$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/c9e87812-20e4-397a-abc7-4419fbaaa308.roa File: c9e87812-20e4-397a-abc7-4419fbaaa308.roa (raw, json) Hash identifier: 1REUARE9PwW8nVxt2Izz97G3XdnjWZht7Jobojo49mA= Subject key identifier: BE:93:F0:B6:4A:95:DB:84:40:8B:4A:4F:B2:E3:CE:00:19:EC:66:20 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584B47769DA103747B4873D8FE80 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/c9e87812-20e4-397a-abc7-4419fbaaa308.roa Signing time: Mon 22 Sep 2025 12:49:05 +0000 ROA not before: Mon 22 Sep 2025 12:49:05 +0000 ROA not after: Sun 21 Dec 2025 13:49:05 +0000 asID: 25198 IP address blocks: 198.1.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:76:9d:a1:03:74:7b:48:73:d8:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Sep 22 12:49:05 2025 GMT Not After : Dec 21 13:49:05 2025 GMT Subject: CN=97c0ece1-de7d-42dd-a969-a3536b9d9c0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d9:26:78:c3:df:b1:07:ce:40:9d:fb:e8:a0: 21:8d:3f:6b:76:a5:be:57:80:21:d2:20:39:cf:b1: e0:34:b8:2f:18:27:99:ed:6a:32:e7:ec:af:e9:12: fe:77:86:68:4d:29:08:2c:d7:30:10:9c:39:33:f0: 26:d5:cf:29:fc:73:09:18:a5:5b:08:fe:8e:d1:54: ab:bb:20:e0:d7:e9:ca:dc:6b:87:14:be:a0:62:11: 66:68:1c:6d:c6:c4:e9:81:d3:91:4d:b1:12:a3:13: a3:99:85:ad:0f:7f:a5:58:1a:c2:c0:e2:24:c6:c9: 58:4c:6d:f3:d4:4e:da:bd:24:0f:74:35:c7:5b:bd: 12:0a:d8:c5:8a:2a:82:49:7c:d8:b2:7d:fb:a8:a6: 95:cc:d7:c8:a1:72:5e:09:60:54:56:c0:91:77:ba: c0:3c:64:ad:f8:70:a7:59:e8:79:e0:53:60:47:72: 34:df:b3:22:4f:5d:bf:36:52:c7:83:cc:ce:0a:cd: a3:46:a4:56:90:60:d9:5f:a6:64:0d:2d:20:fc:81: 73:ef:9a:60:61:31:be:57:be:a8:7a:ff:22:ed:da: 86:7e:2a:a0:e8:bc:8b:83:81:76:c5:6d:12:8e:61: 5d:02:63:8b:13:e2:02:49:ff:96:78:a7:3c:3b:9e: 2b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:93:F0:B6:4A:95:DB:84:40:8B:4A:4F:B2:E3:CE:00:19:EC:66:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/c9e87812-20e4-397a-abc7-4419fbaaa308.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:63:d5:55:de:ee:94:72:95:55:02:78:05:01:d6:b9:a2:70: 53:eb:2e:10:fd:65:0a:81:5b:76:5d:32:9b:9b:ad:a0:bd:f0: 1b:ea:50:b3:95:90:84:c5:b2:de:c0:b8:93:5c:6e:94:4c:d8: 4e:5a:f9:4e:b1:66:ab:33:6f:6f:ae:54:a8:36:e2:72:92:94: f9:8e:7d:be:91:d9:48:67:42:5c:31:29:19:be:82:9b:dc:ba: f5:c2:02:31:29:ef:f9:9f:94:b7:73:0a:ab:7b:36:ee:fa:d1: ee:ef:83:63:55:92:47:19:49:c3:f1:96:63:4b:15:71:01:8a: 08:79:4b:ec:4a:20:b2:4b:ed:52:ac:9c:13:e5:30:d4:e4:92: 34:a2:35:4e:9f:d8:77:6f:05:cf:20:7d:0b:75:26:70:b5:e8: 0c:bb:6f:22:c0:0c:8c:ec:fb:49:f5:01:8c:17:34:ba:c3:d2: 19:1d:83:43:ff:8e:81:78:56:fc:e6:ff:c9:63:ed:b8:56:31: 23:43:05:a2:78:4f:95:e0:c1:cc:e7:36:a9:4b:96:66:b6:8e: 37:bc:f0:05:42:27:aa:ac:af:75:f5:0f:2b:0a:2f:6d:b5:27: 11:c6:b8:ed:41:29:14:35:26:be:18:56:2c:dc:97:a2:95:26: 57:51:ca:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHdp2hA3R7SHPY/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDkyMjEyNDkwNVoXDTI1MTIyMTEzNDkwNVowLzEtMCsGA1UEAxMk OTdjMGVjZTEtZGU3ZC00MmRkLWE5NjktYTM1MzZiOWQ5YzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdkmeMPfsQfOQJ376KAhjT9rdqW+V4Ah0iA5 z7HgNLgvGCeZ7Woy5+yv6RL+d4ZoTSkILNcwEJw5M/Am1c8p/HMJGKVbCP6O0VSr uyDg1+nK3GuHFL6gYhFmaBxtxsTpgdORTbESoxOjmYWtD3+lWBrCwOIkxslYTG3z 1E7avSQPdDXHW70SCtjFiiqCSXzYsn37qKaVzNfIoXJeCWBUVsCRd7rAPGSt+HCn Weh54FNgR3I037MiT12/NlLHg8zOCs2jRqRWkGDZX6ZkDS0g/IFz75pgYTG+V76o ev8i7dqGfiqg6LyLg4F2xW0SjmFdAmOLE+ICSf+WeKc8O54rxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6T8LZKlduEQItKT7LjzgAZ7GYgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvYzllODc4MTItMjBlNC0z OTdhLWFiYzctNDQxOWZiYWFhMzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdj1VXe7pRylVUCeAUB1rmicFPrLhD9ZQqBW3ZdMpubraC98BvqULOV kITFst7AuJNcbpRM2E5a+U6xZqszb2+uVKg24nKSlPmOfb6R2UhnQlwxKRm+gpvc uvXCAjEp7/mflLdzCqt7Nu760e7vg2NVkkcZScPxlmNLFXEBigh5S+xKILJL7VKs nBPlMNTkkjSiNU6f2HdvBc8gfQt1JnC16Ay7byLADIzs+0n1AYwXNLrD0hkdg0P/ joF4Vvzm/8lj7bhWMSNDBaJ4T5XgwcznNqlLlma2jje88AVCJ6qsr3X1DysKL221 JxHGuO1BKRQ1Jr4YVizcl6KVJldRyjs= -----END CERTIFICATE-----Generated at Tue Nov 4 21:03:11 2025 by rpki-client