$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/87b77f2b-bacf-3751-8e20-9a5fec7cde18.roa File: 87b77f2b-bacf-3751-8e20-9a5fec7cde18.roa (raw, json) Hash identifier: 9ZBt7b+cGTvdGXWFWWh/Xkf1t8pICW3LGWq+hjwYdgo= Subject key identifier: D3:6E:F1:49:13:46:6B:38:77:0F:2B:1D:CD:D3:D9:9F:72:FA:E1:20 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584DBA3B08EE6A9B4524E11BCB00 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/87b77f2b-bacf-3751-8e20-9a5fec7cde18.roa Signing time: Tue 05 May 2026 01:00:23 +0000 ROA not before: Tue 05 May 2026 01:00:23 +0000 ROA not after: Mon 03 Aug 2026 01:00:23 +0000 asID: 834 IP address blocks: 198.1.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ba:3b:08:ee:6a:9b:45:24:e1:1b:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: May 5 01:00:23 2026 GMT Not After : Aug 3 01:00:23 2026 GMT Subject: CN=8cfce0b7-746c-452f-929a-b5aa1961e152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f1:86:d0:e7:5e:09:59:c5:41:90:43:fd:12: 09:8b:69:76:ee:e2:57:c8:a4:77:b3:87:e1:a0:26: 3a:21:bb:da:b6:0d:5b:32:23:2e:d7:1f:fa:e2:85: 77:03:4d:1a:b2:9c:6a:ff:1b:e0:f9:be:38:9e:04: 70:46:1b:09:36:4b:e5:ab:12:98:7f:43:b6:20:83: da:e6:13:ee:e3:83:3b:08:02:4b:7b:e3:52:0e:34: 57:43:4b:7a:3f:30:6a:96:ea:22:02:05:a0:cf:a9: ac:5e:2e:df:e4:3f:29:73:ef:e8:87:8e:a1:01:30: 00:7c:b2:45:ea:d9:49:42:99:92:84:ee:15:d0:f9: 2f:25:d1:48:7a:7b:5f:85:1f:cb:7a:aa:28:a1:fc: 4c:36:64:aa:60:29:81:b6:0a:71:ea:b8:0b:be:db: 70:ac:89:69:2d:bf:59:0f:ad:92:e5:13:7a:61:24: 29:fc:09:f0:8e:a3:b5:64:f9:44:1f:29:db:89:8a: 14:d8:d0:9b:0a:80:6d:52:b6:ee:78:df:73:e2:89: 4a:ff:08:70:4d:0c:ec:c8:c3:c9:eb:a6:e9:01:ce: 65:a7:64:c7:7b:26:19:b6:6d:b7:fd:35:db:d8:18: 18:67:9c:4b:05:95:37:c6:a3:77:3c:e6:ee:0b:64: 25:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:6E:F1:49:13:46:6B:38:77:0F:2B:1D:CD:D3:D9:9F:72:FA:E1:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/87b77f2b-bacf-3751-8e20-9a5fec7cde18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:16:07:26:a1:2e:c4:53:57:32:aa:3b:32:4c:06:fe:95:39: 69:3d:89:70:a7:bb:ca:b2:57:51:c8:69:64:1f:5a:ad:50:38: b5:06:eb:a8:cb:9d:0a:a6:f4:fb:e2:c1:19:7a:91:8b:29:36: 37:6a:19:b0:56:67:1e:05:80:75:37:78:1a:61:57:5d:63:bd: 00:3b:cf:56:ce:24:f2:b4:5d:64:54:48:e1:44:58:ad:26:82: 43:54:71:81:fb:c9:13:60:af:60:da:8d:69:11:1e:03:99:df: e4:b5:4f:c1:aa:6b:36:41:0a:97:63:43:24:e4:d6:ee:41:a6: e5:5e:fb:dd:7c:39:df:93:2c:2a:13:3e:f2:ae:46:58:68:c0: 29:65:53:32:9a:04:4d:23:94:12:00:c0:6a:ef:e2:22:4e:df: 21:e2:4b:9b:66:a9:9a:cc:96:0e:ca:82:3e:02:b5:ab:26:59: 82:9a:3f:d8:7e:c5:fa:ab:9f:87:26:f9:b8:5c:ec:bb:80:fd: 1d:0c:9d:bf:34:71:ab:c1:36:c4:6f:b8:44:ed:f6:37:9e:4d: 99:f8:b8:18:aa:04:e5:d8:63:57:20:34:10:51:72:0b:67:80: 1f:fc:87:fc:77:cd:f6:4f:b8:35:4e:89:ce:45:2a:64:7e:4a: 4c:93:80:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE26OwjuaptFJOEbywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk OGNmY2UwYjctNzQ2Yy00NTJmLTkyOWEtYjVhYTE5NjFlMTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvGG0OdeCVnFQZBD/RIJi2l27uJXyKR3s4fh oCY6Ibvatg1bMiMu1x/64oV3A00aspxq/xvg+b44ngRwRhsJNkvlqxKYf0O2IIPa 5hPu44M7CAJLe+NSDjRXQ0t6PzBqluoiAgWgz6msXi7f5D8pc+/oh46hATAAfLJF 6tlJQpmShO4V0PkvJdFIentfhR/LeqooofxMNmSqYCmBtgpx6rgLvttwrIlpLb9Z D62S5RN6YSQp/AnwjqO1ZPlEHynbiYoU2NCbCoBtUrbueN9z4olK/whwTQzsyMPJ 66bpAc5lp2THeyYZtm23/TXb2BgYZ5xLBZU3xqN3PObuC2QlewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNu8UkTRms4dw8rHc3T2Z9y+uEgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvODdiNzdmMmItYmFjZi0z NzUxLThlMjAtOWE1ZmVjN2NkZTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8WByahLsRTVzKqOzJMBv6VOWk9iXCnu8qyV1HIaWQfWq1QOLUG66jL nQqm9PviwRl6kYspNjdqGbBWZx4FgHU3eBphV11jvQA7z1bOJPK0XWRUSOFEWK0m gkNUcYH7yRNgr2DajWkRHgOZ3+S1T8GqazZBCpdjQyTk1u5BpuVe+918Od+TLCoT PvKuRlhowCllUzKaBE0jlBIAwGrv4iJO3yHiS5tmqZrMlg7Kgj4CtasmWYKaP9h+ xfqrn4cm+bhc7LuA/R0Mnb80cavBNsRvuETt9jeeTZn4uBiqBOXYY1cgNBBRcgtn gB/8h/x3zfZPuDVOic5FKmR+SkyTgJw= -----END CERTIFICATE-----Generated at Wed May 13 01:39:17 2026 by rpki-client