$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/c1a2b857-fbed-3ce6-8d64-bbe3a4db4a33.roa File: c1a2b857-fbed-3ce6-8d64-bbe3a4db4a33.roa (raw, json) Hash identifier: Sr5u6gC13ybpEf2WgWX/67w4ipK7yBjlga9Oltlz/oU= Subject key identifier: 56:ED:EC:41:4E:98:D8:04:CB:15:F2:B1:D2:43:A0:A1:B0:64:84:31 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584FD25BD588BEECAEB6D3D2CD80 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/c1a2b857-fbed-3ce6-8d64-bbe3a4db4a33.roa Signing time: Fri 13 Nov 2026 02:00:14 +0000 ROA not before: Fri 13 Nov 2026 02:00:14 +0000 ROA not after: Thu 11 Feb 2027 02:00:14 +0000 asID: 30088 IP address blocks: 198.1.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d2:5b:d5:88:be:ec:ae:b6:d3:d2:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Nov 13 02:00:14 2026 GMT Not After : Feb 11 02:00:14 2027 GMT Subject: CN=9fe8bf1c-613c-4fe0-ac62-5bb77a8aac08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e0:d2:d2:7a:99:ec:a2:8c:12:26:61:00:4f: 26:bd:36:ca:15:43:8f:8b:5a:98:35:9b:57:cf:a9: f5:76:30:c9:3d:f5:7a:73:9b:3a:0c:18:f4:9d:30: ce:78:fb:22:1d:53:2a:36:49:05:c9:33:3b:d6:a4: f9:48:22:de:2a:77:58:30:6b:2d:29:55:ee:c6:a1: 90:da:a4:45:7f:03:71:64:0e:47:c8:c1:e4:24:2f: 22:aa:f6:3a:c5:d1:57:8b:ae:a1:c5:78:b1:ea:71: 86:17:b3:d7:c7:19:30:9d:eb:e6:70:6c:98:fc:4c: 30:e7:95:15:04:81:58:91:67:da:85:07:61:63:2f: 1e:39:3a:97:fc:ec:16:f1:e9:73:f8:70:d1:d0:ab: d1:bf:5f:9e:ae:21:c0:33:a9:ff:85:a7:b6:d3:94: 08:89:8e:76:1d:e1:ee:1c:6d:89:12:c1:7b:52:63: 79:59:7d:99:69:a7:32:17:12:f7:f9:7b:23:b8:b1: 3d:02:20:89:c5:2d:b5:68:bb:25:88:b5:15:31:1d: ac:8f:8c:d6:37:f3:f6:2c:4a:d7:53:d7:c8:1c:4e: 3f:0d:fb:18:e3:b5:e4:c4:06:1e:69:35:b2:1e:ac: 07:6d:1f:09:29:24:09:9c:fd:df:c4:b6:93:04:a0: 52:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:ED:EC:41:4E:98:D8:04:CB:15:F2:B1:D2:43:A0:A1:B0:64:84:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/c1a2b857-fbed-3ce6-8d64-bbe3a4db4a33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:50:ae:0e:fb:b0:37:43:56:66:22:30:f3:9d:16:8e:0f:fc: 87:8d:04:16:9b:ce:a6:dd:8c:e4:09:1e:92:ad:fb:92:ca:b4: 47:e8:00:0c:98:87:5c:cd:81:95:0b:25:27:e5:0b:b8:f9:b1: ef:41:6c:01:3b:02:58:41:2b:8a:1d:c1:5d:c1:4d:a9:0c:b4: 98:31:de:21:0e:f4:d4:72:eb:68:8a:98:7a:4c:38:fe:77:f8: d7:bf:bf:e4:21:b6:39:ce:01:c1:2b:9b:53:3a:80:6d:6a:db: f0:e3:c4:93:66:0f:88:91:b8:16:c8:47:6a:ca:2f:07:8d:90: e1:7c:37:3e:ea:cb:fa:92:e6:b9:71:e7:67:46:db:f3:c1:8d: a7:6a:28:36:1b:39:aa:9a:a8:9a:73:f4:be:08:6f:82:3d:03: e8:34:6c:8a:b5:3d:b7:1f:ac:44:49:6e:05:c6:e0:ca:6e:91: c6:82:d5:e4:8b:80:9f:1d:26:fc:89:87:94:ea:02:89:cf:ed: 27:fc:2d:0e:c9:e1:05:63:5b:85:03:ec:4f:15:c3:2b:9b:9a: 8e:d9:0f:6b:6a:5b:62:c2:ee:de:9d:70:6e:00:33:61:a3:cb: 52:75:b2:cd:46:47:cc:29:2f:35:7b:2c:c0:d0:ec:7f:53:09: 5c:9e:80:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/SW9WIvuyuttPSzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI2MTExMzAyMDAxNFoXDTI3MDIxMTAyMDAxNFowLzEtMCsGA1UEAxMk OWZlOGJmMWMtNjEzYy00ZmUwLWFjNjItNWJiNzdhOGFhYzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuDS0nqZ7KKMEiZhAE8mvTbKFUOPi1qYNZtX z6n1djDJPfV6c5s6DBj0nTDOePsiHVMqNkkFyTM71qT5SCLeKndYMGstKVXuxqGQ 2qRFfwNxZA5HyMHkJC8iqvY6xdFXi66hxXix6nGGF7PXxxkwnevmcGyY/Eww55UV BIFYkWfahQdhYy8eOTqX/OwW8elz+HDR0KvRv1+eriHAM6n/hae205QIiY52HeHu HG2JEsF7UmN5WX2ZaacyFxL3+XsjuLE9AiCJxS21aLsliLUVMR2sj4zWN/P2LErX U9fIHE4/DfsY47XkxAYeaTWyHqwHbR8JKSQJnP3fxLaTBKBS9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbt7EFOmNgEyxXysdJDoKGwZIQxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvYzFhMmI4NTctZmJlZC0z Y2U2LThkNjQtYmJlM2E0ZGI0YTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5Qrg77sDdDVmYiMPOdFo4P/IeNBBabzqbdjOQJHpKt+5LKtEfoAAyY h1zNgZULJSflC7j5se9BbAE7AlhBK4odwV3BTakMtJgx3iEO9NRy62iKmHpMOP53 +Ne/v+QhtjnOAcErm1M6gG1q2/DjxJNmD4iRuBbIR2rKLweNkOF8Nz7qy/qS5rlx 52dG2/PBjadqKDYbOaqaqJpz9L4Ib4I9A+g0bIq1PbcfrERJbgXG4MpukcaC1eSL gJ8dJvyJh5TqAonP7Sf8LQ7J4QVjW4UD7E8Vwyubmo7ZD2tqW2LC7t6dcG4AM2Gj y1J1ss1GR8wpLzV7LMDQ7H9TCVyegGY= -----END CERTIFICATE-----Generated at Sun Nov 15 19:22:39 2026 by rpki-client