$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/af40fea8-3202-3a90-bad2-52443552faaf.roa File: af40fea8-3202-3a90-bad2-52443552faaf.roa (raw, json) Hash identifier: 9esc/AQmNn34l9Kvt8bAFZ5Fmo7a6fDyHw+7hbXxXKw= Subject key identifier: 07:BB:E7:3A:88:10:AC:7E:CD:97:AF:8B:17:15:31:63:FD:52:02:CC Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584CB3EC65997802B1BA152E1200 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/af40fea8-3202-3a90-bad2-52443552faaf.roa Signing time: Sat 31 Jan 2026 02:00:32 +0000 ROA not before: Sat 31 Jan 2026 02:00:32 +0000 ROA not after: Fri 01 May 2026 01:00:32 +0000 asID: 7029 IP address blocks: 198.1.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b3:ec:65:99:78:02:b1:ba:15:2e:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Jan 31 02:00:32 2026 GMT Not After : May 1 01:00:32 2026 GMT Subject: CN=3bdcd776-af4d-4e53-bba9-219c50daa428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:87:3d:83:93:c0:e2:52:e0:e2:41:ec:a2:a1: 98:80:ab:45:ff:78:df:85:e6:11:fb:a8:ec:b2:6f: 3d:29:79:f7:64:97:8a:e2:bf:e3:aa:cd:92:18:3e: 5e:37:b5:7f:40:1d:fd:c8:a5:e0:ff:31:ae:96:61: 44:e8:5b:70:b6:f0:9c:06:c4:1f:51:95:dd:47:26: ec:c1:f5:4d:4c:d0:6e:c9:b2:a0:54:b1:e0:13:21: 82:5b:c3:e1:bc:c6:05:61:1e:a1:aa:18:80:0c:2a: ac:08:45:28:30:e6:4f:0c:9c:ff:93:de:79:8d:2e: dd:da:b7:9e:29:a4:fd:bf:a0:05:17:0f:47:2c:f3: 13:b2:24:75:5d:43:54:63:23:e0:53:9f:ef:b1:5d: 99:13:06:c6:07:3f:87:d8:10:ff:2b:14:3f:94:f3: 95:80:f8:fa:4e:72:7f:5f:bc:03:22:27:d6:4a:ce: 64:63:b4:8a:f2:ed:bf:51:f3:66:e0:ee:95:06:7b: c5:08:14:52:53:35:ea:47:28:50:bd:1e:8e:30:e8: 11:83:8b:a7:49:04:5d:f9:7c:2d:d6:01:c3:f6:58: 23:89:ef:01:b1:c2:10:c6:6a:79:89:01:02:15:e4: f4:e2:a8:f2:e1:a1:fa:8e:e5:50:6b:3b:f8:7c:f9: 09:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:BB:E7:3A:88:10:AC:7E:CD:97:AF:8B:17:15:31:63:FD:52:02:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/af40fea8-3202-3a90-bad2-52443552faaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:34:d9:4b:22:c8:25:d0:eb:db:3d:35:92:55:a7:c6:4e:21: 10:95:90:00:06:c2:bf:dd:2f:5b:1d:58:dc:6a:c0:6e:dd:8f: 9a:66:0e:c0:6e:f2:f0:54:a9:6f:f6:cf:8c:a2:34:cb:ac:94: b6:c5:b3:b6:10:1e:26:23:04:40:4b:b7:45:ea:44:e3:23:32: 40:94:9c:38:96:ef:16:27:dd:f6:35:3c:5d:53:5c:dd:da:7e: ec:c5:5f:a0:90:12:35:56:69:25:58:d4:18:2f:e7:67:da:7f: ae:00:83:4f:dc:3f:12:bc:e6:83:e1:87:6e:33:74:29:2b:56: 3d:18:80:49:a1:45:43:97:b3:62:b4:ec:4f:3d:12:2e:57:c3: 90:72:f0:46:94:94:b4:a4:22:46:aa:1b:66:5a:41:7b:4c:a4: ef:31:99:c8:71:90:e6:26:d5:25:20:3d:6f:02:35:37:17:ce: 37:15:ad:76:0a:68:70:7a:32:35:21:a3:7b:7e:19:b3:77:d7: 0f:81:7c:37:07:26:bc:02:d0:df:d6:35:be:fc:01:a3:df:c0: 70:ff:74:4a:ad:3d:60:7e:52:88:8f:08:16:01:6b:49:63:06: bf:b8:5e:1c:3b:b3:0d:b4:11:07:17:c1:a4:27:fb:44:6d:3b: b8:9b:e0:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyz7GWZeAKxuhUuEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI2MDEzMTAyMDAzMloXDTI2MDUwMTAxMDAzMlowLzEtMCsGA1UEAxMk M2JkY2Q3NzYtYWY0ZC00ZTUzLWJiYTktMjE5YzUwZGFhNDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYc9g5PA4lLg4kHsoqGYgKtF/3jfheYR+6js sm89KXn3ZJeK4r/jqs2SGD5eN7V/QB39yKXg/zGulmFE6FtwtvCcBsQfUZXdRybs wfVNTNBuybKgVLHgEyGCW8PhvMYFYR6hqhiADCqsCEUoMOZPDJz/k955jS7d2ree KaT9v6AFFw9HLPMTsiR1XUNUYyPgU5/vsV2ZEwbGBz+H2BD/KxQ/lPOVgPj6TnJ/ X7wDIifWSs5kY7SK8u2/UfNm4O6VBnvFCBRSUzXqRyhQvR6OMOgRg4unSQRd+Xwt 1gHD9lgjie8BscIQxmp5iQECFeT04qjy4aH6juVQazv4fPkJFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAe75zqIEKx+zZevixcVMWP9UgLMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvYWY0MGZlYTgtMzIwMi0z YTkwLWJhZDItNTI0NDM1NTJmYWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQ02UsiyCXQ69s9NZJVp8ZOIRCVkAAGwr/dL1sdWNxqwG7dj5pmDsBu 8vBUqW/2z4yiNMuslLbFs7YQHiYjBEBLt0XqROMjMkCUnDiW7xYn3fY1PF1TXN3a fuzFX6CQEjVWaSVY1Bgv52faf64Ag0/cPxK85oPhh24zdCkrVj0YgEmhRUOXs2K0 7E89Ei5Xw5By8EaUlLSkIkaqG2ZaQXtMpO8xmchxkOYm1SUgPW8CNTcXzjcVrXYK aHB6MjUho3t+GbN31w+BfDcHJrwC0N/WNb78AaPfwHD/dEqtPWB+UoiPCBYBa0lj Br+4Xhw7sw20EQcXwaQn+0RtO7ib4Ow= -----END CERTIFICATE-----Generated at Sun Mar 1 23:27:18 2026 by rpki-client