$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/da95dd06-00b0-32f1-9c22-4d2ecf9b3f50.roa File: da95dd06-00b0-32f1-9c22-4d2ecf9b3f50.roa (raw, json) Hash identifier: fa36AqjbvUoOPRko7SqrlsxE9tCrIlltMgmbK8RvUtM= Subject key identifier: BD:39:12:E7:56:B3:8D:0C:F4:12:C3:E5:C4:7F:FB:55:5E:6F:AA:50 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584F3E47EDB2A2E322D38B579C80 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/da95dd06-00b0-32f1-9c22-4d2ecf9b3f50.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 6079 IP address blocks: 198.1.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:ed:b2:a2:e3:22:d3:8b:57:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=33252595-44d2-449e-aadc-bfa3f0b08948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:92:dc:ab:c1:c0:6e:9d:c1:05:ef:b9:cd:e5: 17:46:01:9b:81:2c:f5:ff:6e:71:88:89:71:b8:cf: b7:03:af:62:60:46:22:77:47:5c:8d:65:ae:2a:67: 84:8a:70:98:20:10:af:71:f1:70:f1:a9:cf:c2:7c: d1:80:16:04:7f:92:7c:ed:44:6f:ff:87:25:e5:6e: 62:e9:84:4f:6b:d8:b7:2d:84:80:74:95:48:a9:6d: eb:f8:c3:81:10:a1:6b:38:80:f6:d7:40:51:fb:d1: 88:e0:9e:9d:6a:8a:ea:67:7c:98:30:89:08:0c:6e: 43:1c:63:ca:2b:4e:74:7f:04:d2:9d:b2:6d:0b:5b: 03:75:b0:4c:ca:4a:4e:28:ae:a2:f4:5e:4d:be:99: 49:7c:77:76:f6:74:7f:6a:3d:17:98:c3:51:53:09: e6:cc:44:0c:f4:d6:7d:59:5a:3f:b1:91:9e:bd:cb: 5e:ad:32:ca:1f:ff:ee:ef:28:b3:a9:43:1b:1c:ae: 25:f9:00:03:9a:25:8f:de:e6:c0:7e:55:7f:99:e6: 74:c3:24:67:00:b2:0c:79:42:88:83:64:9a:1b:ea: dd:95:01:f8:bd:4a:63:2c:2e:31:a0:10:0b:39:fa: 9e:53:09:ed:12:fa:f5:31:5c:8b:7f:a6:87:74:c2: 12:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:39:12:E7:56:B3:8D:0C:F4:12:C3:E5:C4:7F:FB:55:5E:6F:AA:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/da95dd06-00b0-32f1-9c22-4d2ecf9b3f50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:77:5e:8b:74:7c:3f:d5:80:71:07:60:41:dd:ee:ed:be:9f: fa:b0:cf:69:2e:bd:c4:68:72:44:72:75:5f:fe:d9:35:cd:c6: f4:11:6d:b2:fd:2d:5b:4d:94:cb:22:81:91:8e:ca:62:80:33: 44:d8:7f:76:4d:12:9f:3c:01:12:c9:4e:86:53:93:9c:15:a3: e5:90:4b:81:ae:d3:1e:75:43:cf:de:e0:c9:a3:a8:d6:b8:1a: 73:0b:5f:fe:65:bb:3b:d2:a1:16:5a:65:43:33:b5:df:43:4f: 6c:93:55:b1:af:59:51:00:23:93:4e:18:f5:ad:18:1e:30:27: 60:8e:6e:fb:60:ae:2b:2d:25:b5:17:c0:03:51:9b:24:a6:a0: 0b:32:41:7f:ea:ac:c9:ef:fa:55:8d:3e:60:d6:06:27:06:42: 4d:84:d4:fd:49:bc:70:35:cc:34:b5:56:54:b4:0a:e8:5a:0d: c1:db:f1:8e:fc:47:5d:a6:83:dd:81:28:87:01:ef:41:2a:b9: ef:49:fe:02:18:09:29:8b:87:05:c7:28:c0:eb:ac:21:15:01: 9d:47:21:23:e5:76:40:21:7f:a1:73:f9:38:03:8f:e5:44:ed: 97:44:04:c4:b8:a6:00:b7:9c:31:9e:6b:fb:dc:5b:53:9b:a1: 71:29:55:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R+2youMi04tXnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk MzMyNTI1OTUtNDRkMi00NDllLWFhZGMtYmZhM2YwYjA4OTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZLcq8HAbp3BBe+5zeUXRgGbgSz1/25xiIlx uM+3A69iYEYid0dcjWWuKmeEinCYIBCvcfFw8anPwnzRgBYEf5J87URv/4cl5W5i 6YRPa9i3LYSAdJVIqW3r+MOBEKFrOID210BR+9GI4J6daorqZ3yYMIkIDG5DHGPK K050fwTSnbJtC1sDdbBMykpOKK6i9F5NvplJfHd29nR/aj0XmMNRUwnmzEQM9NZ9 WVo/sZGevcterTLKH//u7yizqUMbHK4l+QADmiWP3ubAflV/meZ0wyRnALIMeUKI g2SaG+rdlQH4vUpjLC4xoBALOfqeUwntEvr1MVyLf6aHdMISnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL05EudWs40M9BLD5cR/+1Veb6pQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvZGE5NWRkMDYtMDBiMC0z MmYxLTljMjItNGQyZWNmOWIzZjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACR3Xot0fD/VgHEHYEHd7u2+n/qwz2kuvcRockRydV/+2TXNxvQRbbL9 LVtNlMsigZGOymKAM0TYf3ZNEp88ARLJToZTk5wVo+WQS4Gu0x51Q8/e4MmjqNa4 GnMLX/5luzvSoRZaZUMztd9DT2yTVbGvWVEAI5NOGPWtGB4wJ2CObvtgristJbUX wANRmySmoAsyQX/qrMnv+lWNPmDWBicGQk2E1P1JvHA1zDS1VlS0CuhaDcHb8Y78 R12mg92BKIcB70Eque9J/gIYCSmLhwXHKMDrrCEVAZ1HISPldkAhf6Fz+TgDj+VE 7ZdEBMS4pgC3nDGea/vcW1OboXEpVRM= -----END CERTIFICATE-----Generated at Tue Sep 22 23:46:05 2026 by rpki-client