$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/4214ddca-6f1d-39af-9ef0-00ba7d76b3a2.roa File: 4214ddca-6f1d-39af-9ef0-00ba7d76b3a2.roa (raw, json) Hash identifier: zpqFz7KlnbzYDdB+LlKVWUeblIgi6/KlR2tlE1dad5Y= Subject key identifier: 6F:12:E8:EA:B7:34:48:CE:A1:FE:62:58:4A:A8:F3:BF:8A:A9:59:28 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584B585515D1116760F1B31ED800 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/4214ddca-6f1d-39af-9ef0-00ba7d76b3a2.roa Signing time: Sun 28 Sep 2025 13:50:16 +0000 ROA not before: Sun 28 Sep 2025 13:50:16 +0000 ROA not after: Sat 27 Dec 2025 14:50:16 +0000 asID: 214025 IP address blocks: 198.1.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:55:15:d1:11:67:60:f1:b3:1e:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Sep 28 13:50:16 2025 GMT Not After : Dec 27 14:50:16 2025 GMT Subject: CN=b9f5f19a-1fcb-4741-8833-9c8155ef4936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:66:2e:ed:14:b0:6c:ac:ff:03:60:93:48:44: 2e:7a:93:5e:02:f8:22:15:bb:9d:fe:cb:b9:aa:7a: 9b:45:fd:2f:df:ad:07:cf:81:2f:ed:57:d7:36:74: 24:d0:13:5e:5f:95:80:df:5a:3f:6e:58:36:5b:4b: b0:8c:f1:74:0b:d0:e2:d9:18:0f:04:16:3e:51:54: f7:01:b9:1e:6d:f8:f0:f9:fb:e2:6b:a3:26:96:ac: cb:cb:e3:e3:4a:07:4d:d0:cd:34:0c:00:77:ab:83: f2:41:be:d9:f8:02:98:26:8b:8a:55:25:ed:40:98: 48:a6:3f:c3:e0:26:49:e0:db:e8:21:51:c6:3d:47: b9:96:9d:87:5e:f9:3b:2c:20:b2:57:ce:a1:6b:d5: bd:48:69:ee:a9:94:ad:a7:49:d4:fb:67:d8:38:b2: 51:61:62:cc:7e:e4:5a:19:50:76:43:74:f2:f6:b0: a0:65:cc:2a:91:0f:e0:ba:96:ba:a6:bd:4f:40:cb: cf:3f:2f:b1:eb:e3:9e:ba:5b:44:0c:f8:61:7a:44: 23:cb:6d:16:1a:4b:f8:a8:1c:8b:8a:f0:4e:13:df: 30:ca:01:9e:dc:e0:8c:bf:d4:99:9b:07:1b:73:eb: 3e:03:2e:40:cb:b2:d4:e8:6a:16:7f:54:57:cc:ab: 35:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:12:E8:EA:B7:34:48:CE:A1:FE:62:58:4A:A8:F3:BF:8A:A9:59:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/4214ddca-6f1d-39af-9ef0-00ba7d76b3a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:79:b6:ff:08:ec:70:73:23:dc:e7:35:df:2b:64:ba:36:d8: ca:7a:fb:23:47:38:b7:10:e6:82:78:ae:14:71:25:66:36:81: 30:84:5a:97:87:2d:e2:f1:ad:70:8a:c6:26:c3:ee:22:21:7d: 61:e3:2e:4f:b8:b4:72:00:cc:ea:0b:a9:e4:84:51:7b:b0:56: eb:5b:a6:8d:63:f8:d2:3c:94:ff:3c:bc:06:56:aa:7d:ef:a1: c4:56:74:fe:02:7c:7b:1e:0c:f2:6b:7a:e6:81:9e:6d:0f:89: 39:ec:6b:bb:c9:68:bd:7a:28:e3:40:84:a4:10:f4:e3:54:7e: 3d:22:4e:5a:1e:b4:d6:21:cf:92:b1:53:b0:58:92:6f:48:79: 9f:87:65:07:c4:b9:5e:2d:3c:d1:f3:f8:c3:33:ef:20:ad:a1: f0:d2:9a:c0:79:2d:04:dc:a1:e4:f5:65:19:e6:82:75:5f:3b: 29:07:b6:00:38:b3:eb:d4:82:53:4c:60:50:66:d2:26:80:be: 17:d5:85:79:4a:66:0b:cf:d2:2a:09:12:dc:f5:96:fe:ca:36: bc:6d:77:9c:62:2a:f8:20:66:78:a3:8b:5e:7c:05:75:d0:21: 47:c1:2f:bd:c1:48:b8:f2:f1:54:f1:78:25:1f:1c:f2:ec:7d: 23:04:cb:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYVRXREWdg8bMe2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDkyODEzNTAxNloXDTI1MTIyNzE0NTAxNlowLzEtMCsGA1UEAxMk YjlmNWYxOWEtMWZjYi00NzQxLTg4MzMtOWM4MTU1ZWY0OTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWYu7RSwbKz/A2CTSEQuepNeAvgiFbud/su5 qnqbRf0v360Hz4Ev7VfXNnQk0BNeX5WA31o/blg2W0uwjPF0C9Di2RgPBBY+UVT3 Abkebfjw+fvia6MmlqzLy+PjSgdN0M00DAB3q4PyQb7Z+AKYJouKVSXtQJhIpj/D 4CZJ4NvoIVHGPUe5lp2HXvk7LCCyV86ha9W9SGnuqZStp0nU+2fYOLJRYWLMfuRa GVB2Q3Ty9rCgZcwqkQ/gupa6pr1PQMvPPy+x6+OeultEDPhhekQjy20WGkv4qByL ivBOE98wygGe3OCMv9SZmwcbc+s+Ay5Ay7LU6GoWf1RXzKs14wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8S6Oq3NEjOof5iWEqo87+KqVkoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvNDIxNGRkY2EtNmYxZC0z OWFmLTllZjAtMDBiYTdkNzZiM2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADt5tv8I7HBzI9znNd8rZLo22Mp6+yNHOLcQ5oJ4rhRxJWY2gTCEWpeH LeLxrXCKxibD7iIhfWHjLk+4tHIAzOoLqeSEUXuwVutbpo1j+NI8lP88vAZWqn3v ocRWdP4CfHseDPJreuaBnm0PiTnsa7vJaL16KONAhKQQ9ONUfj0iTloetNYhz5Kx U7BYkm9IeZ+HZQfEuV4tPNHz+MMz7yCtofDSmsB5LQTcoeT1ZRnmgnVfOykHtgA4 s+vUglNMYFBm0iaAvhfVhXlKZgvP0ioJEtz1lv7KNrxtd5xiKvggZniji158BXXQ IUfBL73BSLjy8VTxeCUfHPLsfSMEyyE= -----END CERTIFICATE-----Generated at Wed Nov 5 17:25:33 2025 by rpki-client