$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/29331063-b6de-3190-821c-97efc0da0d1d.roa File: 29331063-b6de-3190-821c-97efc0da0d1d.roa (raw, json) Hash identifier: YN4e9poe/zsDzoq/fbRM8tXJf6aoGaKcoKso8Ifj/5A= Subject key identifier: 3A:4A:3D:3E:1E:0C:85:7F:41:12:74:54:0B:93:CA:80:3D:1C:88:63 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584F3CE280E44B246B15229DC800 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/29331063-b6de-3190-821c-97efc0da0d1d.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 22516 IP address blocks: 198.1.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:80:e4:4b:24:6b:15:22:9d:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=92ec9e57-ae2b-4be6-ba6d-03d57e688e07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:dc:81:22:e0:69:1d:83:7e:0e:43:18:ab:ac: d5:ef:d0:53:32:27:eb:69:de:a4:d2:a9:6b:ab:7d: 1c:e1:af:ce:05:bc:8c:01:d1:b5:6e:e2:76:b5:7c: db:d4:9a:09:d6:6f:43:f7:1d:0e:fc:c7:a7:8c:a9: 49:bb:63:bf:8b:f0:d5:6f:3a:8c:36:d9:6d:fb:c7: f5:9a:36:2a:64:56:aa:fe:92:38:dd:91:cc:a3:b3: af:45:5f:2f:2b:e0:52:c2:2a:0e:f3:cc:00:36:00: a9:25:b5:38:c2:11:a5:1d:18:c9:dc:6f:33:4a:c7: c3:b4:c7:da:0e:05:b4:77:03:f7:a8:a7:d5:e6:c6: 7c:f5:55:ce:a7:27:f3:40:ad:14:fa:66:ca:09:0f: 27:7f:95:05:fa:d0:2c:59:21:e7:41:60:54:46:d7: 3b:aa:34:47:1a:4d:28:2b:d0:82:f3:f1:08:5b:9b: 1b:2b:54:d4:c3:bf:f7:f8:5d:16:15:57:48:52:1b: 5c:c4:39:19:8d:fb:2a:60:77:ed:e3:e4:7d:3b:2b: ff:cb:49:61:28:70:0e:ff:c1:7d:a7:3d:f2:a4:46: bd:93:02:c6:db:ec:b7:8f:99:7a:b1:ff:67:8a:6d: 42:8c:95:97:5a:84:16:ba:83:82:7c:d2:9e:e9:e9: e5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:4A:3D:3E:1E:0C:85:7F:41:12:74:54:0B:93:CA:80:3D:1C:88:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/29331063-b6de-3190-821c-97efc0da0d1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:dd:e6:56:54:11:e1:5e:39:3a:93:d5:83:d5:20:38:dd:f2: 6d:d5:d1:79:a3:d6:6c:a6:3d:82:ac:16:0d:90:e0:66:13:2a: 77:d0:e9:24:2c:86:2e:f8:27:26:88:46:4b:81:88:4c:ab:c6: e7:57:44:5a:80:9a:1b:5d:d1:3d:be:23:5e:5a:d2:25:68:45: 66:4f:96:6c:30:6b:6c:6f:14:4d:51:50:4e:44:ce:2b:95:28: 62:df:9c:01:ab:05:1f:e8:2e:6e:f2:cc:5a:df:e0:03:22:20: 2b:62:60:c3:1e:27:4f:52:42:e7:34:e4:84:b7:87:7a:cc:d9: 37:46:bc:6b:6f:c1:f9:ab:bd:90:d8:d7:66:95:ae:6d:0e:e0: bf:15:56:69:35:54:17:7f:99:dc:69:0d:6f:57:4b:e2:fb:4a: 18:40:df:ac:75:9e:03:e5:f1:88:30:aa:ca:18:95:f8:dc:7d: d7:5b:48:eb:9d:79:94:70:f1:30:e9:22:95:6f:84:11:7a:aa: a0:4e:78:02:8e:16:66:7a:b4:f5:50:8d:e4:c2:af:bd:7d:40: d1:2e:20:8d:41:23:f5:9d:90:0c:89:14:e6:67:b2:cd:de:7b: f7:4f:f1:5d:71:4a:76:59:40:a1:12:e2:8a:5f:f9:6c:08:ca: a9:e7:bb:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884oDkSyRrFSKdyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk OTJlYzllNTctYWUyYi00YmU2LWJhNmQtMDNkNTdlNjg4ZTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9yBIuBpHYN+DkMYq6zV79BTMifrad6k0qlr q30c4a/OBbyMAdG1buJ2tXzb1JoJ1m9D9x0O/MenjKlJu2O/i/DVbzqMNtlt+8f1 mjYqZFaq/pI43ZHMo7OvRV8vK+BSwioO88wANgCpJbU4whGlHRjJ3G8zSsfDtMfa DgW0dwP3qKfV5sZ89VXOpyfzQK0U+mbKCQ8nf5UF+tAsWSHnQWBURtc7qjRHGk0o K9CC8/EIW5sbK1TUw7/3+F0WFVdIUhtcxDkZjfsqYHft4+R9Oyv/y0lhKHAO/8F9 pz3ypEa9kwLG2+y3j5l6sf9nim1CjJWXWoQWuoOCfNKe6enltQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpKPT4eDIV/QRJ0VAuTyoA9HIhjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvMjkzMzEwNjMtYjZkZS0z MTkwLTgyMWMtOTdlZmMwZGEwZDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvd5lZUEeFeOTqT1YPVIDjd8m3V0Xmj1mymPYKsFg2Q4GYTKnfQ6SQs hi74JyaIRkuBiEyrxudXRFqAmhtd0T2+I15a0iVoRWZPlmwwa2xvFE1RUE5EziuV KGLfnAGrBR/oLm7yzFrf4AMiICtiYMMeJ09SQuc05IS3h3rM2TdGvGtvwfmrvZDY 12aVrm0O4L8VVmk1VBd/mdxpDW9XS+L7ShhA36x1ngPl8YgwqsoYlfjcfddbSOud eZRw8TDpIpVvhBF6qqBOeAKOFmZ6tPVQjeTCr719QNEuII1BI/WdkAyJFOZnss3e e/dP8V1xSnZZQKES4opf+WwIyqnnu4g= -----END CERTIFICATE-----Generated at Tue Sep 22 13:08:34 2026 by rpki-client