$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/a3865717-c823-344d-be2f-29795c5d9104.roa File: a3865717-c823-344d-be2f-29795c5d9104.roa (raw, json) Hash identifier: TKrIe4rwKKpzA4nHt6UUxhtxO7pYmfrEVKhZ2A1EeYE= Subject key identifier: 51:F4:90:4F:5D:76:4F:04:BA:EA:2F:C3:60:72:4C:F1:E5:0B:97:7D Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584DCAFB1C38B68C9D4C51698580 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/a3865717-c823-344d-be2f-29795c5d9104.roa Signing time: Mon 11 May 2026 01:00:24 +0000 ROA not before: Mon 11 May 2026 01:00:24 +0000 ROA not after: Sun 09 Aug 2026 01:00:24 +0000 asID: 20001 IP address blocks: 198.1.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:fb:1c:38:b6:8c:9d:4c:51:69:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: May 11 01:00:24 2026 GMT Not After : Aug 9 01:00:24 2026 GMT Subject: CN=67ca5c6c-81f4-48f3-b801-4ef7c2101ae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:8d:2f:bb:a7:40:46:09:14:7e:b0:00:3a:3d: 27:00:7e:4f:7d:99:1c:5c:3a:51:8d:ad:64:c5:2f: 76:b4:b5:c6:88:4a:e3:6f:20:aa:6f:eb:c6:7d:70: 41:5e:95:9b:0f:0b:95:58:5e:79:15:b4:98:e0:16: 94:db:5a:d7:79:f4:cf:76:1a:a2:7e:a3:cf:26:6b: 8f:31:4f:4f:f7:93:ef:11:41:72:f0:99:c4:68:d0: 02:73:e8:c0:f6:83:aa:12:d7:7d:51:af:c2:e9:01: cf:33:d7:aa:a2:c6:0d:be:70:3f:bb:b2:b0:82:49: 4e:03:b7:93:7a:f8:01:84:7a:54:fd:53:b2:90:aa: 32:0b:82:4c:57:78:20:e3:6c:06:28:79:35:9e:c5: b2:10:d9:3b:9f:3e:45:fe:70:c0:ab:b1:69:61:16: 45:af:9d:a6:03:e0:ec:5a:a2:ca:20:88:45:24:36: 47:dd:aa:0b:2d:69:98:e6:d2:50:cd:ed:23:bf:b0: 27:2d:9c:a5:3a:54:5c:78:b9:31:f9:84:06:69:5f: a6:ba:8f:c9:b3:76:12:fe:9f:09:10:73:bd:ca:93: 8c:9b:43:53:42:fb:61:f5:4c:8b:48:73:40:35:0f: 5b:1b:8b:01:52:12:6b:91:82:88:b1:67:f4:b8:21: 73:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F4:90:4F:5D:76:4F:04:BA:EA:2F:C3:60:72:4C:F1:E5:0B:97:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/a3865717-c823-344d-be2f-29795c5d9104.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:e9:13:ba:44:54:4a:81:01:fd:fa:5c:c4:03:9a:cf:14:bf: f1:42:36:e3:fd:3f:79:3c:47:70:ea:82:b6:7b:66:97:c4:09: 7e:92:f8:fd:a7:7d:53:0f:94:ef:15:f8:65:a9:f8:86:de:e8: 82:4c:17:32:5f:46:f6:85:a1:73:13:35:ad:6d:c6:8e:0a:52: 3d:ef:0d:3c:e1:26:23:12:8f:85:1b:95:7c:a4:ce:6f:7e:82: 1e:de:ed:cb:2c:b4:cf:d8:65:e5:7f:28:66:54:78:f5:7f:f1: a5:18:d7:d4:ea:c2:83:83:13:14:43:fe:e6:2c:68:d8:d8:d7: 10:0d:fc:91:80:72:6a:e3:08:61:b1:16:6f:ca:0a:40:48:58: a4:34:09:12:67:ce:c9:4e:b1:c8:1f:76:00:13:93:ce:77:f4: 8d:76:4f:2a:23:08:01:b4:cb:30:b5:47:05:5a:ad:cd:d3:be: 28:36:d9:1b:1b:7f:7b:52:d9:4f:59:92:bf:2c:fb:b6:84:4a: 18:33:11:69:6d:03:90:e8:ed:06:89:62:26:24:5e:1a:c8:10: 7e:d2:b1:b1:4d:14:fa:3b:72:fb:d8:7d:bf:32:24:22:65:25: e0:42:ab:1d:86:36:ff:f6:86:19:f7:63:f7:1e:a2:02:a7:96: 72:d8:42:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+xw4toydTFFphYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk NjdjYTVjNmMtODFmNC00OGYzLWI4MDEtNGVmN2MyMTAxYWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhI0vu6dARgkUfrAAOj0nAH5PfZkcXDpRja1k xS92tLXGiErjbyCqb+vGfXBBXpWbDwuVWF55FbSY4BaU21rXefTPdhqifqPPJmuP MU9P95PvEUFy8JnEaNACc+jA9oOqEtd9Ua/C6QHPM9eqosYNvnA/u7KwgklOA7eT evgBhHpU/VOykKoyC4JMV3gg42wGKHk1nsWyENk7nz5F/nDAq7FpYRZFr52mA+Ds WqLKIIhFJDZH3aoLLWmY5tJQze0jv7AnLZylOlRceLkx+YQGaV+muo/Js3YS/p8J EHO9ypOMm0NTQvth9UyLSHNANQ9bG4sBUhJrkYKIsWf0uCFz+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFH0kE9ddk8Euuovw2ByTPHlC5d9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvYTM4NjU3MTctYzgyMy0z NDRkLWJlMmYtMjk3OTVjNWQ5MTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3pE7pEVEqBAf36XMQDms8Uv/FCNuP9P3k8R3DqgrZ7ZpfECX6S+P2n fVMPlO8V+GWp+Ibe6IJMFzJfRvaFoXMTNa1txo4KUj3vDTzhJiMSj4UblXykzm9+ gh7e7csstM/YZeV/KGZUePV/8aUY19TqwoODExRD/uYsaNjY1xAN/JGAcmrjCGGx Fm/KCkBIWKQ0CRJnzslOscgfdgATk8539I12TyojCAG0yzC1RwVarc3Tvig22Rsb f3tS2U9Zkr8s+7aEShgzEWltA5Do7QaJYiYkXhrIEH7SsbFNFPo7cvvYfb8yJCJl JeBCqx2GNv/2hhn3Y/ceogKnlnLYQtM= -----END CERTIFICATE-----Generated at Wed May 13 03:50:07 2026 by rpki-client