$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/4689ed48-7376-3a8a-892f-5bc4880d4d87.roa File: 4689ed48-7376-3a8a-892f-5bc4880d4d87.roa (raw, json) Hash identifier: WhcpKckduIuQSgPmCgojS8D+uK28KQBXaQfNHJILQiA= Subject key identifier: DE:B1:6D:BF:B1:56:A1:A9:1B:FC:47:07:1A:C6:2F:08:7D:72:93:AD Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584F3CE2B386FF53785855CFF000 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/4689ed48-7376-3a8a-892f-5bc4880d4d87.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 22516 IP address blocks: 198.1.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:b3:86:ff:53:78:58:55:cf:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=24652ac7-e884-4fb5-8fc3-5f7dc1a8bdec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3a:d9:40:56:e6:2e:0c:c5:25:cb:96:7f:47: 90:67:27:4d:47:a0:47:28:ce:a7:e5:7d:0d:d6:a5: dd:f7:51:ab:5e:fd:a2:bd:9b:ef:a2:d7:16:49:3b: 12:47:db:02:28:3c:56:0f:73:37:47:ac:c4:4a:06: 67:b5:60:f8:d9:74:c5:37:f8:c9:10:63:b9:3b:2d: 92:a0:b7:1b:62:4b:0b:12:d9:c4:79:aa:f3:1c:95: 64:04:22:70:32:b3:b2:a8:39:4b:f9:d0:ad:34:fe: d1:42:2a:33:65:19:a3:07:94:51:d3:fa:0f:fc:bd: f1:c6:c6:19:16:8e:78:b4:60:47:b1:c0:2c:dd:d0: 17:67:21:ba:b3:96:8e:ca:3c:e0:eb:33:00:2f:2f: ac:53:2d:14:ff:68:49:1f:76:c1:1e:2e:75:3a:92: 10:cd:e4:db:54:3d:b8:c7:6d:88:f3:9d:54:20:cc: 1b:5c:d4:db:d7:cd:03:5b:70:c9:d7:60:5d:fb:de: 32:9e:ac:cf:eb:2c:bb:36:67:99:e7:13:df:ff:8a: 63:43:5c:3d:5b:8a:3b:b6:8e:99:73:a6:d6:50:2c: 72:35:a9:d0:eb:c2:24:9b:c1:25:0d:f5:67:b9:26: e6:b0:50:f8:48:98:bb:c9:ed:6b:cb:bd:38:90:30: 67:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B1:6D:BF:B1:56:A1:A9:1B:FC:47:07:1A:C6:2F:08:7D:72:93:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/4689ed48-7376-3a8a-892f-5bc4880d4d87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:d3:d2:9b:a4:6c:90:d7:e2:db:58:9c:5c:10:61:34:69:2e: 20:54:94:bc:b9:15:5d:eb:50:a5:3d:fd:b5:a7:d6:be:a7:db: 51:05:c6:0d:60:0a:ab:14:1c:74:86:3c:41:ea:71:d4:c1:2a: ef:df:76:2c:a2:2f:14:4c:94:3d:36:8f:dc:a5:c0:44:04:db: c9:9e:ce:5e:11:67:c3:66:0e:b8:73:b1:28:b8:f1:18:0f:6b: c4:d1:03:f2:2b:f0:e7:08:ba:a2:d6:4b:db:32:42:0e:f5:1d: 90:b0:30:02:7d:b8:fd:bb:02:d2:8e:5c:fa:01:7e:34:7a:df: 9d:20:ea:44:39:c9:76:d8:cc:b3:76:9e:eb:06:64:5a:4c:ef: 21:c1:70:67:bd:25:5b:c9:d1:56:a3:5c:41:0e:fe:67:77:e2: a9:83:7c:7c:1e:99:2d:e0:ae:0b:b6:fd:de:03:2a:ff:56:e5: 9e:28:5e:2e:25:92:2f:f5:07:b8:c1:98:e5:8e:51:6e:b9:18: 64:63:22:2c:f4:7d:61:5d:c0:69:c8:24:b6:18:4d:aa:2d:c6: be:a7:95:25:63:a0:e9:b2:f6:cd:72:31:7d:ed:0a:27:ec:1c: 98:44:ce:21:3c:a5:06:4e:31:cb:6d:fb:91:22:fe:94:38:c5: 26:8e:ce:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884rOG/1N4WFXP8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk MjQ2NTJhYzctZTg4NC00ZmI1LThmYzMtNWY3ZGMxYThiZGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljrZQFbmLgzFJcuWf0eQZydNR6BHKM6n5X0N 1qXd91GrXv2ivZvvotcWSTsSR9sCKDxWD3M3R6zESgZntWD42XTFN/jJEGO5Oy2S oLcbYksLEtnEearzHJVkBCJwMrOyqDlL+dCtNP7RQiozZRmjB5RR0/oP/L3xxsYZ Fo54tGBHscAs3dAXZyG6s5aOyjzg6zMALy+sUy0U/2hJH3bBHi51OpIQzeTbVD24 x22I851UIMwbXNTb180DW3DJ12Bd+94ynqzP6yy7NmeZ5xPf/4pjQ1w9W4o7to6Z c6bWUCxyNanQ68Ikm8ElDfVnuSbmsFD4SJi7ye1ry704kDBnpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6xbb+xVqGpG/xHBxrGLwh9cpOtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvNDY4OWVkNDgtNzM3Ni0z YThhLTg5MmYtNWJjNDg4MGQ0ZDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/T0pukbJDX4ttYnFwQYTRpLiBUlLy5FV3rUKU9/bWn1r6n21EFxg1g CqsUHHSGPEHqcdTBKu/fdiyiLxRMlD02j9ylwEQE28mezl4RZ8NmDrhzsSi48RgP a8TRA/Ir8OcIuqLWS9syQg71HZCwMAJ9uP27AtKOXPoBfjR6350g6kQ5yXbYzLN2 nusGZFpM7yHBcGe9JVvJ0VajXEEO/md34qmDfHwemS3grgu2/d4DKv9W5Z4oXi4l ki/1B7jBmOWOUW65GGRjIiz0fWFdwGnIJLYYTaotxr6nlSVjoOmy9s1yMX3tCifs HJhEziE8pQZOMctt+5Ei/pQ4xSaOzvY= -----END CERTIFICATE-----Generated at Sun Sep 20 18:18:23 2026 by rpki-client