29:99:59:39:1f:2d:3b:a0:49:ff:51: 52:c4:34:4b:1a:68:e5:40:a2:94:43:57:1d:82:7a: ef:3c:eb:aa:35:1f:dd:83:a5:e6:51:d5:69:e1:b4: e6:30:35:fa:53:56:9f:b2:a6:eb:e1:4f:36:89:85: 47:1e:61:66:e7:1f:7d:28:12:99:8b:d1:cc:53:57: 55:6c:c5:ad:f4:86:6c:14:c1:95:ac:af:64:35:c2: 0d:54:8e:14:9a:d7:9a:f8:ec:0b:2f:fd:4b:1d:07: bd:b3:5a:19:a0:53:4e:5e:24:26:06:3b:79:8f:e7: d1:a4:d0:5e:3e:ba:1e:a8:db:50:8f:4b:2b:10:a5: 09:4f:33:dc:9d:97:70:16:cf:e6:64:5f:92:04:1b: b3:f3:ae:7a:0e:c8:96:66:e5:75:5a:28:41:f3:e5: 0b:9d:b9:dc:86:30:68:67:e7:20:1a:f7:13:4e:51: 7d:18:a5:ba:de:c1:4c:8d:1f:bc:9f:f8:ac:17:41: 5a:a7:06:b9:b3:5f:2c:b0:5f:2d:ee:ae:0a:70:00: e1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D6:83:21:D4:4E:65:78:7E:65:5C:D0:D5:97:53:2D:0D:84:AE:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/21bf5113-e55b-37f7-adc9-8cd87af0160b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:05:9e:24:9b:d1:52:90:20:07:45:42:45:2a:e0:88:52:a2: 86:b6:1e:2c:fe:b0:e5:4f:0a:21:e8:e4:a0:20:45:36:74:26: 91:b0:f1:e4:ed:9e:86:fb:16:01:73:fb:b6:0c:eb:b5:c4:03: 7a:4f:a7:0c:64:f3:f3:e0:a8:b8:91:98:c4:e4:6b:1a:aa:4d: 10:e8:bf:3f:83:03:36:5b:7e:68:a2:1d:a3:0f:0a:0d:10:12: 9a:5f:a8:94:92:a5:05:fb:3f:35:83:64:4c:72:b8:01:5d:3e: 67:f6:bd:11:99:2f:d5:fc:3d:71:5d:40:a1:6a:a8:70:fe:8d: 6f:ee:c3:cf:02:ea:ff:d0:b6:38:64:99:77:77:14:b2:df:fe: 26:36:df:b7:19:c9:0e:cb:7a:08:7f:c4:1f:06:67:9b:19:7c: 94:85:e3:29:06:8b:47:6a:09:d8:b8:10:2e:64:5a:70:3e:90: 0a:c8:6e:01:78:92:58:32:9a:77:4c:5b:83:d4:a5:75:d5:75: 6b:81:8c:81:31:f2:93:82:da:76:cf:87:79:e9:b5:fa:9a:7e: 79:71:ac:75:27:44:d8:4a:b4:03:b0:1f:67:6f:f7:55:69:3b: 14:38:f9:0a:51:26:3a:54:16:dd:e0:07:ce:ef:13:e8:99:13: 3d:88:ef:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1SAG0hI8lAY2swAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk ODc0Y2NhYWMtN2RjZC00YmY2LWI3NjktZjBjNTMwNWJkMjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1hy10AAvyHoYCjceaLhVjQzpBUsGOp4/I0n C7x/7Qu3NnZYiwl4NHYffBUnPisSKZlZOR8tO6BJ/1FSxDRLGmjlQKKUQ1cdgnrv POuqNR/dg6XmUdVp4bTmMDX6U1afsqbr4U82iYVHHmFm5x99KBKZi9HMU1dVbMWt 9IZsFMGVrK9kNcINVI4Umtea+OwLL/1LHQe9s1oZoFNOXiQmBjt5j+fRpNBeProe qNtQj0srEKUJTzPcnZdwFs/mZF+SBBuz8656DsiWZuV1WihB8+ULnbnchjBoZ+cg GvcTTlF9GKW63sFMjR+8n/isF0Fapwa5s18ssF8t7q4KcADhxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLPWgyHUTmV4fmVc0NWXUy0NhK5OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvMjFiZjUxMTMtZTU1Yi0z N2Y3LWFkYzktOGNkODdhZjAxNjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQFniSb0VKQIAdFQkUq4IhSooa2Hiz+sOVPCiHo5KAgRTZ0JpGw8eTt nob7FgFz+7YM67XEA3pPpwxk8/PgqLiRmMTkaxqqTRDovz+DAzZbfmiiHaMPCg0Q EppfqJSSpQX7PzWDZExyuAFdPmf2vRGZL9X8PXFdQKFqqHD+jW/uw88C6v/Qtjhk mXd3FLLf/iY237cZyQ7Legh/xB8GZ5sZfJSF4ykGi0dqCdi4EC5kWnA+kArIbgF4 klgymndMW4PUpXXVdWuBjIEx8pOC2nbPh3nptfqafnlxrHUnRNhKtAOwH2dv91Vp OxQ4+QpRJjpUFt3gB87vE+iZEz2I75Q= -----END CERTIFICATE-----Generated at Sun Jun 15 15:07:48 2025 by rpki-client