$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/ef5d24b2-16b7-33ee-951c-957eba05bc08.roa File: ef5d24b2-16b7-33ee-951c-957eba05bc08.roa (raw, json) Hash identifier: kPD4XN5CD5n46CqIUQiAqVycz9LxMiZq43i1RL6BBaA= Subject key identifier: 9C:EC:2A:36:29:98:25:C4:8F:63:FE:53:09:38:10:BB:78:9B:B7:F4 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584F1732441BAFBFD591B2B34700 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/ef5d24b2-16b7-33ee-951c-957eba05bc08.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 7029 IP address blocks: 198.1.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:44:1b:af:bf:d5:91:b2:b3:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=154c4a87-0b40-4bab-ba02-77b66079ed0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e6:d0:26:04:16:59:81:2a:28:8f:3a:33:fd: 43:be:21:38:a2:a8:ff:98:dd:0f:4b:f8:4d:86:dc: e2:85:dc:a9:80:17:ac:11:65:4a:c3:93:15:7f:80: 48:36:98:b6:9c:9f:d9:ea:4b:1b:67:2c:28:7e:46: a0:eb:61:8e:fc:b4:a7:04:f3:7c:47:f2:97:84:5e: 76:32:26:85:dd:f8:15:51:cb:7f:59:70:e5:27:79: 89:3f:3c:45:57:53:b5:a7:eb:33:0b:d5:a3:50:42: 61:dd:22:3f:60:42:3f:ee:9f:c6:8a:6e:6c:97:4a: 90:33:84:ad:62:65:15:0d:c4:3c:e2:08:ae:f4:7d: e2:55:65:6a:ce:d1:6d:aa:e7:02:7d:8c:18:a2:8d: a1:76:fe:8d:e6:6c:c9:27:4e:17:8c:65:db:22:85: 04:fa:e9:ad:89:47:fa:bf:a3:50:c7:aa:50:29:9d: b7:43:1c:45:60:08:10:5b:83:7d:f8:4e:5e:a6:2e: 41:76:11:fb:d2:a7:01:e8:68:ae:e1:77:8c:18:fc: 52:c0:1a:c5:05:e6:bc:7d:7d:2d:65:40:f8:fd:ac: 70:a4:c0:af:fa:55:b0:ad:48:73:6e:1a:ca:ce:21: a9:6b:f9:aa:f3:fe:31:b0:5a:3f:3e:d3:a4:ef:ce: 17:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:EC:2A:36:29:98:25:C4:8F:63:FE:53:09:38:10:BB:78:9B:B7:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/ef5d24b2-16b7-33ee-951c-957eba05bc08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:46:36:2f:4d:14:b9:cf:65:dd:03:cf:ce:7d:4e:f8:65:c5: df:c2:1b:23:1a:13:c0:d9:71:c1:5a:93:18:5d:ed:11:da:5a: 2e:cb:09:65:b3:11:ad:08:bf:94:10:fa:3b:c3:1e:65:f1:fe: 7e:96:1f:b0:53:4d:1f:6a:58:5f:da:44:d3:43:7f:51:f4:cc: c4:57:77:9e:0a:83:1d:74:4e:18:ca:45:13:3a:83:e3:2c:c6: 63:84:31:5c:b7:bf:71:e3:2d:d1:3a:d5:15:e1:70:ff:b3:0b: 0a:e5:2c:d6:d1:79:61:ae:7a:61:0a:aa:61:eb:39:9a:d3:de: 62:4f:06:0d:05:61:54:73:ec:e8:31:70:18:a5:6f:16:b8:07: ad:85:b5:c7:fb:78:2b:97:94:6a:c7:56:53:26:35:d8:7b:a4: 14:c4:1e:da:38:48:78:2b:fb:1f:96:4d:83:99:31:28:04:bb: 90:90:b0:74:00:9e:06:21:52:8a:7f:f6:1e:bb:ec:d2:37:a7: 1a:b7:ab:ea:50:54:47:33:1c:89:26:42:c8:18:0b:4b:5c:0a: 6b:31:d9:aa:2d:14:ed:d0:a6:78:17:15:8d:72:5e:d9:28:e3: 70:03:a1:f6:15:0c:6a:ca:0b:a0:f6:83:82:43:d4:15:18:ca: 39:e8:75:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMkQbr7/VkbKzRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk MTU0YzRhODctMGI0MC00YmFiLWJhMDItNzdiNjYwNzllZDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmebQJgQWWYEqKI86M/1DviE4oqj/mN0PS/hN htzihdypgBesEWVKw5MVf4BINpi2nJ/Z6ksbZywofkag62GO/LSnBPN8R/KXhF52 MiaF3fgVUct/WXDlJ3mJPzxFV1O1p+szC9WjUEJh3SI/YEI/7p/Gim5sl0qQM4St YmUVDcQ84giu9H3iVWVqztFtqucCfYwYoo2hdv6N5mzJJ04XjGXbIoUE+umtiUf6 v6NQx6pQKZ23QxxFYAgQW4N9+E5epi5BdhH70qcB6Giu4XeMGPxSwBrFBea8fX0t ZUD4/axwpMCv+lWwrUhzbhrKziGpa/mq8/4xsFo/PtOk784XrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzsKjYpmCXEj2P+Uwk4ELt4m7f0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvZWY1ZDI0YjItMTZiNy0z M2VlLTk1MWMtOTU3ZWJhMDViYzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1GNi9NFLnPZd0Dz859Tvhlxd/CGyMaE8DZccFakxhd7RHaWi7LCWWz Ea0Iv5QQ+jvDHmXx/n6WH7BTTR9qWF/aRNNDf1H0zMRXd54Kgx10ThjKRRM6g+Ms xmOEMVy3v3HjLdE61RXhcP+zCwrlLNbReWGuemEKqmHrOZrT3mJPBg0FYVRz7Ogx cBilbxa4B62Ftcf7eCuXlGrHVlMmNdh7pBTEHto4SHgr+x+WTYOZMSgEu5CQsHQA ngYhUop/9h677NI3pxq3q+pQVEczHIkmQsgYC0tcCmsx2aotFO3QpngXFY1yXtko 43ADofYVDGrKC6D2g4JD1BUYyjnodXI= -----END CERTIFICATE-----Generated at Sun Sep 20 16:53:56 2026 by rpki-client