$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b7f116e0-a37c-3245-8f1d-e823b39ef464.roa File: b7f116e0-a37c-3245-8f1d-e823b39ef464.roa (raw, json) Hash identifier: JJpMI8wJUo56Wp/VLJ0KwLmjsdZkmZIWMsT2f/A869U= Subject key identifier: 65:DC:1B:D5:52:31:21:37:8E:80:17:24:8A:44:27:F5:C5:B6:2A:9E Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584FB24102E5B5AF6C058D7E3180 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b7f116e0-a37c-3245-8f1d-e823b39ef464.roa Signing time: Sun 01 Nov 2026 14:00:13 +0000 ROA not before: Sun 01 Nov 2026 14:00:13 +0000 ROA not after: Sat 30 Jan 2027 14:00:13 +0000 asID: 64267 IP address blocks: 198.1.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b2:41:02:e5:b5:af:6c:05:8d:7e:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Nov 1 14:00:13 2026 GMT Not After : Jan 30 14:00:13 2027 GMT Subject: CN=f2b3af98-9054-4eeb-bc8a-882a4b2a9db5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e7:9d:0a:32:26:21:bf:c0:42:3d:d9:4b:51: 2f:08:ea:26:ef:20:95:da:a5:c8:8e:b3:19:61:67: 8e:35:7d:2b:ad:2d:67:bb:0b:b8:f6:1f:79:cd:66: d5:74:9c:ab:ef:97:d9:45:53:ca:7b:7e:30:b9:c5: 49:5c:e5:b3:ff:08:06:ee:2d:b6:33:17:be:9e:45: 00:38:52:7a:69:df:f3:1d:a7:da:23:41:e0:f8:c7: ec:79:87:91:77:0a:1a:d6:f3:e7:0a:35:09:1d:47: e0:d7:6d:c4:c8:00:18:58:9c:9e:63:25:70:86:92: d3:4f:de:d6:f6:6a:9a:65:2b:97:a3:03:de:12:90: 0d:46:a7:98:18:fd:f6:44:2a:f9:34:1c:61:f2:9c: 8e:07:92:10:90:83:c9:9f:55:f9:ad:2f:87:56:17: b4:cf:aa:0f:30:65:99:38:fe:dd:64:11:a2:41:c6: db:ee:36:ed:dc:76:33:41:57:36:e0:1c:62:91:2d: 2b:f9:be:f6:a0:83:57:ed:d0:38:d7:29:0f:25:51: c0:09:2a:96:e5:c1:98:f8:4b:73:cb:94:18:66:c7: d3:b8:75:e4:c7:69:0c:4a:a6:7e:97:0c:f1:45:44: 54:66:83:ae:63:02:52:09:2d:7b:b9:1d:74:8e:a3: e4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:DC:1B:D5:52:31:21:37:8E:80:17:24:8A:44:27:F5:C5:B6:2A:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b7f116e0-a37c-3245-8f1d-e823b39ef464.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:3d:0d:8d:18:30:1d:78:62:65:bb:c0:85:66:74:c9:54:75: 3d:b6:7c:93:81:22:74:87:06:1d:b0:34:d8:40:b6:b3:82:70: ad:a0:04:28:08:17:89:48:e9:64:44:34:cb:f3:a3:8a:e0:0e: 95:d0:d9:b0:e3:bf:e0:78:44:9a:12:12:e9:a7:e5:80:0b:66: 4e:c1:e1:7f:03:81:ee:ca:50:3d:f0:e8:76:06:64:b8:88:bf: 01:bd:42:6f:27:6f:62:86:65:bb:64:d8:33:28:ec:bb:36:25: b6:ee:58:91:1b:ee:08:d3:62:76:26:bb:c7:7c:f1:82:62:50: 39:06:7f:0b:35:31:56:b8:b3:0e:13:73:9c:05:dc:5c:ef:a3: bd:a5:1f:5c:c6:db:2c:99:d4:5f:30:bc:3e:67:c4:49:84:8d: 6d:d0:7e:ef:62:0b:40:b8:f9:c2:bd:9e:a7:0b:41:fb:c9:2f: 36:6a:a6:7b:b0:ea:2a:8d:ad:46:15:f1:93:b3:87:57:1f:38: b3:b8:e2:eb:ce:c5:9b:74:f2:86:c3:66:c1:b1:07:21:e1:97: e4:bd:61:0c:15:bb:b5:4d:27:2b:5c:a6:1c:95:70:a0:dd:a5: 2f:19:23:1b:75:72:1b:42:28:b8:7c:cb:4f:f4:3e:7b:9c:ac: a7:0e:c8:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+yQQLlta9sBY1+MYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI2MTEwMTE0MDAxM1oXDTI3MDEzMDE0MDAxM1owLzEtMCsGA1UEAxMk ZjJiM2FmOTgtOTA1NC00ZWViLWJjOGEtODgyYTRiMmE5ZGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveedCjImIb/AQj3ZS1EvCOom7yCV2qXIjrMZ YWeONX0rrS1nuwu49h95zWbVdJyr75fZRVPKe34wucVJXOWz/wgG7i22Mxe+nkUA OFJ6ad/zHafaI0Hg+MfseYeRdwoa1vPnCjUJHUfg123EyAAYWJyeYyVwhpLTT97W 9mqaZSuXowPeEpANRqeYGP32RCr5NBxh8pyOB5IQkIPJn1X5rS+HVhe0z6oPMGWZ OP7dZBGiQcbb7jbt3HYzQVc24BxikS0r+b72oINX7dA41ykPJVHACSqW5cGY+Etz y5QYZsfTuHXkx2kMSqZ+lwzxRURUZoOuYwJSCS17uR10jqPkkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGXcG9VSMSE3joAXJIpEJ/XFtiqeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvYjdmMTE2ZTAtYTM3Yy0z MjQ1LThmMWQtZTgyM2IzOWVmNDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACw9DY0YMB14YmW7wIVmdMlUdT22fJOBInSHBh2wNNhAtrOCcK2gBCgI F4lI6WRENMvzo4rgDpXQ2bDjv+B4RJoSEumn5YALZk7B4X8Dge7KUD3w6HYGZLiI vwG9Qm8nb2KGZbtk2DMo7Ls2JbbuWJEb7gjTYnYmu8d88YJiUDkGfws1MVa4sw4T c5wF3Fzvo72lH1zG2yyZ1F8wvD5nxEmEjW3Qfu9iC0C4+cK9nqcLQfvJLzZqpnuw 6iqNrUYV8ZOzh1cfOLO44uvOxZt08obDZsGxByHhl+S9YQwVu7VNJytcphyVcKDd pS8ZIxt1chtCKLh8y0/0PnucrKcOyB8= -----END CERTIFICATE-----Generated at Sun Nov 15 17:35:34 2026 by rpki-client