$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3af862da-851f-39d9-9db1-d644ee402747.roa File: 3af862da-851f-39d9-9db1-d644ee402747.roa (raw, json) Hash identifier: t1yYVfLHAmyUDepWputYR4Dw+XIe8RRvxjd7a4/2j2M= Subject key identifier: 7B:E3:8D:FE:40:AA:E4:61:BA:D8:6D:04:37:FC:E4:2F:DD:9E:0F:CF Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584B2A2C5F4241AF1FCC200C8280 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3af862da-851f-39d9-9db1-d644ee402747.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 20001 IP address blocks: 198.1.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:5f:42:41:af:1f:cc:20:0c:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=70870245-430f-44e9-a1d5-6a5549bbabd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:11:80:67:bc:0a:d4:2d:54:c0:4a:bf:7e:55: 08:22:ee:41:00:48:85:c2:5d:bb:a3:c8:7a:0c:c3: aa:8c:81:dc:8e:f9:ed:92:8a:a4:88:3d:42:6c:2e: 08:ab:c3:57:1e:55:0e:d2:e1:78:05:a5:e5:60:82: f4:51:ce:f2:85:e2:2c:6d:ae:ca:ff:81:19:4c:a6: 5d:7e:a5:d9:87:66:c0:27:f5:3a:ab:9a:21:7e:1c: b9:c9:ac:79:a1:09:b6:d8:07:31:82:3b:dc:2c:8a: 49:5d:c3:90:da:be:02:86:3f:79:88:91:12:27:bf: 47:5b:26:38:ad:76:ac:05:c8:70:47:66:91:04:e7: 71:b2:89:cb:cc:78:59:cd:95:77:fe:8b:ce:93:3d: 4e:50:e1:22:d7:dc:16:49:42:39:b0:a4:a4:fb:b7: 4f:2f:de:66:4e:4e:48:37:04:fe:e1:7d:5b:da:2c: 86:3a:16:c2:11:b7:e9:13:95:5a:45:2c:c3:98:d1: 81:4a:e2:e1:87:d4:1e:f5:62:c2:fa:aa:f5:3b:99: 79:a4:1a:dc:43:c7:82:3b:69:ee:82:94:4d:9d:c4: 52:ca:d6:00:25:bb:7d:8f:d4:d8:d5:ee:88:12:c9: 70:3c:eb:ec:18:f9:81:43:48:f1:bd:5e:07:28:68: 98:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E3:8D:FE:40:AA:E4:61:BA:D8:6D:04:37:FC:E4:2F:DD:9E:0F:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3af862da-851f-39d9-9db1-d644ee402747.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:88:ec:3c:4a:77:73:f4:f5:98:98:ae:8f:bd:c8:01:3f:9d: 21:e2:96:c7:8a:a8:d2:c9:ba:18:ff:42:a5:3d:be:fb:e5:d1: d5:1c:6d:43:f4:2a:ca:7e:2a:66:d7:8d:3c:ee:cb:82:fb:36: 74:c4:60:7b:2a:16:4e:80:f5:9d:61:c8:fe:f5:46:b8:46:0e: b1:11:ef:f5:76:eb:fa:58:d9:ce:5c:b3:45:0a:a5:cd:b8:41: ee:8a:40:5c:83:bd:09:62:21:d8:9c:c8:e2:e9:9b:b4:79:21: 4c:06:31:9d:30:14:60:65:cb:5d:78:7b:3a:bf:1d:43:b6:70: 09:4b:59:64:6f:3f:f2:7d:14:7c:00:a4:0e:1c:f8:27:ab:59: 20:39:46:71:8b:95:81:17:25:99:eb:04:62:d8:ba:0d:6a:80: b9:e7:65:78:d1:e8:f6:a1:eb:94:f2:6c:50:a5:c1:c1:85:f5: 4f:b3:1c:20:64:05:c8:ad:fe:bb:de:91:0a:ab:48:e9:d9:b7: 57:20:ed:5c:de:27:54:36:7a:ef:1b:df:02:56:2b:11:0a:6d: c0:c2:a9:c3:eb:f8:6b:b4:66:b1:26:22:a8:c8:a7:35:43:5a: 8f:3d:2b:5f:9f:e9:b1:a5:9e:1c:b9:e3:45:e2:2f:29:31:1b: a9:45:96:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLF9CQa8fzCAMgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk NzA4NzAyNDUtNDMwZi00NGU5LWExZDUtNmE1NTQ5YmJhYmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphGAZ7wK1C1UwEq/flUIIu5BAEiFwl27o8h6 DMOqjIHcjvntkoqkiD1CbC4Iq8NXHlUO0uF4BaXlYIL0Uc7yheIsba7K/4EZTKZd fqXZh2bAJ/U6q5ohfhy5yax5oQm22AcxgjvcLIpJXcOQ2r4Chj95iJESJ79HWyY4 rXasBchwR2aRBOdxsonLzHhZzZV3/ovOkz1OUOEi19wWSUI5sKSk+7dPL95mTk5I NwT+4X1b2iyGOhbCEbfpE5VaRSzDmNGBSuLhh9Qe9WLC+qr1O5l5pBrcQ8eCO2nu gpRNncRSytYAJbt9j9TY1e6IEslwPOvsGPmBQ0jxvV4HKGiYkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHvjjf5AquRhuthtBDf85C/dng/PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvM2FmODYyZGEtODUxZi0z OWQ5LTlkYjEtZDY0NGVlNDAyNzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyI7DxKd3P09ZiYro+9yAE/nSHilseKqNLJuhj/QqU9vvvl0dUcbUP0 Ksp+KmbXjTzuy4L7NnTEYHsqFk6A9Z1hyP71RrhGDrER7/V26/pY2c5cs0UKpc24 Qe6KQFyDvQliIdicyOLpm7R5IUwGMZ0wFGBly114ezq/HUO2cAlLWWRvP/J9FHwA pA4c+CerWSA5RnGLlYEXJZnrBGLYug1qgLnnZXjR6Pah65TybFClwcGF9U+zHCBk Bcit/rvekQqrSOnZt1cg7VzeJ1Q2eu8b3wJWKxEKbcDCqcPr+Gu0ZrEmIqjIpzVD Wo89K1+f6bGlnhy540XiLykxG6lFlrs= -----END CERTIFICATE-----Generated at Wed Nov 5 07:22:12 2025 by rpki-client