$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/5fe72d42-47d0-3f76-a711-934549d5b079.roa File: 5fe72d42-47d0-3f76-a711-934549d5b079.roa (raw, json) Hash identifier: GQyX4TVMJe71bMMvZ6DJGtMARHGSowzleuQ+pciYcWc= Subject key identifier: 46:37:C3:92:75:54:65:22:3B:93:6D:E0:A4:09:AD:C9:BE:DF:53:90 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584FCF91589F8E5D9399BEF0DA00 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/5fe72d42-47d0-3f76-a711-934549d5b079.roa Signing time: Thu 12 Nov 2026 02:00:12 +0000 ROA not before: Thu 12 Nov 2026 02:00:12 +0000 ROA not after: Wed 10 Feb 2027 02:00:12 +0000 asID: 174 IP address blocks: 198.1.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:cf:91:58:9f:8e:5d:93:99:be:f0:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Nov 12 02:00:12 2026 GMT Not After : Feb 10 02:00:12 2027 GMT Subject: CN=d523a917-9622-4215-bf45-fc269c91b962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:80:54:4f:69:93:77:76:38:28:4d:03:40:14: 7b:94:3d:38:85:54:34:1a:d5:ef:62:1d:5c:cf:9f: 56:0d:6f:c9:0d:15:59:5b:1b:fb:64:29:41:66:ec: 80:ff:68:39:35:9e:95:48:60:24:a1:ac:ae:0f:d2: ec:37:ac:93:0b:6d:1b:4b:73:5b:ee:3a:86:19:d5: e2:c6:e6:14:f2:b3:b4:0f:70:c8:c9:f5:58:eb:fa: 61:35:a0:12:6a:cc:97:00:26:42:19:3c:73:5a:e2: 80:8b:b7:84:88:cb:3d:d9:69:81:4c:82:43:2d:1e: 50:e4:34:1e:14:33:a4:d5:bf:fd:e8:77:2f:ad:5d: 48:fb:7d:50:e3:ca:65:da:09:46:63:c8:64:38:a3: c4:76:9b:03:fc:32:d1:4f:ae:9c:e0:ea:5f:84:a3: de:3b:bc:e9:09:24:0c:90:bd:9f:a8:77:f3:4e:a1: 0c:a8:34:bf:06:cb:34:b8:32:e1:02:f0:78:1a:4a: 0e:91:29:37:8a:59:86:d5:bd:5c:9e:22:db:2f:a3: a8:db:e4:f7:0e:cf:f0:71:14:d4:f2:12:50:56:be: 35:b6:1e:86:98:35:24:00:34:6c:4e:af:32:01:c8: 46:65:3e:a4:06:5c:29:a1:f3:2e:99:a8:ab:17:de: 28:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:37:C3:92:75:54:65:22:3B:93:6D:E0:A4:09:AD:C9:BE:DF:53:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/5fe72d42-47d0-3f76-a711-934549d5b079.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:b9:46:4c:43:d0:09:68:dc:1d:d9:98:b9:53:4a:30:08:07: 75:ff:15:38:a7:6c:44:d5:db:c8:4a:42:cc:62:03:a6:43:f9: f4:d5:40:4d:0e:ba:e5:3a:88:cc:33:70:2e:63:9b:95:40:eb: 67:bf:cf:05:d8:e2:ca:12:ae:09:5d:8f:8d:de:3e:d7:79:8e: 65:6e:2f:cc:d1:22:08:e0:03:36:51:66:fb:aa:88:6d:06:50: 0a:0d:8c:c8:e5:d1:ea:ae:55:3d:58:da:5a:37:61:66:d9:62: 5c:f7:a8:f4:9d:51:5d:32:47:30:b8:ac:eb:07:de:4f:6f:0c: 48:e4:b0:49:50:cb:62:1c:4e:12:b1:5b:6b:d8:21:95:c0:12: bb:c5:0b:21:f2:19:58:1e:34:fa:6d:5e:91:99:c3:59:34:74: 7c:53:d9:6e:cd:9a:5a:d1:65:94:72:57:f8:92:42:f5:00:fd: f1:f7:f4:9e:6e:9c:6e:a7:25:61:eb:9e:ee:6e:11:ce:b3:c6: d0:51:ec:87:eb:40:a4:5f:e3:0c:ce:01:fa:fb:3a:80:0b:6b: 24:69:ac:5c:af:ae:55:8c:c9:00:5f:94:c3:8c:70:82:ad:c0: b1:11:a4:c2:4e:84:fd:94:37:24:e9:48:11:35:1b:4e:6b:dd: d8:d2:3b:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/PkVifjl2Tmb7w2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI2MTExMjAyMDAxMloXDTI3MDIxMDAyMDAxMlowLzEtMCsGA1UEAxMk ZDUyM2E5MTctOTYyMi00MjE1LWJmNDUtZmMyNjljOTFiOTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4BUT2mTd3Y4KE0DQBR7lD04hVQ0GtXvYh1c z59WDW/JDRVZWxv7ZClBZuyA/2g5NZ6VSGAkoayuD9LsN6yTC20bS3Nb7jqGGdXi xuYU8rO0D3DIyfVY6/phNaASasyXACZCGTxzWuKAi7eEiMs92WmBTIJDLR5Q5DQe FDOk1b/96HcvrV1I+31Q48pl2glGY8hkOKPEdpsD/DLRT66c4OpfhKPeO7zpCSQM kL2fqHfzTqEMqDS/Bss0uDLhAvB4GkoOkSk3ilmG1b1cniLbL6Oo2+T3Ds/wcRTU 8hJQVr41th6GmDUkADRsTq8yAchGZT6kBlwpofMumairF94oNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEY3w5J1VGUiO5Nt4KQJrcm+31OQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvNWZlNzJkNDItNDdkMC0z Zjc2LWE3MTEtOTM0NTQ5ZDViMDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+5RkxD0Alo3B3ZmLlTSjAIB3X/FTinbETV28hKQsxiA6ZD+fTVQE0O uuU6iMwzcC5jm5VA62e/zwXY4soSrgldj43ePtd5jmVuL8zRIgjgAzZRZvuqiG0G UAoNjMjl0equVT1Y2lo3YWbZYlz3qPSdUV0yRzC4rOsH3k9vDEjksElQy2IcThKx W2vYIZXAErvFCyHyGVgeNPptXpGZw1k0dHxT2W7NmlrRZZRyV/iSQvUA/fH39J5u nG6nJWHrnu5uEc6zxtBR7IfrQKRf4wzOAfr7OoALayRprFyvrlWMyQBflMOMcIKt wLERpMJOhP2UNyTpSBE1G05r3djSO60= -----END CERTIFICATE-----Generated at Sun Nov 15 21:20:10 2026 by rpki-client