$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/94788d12-0d3e-3007-a2f8-953cb3e95d86.roa File: 94788d12-0d3e-3007-a2f8-953cb3e95d86.roa (raw, json) Hash identifier: 5w2IR/hlPG9FAm8TrrnW7nHfOPd0CoKDIL8t0/itdOc= Subject key identifier: 0F:06:07:23:E7:61:A6:33:3B:00:E4:B1:97:F0:CA:17:97:67:39:29 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584F1732410F8FFD5CAA071B8E60 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/94788d12-0d3e-3007-a2f8-953cb3e95d86.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 7029 IP address blocks: 198.1.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:41:0f:8f:fd:5c:aa:07:1b:8e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=bbb87daf-f444-43b8-adc1-96f2e79c2c5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f8:32:2f:23:26:d7:35:26:e0:c1:b6:02:19: 30:08:61:60:10:50:64:f3:c2:dd:68:3c:69:61:98: 5b:ad:61:df:99:d1:7f:f2:93:34:74:f3:4b:3a:01: dd:c4:20:ab:d7:0b:cf:ba:11:92:78:11:09:8e:4f: e4:58:89:ea:30:98:e1:62:c0:44:3b:0f:4f:6e:ff: 28:05:c6:e4:53:3b:5f:b8:99:b6:c1:6e:a7:08:be: a8:46:ad:4e:6f:73:6a:b6:a8:44:3b:9a:3d:93:08: 95:91:52:50:ce:95:4f:95:bd:14:c8:8d:59:76:08: 78:57:cb:2b:81:73:2f:ca:d3:2c:d7:7d:f1:07:47: 44:0d:25:e9:be:58:91:09:7b:15:3d:d6:79:c5:20: 14:c2:e8:26:5f:7e:75:0b:69:66:69:1f:b1:3f:77: 74:25:0a:34:da:46:6f:d3:0f:26:37:1d:a6:a6:0a: cf:62:47:6d:52:55:13:f0:dc:6f:88:1a:46:f6:8b: cb:69:08:40:b2:bf:70:fa:a7:44:c6:3b:9b:f9:b5: 19:25:57:4d:dd:78:ab:78:ce:b0:5d:f4:ab:e5:47: 1b:71:c6:28:ee:4c:19:12:40:95:86:70:d8:15:97: af:bc:36:4b:d5:39:7f:84:86:38:93:a9:53:9f:32: f3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:06:07:23:E7:61:A6:33:3B:00:E4:B1:97:F0:CA:17:97:67:39:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/94788d12-0d3e-3007-a2f8-953cb3e95d86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:3b:e4:53:9b:ba:e3:7b:c5:9c:ab:e6:39:41:3f:5b:65:fc: 99:94:05:85:42:da:9a:93:66:82:e2:ff:12:31:24:ab:bb:dd: 8c:83:1d:95:d4:4b:a8:4c:31:bd:a5:61:98:97:da:07:27:e7: 38:89:8b:f8:76:11:62:38:3a:b5:78:52:89:4f:78:bc:aa:df: 6e:40:2e:42:38:84:76:39:50:c8:87:e0:e9:9c:4f:dd:fa:36: bd:8e:a1:22:dc:a7:42:74:68:e4:d9:2e:e5:44:55:8d:40:63: 6e:96:67:da:2c:34:0f:92:2b:18:1f:ec:2c:f9:43:31:50:86: cb:9c:2d:1c:bf:85:82:99:b9:28:39:89:78:ce:89:2b:d3:7e: dd:99:e8:3b:ce:86:29:bd:11:82:7b:07:f6:57:34:b2:4a:e5: bf:31:bd:31:98:4a:ff:0c:77:f3:82:76:69:74:f5:4b:9b:9b: b4:1b:81:f2:56:e0:e1:ee:27:dc:1c:e8:1e:1a:3e:94:25:1a: 75:0c:97:78:9d:b8:e0:60:f7:f2:60:df:44:85:48:5a:45:a0: 0d:38:29:31:d4:b7:1a:18:a1:14:1e:e1:91:96:e2:27:9d:1c: fc:9f:9c:73:f4:e0:89:38:b5:b1:34:92:57:cb:a9:eb:f7:c9: 38:0b:f8:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMkEPj/1cqgcbjmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk YmJiODdkYWYtZjQ0NC00M2I4LWFkYzEtOTZmMmU3OWMyYzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/gyLyMm1zUm4MG2AhkwCGFgEFBk88LdaDxp YZhbrWHfmdF/8pM0dPNLOgHdxCCr1wvPuhGSeBEJjk/kWInqMJjhYsBEOw9Pbv8o BcbkUztfuJm2wW6nCL6oRq1Ob3NqtqhEO5o9kwiVkVJQzpVPlb0UyI1Zdgh4V8sr gXMvytMs133xB0dEDSXpvliRCXsVPdZ5xSAUwugmX351C2lmaR+xP3d0JQo02kZv 0w8mNx2mpgrPYkdtUlUT8NxviBpG9ovLaQhAsr9w+qdExjub+bUZJVdN3XireM6w XfSr5UcbccYo7kwZEkCVhnDYFZevvDZL1Tl/hIY4k6lTnzLzCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8GByPnYaYzOwDksZfwyheXZzkpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvOTQ3ODhkMTItMGQzZS0z MDA3LWEyZjgtOTUzY2IzZTk1ZDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADo75FObuuN7xZyr5jlBP1tl/JmUBYVC2pqTZoLi/xIxJKu73YyDHZXU S6hMMb2lYZiX2gcn5ziJi/h2EWI4OrV4UolPeLyq325ALkI4hHY5UMiH4OmcT936 Nr2OoSLcp0J0aOTZLuVEVY1AY26WZ9osNA+SKxgf7Cz5QzFQhsucLRy/hYKZuSg5 iXjOiSvTft2Z6DvOhim9EYJ7B/ZXNLJK5b8xvTGYSv8Md/OCdml09Uubm7QbgfJW 4OHuJ9wc6B4aPpQlGnUMl3iduOBg9/Jg30SFSFpFoA04KTHUtxoYoRQe4ZGW4ied HPyfnHP04Ik4tbE0klfLqev3yTgL+Ds= -----END CERTIFICATE-----Generated at Mon Sep 21 13:52:35 2026 by rpki-client