$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/a3c31877-dad2-39b4-a7ef-2037f5489018.roa File: a3c31877-dad2-39b4-a7ef-2037f5489018.roa (raw, json) Hash identifier: 8GC/fIsTiYFANlkjN8g8G5MEeLue/t0CUiSc1atT4V0= Subject key identifier: 25:A8:93:CE:C8:BD:94:D7:E4:21:6D:23:1D:DC:A6:4A:24:94:40:1C Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584CAA2714A5BB2E6ED3BFD19000 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/a3c31877-dad2-39b4-a7ef-2037f5489018.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 55201 IP address blocks: 198.1.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:14:a5:bb:2e:6e:d3:bf:d1:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=db233889-f15a-4402-9158-16cfe22684c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3e:5a:8d:37:8f:55:1b:eb:61:88:76:76:11: 62:4e:92:4f:11:a0:be:99:79:5d:ae:23:8c:85:99: 92:dc:c6:1f:bd:60:5b:f2:25:5d:d3:5d:23:87:19: ae:9a:4a:8d:cf:d6:6b:d9:83:2f:e1:4f:a1:a0:62: 14:5a:41:df:56:26:75:96:65:c4:91:50:14:a5:3a: 64:83:1f:73:06:7c:f4:21:29:74:b8:7e:e7:f1:81: 27:06:e6:2b:1d:19:ba:50:db:0e:8f:96:4a:cb:67: 4e:55:62:62:ec:93:5c:53:b8:93:99:a0:4b:08:14: 87:e7:98:4d:53:67:43:76:ac:81:57:e2:5f:77:20: 47:bd:f2:04:c0:65:d5:7f:0c:0b:c7:39:29:40:a7: c4:bb:59:82:38:f8:cb:b5:85:5c:bf:79:53:6b:5a: 3a:17:9d:a4:39:a7:66:13:20:74:10:02:6f:5e:6b: e2:b0:93:34:f4:32:d9:05:67:24:ca:62:c7:06:0e: 03:e3:d8:5b:c6:04:05:f3:72:56:fa:5a:50:34:46: 6c:4c:30:66:6c:28:6b:b5:bc:e2:50:06:26:fe:c2: c6:ce:f7:cd:0c:13:58:9c:c4:fb:bc:f8:9d:3a:37: 4f:fc:97:86:23:b8:ec:dd:b5:a4:f6:ce:ff:43:f1: 14:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A8:93:CE:C8:BD:94:D7:E4:21:6D:23:1D:DC:A6:4A:24:94:40:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/a3c31877-dad2-39b4-a7ef-2037f5489018.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:79:59:01:93:71:d9:48:99:be:2a:7d:ed:24:1b:0d:77:2b: 10:a1:c5:ab:67:a0:d8:e3:f3:37:7b:c5:99:7a:8e:ba:17:24: 3e:a7:da:6b:3f:81:28:27:43:8d:6a:2c:e6:80:d8:9b:24:29: d5:2c:c6:0b:a2:7b:a3:e7:1d:19:e4:9e:f5:96:e7:f3:79:77: 80:41:12:08:93:9e:5e:78:ee:dd:af:fe:75:20:1f:64:7c:ad: c9:4d:4a:89:6e:f4:fa:49:e0:0a:d1:53:25:a6:40:00:41:83: ac:91:3a:d5:92:5a:a8:9d:a7:c5:94:72:59:a5:b6:55:ee:f4: 82:44:37:a5:5e:01:3e:86:8c:25:2d:9c:b9:59:f8:04:87:f7: 04:a0:67:81:88:9f:9b:bd:8a:db:41:3d:50:dd:7c:d6:b0:5d: f3:a6:0c:8e:6f:e5:61:4d:47:a7:5a:63:bc:c1:e1:8c:6c:f1: 50:7c:93:e0:97:c3:bd:24:05:97:8a:08:93:d9:42:79:4f:a9: 3f:59:4a:41:81:fc:29:b5:c0:19:b4:72:b3:54:57:fc:9c:b2: b6:63:5d:5f:d1:12:9b:e4:e2:02:cb:88:48:43:9f:e4:2c:cf: d1:e8:6f:b4:11:44:72:04:17:57:99:1c:ff:e1:74:89:da:2a: 43:0f:4c:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJxSluy5u07/RkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk ZGIyMzM4ODktZjE1YS00NDAyLTkxNTgtMTZjZmUyMjY4NGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgj5ajTePVRvrYYh2dhFiTpJPEaC+mXldriOM hZmS3MYfvWBb8iVd010jhxmumkqNz9Zr2YMv4U+hoGIUWkHfViZ1lmXEkVAUpTpk gx9zBnz0ISl0uH7n8YEnBuYrHRm6UNsOj5ZKy2dOVWJi7JNcU7iTmaBLCBSH55hN U2dDdqyBV+JfdyBHvfIEwGXVfwwLxzkpQKfEu1mCOPjLtYVcv3lTa1o6F52kOadm EyB0EAJvXmvisJM09DLZBWckymLHBg4D49hbxgQF83JW+lpQNEZsTDBmbChrtbzi UAYm/sLGzvfNDBNYnMT7vPidOjdP/JeGI7js3bWk9s7/Q/EUcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWok87IvZTX5CFtIx3cpkoklEAcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvYTNjMzE4NzctZGFkMi0z OWI0LWE3ZWYtMjAzN2Y1NDg5MDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC15WQGTcdlImb4qfe0kGw13KxChxatnoNjj8zd7xZl6jroXJD6n2ms/ gSgnQ41qLOaA2JskKdUsxguie6PnHRnknvWW5/N5d4BBEgiTnl547t2v/nUgH2R8 rclNSolu9PpJ4ArRUyWmQABBg6yROtWSWqidp8WUclmltlXu9IJEN6VeAT6GjCUt nLlZ+ASH9wSgZ4GIn5u9ittBPVDdfNawXfOmDI5v5WFNR6daY7zB4Yxs8VB8k+CX w70kBZeKCJPZQnlPqT9ZSkGB/Cm1wBm0crNUV/ycsrZjXV/REpvk4gLLiEhDn+Qs z9Hob7QRRHIEF1eZHP/hdInaKkMPTAk= -----END CERTIFICATE-----Generated at Mon Mar 2 12:40:38 2026 by rpki-client