$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/30bd8200-7093-34f7-ab03-412155ef3f9d.roa File: 30bd8200-7093-34f7-ab03-412155ef3f9d.roa (raw, json) Hash identifier: cpRyoGZB4BnOMpom1n+9qUhHNjNTT+l3u5YYqOrSTAM= Subject key identifier: 3A:F2:43:42:E2:3D:13:C2:9D:52:F5:3A:A7:05:9D:CB:69:9E:0A:83 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584BB5C3DD4E0E067742587DD340 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/30bd8200-7093-34f7-ab03-412155ef3f9d.roa Signing time: Sat 01 Nov 2025 01:03:39 +0000 ROA not before: Sat 01 Nov 2025 01:03:39 +0000 ROA not after: Fri 30 Jan 2026 02:03:39 +0000 asID: 834 IP address blocks: 198.1.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c3:dd:4e:0e:06:77:42:58:7d:d3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Nov 1 01:03:39 2025 GMT Not After : Jan 30 02:03:39 2026 GMT Subject: CN=ee12e4a2-99ea-4b63-891e-678b575ec92d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:81:6c:0b:3b:b0:a1:88:4f:bd:34:f6:03:b8: 8a:a0:69:09:92:1e:7a:24:45:42:3d:59:08:c4:11: ac:f7:10:01:ee:78:8e:17:65:b3:4c:9b:a2:9e:8b: 54:fc:df:c0:b0:dc:82:e1:a3:19:b2:29:66:aa:25: 99:0f:1b:3e:b5:81:4f:85:fd:24:1a:18:43:08:dc: 62:8e:ab:61:53:c0:c7:97:d1:b0:8a:db:47:ce:4d: 76:14:e6:eb:20:14:e9:44:65:36:f5:d1:2c:d6:72: e5:33:85:09:6d:e8:63:41:dd:6e:d9:0f:61:e5:40: d1:f4:ea:61:13:43:9b:31:e2:68:34:b3:37:f0:70: 0d:d9:65:72:4b:29:34:f1:99:3e:f7:bf:0c:a4:0b: bf:ea:d2:3d:68:b9:68:ab:cd:3f:91:bd:d2:04:24: eb:ae:0d:44:82:08:b4:97:13:d0:84:6d:92:54:77: 7e:a3:fc:32:52:c0:21:7a:ba:9f:8b:1d:79:b6:63: da:f7:4d:60:03:37:4b:a0:4f:ab:4e:b6:8f:34:8d: fc:81:48:1a:37:aa:cf:49:72:04:16:b3:a6:ae:8d: f1:1b:0a:05:86:e3:b3:fb:56:57:2a:75:e5:a4:ec: 88:73:63:65:92:b7:51:77:db:56:85:ef:e5:ad:ee: 80:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F2:43:42:E2:3D:13:C2:9D:52:F5:3A:A7:05:9D:CB:69:9E:0A:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/30bd8200-7093-34f7-ab03-412155ef3f9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:a8:79:54:48:79:81:51:36:d5:42:bb:ab:a1:76:f5:51:da: 78:76:d4:2a:2c:34:8f:ce:8b:ce:b9:68:16:db:1f:a9:c4:73: 2f:66:61:0c:50:b1:41:47:df:f9:9f:da:2b:bf:41:00:7f:1e: fe:1e:58:65:78:b1:7e:66:90:5b:dd:15:36:75:f1:68:d4:96: 98:86:7d:ae:01:63:7b:9a:27:b9:9f:35:77:fa:c4:45:ac:9f: 1f:1a:ba:a7:17:67:b6:2c:48:f4:5b:0f:ee:97:09:d4:02:89: be:75:84:8e:f7:1a:87:19:63:59:9b:7f:d1:ab:37:98:12:ff: 0c:a3:07:a7:15:e9:8b:c1:88:f1:e0:47:e4:8b:0e:c2:00:ce: f6:3d:af:72:c5:da:d3:05:f3:1f:3d:8d:be:59:b6:b2:65:a4: 12:b4:b1:84:0a:71:24:53:26:55:11:60:bc:5b:2c:f4:78:0f: 79:1b:e4:ad:97:cd:f6:4e:76:9a:64:cf:05:6f:eb:8b:bb:09: 06:4a:b8:a2:d6:25:9e:b6:7f:57:1e:f7:bd:f8:ce:f3:72:cb: 40:af:19:96:19:2e:bf:64:d0:32:5b:86:58:91:4f:96:9d:88: d7:20:b2:da:56:46:84:3c:1e:a9:86:d7:de:f7:77:98:9d:33: 74:78:ab:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1w91ODgZ3Qlh900AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MTEwMTAxMDMzOVoXDTI2MDEzMDAyMDMzOVowLzEtMCsGA1UEAxMk ZWUxMmU0YTItOTllYS00YjYzLTg5MWUtNjc4YjU3NWVjOTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooFsCzuwoYhPvTT2A7iKoGkJkh56JEVCPVkI xBGs9xAB7niOF2WzTJuinotU/N/AsNyC4aMZsilmqiWZDxs+tYFPhf0kGhhDCNxi jqthU8DHl9GwittHzk12FObrIBTpRGU29dEs1nLlM4UJbehjQd1u2Q9h5UDR9Oph E0ObMeJoNLM38HAN2WVySyk08Zk+978MpAu/6tI9aLloq80/kb3SBCTrrg1Eggi0 lxPQhG2SVHd+o/wyUsAherqfix15tmPa901gAzdLoE+rTraPNI38gUgaN6rPSXIE FrOmro3xGwoFhuOz+1ZXKnXlpOyIc2NlkrdRd9tWhe/lre6AIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDryQ0LiPRPCnVL1OqcFnctpngqDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvMzBiZDgyMDAtNzA5My0z NGY3LWFiMDMtNDEyMTU1ZWYzZjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeoeVRIeYFRNtVCu6uhdvVR2nh21CosNI/Oi865aBbbH6nEcy9mYQxQ sUFH3/mf2iu/QQB/Hv4eWGV4sX5mkFvdFTZ18WjUlpiGfa4BY3uaJ7mfNXf6xEWs nx8auqcXZ7YsSPRbD+6XCdQCib51hI73GocZY1mbf9GrN5gS/wyjB6cV6YvBiPHg R+SLDsIAzvY9r3LF2tMF8x89jb5ZtrJlpBK0sYQKcSRTJlURYLxbLPR4D3kb5K2X zfZOdppkzwVv64u7CQZKuKLWJZ62f1ce9734zvNyy0CvGZYZLr9k0DJbhliRT5ad iNcgstpWRoQ8HqmG1973d5idM3R4qyc= -----END CERTIFICATE-----Generated at Tue Nov 4 21:03:04 2025 by rpki-client