$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/29ab6ee8-78f2-3fbb-9c80-da5a7e4bb2ae.roa File: 29ab6ee8-78f2-3fbb-9c80-da5a7e4bb2ae.roa (raw, json) Hash identifier: 7Y3fOPfahWuZ/Lpw6XCjplP/0iEE2MxNeeD0HXzJfa4= Subject key identifier: FF:2C:6A:CE:D1:67:34:0D:B7:51:CD:27:F8:38:D1:99:C4:42:C4:78 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584DBA3B0E95CDB951DF1AE555C0 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/29ab6ee8-78f2-3fbb-9c80-da5a7e4bb2ae.roa Signing time: Tue 05 May 2026 01:00:23 +0000 ROA not before: Tue 05 May 2026 01:00:23 +0000 ROA not after: Mon 03 Aug 2026 01:00:23 +0000 asID: 22516 IP address blocks: 198.1.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ba:3b:0e:95:cd:b9:51:df:1a:e5:55:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: May 5 01:00:23 2026 GMT Not After : Aug 3 01:00:23 2026 GMT Subject: CN=4b5601a4-cf5e-434a-94a1-bee972b0b73e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:43:af:a4:f6:56:53:2f:46:4d:d3:77:ea:5f: 3b:7c:d7:b8:50:e9:2e:b5:39:35:c8:d1:e4:5b:29: b7:e2:0c:82:64:c0:a5:69:51:31:eb:af:82:a6:34: 1d:14:95:3a:3a:f9:91:63:dd:48:15:a3:6b:d1:4b: 98:86:a7:29:87:f2:7f:7c:c3:ac:6a:16:72:73:95: cf:3a:56:49:ff:98:58:e5:e5:ff:80:54:58:52:78: 84:03:3c:1a:62:9a:59:26:f6:25:2d:24:1c:df:dc: c2:ed:84:65:16:60:08:58:61:d8:f5:bd:90:91:4b: 7f:b0:c3:28:d1:de:5c:20:1b:d6:99:9c:ca:89:8c: 7b:e1:15:91:e1:d2:66:ec:00:8f:45:f6:6a:97:bf: 26:70:3b:32:10:86:fe:74:12:f9:d8:0b:d5:37:15: 5a:70:13:c6:e4:6a:34:d8:fc:25:e8:8d:1f:10:9a: 09:fe:08:fa:5a:fe:32:94:f9:fc:1e:24:5f:46:7b: 24:48:42:d0:c5:2b:6a:42:a0:f6:11:7e:50:1a:a2: a6:59:1f:36:24:56:ca:7d:2e:a4:56:57:ba:dd:7c: 64:12:0e:da:21:59:8a:86:d5:19:8d:42:82:6d:e9: ee:f7:b6:8e:2b:a8:15:dc:73:1d:35:1d:30:da:e3: b8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:2C:6A:CE:D1:67:34:0D:B7:51:CD:27:F8:38:D1:99:C4:42:C4:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/29ab6ee8-78f2-3fbb-9c80-da5a7e4bb2ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:24:29:35:7a:94:eb:8a:82:e0:19:57:92:b6:37:38:50:0e: 39:b6:4c:fb:b4:5f:fc:c7:c8:6f:2c:99:fe:92:ab:61:05:df: c7:dc:54:93:c7:d4:62:0a:52:43:5f:e5:a2:7a:de:9a:56:53: 72:50:7c:1c:2b:21:a5:62:5d:98:77:77:01:de:a5:f9:12:25: 0d:01:78:65:7e:9a:5e:4a:89:9e:71:72:1f:d3:66:03:af:37: 0a:68:cf:b4:47:75:33:26:0c:6c:22:95:66:ff:54:05:20:c3: fb:58:4d:50:19:7a:28:e8:78:40:e0:ff:11:2a:cb:b7:41:6e: 94:df:a2:04:ca:2e:b9:70:4e:0b:a0:53:a6:4e:9e:77:3a:46: 8b:cd:d6:d4:e6:8a:ca:83:d6:0a:d6:53:1f:b6:b6:0f:8e:db: f7:c2:e5:a5:94:3c:7d:53:89:94:0f:1c:e8:ce:07:ee:1b:0e: 40:68:7f:18:87:a7:6e:58:91:0c:cd:c4:90:cb:13:3f:1e:27: 3f:f9:96:9c:0f:ec:0c:1f:36:f6:68:5c:2d:0e:b5:89:8b:5f: a1:b5:37:da:01:eb:df:d0:c0:f1:c8:34:28:8b:b8:bc:ef:3c: b6:0d:d3:73:7a:cd:66:b1:08:0a:cf:e5:db:08:0a:b8:ec:d6: 97:7f:6a:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE26Ow6VzblR3xrlVcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk NGI1NjAxYTQtY2Y1ZS00MzRhLTk0YTEtYmVlOTcyYjBiNzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0OvpPZWUy9GTdN36l87fNe4UOkutTk1yNHk Wym34gyCZMClaVEx66+CpjQdFJU6OvmRY91IFaNr0UuYhqcph/J/fMOsahZyc5XP OlZJ/5hY5eX/gFRYUniEAzwaYppZJvYlLSQc39zC7YRlFmAIWGHY9b2QkUt/sMMo 0d5cIBvWmZzKiYx74RWR4dJm7ACPRfZql78mcDsyEIb+dBL52AvVNxVacBPG5Go0 2Pwl6I0fEJoJ/gj6Wv4ylPn8HiRfRnskSELQxStqQqD2EX5QGqKmWR82JFbKfS6k Vle63XxkEg7aIVmKhtUZjUKCbenu97aOK6gV3HMdNR0w2uO4AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8sas7RZzQNt1HNJ/g40ZnEQsR4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvMjlhYjZlZTgtNzhmMi0z ZmJiLTljODAtZGE1YTdlNGJiMmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAkKTV6lOuKguAZV5K2NzhQDjm2TPu0X/zHyG8smf6Sq2EF38fcVJPH 1GIKUkNf5aJ63ppWU3JQfBwrIaViXZh3dwHepfkSJQ0BeGV+ml5KiZ5xch/TZgOv Nwpoz7RHdTMmDGwilWb/VAUgw/tYTVAZeijoeEDg/xEqy7dBbpTfogTKLrlwTgug U6ZOnnc6RovN1tTmisqD1grWUx+2tg+O2/fC5aWUPH1TiZQPHOjOB+4bDkBofxiH p25YkQzNxJDLEz8eJz/5lpwP7AwfNvZoXC0OtYmLX6G1N9oB69/QwPHINCiLuLzv PLYN03N6zWaxCArP5dsICrjs1pd/al8= -----END CERTIFICATE-----Generated at Wed May 13 03:26:22 2026 by rpki-client