$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/7e0650d0-458f-374e-afd2-1976a9954e2d.roa File: 7e0650d0-458f-374e-afd2-1976a9954e2d.roa (raw, json) Hash identifier: XtrApICS9Ul3h4HN9zWBDzk3raeuNd407VFccrtQn5w= Subject key identifier: E3:86:34:65:48:6B:CA:F7:E3:F8:7C:95:B1:F3:7A:C7:56:15:BE:49 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584F3CE27F7909451073452D7298 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/7e0650d0-458f-374e-afd2-1976a9954e2d.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 22516 IP address blocks: 198.1.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:7f:79:09:45:10:73:45:2d:72:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=0642514b-8c0f-4500-802d-beb2a9e5d7f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:71:2d:53:98:99:61:1a:bc:1f:f3:00:ae:ac: 66:bd:7c:e1:a4:a3:c7:1f:4a:a6:7e:5d:00:38:2e: c7:67:d1:78:29:05:a5:e4:67:8d:1c:b8:1d:fc:07: ee:e0:e0:d9:91:22:e7:fd:e9:3c:75:e8:34:ba:76: 9e:f9:dc:02:1b:40:93:4f:5d:be:00:6c:e8:39:e1: 47:74:60:e9:88:03:83:4f:29:31:a9:a8:6e:b3:46: cf:75:b4:92:0b:2c:4e:10:b8:7e:7a:c7:d2:f6:03: 35:50:e1:16:67:ed:64:96:9c:0a:ed:60:86:bd:1e: 83:ba:02:9c:31:f5:6e:84:8f:e4:69:63:7b:ee:ca: 16:af:9c:8e:94:37:11:44:af:3f:46:9a:e0:57:12: 11:c0:81:b6:0b:c2:23:1d:27:f2:81:97:5f:18:bb: 30:57:f9:5e:c9:99:be:53:79:a9:1a:d7:6c:a8:c6: a0:c6:cd:21:3f:0f:9f:c3:68:42:84:0e:7a:4d:b1: f2:b2:f5:58:47:90:e0:52:7c:ca:2a:85:b2:ed:6b: bf:e7:0a:72:20:ac:0e:c9:d3:f1:9a:43:38:1f:86: f5:e2:38:03:14:13:f2:90:1a:a8:b5:4d:26:6f:8e: a5:db:f0:95:5c:b1:22:11:82:a5:ee:d4:d2:09:72: fa:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:86:34:65:48:6B:CA:F7:E3:F8:7C:95:B1:F3:7A:C7:56:15:BE:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/7e0650d0-458f-374e-afd2-1976a9954e2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:e5:ee:eb:b2:c5:45:7d:0d:c6:db:02:fc:39:dc:f2:72:90: f6:f6:98:44:80:95:d5:d2:7c:e4:04:54:c7:42:95:a6:22:9d: 7f:92:50:67:3d:9b:fb:e0:26:6e:77:eb:d6:d9:13:24:63:7c: de:b2:b1:d6:95:e2:a1:1d:42:12:c1:26:65:a4:7d:f9:8e:63: 83:8c:c8:46:ec:43:b5:2e:6c:6a:88:f2:8e:b3:1a:a8:d7:ad: cd:c4:4f:ea:10:d4:00:af:1e:5b:c8:f1:26:a3:65:69:db:69: ca:ff:73:99:c3:ff:9a:b3:6b:a0:31:c3:e4:d8:91:3e:d2:a3: be:16:80:6e:b1:92:7a:01:e0:4e:8e:cd:4e:02:e9:cf:80:7d: eb:20:63:50:a2:3d:b0:cc:d8:5d:54:09:1a:63:4c:d3:8e:06: b5:8a:54:a0:e6:4c:d2:1a:e7:87:19:30:75:95:71:83:8d:fa: b4:50:6f:05:5b:f4:fa:bb:74:d1:56:b2:29:30:ca:d1:5c:12: e3:ad:97:3f:aa:1f:71:11:67:ff:28:0e:53:a0:6e:25:10:9b: 31:d0:ac:5b:be:fc:00:ca:82:af:65:d7:05:0a:3a:7b:31:b1: 54:b1:67:ae:67:26:01:5b:43:17:2b:0f:54:d3:ec:33:17:90: 1d:1a:af:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884n95CUUQc0UtcpgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk MDY0MjUxNGItOGMwZi00NTAwLTgwMmQtYmViMmE5ZTVkN2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznEtU5iZYRq8H/MArqxmvXzhpKPHH0qmfl0A OC7HZ9F4KQWl5GeNHLgd/Afu4ODZkSLn/ek8deg0unae+dwCG0CTT12+AGzoOeFH dGDpiAODTykxqahus0bPdbSSCyxOELh+esfS9gM1UOEWZ+1klpwK7WCGvR6DugKc MfVuhI/kaWN77soWr5yOlDcRRK8/RprgVxIRwIG2C8IjHSfygZdfGLswV/leyZm+ U3mpGtdsqMagxs0hPw+fw2hChA56TbHysvVYR5DgUnzKKoWy7Wu/5wpyIKwOydPx mkM4H4b14jgDFBPykBqotU0mb46l2/CVXLEiEYKl7tTSCXL6kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOOGNGVIa8r34/h8lbHzesdWFb5JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvN2UwNjUwZDAtNDU4Zi0z NzRlLWFmZDItMTk3NmE5OTU0ZTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTl7uuyxUV9DcbbAvw53PJykPb2mESAldXSfOQEVMdClaYinX+SUGc9 m/vgJm5369bZEyRjfN6ysdaV4qEdQhLBJmWkffmOY4OMyEbsQ7UubGqI8o6zGqjX rc3ET+oQ1ACvHlvI8SajZWnbacr/c5nD/5qza6Axw+TYkT7So74WgG6xknoB4E6O zU4C6c+AfesgY1CiPbDM2F1UCRpjTNOOBrWKVKDmTNIa54cZMHWVcYON+rRQbwVb 9Pq7dNFWsikwytFcEuOtlz+qH3ERZ/8oDlOgbiUQmzHQrFu+/ADKgq9l1wUKOnsx sVSxZ65nJgFbQxcrD1TT7DMXkB0ar9I= -----END CERTIFICATE-----Generated at Mon Sep 21 16:09:22 2026 by rpki-client