$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/af343535-df03-3bb3-abfa-f22f7b41cef6.roa File: af343535-df03-3bb3-abfa-f22f7b41cef6.roa (raw, json) Hash identifier: EXY10UuGVZq11/zFP4/5TwiLCxzAj6j7UwU08hdGwvs= Subject key identifier: BC:DD:5E:5B:2D:A6:07:9A:4C:1F:33:28:5D:1C:CA:DB:DC:71:23:35 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584FB0BDF624BECADB7E8C8F2C00 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/af343535-df03-3bb3-abfa-f22f7b41cef6.roa Signing time: Sun 01 Nov 2026 01:00:13 +0000 ROA not before: Sun 01 Nov 2026 01:00:13 +0000 ROA not after: Sat 30 Jan 2027 02:00:13 +0000 asID: 834 IP address blocks: 198.1.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b0:bd:f6:24:be:ca:db:7e:8c:8f:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Nov 1 01:00:13 2026 GMT Not After : Jan 30 02:00:13 2027 GMT Subject: CN=093d2713-b909-42b9-915d-43d6c0d22741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:6a:94:4f:9d:15:3c:82:5d:77:29:eb:58:02: 3d:2f:db:5f:2e:ee:f8:2d:2c:4d:ed:81:01:1b:7c: 8c:93:70:74:7b:a6:09:f8:85:cf:6d:ed:b6:a8:2d: 93:b8:b6:4b:8b:89:ac:34:60:94:b2:2e:ad:23:ac: 2f:7a:22:20:3a:8f:76:34:27:79:ec:f8:79:fd:d3: 32:aa:ab:1f:87:48:87:66:0d:09:07:9d:50:d6:c4: 4a:50:58:b1:49:ef:c0:42:6f:85:70:ff:44:5b:2e: 2f:f0:6e:a9:e3:2f:d6:c1:3b:ac:57:e2:92:16:59: e1:f1:f1:22:a9:e1:8c:e4:fb:2d:ea:ba:00:49:1d: 34:bd:29:02:b7:1b:30:1a:77:ab:fd:c5:a5:96:3d: 7d:0e:ed:f7:58:63:83:83:92:25:c5:15:24:99:06: b7:dc:ce:b0:51:c1:82:ef:18:e2:c6:c6:0b:7e:5b: 4f:04:31:58:d6:38:0e:38:6b:a4:2a:70:aa:69:ce: 89:e9:b0:98:7e:4e:bb:6c:ca:74:20:b5:83:6c:86: 1a:47:e4:c6:96:72:79:06:02:55:66:67:47:39:4f: eb:b9:64:27:38:90:05:29:5f:6f:01:2a:3c:88:69: 6d:46:ad:88:c5:d9:6b:d0:3f:a1:a6:08:5f:3a:9f: c4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:DD:5E:5B:2D:A6:07:9A:4C:1F:33:28:5D:1C:CA:DB:DC:71:23:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/af343535-df03-3bb3-abfa-f22f7b41cef6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:d8:d4:7b:0c:52:93:21:6c:6e:0b:b4:e5:c0:23:e4:8b:43: 87:df:34:f8:a4:64:85:71:62:30:dc:3d:82:3c:dc:75:f7:d7: d0:8f:44:ee:e8:38:5e:67:ef:c5:2d:e9:d5:c6:73:23:dc:24: e5:ea:16:fb:68:ab:df:c5:5c:ba:d6:af:df:e8:25:4c:c6:73: f8:e3:b4:76:0e:7d:8a:dd:b5:0f:1e:5f:c3:3a:d4:bf:d9:3d: 80:a0:8d:b7:62:d6:df:5c:df:0a:bf:65:08:e0:f7:84:a6:c7: 6d:ac:cb:a4:bb:3b:cb:aa:0c:4f:e5:be:cc:04:8f:a5:1b:58: 5d:9a:ed:a2:ac:f4:9f:ed:df:a3:67:dd:86:60:79:39:e7:d8: 91:70:a7:49:1d:fb:22:6a:4e:f0:2c:f0:23:67:35:07:54:e9: f4:44:82:ae:4f:0d:08:66:7d:ba:09:70:6a:4c:e8:30:1c:66: 83:58:6b:25:25:db:89:84:44:b5:b3:b2:71:53:da:e2:c0:08: 04:3c:24:06:48:c2:70:e8:7c:56:dc:94:86:54:4e:ad:e0:29: c6:3b:26:ad:ee:07:15:7f:a9:9d:39:49:fa:18:e8:73:8f:4c: 50:b4:3b:56:6e:b3:cc:5c:fb:59:3a:0a:7c:16:14:f9:9e:1b: 39:d8:11:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+wvfYkvsrbfoyPLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI2MTEwMTAxMDAxM1oXDTI3MDEzMDAyMDAxM1owLzEtMCsGA1UEAxMk MDkzZDI3MTMtYjkwOS00MmI5LTkxNWQtNDNkNmMwZDIyNzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2qUT50VPIJddynrWAI9L9tfLu74LSxN7YEB G3yMk3B0e6YJ+IXPbe22qC2TuLZLi4msNGCUsi6tI6wveiIgOo92NCd57Ph5/dMy qqsfh0iHZg0JB51Q1sRKUFixSe/AQm+FcP9EWy4v8G6p4y/WwTusV+KSFlnh8fEi qeGM5Pst6roASR00vSkCtxswGner/cWllj19Du33WGODg5IlxRUkmQa33M6wUcGC 7xjixsYLfltPBDFY1jgOOGukKnCqac6J6bCYfk67bMp0ILWDbIYaR+TGlnJ5BgJV ZmdHOU/ruWQnOJAFKV9vASo8iGltRq2Ixdlr0D+hpghfOp/EMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzdXlstpgeaTB8zKF0cytvccSM1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvYWYzNDM1MzUtZGYwMy0z YmIzLWFiZmEtZjIyZjdiNDFjZWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvY1HsMUpMhbG4LtOXAI+SLQ4ffNPikZIVxYjDcPYI83HX319CPRO7o OF5n78Ut6dXGcyPcJOXqFvtoq9/FXLrWr9/oJUzGc/jjtHYOfYrdtQ8eX8M61L/Z PYCgjbdi1t9c3wq/ZQjg94Smx22sy6S7O8uqDE/lvswEj6UbWF2a7aKs9J/t36Nn 3YZgeTnn2JFwp0kd+yJqTvAs8CNnNQdU6fREgq5PDQhmfboJcGpM6DAcZoNYayUl 24mERLWzsnFT2uLACAQ8JAZIwnDofFbclIZUTq3gKcY7Jq3uBxV/qZ05SfoY6HOP TFC0O1Zus8xc+1k6CnwWFPmeGznYEYQ= -----END CERTIFICATE-----Generated at Sun Nov 15 19:14:23 2026 by rpki-client