$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/21bf5113-e55b-37f7-adc9-8cd87af0160b.roa File: 21bf5113-e55b-37f7-adc9-8cd87af0160b.roa (raw, json) Hash identifier: i9PEzCXiC1mLEwYUpgadxHyh3zrWfPDdgC5djf3Jbmc= Subject key identifier: 80:0E:EB:CA:B8:D0:9D:E4:86:A2:24:FE:BA:68:CF:1E:62:6B:64:EA Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584CAA2713BA751AEA9CA3BF4A40 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/21bf5113-e55b-37f7-adc9-8cd87af0160b.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 197537 IP address blocks: 198.1.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:13:ba:75:1a:ea:9c:a3:bf:4a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=6406de52-069d-4bac-87d5-c7f51c9fa2d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7d:9e:44:ac:47:53:c1:41:2b:1d:73:5f:86: 70:e1:a4:37:50:99:c7:20:93:19:95:df:1f:e8:e8: 1d:4f:cf:df:8f:54:21:b7:c5:1d:4a:64:af:a9:bb: 6f:bf:d9:7a:b0:85:80:cc:70:80:d6:5b:13:e6:9e: 31:16:64:e4:9c:5d:1d:ad:93:ed:59:ea:1e:7f:b1: 2d:6a:a7:84:05:83:b4:60:ea:5c:3f:a2:73:61:7a: 25:3b:16:67:10:e3:86:6b:79:2b:fb:a1:49:d7:0b: 06:ef:9e:50:11:61:f3:85:7b:36:77:23:8f:7c:fa: e6:89:b9:91:9c:2f:78:5d:16:1f:81:b5:44:16:4b: 50:b0:92:a5:23:7c:a2:8c:b8:48:2a:2a:7e:03:9c: 33:3a:ce:3d:1c:ef:f1:53:df:49:cf:48:e4:b7:13: 08:51:f6:7a:74:b5:5b:d4:84:ad:1d:85:af:e9:0e: 95:3b:ff:fe:7c:fd:58:f6:c7:b3:fe:13:a0:fc:c2: 20:a7:7a:be:cd:85:4f:3f:ca:02:43:76:39:e1:6d: 49:b7:68:be:0e:3e:bb:af:6b:71:90:42:60:68:bc: 53:17:e5:2b:64:66:5a:68:f4:94:7c:54:ce:d9:21: 44:2e:18:85:6e:23:d8:84:40:ae:7d:93:4f:33:d5: c8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:0E:EB:CA:B8:D0:9D:E4:86:A2:24:FE:BA:68:CF:1E:62:6B:64:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/21bf5113-e55b-37f7-adc9-8cd87af0160b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:4b:43:8e:0c:5e:d6:16:f1:72:99:17:67:04:bd:f7:c3:c3: 78:99:12:80:14:ea:5c:fa:01:dc:7c:ad:f0:8c:ef:83:dc:9e: 5c:8d:ac:a5:bf:26:c1:96:13:b8:f9:46:58:1f:0c:74:2f:52: 67:8a:43:a6:0a:8e:1f:4e:c1:ee:9f:ce:71:aa:34:a2:21:fa: 45:32:b1:ba:f5:98:8e:65:1d:a0:fb:95:a7:29:3d:a6:c0:0b: 16:e9:c4:b4:26:39:b6:92:35:b6:53:93:71:52:e9:3f:43:b4: 43:3b:d6:ce:5c:20:b1:c0:31:8f:d5:f8:0c:8c:1c:01:50:ea: 16:ac:3b:df:b7:5d:18:7d:e5:bb:1d:1c:71:86:32:d5:5a:2d: 1a:bf:3d:66:9a:8b:9d:40:80:10:5a:b0:1e:1e:ac:f0:c1:6f: 39:73:b7:51:2e:14:74:4b:7d:ae:a4:74:2e:16:a9:76:9b:9c: 39:9c:60:03:c4:ee:7a:87:0a:88:20:cf:a6:05:34:a6:83:c6: b9:cc:00:ba:e3:a3:78:82:bf:c6:60:e2:d3:4e:05:cd:dd:07: 81:28:e5:9b:21:58:3d:06:84:03:92:29:10:03:ae:6d:c7:33: 89:f8:6c:b6:fc:64:f3:b3:a0:0e:eb:50:ce:74:04:e8:b7:ec: ee:9f:87:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJxO6dRrqnKO/SkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk NjQwNmRlNTItMDY5ZC00YmFjLTg3ZDUtYzdmNTFjOWZhMmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH2eRKxHU8FBKx1zX4Zw4aQ3UJnHIJMZld8f 6OgdT8/fj1Qht8UdSmSvqbtvv9l6sIWAzHCA1lsT5p4xFmTknF0drZPtWeoef7Et aqeEBYO0YOpcP6JzYXolOxZnEOOGa3kr+6FJ1wsG755QEWHzhXs2dyOPfPrmibmR nC94XRYfgbVEFktQsJKlI3yijLhIKip+A5wzOs49HO/xU99Jz0jktxMIUfZ6dLVb 1IStHYWv6Q6VO//+fP1Y9sez/hOg/MIgp3q+zYVPP8oCQ3Y54W1Jt2i+Dj67r2tx kEJgaLxTF+UrZGZaaPSUfFTO2SFELhiFbiPYhECufZNPM9XI7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIAO68q40J3khqIk/rpozx5ia2TqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvMjFiZjUxMTMtZTU1Yi0z N2Y3LWFkYzktOGNkODdhZjAxNjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJLQ44MXtYW8XKZF2cEvffDw3iZEoAU6lz6Adx8rfCM74PcnlyNrKW/ JsGWE7j5RlgfDHQvUmeKQ6YKjh9Owe6fznGqNKIh+kUysbr1mI5lHaD7lacpPabA CxbpxLQmObaSNbZTk3FS6T9DtEM71s5cILHAMY/V+AyMHAFQ6hasO9+3XRh95bsd HHGGMtVaLRq/PWaai51AgBBasB4erPDBbzlzt1EuFHRLfa6kdC4WqXabnDmcYAPE 7nqHCoggz6YFNKaDxrnMALrjo3iCv8Zg4tNOBc3dB4Eo5ZshWD0GhAOSKRADrm3H M4n4bLb8ZPOzoA7rUM50BOi37O6fh6k= -----END CERTIFICATE-----Generated at Mon Mar 2 04:55:45 2026 by rpki-client