$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/12ff66ec-0080-302a-957c-2fc06db68846.roa File: 12ff66ec-0080-302a-957c-2fc06db68846.roa (raw, json) Hash identifier: tL9AVkGnzBXyfgm9ZYkoI1MoPSU/ezoLqPMo1Tc2IGw= Subject key identifier: FC:56:E3:55:AA:60:0A:47:CC:B0:C5:BA:0C:BF:46:90:0D:96:22:29 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584F31B7CF71F2CED88FD3672F00 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/12ff66ec-0080-302a-957c-2fc06db68846.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 395793 IP address blocks: 198.1.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:cf:71:f2:ce:d8:8f:d3:67:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=13ec16ab-9629-4dea-96d2-c29cbec24d80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e3:63:e3:09:87:89:6e:63:28:03:ec:89:5d: 2b:63:72:9f:d6:9e:92:ff:41:53:92:e8:99:c8:84: 96:57:5b:97:d8:c2:a7:32:b2:bf:50:49:6a:03:80: 8a:e2:46:69:e4:74:d3:24:fc:21:43:2f:e3:1b:8f: da:b4:67:23:8b:a5:fe:65:2b:af:e5:e6:f4:4c:7d: 7d:c7:58:65:b6:a7:8f:87:46:36:8f:d5:80:e0:ed: 25:02:af:bb:72:22:d3:9a:ce:d0:d4:e7:f5:74:78: a1:70:cd:d4:ed:4e:45:18:f4:eb:a9:74:84:0d:ec: 6f:d0:26:56:f3:fc:d9:0c:46:2f:5c:d0:dc:ef:86: 45:c1:dc:b1:e6:4f:16:67:5d:0c:e6:90:f0:ef:33: 2f:fc:dd:4f:48:62:62:24:b7:d5:86:86:3c:43:31: 89:75:43:13:f8:78:56:de:a0:54:99:13:a4:6f:78: 0f:22:ed:e2:4c:f2:9e:82:de:95:01:2a:01:25:43: 65:49:95:46:4f:71:ee:06:22:99:dd:75:7c:48:1e: a5:1f:3d:dd:17:64:a0:eb:c4:b2:e2:4e:e7:53:f2: 0e:1d:59:87:26:9c:b2:83:38:c0:39:73:a2:b0:5f: 6b:ff:d8:0a:0f:ee:87:84:14:61:29:1c:0a:c6:ef: d9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:56:E3:55:AA:60:0A:47:CC:B0:C5:BA:0C:BF:46:90:0D:96:22:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/12ff66ec-0080-302a-957c-2fc06db68846.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:0b:3e:9c:f3:11:49:4c:07:f0:8d:5a:30:01:59:7f:33:b5: 31:b4:24:ed:c4:fa:25:48:b4:73:5e:1b:c0:fd:a3:ee:18:c2: fc:4c:26:c4:11:a0:a3:61:99:63:bd:2c:fe:7b:89:20:90:d5: 43:11:5a:1b:e9:3c:cf:3d:42:9e:4a:b7:6c:da:fb:2d:2f:37: 65:14:a7:91:4a:3c:ff:bf:e5:6e:f4:c5:69:e7:4a:8c:d0:3d: 26:4c:77:6e:b7:13:4a:ef:cf:1d:de:58:c6:99:cd:b2:81:9b: 19:43:0e:c7:f1:3c:f7:28:e0:d6:75:6c:2f:d4:b3:40:8b:18: 7f:ff:28:79:ed:66:21:10:d4:52:75:df:17:d4:8c:b4:d9:b7: a1:34:9c:8a:17:c9:b8:d2:3f:bc:55:93:db:5c:76:f5:a7:2a: 7b:fe:16:dc:a9:07:7c:d4:21:86:19:48:57:c2:8b:31:c7:a8: af:4e:82:95:1d:b4:14:4f:a3:f8:1b:5e:c6:64:19:e1:b2:2c: 50:0f:58:63:b6:d6:9e:f5:28:ed:6c:fb:a4:a0:37:d9:9b:0b: c9:2c:53:4e:43:71:8c:87:52:96:4e:8d:5e:38:4f:ba:55:1a: fc:a3:b3:41:fc:51:c7:4a:eb:f3:00:e8:f4:a0:2a:10:0e:fc: 50:b2:f7:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt89x8s7Yj9NnLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk MTNlYzE2YWItOTYyOS00ZGVhLTk2ZDItYzI5Y2JlYzI0ZDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkONj4wmHiW5jKAPsiV0rY3Kf1p6S/0FTkuiZ yISWV1uX2MKnMrK/UElqA4CK4kZp5HTTJPwhQy/jG4/atGcji6X+ZSuv5eb0TH19 x1hltqePh0Y2j9WA4O0lAq+7ciLTms7Q1Of1dHihcM3U7U5FGPTrqXSEDexv0CZW 8/zZDEYvXNDc74ZFwdyx5k8WZ10M5pDw7zMv/N1PSGJiJLfVhoY8QzGJdUMT+HhW 3qBUmROkb3gPIu3iTPKegt6VASoBJUNlSZVGT3HuBiKZ3XV8SB6lHz3dF2Sg68Sy 4k7nU/IOHVmHJpyygzjAOXOisF9r/9gKD+6HhBRhKRwKxu/Z1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxW41WqYApHzLDFugy/RpANliIpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvMTJmZjY2ZWMtMDA4MC0z MDJhLTk1N2MtMmZjMDZkYjY4ODQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgLPpzzEUlMB/CNWjABWX8ztTG0JO3E+iVItHNeG8D9o+4YwvxMJsQR oKNhmWO9LP57iSCQ1UMRWhvpPM89Qp5Kt2za+y0vN2UUp5FKPP+/5W70xWnnSozQ PSZMd263E0rvzx3eWMaZzbKBmxlDDsfxPPco4NZ1bC/Us0CLGH//KHntZiEQ1FJ1 3xfUjLTZt6E0nIoXybjSP7xVk9tcdvWnKnv+FtypB3zUIYYZSFfCizHHqK9OgpUd tBRPo/gbXsZkGeGyLFAPWGO21p71KO1s+6SgN9mbC8ksU05DcYyHUpZOjV44T7pV Gvyjs0H8UcdK6/MA6PSgKhAO/FCy970= -----END CERTIFICATE-----Generated at Mon Sep 21 03:36:11 2026 by rpki-client