$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/4a98f038-d297-3838-953a-f34c5fe38c5f.roa File: 4a98f038-d297-3838-953a-f34c5fe38c5f.roa (raw, json) Hash identifier: zJFvNCiEIzA3F0YYEG1EMNu4DZ6j015M95kt2eaQ+sE= Subject key identifier: 4E:96:FC:91:8F:11:2D:97:CF:C8:04:D7:DF:4F:67:C4:B6:EB:16:81 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584F497368B44FCF8E3116C2E180 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/4a98f038-d297-3838-953a-f34c5fe38c5f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20001 IP address blocks: 198.1.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:68:b4:4f:cf:8e:31:16:c2:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6cfc9820-f341-44e6-8ae4-aa4665a2de65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:eb:5b:84:b4:19:9a:d7:eb:7e:ca:3c:70:a1: ec:cc:b2:41:a7:17:97:04:1d:7a:3e:63:8c:1a:63: c5:70:a2:06:5b:35:7d:82:f9:d4:70:d8:40:8d:96: fd:12:7c:80:68:c9:de:98:33:b1:a4:53:73:99:3e: 3e:f8:57:b5:87:c7:84:e5:bb:73:8d:1a:da:92:1a: 09:e1:81:33:6c:99:d0:22:06:b7:c9:b7:3b:15:bc: 6b:ea:ab:6f:82:43:2b:bf:06:7d:05:f4:87:4e:a1: ac:f6:71:76:f9:32:5b:54:29:a1:28:ea:01:bb:90: bb:8f:39:3b:d7:ce:a0:7f:f4:1e:39:3f:be:29:c9: 46:f5:3b:25:a2:d0:9e:c7:7d:ed:17:e0:a2:a3:01: af:34:f0:6f:2b:8f:0a:49:f5:43:86:00:32:21:2a: 91:b4:4b:c6:ed:68:88:85:38:37:a2:9e:ce:1c:d7: ea:63:0f:65:e8:89:65:34:fb:79:5f:3b:bd:2b:a8: 57:96:22:a7:f1:1a:9a:1f:b2:da:92:09:a1:f3:f0: f3:c0:cb:bd:8c:47:c6:7f:04:b6:6f:1a:8a:29:45: 24:4a:29:5a:11:3a:37:64:95:32:f1:6f:0d:9e:b3: 4c:04:12:f4:6b:18:fe:83:a4:d6:3e:c9:9c:99:e7: 2f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:96:FC:91:8F:11:2D:97:CF:C8:04:D7:DF:4F:67:C4:B6:EB:16:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/4a98f038-d297-3838-953a-f34c5fe38c5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:70:8e:44:63:53:33:6b:b6:14:58:34:7a:fc:91:cf:fe:37: c1:96:57:76:a4:9e:10:e9:2a:ff:47:7b:58:28:a9:a9:a2:63: b7:ad:3b:17:81:c2:b8:c5:35:18:40:1f:7c:ec:a8:bc:c8:0f: 64:59:1d:eb:68:be:c5:90:c8:ea:0b:6b:88:c4:e9:bf:da:d2: 68:ab:20:af:41:49:a3:1e:5b:ca:d2:c8:b8:25:f6:65:35:36: 3d:52:45:23:61:18:b6:8f:10:4c:dc:39:a4:bf:d7:53:a0:24: 63:39:1c:3d:aa:8d:a2:7f:07:ab:f7:91:32:5a:da:5b:57:2e: 12:a9:af:4d:50:d3:f1:c2:b4:57:a8:8a:23:36:6d:4d:68:a3: 1d:fb:9f:91:12:43:ce:09:37:ae:11:96:6f:32:c3:b3:7a:58: 08:de:9b:23:98:36:4a:74:8e:3c:97:f1:9c:45:73:12:32:39: 1a:84:db:dc:32:2b:a1:b1:d7:a7:a4:4a:92:fd:3b:83:85:1d: 62:56:9a:a9:f1:5a:6f:52:0e:92:02:d3:de:e1:ec:d0:d8:d3: c5:0f:71:22:b4:6f:b8:78:90:a6:c0:e6:37:7d:89:c4:47:4e: 12:81:69:65:5f:9c:58:bc:d5:e4:7e:ab:77:22:3b:12:a5:ea: 2c:c0:f1:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc2i0T8+OMRbC4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmNmYzk4MjAtZjM0MS00NGU2LThhZTQtYWE0NjY1YTJkZTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAletbhLQZmtfrfso8cKHszLJBpxeXBB16PmOM GmPFcKIGWzV9gvnUcNhAjZb9EnyAaMnemDOxpFNzmT4++Fe1h8eE5btzjRrakhoJ 4YEzbJnQIga3ybc7Fbxr6qtvgkMrvwZ9BfSHTqGs9nF2+TJbVCmhKOoBu5C7jzk7 186gf/QeOT++KclG9TslotCex33tF+CiowGvNPBvK48KSfVDhgAyISqRtEvG7WiI hTg3op7OHNfqYw9l6IllNPt5Xzu9K6hXliKn8RqaH7Lakgmh8/DzwMu9jEfGfwS2 bxqKKUUkSilaETo3ZJUy8W8NnrNMBBL0axj+g6TWPsmcmecvXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6W/JGPES2Xz8gE199PZ8S26xaBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvNGE5OGYwMzgtZDI5Ny0z ODM4LTk1M2EtZjM0YzVmZTM4YzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdwjkRjUzNrthRYNHr8kc/+N8GWV3aknhDpKv9He1goqamiY7etOxeB wrjFNRhAH3zsqLzID2RZHetovsWQyOoLa4jE6b/a0mirIK9BSaMeW8rSyLgl9mU1 Nj1SRSNhGLaPEEzcOaS/11OgJGM5HD2qjaJ/B6v3kTJa2ltXLhKpr01Q0/HCtFeo iiM2bU1oox37n5ESQ84JN64Rlm8yw7N6WAjemyOYNkp0jjyX8ZxFcxIyORqE29wy K6Gx16ekSpL9O4OFHWJWmqnxWm9SDpIC097h7NDY08UPcSK0b7h4kKbA5jd9icRH ThKBaWVfnFi81eR+q3ciOxKl6izA8S0= -----END CERTIFICATE-----Generated at Sat Sep 26 13:10:28 2026 by rpki-client