$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/21bf5113-e55b-37f7-adc9-8cd87af0160b.roa File: 21bf5113-e55b-37f7-adc9-8cd87af0160b.roa (raw, json) Hash identifier: xnjfL2/YDRi8U6Pd7mTk2PZ1MH85oCJ0TrP6Yi9inBE= Subject key identifier: 51:94:33:50:80:B8:89:08:12:EF:E9:04:29:61:15:E7:25:F4:51:0D Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584F0D6CE4ABFF894BFB28B34880 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/21bf5113-e55b-37f7-adc9-8cd87af0160b.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 197537 IP address blocks: 198.1.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:e4:ab:ff:89:4b:fb:28:b3:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=370a3813-35ad-43c1-80eb-7a148dc71213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8e:7e:6b:04:79:49:80:b4:14:2a:7d:c9:8b: 44:ba:30:0b:75:e1:2f:89:a5:b9:82:cd:49:7c:eb: c9:54:54:7a:f0:b4:98:1b:12:6b:c2:43:cb:4d:34: f8:6a:16:13:3c:2e:f3:dc:1f:b7:60:97:01:e3:4a: 94:70:c7:74:fc:f4:1f:be:ce:7a:87:42:5c:d6:83: fc:55:e5:51:90:66:08:a5:fd:98:95:8c:fc:58:be: fe:16:e8:0f:f9:a6:06:45:b9:b7:21:45:5a:1d:46: 0d:18:7c:70:0e:9b:e8:8c:64:21:85:67:64:f1:9e: a9:15:1b:5f:db:d5:5f:80:4b:ef:14:a1:1f:8d:42: 20:85:0d:08:7e:19:31:92:12:60:cd:d0:f2:db:e4: 03:06:83:61:1f:d4:2b:f1:e8:16:df:e0:80:a6:b1: 28:c3:12:2f:86:f9:0e:89:1f:45:be:fa:1b:d5:f8: df:6d:db:f3:56:b7:1b:a2:fc:0b:c8:f1:54:af:03: fe:fa:eb:f3:95:d1:94:ca:e2:b8:a4:9a:ec:a5:5c: 17:1e:fd:93:f3:d4:d4:4e:92:af:12:bc:ec:2e:34: 4c:c6:bb:0d:41:46:2f:9f:56:83:6b:d5:ec:ef:f7: 87:95:03:d3:d8:ab:77:6e:fe:60:45:09:0d:95:25: 91:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:94:33:50:80:B8:89:08:12:EF:E9:04:29:61:15:E7:25:F4:51:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/21bf5113-e55b-37f7-adc9-8cd87af0160b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:19:ef:19:af:a9:c5:b4:af:a6:29:61:95:a4:71:b4:9d:c7: ad:b3:98:92:26:79:d4:3f:3f:a4:94:62:84:cf:0a:11:34:a3: 4c:61:10:0c:be:58:2f:be:c7:36:45:c1:29:e0:70:f4:0f:58: 30:92:61:3d:11:bc:03:42:d1:ab:49:37:8c:af:6f:1f:92:1e: 83:fd:3c:a3:6f:bd:0f:27:99:09:95:51:2f:ec:0a:9d:8f:eb: 5f:8b:c8:44:be:c7:e6:0e:70:13:7e:96:50:aa:8b:3b:f3:75: 06:3a:13:71:d3:31:fd:f1:b1:1d:ff:b7:fa:94:3f:c0:ef:81: 1c:7a:0a:dc:ea:7e:04:37:02:25:e6:67:3f:f2:63:40:45:ca: dc:a2:48:74:9a:d5:88:21:3d:4a:64:50:7d:6b:02:d2:ca:5b: d7:92:be:19:eb:68:77:de:1b:6b:12:33:72:45:16:20:93:ad: a9:c1:a4:e3:76:b5:f2:3a:22:ec:70:a0:3f:03:8d:5a:80:12: 4b:49:4f:8d:bb:8e:66:9e:c7:94:05:29:66:12:52:4c:fe:e5: 08:8c:3b:b5:ac:e2:22:20:f0:ce:7d:31:42:85:93:a0:30:22: 5c:d7:76:0a:37:1d:08:e7:03:c0:c0:b5:b0:e5:46:53:27:23: 28:3e:76:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbOSr/4lL+yizSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk MzcwYTM4MTMtMzVhZC00M2MxLTgwZWItN2ExNDhkYzcxMjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAno5+awR5SYC0FCp9yYtEujALdeEviaW5gs1J fOvJVFR68LSYGxJrwkPLTTT4ahYTPC7z3B+3YJcB40qUcMd0/PQfvs56h0Jc1oP8 VeVRkGYIpf2YlYz8WL7+FugP+aYGRbm3IUVaHUYNGHxwDpvojGQhhWdk8Z6pFRtf 29VfgEvvFKEfjUIghQ0IfhkxkhJgzdDy2+QDBoNhH9Qr8egW3+CAprEowxIvhvkO iR9Fvvob1fjfbdvzVrcbovwLyPFUrwP++uvzldGUyuK4pJrspVwXHv2T89TUTpKv ErzsLjRMxrsNQUYvn1aDa9Xs7/eHlQPT2Kt3bv5gRQkNlSWRXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGUM1CAuIkIEu/pBClhFecl9FENMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvMjFiZjUxMTMtZTU1Yi0z N2Y3LWFkYzktOGNkODdhZjAxNjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoZ7xmvqcW0r6YpYZWkcbSdx62zmJImedQ/P6SUYoTPChE0o0xhEAy+ WC++xzZFwSngcPQPWDCSYT0RvANC0atJN4yvbx+SHoP9PKNvvQ8nmQmVUS/sCp2P 61+LyES+x+YOcBN+llCqizvzdQY6E3HTMf3xsR3/t/qUP8DvgRx6CtzqfgQ3AiXm Zz/yY0BFytyiSHSa1YghPUpkUH1rAtLKW9eSvhnraHfeG2sSM3JFFiCTranBpON2 tfI6IuxwoD8DjVqAEktJT427jmaex5QFKWYSUkz+5QiMO7Ws4iIg8M59MUKFk6Aw IlzXdgo3HQjnA8DAtbDlRlMnIyg+dlI= -----END CERTIFICATE-----Generated at Mon Sep 21 04:54:25 2026 by rpki-client