$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/72c2bce9-bbd0-3e46-b5a7-dcf037b588ed.roa File: 72c2bce9-bbd0-3e46-b5a7-dcf037b588ed.roa (raw, json) Hash identifier: zrXo5tqTi/UIbypuYgyFDOvNcG1Pn8abUXlSkHIP6uY= Subject key identifier: 8E:6B:D9:95:64:46:8F:1F:10:08:C3:A4:47:93:AE:FD:71:E0:14:A8 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584DCAFB14C7BE6BBA35199D0580 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/72c2bce9-bbd0-3e46-b5a7-dcf037b588ed.roa Signing time: Mon 11 May 2026 01:00:24 +0000 ROA not before: Mon 11 May 2026 01:00:24 +0000 ROA not after: Sun 09 Aug 2026 01:00:24 +0000 asID: 20001 IP address blocks: 198.1.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:fb:14:c7:be:6b:ba:35:19:9d:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: May 11 01:00:24 2026 GMT Not After : Aug 9 01:00:24 2026 GMT Subject: CN=a4b2098b-a511-480b-8413-9304c0362012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bc:d7:d5:be:d7:23:0c:fa:e4:33:7b:64:f8: da:d2:00:56:92:f0:25:5d:88:b3:a2:c6:5d:1b:f1: e8:5a:80:2c:c8:25:3b:a3:0b:d7:d2:f7:a4:59:94: c4:51:60:8c:c7:03:a2:62:7e:9b:93:8c:0a:fe:04: 01:a0:2c:06:b6:8a:0b:52:25:6f:e7:a3:c7:1f:ef: 41:e1:6e:ed:dd:8c:9d:b4:f4:3a:7b:4e:6b:6a:ac: 49:32:15:89:64:07:ec:07:66:bc:dd:53:07:df:7b: df:6f:ac:47:29:2d:07:e6:7e:97:a1:ac:b1:d9:d9: 06:1c:b7:2f:4c:ae:cf:3b:d4:6b:55:98:a3:a1:7d: 5b:45:4e:d5:13:fe:03:a5:ee:57:40:62:a6:df:9d: b5:29:4f:b8:1e:fe:c6:d3:f7:66:65:1e:1b:16:e0: 08:3a:41:a4:80:4f:a2:5c:06:cf:cf:05:44:c0:6b: 9f:35:c2:d0:66:0e:14:46:74:5f:70:eb:1c:42:0d: f5:a0:8c:de:bd:79:b6:37:87:c9:71:ee:08:13:d6: c4:e3:2c:e5:52:8c:e2:99:b3:39:73:28:1e:1b:c8: 94:dd:8b:a6:c4:1b:f4:a4:db:08:af:59:1c:32:af: c8:c9:27:2e:2f:14:07:e2:59:e8:b6:e9:8c:4a:58: 75:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:6B:D9:95:64:46:8F:1F:10:08:C3:A4:47:93:AE:FD:71:E0:14:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/72c2bce9-bbd0-3e46-b5a7-dcf037b588ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:a6:a5:0b:57:31:fe:ef:a6:f5:4c:47:c4:22:24:d0:d4:fe: be:f8:92:6a:c6:a4:7f:3c:00:3f:18:4a:25:c1:d0:13:a4:6e: df:0f:6d:fe:0b:b1:7a:b3:5e:89:78:12:bc:de:20:60:46:59: 81:61:d8:6f:af:19:92:56:a6:4c:18:05:2b:73:f0:56:da:30: db:c5:0f:4b:6a:d6:59:19:63:ae:8b:0c:e3:6d:c1:1d:1a:71: db:0a:e0:6f:67:8d:84:0c:38:30:d0:e3:b2:9d:70:55:5a:bc: 98:56:1a:6e:13:8a:18:79:7b:da:da:4d:11:e0:8d:8f:06:84: 01:de:d2:cb:0a:b9:15:b9:e8:0a:8a:94:c0:4c:e5:d1:87:7c: e6:83:72:49:e1:56:2d:2b:a2:a1:95:b5:2c:ab:23:7a:7f:b6: b5:84:8d:8f:06:bf:76:1d:e4:57:a0:3a:6a:72:2e:7c:c2:18: f3:0b:b6:08:76:f6:30:04:aa:c6:52:b7:56:49:19:77:79:d5: 01:7b:f9:6f:b9:dc:b1:35:d0:c9:8b:be:a7:a2:1a:53:35:08: 60:89:85:49:7c:fb:aa:68:85:6b:82:57:28:47:ee:2d:bb:6d: e0:8b:2d:3b:3b:62:9e:1b:5f:19:15:f2:27:39:fc:78:00:4b: a9:62:3a:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+xTHvmu6NRmdBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk YTRiMjA5OGItYTUxMS00ODBiLTg0MTMtOTMwNGMwMzYyMDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLzX1b7XIwz65DN7ZPja0gBWkvAlXYizosZd G/HoWoAsyCU7owvX0vekWZTEUWCMxwOiYn6bk4wK/gQBoCwGtooLUiVv56PHH+9B 4W7t3YydtPQ6e05raqxJMhWJZAfsB2a83VMH33vfb6xHKS0H5n6Xoayx2dkGHLcv TK7PO9RrVZijoX1bRU7VE/4Dpe5XQGKm3521KU+4Hv7G0/dmZR4bFuAIOkGkgE+i XAbPzwVEwGufNcLQZg4URnRfcOscQg31oIzevXm2N4fJce4IE9bE4yzlUozimbM5 cygeG8iU3YumxBv0pNsIr1kcMq/IyScuLxQH4lnotumMSlh1KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5r2ZVkRo8fEAjDpEeTrv1x4BSoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvNzJjMmJjZTktYmJkMC0z ZTQ2LWI1YTctZGNmMDM3YjU4OGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESmpQtXMf7vpvVMR8QiJNDU/r74kmrGpH88AD8YSiXB0BOkbt8Pbf4L sXqzXol4ErzeIGBGWYFh2G+vGZJWpkwYBStz8FbaMNvFD0tq1lkZY66LDONtwR0a cdsK4G9njYQMODDQ47KdcFVavJhWGm4Tihh5e9raTRHgjY8GhAHe0ssKuRW56AqK lMBM5dGHfOaDcknhVi0roqGVtSyrI3p/trWEjY8Gv3Yd5FegOmpyLnzCGPMLtgh2 9jAEqsZSt1ZJGXd51QF7+W+53LE10MmLvqeiGlM1CGCJhUl8+6pohWuCVyhH7i27 beCLLTs7Yp4bXxkV8ic5/HgAS6liOkU= -----END CERTIFICATE-----Generated at Wed May 13 03:14:03 2026 by rpki-client