$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/21bf5113-e55b-37f7-adc9-8cd87af0160b.roa File: 21bf5113-e55b-37f7-adc9-8cd87af0160b.roa (raw, json) Hash identifier: JiULfFrrhnnJD5tRX0RMHYNHNCfV+eSQ/0YHpYr7NOw= Subject key identifier: E3:D7:02:41:1B:FB:5A:5C:C7:C4:AD:E4:4B:5E:2A:18:51:4F:6D:3F Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584FAF5897AD75C8844D58015280 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/21bf5113-e55b-37f7-adc9-8cd87af0160b.roa Signing time: Sat 31 Oct 2026 13:00:13 +0000 ROA not before: Sat 31 Oct 2026 13:00:13 +0000 ROA not after: Fri 29 Jan 2027 14:00:13 +0000 asID: 197537 IP address blocks: 198.1.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:af:58:97:ad:75:c8:84:4d:58:01:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Oct 31 13:00:13 2026 GMT Not After : Jan 29 14:00:13 2027 GMT Subject: CN=7ea56a48-12c6-41a6-9dcd-50ef4d04322a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4c:fd:c2:19:22:6d:e3:ed:9e:41:3c:45:77: f7:fe:92:02:00:b4:80:39:34:1f:4c:5c:ba:e0:43: df:93:88:53:2b:d9:40:37:6e:8e:db:0d:77:d8:65: 58:f0:84:1b:1d:29:ec:f9:bd:6d:1f:4b:8b:23:ad: 96:70:90:ac:d0:ca:e2:6b:7e:fb:2e:3d:72:d0:00: 57:b4:87:26:2e:ff:19:82:da:77:cb:11:e2:0a:d4: de:ed:a3:e9:01:b8:ec:ae:f5:dc:64:44:e0:71:97: 9d:1a:c0:00:1a:cc:03:0d:06:d6:b4:c5:cb:8b:5b: 0a:4b:ef:36:ff:ea:29:7c:eb:eb:ce:47:90:a8:f1: 8f:8e:07:bd:26:10:dd:e6:5e:73:f3:2d:9d:10:37: 26:e3:1f:34:61:9f:9d:ef:76:96:37:a2:b2:a4:23: 18:ac:61:4c:25:5b:35:44:3f:79:b9:e2:4a:34:3e: c9:b1:34:e1:ea:9e:6d:5c:52:51:c0:c6:3f:c6:89: 2b:19:95:dc:43:d8:fd:0a:6a:ae:f1:6e:25:d4:7c: 93:fa:af:8b:bb:58:ed:13:66:45:e7:7d:5d:6f:a6: 40:16:8b:9e:a2:8b:7d:d6:a9:62:57:0b:1e:a7:45: 46:40:53:6b:b7:57:6b:af:49:7d:c9:c1:d4:d2:36: c1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D7:02:41:1B:FB:5A:5C:C7:C4:AD:E4:4B:5E:2A:18:51:4F:6D:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/21bf5113-e55b-37f7-adc9-8cd87af0160b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:04:d3:66:4f:58:ff:cc:ba:40:5c:42:a3:88:90:07:11:54: 50:6e:dd:b7:53:b1:97:cd:98:5a:db:4a:9b:bf:75:62:78:1c: 00:9b:72:07:48:d1:0c:a2:fc:8c:bc:8b:52:70:d4:5d:a1:e4: 15:64:6d:2b:db:31:15:15:87:89:27:ca:22:5a:94:b1:5f:d7: 11:5b:3c:20:c7:92:2a:01:36:8f:ff:69:e5:52:c2:cc:91:7b: 3d:8a:0c:94:1b:fb:dd:cd:29:fe:c8:63:d8:0f:8a:49:05:c6: 0e:8a:82:c9:33:3f:8b:53:39:88:c0:84:3e:29:8e:35:85:e4: be:ee:5a:bc:1a:08:72:79:bb:43:15:0b:33:45:f4:67:6f:7a: 8b:28:93:40:b3:d4:19:49:7a:16:13:c6:ef:ba:fc:1a:d7:5e: 0e:0d:29:6b:42:d4:07:d6:e1:f3:d0:7a:4b:a5:d9:8e:cf:06: e2:af:15:36:39:17:73:e3:5d:56:fc:59:96:91:77:f4:36:86: 0d:f7:8c:78:ba:f9:3a:d9:43:c0:3c:6b:5a:3b:67:cb:90:fb: ef:7e:6d:ee:a7:9c:58:6e:cc:43:0f:b6:26:dd:89:c6:61:fd: 99:4c:b3:7f:3e:0d:0b:ae:54:a3:d0:3e:92:41:4a:5b:91:31: a1:d5:1b:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+vWJetdciETVgBUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI2MTAzMTEzMDAxM1oXDTI3MDEyOTE0MDAxM1owLzEtMCsGA1UEAxMk N2VhNTZhNDgtMTJjNi00MWE2LTlkY2QtNTBlZjRkMDQzMjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0z9whkibePtnkE8RXf3/pICALSAOTQfTFy6 4EPfk4hTK9lAN26O2w132GVY8IQbHSns+b1tH0uLI62WcJCs0Mria377Lj1y0ABX tIcmLv8Zgtp3yxHiCtTe7aPpAbjsrvXcZETgcZedGsAAGswDDQbWtMXLi1sKS+82 /+opfOvrzkeQqPGPjge9JhDd5l5z8y2dEDcm4x80YZ+d73aWN6KypCMYrGFMJVs1 RD95ueJKND7JsTTh6p5tXFJRwMY/xokrGZXcQ9j9Cmqu8W4l1HyT+q+Lu1jtE2ZF 531db6ZAFoueoot91qliVwsep0VGQFNrt1drr0l9ycHU0jbB4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPXAkEb+1pcx8St5EteKhhRT20/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvMjFiZjUxMTMtZTU1Yi0z N2Y3LWFkYzktOGNkODdhZjAxNjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIE02ZPWP/MukBcQqOIkAcRVFBu3bdTsZfNmFrbSpu/dWJ4HACbcgdI 0Qyi/Iy8i1Jw1F2h5BVkbSvbMRUVh4knyiJalLFf1xFbPCDHkioBNo//aeVSwsyR ez2KDJQb+93NKf7IY9gPikkFxg6KgskzP4tTOYjAhD4pjjWF5L7uWrwaCHJ5u0MV CzNF9Gdveosok0Cz1BlJehYTxu+6/BrXXg4NKWtC1AfW4fPQekul2Y7PBuKvFTY5 F3PjXVb8WZaRd/Q2hg33jHi6+TrZQ8A8a1o7Z8uQ++9+be6nnFhuzEMPtibdicZh /ZlMs38+DQuuVKPQPpJBSluRMaHVG3o= -----END CERTIFICATE-----Generated at Sun Nov 15 10:36:54 2026 by rpki-client