$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/e52d3f3c-00b1-307b-a4ec-a20ef1706058.roa File: e52d3f3c-00b1-307b-a4ec-a20ef1706058.roa (raw, json) Hash identifier: LNIQ0uge3WIBEi+9fvnlPiyYWuxf2bHA0dSUS3kqYrw= Subject key identifier: D1:F3:C3:C3:AB:DE:70:37:1F:EB:02:13:64:47:48:E0:DC:59:E3:4A Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584B2E5C42671A118B02937AAB80 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/e52d3f3c-00b1-307b-a4ec-a20ef1706058.roa Signing time: Sat 13 Sep 2025 13:00:41 +0000 ROA not before: Sat 13 Sep 2025 13:00:41 +0000 ROA not after: Fri 12 Dec 2025 14:00:41 +0000 asID: 7018 IP address blocks: 198.1.212.0/24 maxlen: 24 198.1.213.0/24 maxlen: 24 198.1.214.0/24 maxlen: 24 198.1.215.0/24 maxlen: 24 198.1.220.0/24 maxlen: 24 198.1.221.0/24 maxlen: 24 198.1.222.0/24 maxlen: 24 198.1.223.0/24 maxlen: 24 198.1.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2e:5c:42:67:1a:11:8b:02:93:7a:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Sep 13 13:00:41 2025 GMT Not After : Dec 12 14:00:41 2025 GMT Subject: CN=d8cb7f7a-aeeb-4da1-829c-8a38cdb0cb0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:53:ae:2d:86:50:ce:8b:d0:e6:36:b1:81:8e: e1:28:74:f0:b6:ca:db:79:24:7a:c4:2c:6d:47:cb: 73:bf:42:2c:96:c0:b1:94:1f:46:0b:10:18:e2:de: 9f:c2:f9:67:84:5a:0b:29:51:db:08:16:7c:5d:c3: 5a:a4:8b:28:9f:e1:66:c7:c6:a7:98:04:5b:26:21: ad:8d:d9:0d:cf:4d:ce:0c:fb:ec:68:11:9b:4d:8b: ef:77:32:6c:8a:00:a1:aa:ef:53:fe:b7:c7:33:4a: 7b:ea:ff:17:5a:f3:66:33:b8:bf:03:f2:b4:57:55: ca:f2:25:59:2f:33:e7:53:82:61:dd:42:f5:14:16: 34:6f:0b:0d:fb:d0:7b:07:0e:b8:55:a4:08:b0:bb: b2:b7:89:3f:7f:c7:08:0f:ee:ce:bd:ec:69:f2:18: 65:b2:4f:16:2e:55:0c:28:7c:9f:e0:48:58:50:b1: 39:50:8c:f2:36:fd:5b:fc:9d:90:4c:95:ff:05:18: 07:43:cc:a0:11:74:ac:e0:90:31:7f:35:68:4b:e3: 09:9a:d9:eb:2e:3b:35:bd:d7:db:a0:7c:9e:26:56: ba:bc:ea:90:c0:ad:ca:20:dd:f0:a4:36:08:78:da: 29:81:51:65:e9:1f:56:7a:d0:3d:b3:60:b3:e5:d5: 85:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F3:C3:C3:AB:DE:70:37:1F:EB:02:13:64:47:48:E0:DC:59:E3:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/e52d3f3c-00b1-307b-a4ec-a20ef1706058.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.212.0/22 198.1.220.0/22 198.1.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:ee:d0:17:cf:85:20:a9:58:04:09:f4:a0:51:9e:a8:65:ed: ed:4c:3b:e6:b3:3f:c5:70:e5:01:e1:14:23:9c:7c:ac:b3:34: 2a:cc:73:c0:79:a7:99:8b:7d:2c:83:e1:f6:87:22:ce:e1:04: cf:f7:58:ba:ad:bc:40:8d:d3:d5:97:29:40:18:9b:2f:39:0f: 7e:7b:32:1d:9e:26:f7:b1:bf:77:d8:e9:c5:5d:ec:f6:42:29: 12:24:de:8b:6a:85:05:46:91:4d:ef:6e:7f:24:0f:f4:97:ce: eb:34:ad:80:b0:4f:6a:5b:bf:2e:7c:b5:91:b3:84:9a:7b:25: c4:6a:1d:ac:af:6c:59:60:be:bc:48:1a:e2:8a:47:e0:d4:2c: 28:7a:a2:5d:6e:06:2e:09:80:a7:bc:14:dd:27:e3:1a:a4:dc: 21:18:47:9d:1b:ee:eb:ea:31:7d:76:a3:9b:03:df:a7:06:db: 2e:87:6c:84:17:2b:27:96:66:85:d6:50:1c:d7:5e:6a:0b:8a: 15:b2:53:ee:94:4b:f6:8b:74:c7:1a:97:c5:a3:98:a1:25:2b: 89:44:4e:c6:0b:f6:d3:69:01:e8:26:7c:1a:15:d1:fb:ab:6d: 93:cc:b0:b4:f6:69:52:b7:08:0f:3b:fa:65:f6:8f:99:65:76: 3a:60:5d:d0 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEsuXEJnGhGLApN6q4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDkxMzEzMDA0MVoXDTI1MTIxMjE0MDA0MVowLzEtMCsGA1UEAxMk ZDhjYjdmN2EtYWVlYi00ZGExLTgyOWMtOGEzOGNkYjBjYjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVOuLYZQzovQ5jaxgY7hKHTwtsrbeSR6xCxt R8tzv0IslsCxlB9GCxAY4t6fwvlnhFoLKVHbCBZ8XcNapIson+Fmx8anmARbJiGt jdkNz03ODPvsaBGbTYvvdzJsigChqu9T/rfHM0p76v8XWvNmM7i/A/K0V1XK8iVZ LzPnU4Jh3UL1FBY0bwsN+9B7Bw64VaQIsLuyt4k/f8cID+7Ovexp8hhlsk8WLlUM KHyf4EhYULE5UIzyNv1b/J2QTJX/BRgHQ8ygEXSs4JAxfzVoS+MJmtnrLjs1vdfb oHyeJla6vOqQwK3KIN3wpDYIeNopgVFl6R9WetA9s2Cz5dWFBQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFNHzw8Or3nA3H+sCE2RHSODcWeNKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvZTUyZDNmM2MtMDBiMS0z MDdiLWE0ZWMtYTIwZWYxNzA2MDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCxgHUAwQC xgHcAwQAxgHoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBACnu0BfPhSCpWAQJ9KBRnqhl7e1MO+azP8Vw5QHh FCOcfKyzNCrMc8B5p5mLfSyD4faHIs7hBM/3WLqtvECN09WXKUAYmy85D357Mh2e Jvexv3fY6cVd7PZCKRIk3otqhQVGkU3vbn8kD/SXzus0rYCwT2pbvy58tZGzhJp7 JcRqHayvbFlgvrxIGuKKR+DULCh6ol1uBi4JgKe8FN0n4xqk3CEYR50b7uvqMX12 o5sD36cG2y6HbIQXKyeWZoXWUBzXXmoLihWyU+6US/aLdMcal8WjmKElK4lETsYL 9tNpAegmfBoV0furbZPMsLT2aVK3CA87+mX2j5lldjpgXdA= -----END CERTIFICATE-----Generated at Tue Nov 4 23:06:47 2025 by rpki-client