$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3af862da-851f-39d9-9db1-d644ee402747.roa File: 3af862da-851f-39d9-9db1-d644ee402747.roa (raw, json) Hash identifier: GoytQODwjRKkOs8F2OjecJoTDmUatuE7gKNTO9pMRPA= Subject key identifier: EF:4B:7E:42:74:BE:8F:92:06:8B:F2:0A:16:99:2E:05:DF:35:68:13 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584F4972BE4DF0CB64AC4EF9AC00 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3af862da-851f-39d9-9db1-d644ee402747.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20001 IP address blocks: 198.1.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:be:4d:f0:cb:64:ac:4e:f9:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c5bd003b-4c92-47c6-939c-6406e992284d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d7:00:33:3b:f6:c8:00:96:9d:3c:fa:9c:38: ff:8b:ee:0b:78:41:cb:2a:a9:0d:6a:59:69:fd:7d: 71:a2:c6:8e:7f:f7:2b:3c:4c:a6:1f:e6:78:26:28: 08:42:fe:c0:6d:88:41:10:13:56:f9:de:d7:c3:16: 23:85:a9:c9:bf:4a:fc:d3:a2:e7:50:f7:92:1b:a8: 4f:41:ee:b2:07:63:ef:fe:39:82:aa:9a:37:60:6d: d9:b3:68:f5:c4:33:8b:14:bd:78:dd:92:f0:37:58: ec:da:31:08:6a:2f:f4:57:8d:7c:35:16:d6:38:c2: c5:22:ee:50:ba:3c:34:a1:62:9b:e4:7c:7d:e2:e8: e6:12:22:20:30:eb:8e:09:5a:50:b4:a8:3e:14:bf: ed:9c:82:bc:81:50:0e:2e:69:25:70:a9:98:8c:0f: 7b:25:de:5c:fa:66:85:5e:e9:1f:d5:98:46:db:7a: 7e:39:b0:cb:ee:46:e6:b2:e2:fc:ad:47:43:43:d8: cd:52:a2:d6:99:50:65:52:e5:db:a0:01:91:5b:dd: 96:aa:6d:cc:88:a9:5e:c7:d4:94:2c:01:d6:13:52: ab:a1:e8:d2:e0:58:62:bb:09:af:13:d9:a4:15:d5: 58:10:d8:d7:81:71:9e:40:11:bf:39:18:ac:6b:38: b8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:4B:7E:42:74:BE:8F:92:06:8B:F2:0A:16:99:2E:05:DF:35:68:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3af862da-851f-39d9-9db1-d644ee402747.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:25:25:87:14:52:d9:cb:90:25:bc:37:95:7d:16:3f:83:8e: e2:fd:d0:bd:a0:fa:e0:cf:55:6f:ee:9d:78:a4:e4:bc:eb:8f: 7d:ed:31:b6:0d:23:96:7d:8b:4a:97:99:0b:c2:21:9d:93:b3: b6:52:d8:66:e6:c3:de:55:d7:41:41:e8:17:db:05:de:73:7f: 1a:9e:29:91:c2:fd:bd:fd:86:78:51:ed:1e:68:8b:b8:2b:bb: 8d:d6:6d:0b:56:f1:e9:64:8a:7b:cc:1a:9e:82:ef:23:d1:05: e5:b8:9a:97:3a:f7:49:ad:a3:e5:fc:44:2a:ae:68:87:2d:b5: 28:6e:0b:d6:d3:4f:6b:62:d0:70:7d:b9:62:15:be:ef:b1:e8: 96:49:65:77:96:93:ed:7b:3e:53:0c:89:fb:74:20:df:dd:e9: ab:46:d5:80:be:4a:81:93:cf:34:e4:72:67:88:65:9a:9b:23: 40:f8:e7:3c:65:71:c0:7e:d4:e3:fc:3a:ca:7e:6b:e3:8c:13: 03:01:42:b4:ae:ac:65:a7:e2:18:05:5f:7e:dc:a8:7c:12:76: ad:7c:e1:4f:06:c1:af:cf:14:b2:97:0d:57:1b:c8:6b:f7:1c: 2c:6a:fa:8b:e8:67:7b:66:29:5a:34:b4:50:3d:20:1a:a5:da: 1b:6c:f2:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcr5N8MtkrE75rAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzViZDAwM2ItNGM5Mi00N2M2LTkzOWMtNjQwNmU5OTIyODRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9cAMzv2yACWnTz6nDj/i+4LeEHLKqkNallp /X1xosaOf/crPEymH+Z4JigIQv7AbYhBEBNW+d7XwxYjhanJv0r806LnUPeSG6hP Qe6yB2Pv/jmCqpo3YG3Zs2j1xDOLFL143ZLwN1js2jEIai/0V418NRbWOMLFIu5Q ujw0oWKb5Hx94ujmEiIgMOuOCVpQtKg+FL/tnIK8gVAOLmklcKmYjA97Jd5c+maF Xukf1ZhG23p+ObDL7kbmsuL8rUdDQ9jNUqLWmVBlUuXboAGRW92Wqm3MiKlex9SU LAHWE1KroejS4FhiuwmvE9mkFdVYENjXgXGeQBG/ORisazi4AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO9LfkJ0vo+SBovyChaZLgXfNWgTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvM2FmODYyZGEtODUxZi0z OWQ5LTlkYjEtZDY0NGVlNDAyNzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFolJYcUUtnLkCW8N5V9Fj+DjuL90L2g+uDPVW/unXik5Lzrj33tMbYN I5Z9i0qXmQvCIZ2Ts7ZS2Gbmw95V10FB6BfbBd5zfxqeKZHC/b39hnhR7R5oi7gr u43WbQtW8elkinvMGp6C7yPRBeW4mpc690mto+X8RCquaIcttShuC9bTT2ti0HB9 uWIVvu+x6JZJZXeWk+17PlMMift0IN/d6atG1YC+SoGTzzTkcmeIZZqbI0D45zxl ccB+1OP8Osp+a+OMEwMBQrSurGWn4hgFX37cqHwSdq184U8Gwa/PFLKXDVcbyGv3 HCxq+ovoZ3tmKVo0tFA9IBql2hts8l0= -----END CERTIFICATE-----Generated at Sat Sep 26 03:01:23 2026 by rpki-client