$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/be997b55-faec-336a-8acc-c3ba457c6143.roa File: be997b55-faec-336a-8acc-c3ba457c6143.roa (raw, json) Hash identifier: KwMtgqYQPRvE8B4VyBajUYn2CAnGzlc9N9Gv4EJKJ1I= Subject key identifier: 8A:23:CF:8D:5E:B0:A8:4E:91:FB:22:8B:D3:74:00:52:91:3A:A9:DE Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584D8D8FE53D27417E84A1171680 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/be997b55-faec-336a-8acc-c3ba457c6143.roa Signing time: Sun 19 Apr 2026 01:00:23 +0000 ROA not before: Sun 19 Apr 2026 01:00:23 +0000 ROA not after: Sat 18 Jul 2026 01:00:23 +0000 asID: 64267 IP address blocks: 198.1.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8d:8f:e5:3d:27:41:7e:84:a1:17:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Apr 19 01:00:23 2026 GMT Not After : Jul 18 01:00:23 2026 GMT Subject: CN=5ce0deef-7588-4477-993e-52294ae79222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:71:77:68:0d:f7:66:ef:a7:bd:3a:c8:76:e7: 2d:71:a4:2b:44:2d:d5:31:e0:54:0a:92:9a:6c:1b: cc:e0:51:04:c8:7d:63:fe:4f:d1:17:f0:34:46:60: 47:a9:91:9e:5f:d1:4e:9d:67:a6:a2:ec:04:cc:ba: bb:e2:00:59:42:1e:62:2d:3a:ab:ed:0e:af:35:c0: 2c:24:13:37:9d:73:ea:68:7d:4d:fd:27:bd:2a:72: 24:2a:73:e2:f6:a3:cc:06:10:37:91:af:5c:30:6d: 30:ac:52:4e:1a:f2:13:9f:43:5a:52:11:94:96:29: 9d:ba:4d:ff:ed:91:00:b0:34:c5:d1:f8:2f:44:6d: 5f:31:7b:38:de:81:6b:88:d8:ad:54:75:bf:e1:af: 65:19:a7:88:f1:7b:6a:3b:d8:eb:b6:c2:b5:b7:86: 45:c6:0a:5d:87:f7:db:2b:ab:cb:89:b5:da:8f:83: d9:c4:a0:24:0c:05:01:4a:ac:8c:28:21:a5:d5:11: fd:37:87:11:fd:f9:9f:d2:dc:e4:af:c4:6d:a0:e5: 39:b5:e6:09:53:50:df:e4:fb:c8:c9:1c:15:be:26: 48:3d:aa:76:7b:e2:4d:cf:13:81:cf:90:7c:01:d5: 1a:93:d8:79:d8:69:0a:4b:5c:7d:35:6e:3a:9d:da: 08:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:23:CF:8D:5E:B0:A8:4E:91:FB:22:8B:D3:74:00:52:91:3A:A9:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/be997b55-faec-336a-8acc-c3ba457c6143.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:cf:63:1c:e6:89:d7:a8:de:8a:17:1b:d1:64:72:32:8c:6d: e0:ba:20:06:a8:e8:4c:4e:db:92:db:d3:64:ac:38:3a:6b:e0: d5:40:8c:3d:98:ab:71:88:27:4d:1a:b4:ea:dc:e0:81:12:8c: 06:62:86:aa:bc:9a:03:d2:c3:9a:33:e9:f9:aa:0c:15:71:60: 36:06:28:32:fe:da:16:6f:e4:6f:4b:05:c0:c2:a2:a6:c4:72: ca:cf:78:da:06:b4:03:2a:82:4c:57:b7:77:5d:44:5e:8f:81: 72:2e:81:eb:8c:e4:26:a4:f0:8e:58:4d:43:12:95:8c:5c:2c: 39:2b:1f:ef:07:71:92:e5:3e:6a:99:bf:77:1f:08:d5:80:0b: 55:89:ed:f7:e9:49:f8:71:c6:95:a0:63:45:29:3b:3a:30:8b: b8:26:11:fd:c8:5c:a0:c7:ba:52:47:ae:ea:fb:70:24:63:95: e6:8a:ed:5f:b7:1a:de:31:fc:fa:95:b7:59:fc:76:cf:8f:0d: 42:c9:43:82:71:77:b0:8f:3e:e7:b7:c5:34:06:dd:a6:6e:a6: 46:04:a2:c7:5d:ee:23:f8:ad:af:cf:e1:48:d5:db:be:c4:1a: ae:85:6d:fb:0c:2e:15:8d:9f:5a:6e:11:06:9f:17:40:df:18: be:c5:51:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Nj+U9J0F+hKEXFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI2MDQxOTAxMDAyM1oXDTI2MDcxODAxMDAyM1owLzEtMCsGA1UEAxMk NWNlMGRlZWYtNzU4OC00NDc3LTk5M2UtNTIyOTRhZTc5MjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHF3aA33Zu+nvTrIductcaQrRC3VMeBUCpKa bBvM4FEEyH1j/k/RF/A0RmBHqZGeX9FOnWemouwEzLq74gBZQh5iLTqr7Q6vNcAs JBM3nXPqaH1N/Se9KnIkKnPi9qPMBhA3ka9cMG0wrFJOGvITn0NaUhGUlimduk3/ 7ZEAsDTF0fgvRG1fMXs43oFriNitVHW/4a9lGaeI8XtqO9jrtsK1t4ZFxgpdh/fb K6vLibXaj4PZxKAkDAUBSqyMKCGl1RH9N4cR/fmf0tzkr8RtoOU5teYJU1Df5PvI yRwVviZIPap2e+JNzxOBz5B8AdUak9h52GkKS1x9NW46ndoI5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIojz41esKhOkfsii9N0AFKROqneMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvYmU5OTdiNTUtZmFlYy0z MzZhLThhY2MtYzNiYTQ1N2M2MTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnPYxzmideo3ooXG9FkcjKMbeC6IAao6ExO25Lb02SsODpr4NVAjD2Y q3GIJ00atOrc4IESjAZihqq8mgPSw5oz6fmqDBVxYDYGKDL+2hZv5G9LBcDCoqbE csrPeNoGtAMqgkxXt3ddRF6PgXIugeuM5Cak8I5YTUMSlYxcLDkrH+8HcZLlPmqZ v3cfCNWAC1WJ7ffpSfhxxpWgY0UpOzowi7gmEf3IXKDHulJHrur7cCRjleaK7V+3 Gt4x/PqVt1n8ds+PDULJQ4Jxd7CPPue3xTQG3aZupkYEosdd7iP4ra/P4UjV277E Gq6FbfsMLhWNn1puEQafF0DfGL7FUSY= -----END CERTIFICATE-----Generated at Sun Apr 19 11:36:52 2026 by rpki-client