$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/be997b55-faec-336a-8acc-c3ba457c6143.roa File: be997b55-faec-336a-8acc-c3ba457c6143.roa (raw, json) Hash identifier: /bQgsyWTgtaHyTlb52KjTwk0qjhcxeCacjNyrs3TCEI= Subject key identifier: 78:06:6F:13:6E:C6:CD:9F:09:40:18:88:FC:2F:F5:92:05:B4:AF:6F Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584F10378A9CE72AB1CF227025C0 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/be997b55-faec-336a-8acc-c3ba457c6143.roa Signing time: Fri 04 Sep 2026 13:00:12 +0000 ROA not before: Fri 04 Sep 2026 13:00:12 +0000 ROA not after: Thu 03 Dec 2026 14:00:12 +0000 asID: 64267 IP address blocks: 198.1.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:37:8a:9c:e7:2a:b1:cf:22:70:25:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Sep 4 13:00:12 2026 GMT Not After : Dec 3 14:00:12 2026 GMT Subject: CN=017edeb0-fa45-4e82-ad69-754e13ab8983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f6:f9:41:da:25:0f:52:9d:06:79:f1:c7:e4: cf:15:33:97:dd:35:26:40:ff:88:2f:fb:9b:7e:30: d9:61:b1:94:13:af:2d:f3:56:a3:ff:ca:eb:36:c3: 13:76:7d:01:a4:a6:30:a7:88:ec:a9:eb:75:26:1d: 20:ee:60:fc:81:b4:15:96:13:4b:0c:c0:ca:c5:7d: 70:da:47:ed:4a:68:6d:ef:39:b9:7f:ed:10:b0:e5: ad:24:fc:56:06:5d:91:df:23:1e:2e:32:27:8e:d6: 7b:7d:39:b9:22:8e:af:eb:15:a2:6c:a1:8d:29:7c: 4f:40:0c:df:ad:ad:d0:dc:1d:2e:20:8a:19:bb:63: 42:84:b2:14:99:fc:2c:37:63:83:6e:b7:63:a5:81: da:e3:66:1c:4c:d2:39:78:16:13:28:06:30:ca:69: 03:47:03:dd:09:89:cd:6f:23:61:58:40:80:44:0d: 09:a2:e2:d8:78:a0:e7:18:20:29:db:62:86:ce:49: 85:24:6c:42:f4:72:e8:ff:b3:cd:bb:26:7e:5e:d2: 23:6b:30:69:0c:00:0b:d1:c9:20:0a:57:d0:be:95: 0d:a1:a2:9f:b7:4e:fd:a2:23:83:6e:5c:31:a9:a4: b6:8a:4f:cc:e2:3e:6b:69:e9:6b:df:c4:1b:84:31: 77:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:06:6F:13:6E:C6:CD:9F:09:40:18:88:FC:2F:F5:92:05:B4:AF:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/be997b55-faec-336a-8acc-c3ba457c6143.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:4b:52:0a:1a:ec:00:72:79:76:e0:04:d1:33:24:1f:44:fd: 2b:67:f7:54:40:87:08:16:3c:fb:94:49:4e:99:3a:f5:aa:d6: f9:d5:5a:84:e4:91:8b:d1:07:5b:f6:b9:3b:52:be:d6:5f:90: b3:d6:79:a4:89:03:7d:6b:01:2c:61:42:ab:91:c4:08:c8:7d: 5d:7c:6f:b4:19:a9:88:7c:4c:13:c4:27:03:df:f1:82:5d:e9: 81:10:24:49:4c:44:18:6a:9e:dc:84:31:36:8a:74:d4:21:ec: 7a:f1:a4:aa:b5:dc:f2:12:d1:e8:0b:26:56:6c:be:38:9b:6f: 22:c0:65:2a:08:bd:37:f3:37:a5:c1:55:ea:eb:3a:79:07:f6: 0d:e8:12:62:50:43:78:4c:02:27:14:0a:9f:d3:6e:2a:7e:91: ce:03:d6:00:b0:75:a7:e7:e6:e3:54:8e:8a:ca:33:79:93:8e: 66:65:d7:58:e9:92:09:09:53:c7:39:9a:29:84:0c:ca:ea:4e: 14:df:53:5d:e8:ed:be:62:2d:04:b4:e1:dd:36:08:99:68:43: c5:7c:4d:f3:7e:2c:7d:e1:1b:4c:9b:59:28:3b:44:31:07:df: d1:4e:ca:f6:e7:05:7f:89:13:12:f4:b5:4a:14:51:32:0e:9a: 93:c3:d5:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QN4qc5yqxzyJwJcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk MDE3ZWRlYjAtZmE0NS00ZTgyLWFkNjktNzU0ZTEzYWI4OTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Pb5QdolD1KdBnnxx+TPFTOX3TUmQP+IL/ub fjDZYbGUE68t81aj/8rrNsMTdn0BpKYwp4jsqet1Jh0g7mD8gbQVlhNLDMDKxX1w 2kftSmht7zm5f+0QsOWtJPxWBl2R3yMeLjInjtZ7fTm5Io6v6xWibKGNKXxPQAzf ra3Q3B0uIIoZu2NChLIUmfwsN2ODbrdjpYHa42YcTNI5eBYTKAYwymkDRwPdCYnN byNhWECARA0JouLYeKDnGCAp22KGzkmFJGxC9HLo/7PNuyZ+XtIjazBpDAAL0ckg ClfQvpUNoaKft079oiODblwxqaS2ik/M4j5raelr38QbhDF3cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHgGbxNuxs2fCUAYiPwv9ZIFtK9vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvYmU5OTdiNTUtZmFlYy0z MzZhLThhY2MtYzNiYTQ1N2M2MTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlLUgoa7AByeXbgBNEzJB9E/Stn91RAhwgWPPuUSU6ZOvWq1vnVWoTk kYvRB1v2uTtSvtZfkLPWeaSJA31rASxhQquRxAjIfV18b7QZqYh8TBPEJwPf8YJd 6YEQJElMRBhqntyEMTaKdNQh7HrxpKq13PIS0egLJlZsvjibbyLAZSoIvTfzN6XB VerrOnkH9g3oEmJQQ3hMAicUCp/Tbip+kc4D1gCwdafn5uNUjorKM3mTjmZl11jp kgkJU8c5mimEDMrqThTfU13o7b5iLQS04d02CJloQ8V8TfN+LH3hG0ybWSg7RDEH 39FOyvbnBX+JExL0tUoUUTIOmpPD1RQ= -----END CERTIFICATE-----Generated at Mon Sep 21 07:58:17 2026 by rpki-client