$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/af40fea8-3202-3a90-bad2-52443552faaf.roa File: af40fea8-3202-3a90-bad2-52443552faaf.roa (raw, json) Hash identifier: tjFXNloAJAFuelMMkJT1xM2O9WZ3RC7iVUjwIdBfXu8= Subject key identifier: 7F:58:7E:90:DC:70:F3:74:21:8C:6A:E1:88:19:89:43:D6:B1:74:4E Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584FB93BB1832267E58F02953280 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/af40fea8-3202-3a90-bad2-52443552faaf.roa Signing time: Wed 04 Nov 2026 02:00:13 +0000 ROA not before: Wed 04 Nov 2026 02:00:13 +0000 ROA not after: Tue 02 Feb 2027 02:00:13 +0000 asID: 7029 IP address blocks: 198.1.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b9:3b:b1:83:22:67:e5:8f:02:95:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Nov 4 02:00:13 2026 GMT Not After : Feb 2 02:00:13 2027 GMT Subject: CN=b1567bf9-5ba8-443d-a7db-4a69ba36e148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e5:ca:85:1a:97:3e:b5:3c:16:0c:fe:d1:28: ac:ad:2d:83:28:45:a5:88:65:ad:28:91:0f:9f:7b: bb:99:d9:4c:d2:c0:25:de:06:45:d8:64:c5:db:f3: 0c:ec:b3:4f:eb:4d:84:fa:4f:03:a1:29:b3:2c:39: 82:6e:a3:7e:3a:a5:37:35:48:e2:63:4e:57:73:14: 3a:7b:3a:b0:f5:7d:3b:0c:5c:7c:9e:79:c5:9a:2f: 38:00:bf:0e:19:ac:21:af:70:d4:a0:e5:35:c6:f8: 75:a4:02:93:3b:a9:6e:9b:62:ba:4c:9a:d4:f4:28: 2f:22:e3:9b:19:8d:9d:4a:5c:35:9b:09:9d:38:e2: cf:88:5b:a5:ce:70:c7:3d:03:fe:67:df:12:ef:f9: 55:00:aa:9f:7b:8b:25:44:88:b8:ce:98:34:ba:93: a4:de:00:e7:cc:0a:d9:86:1d:d2:d2:69:8c:82:7f: 14:ee:c8:50:f8:90:d0:8e:e7:85:35:ad:7a:89:50: 7b:86:43:3e:7c:98:57:45:d8:2c:5f:b7:7c:af:13: 1f:d3:29:1e:ea:e9:df:ec:ac:f5:fb:f6:3a:b7:bb: 5b:aa:a1:a6:f4:5d:5c:77:92:3a:7d:93:ae:31:3b: a5:1c:ae:ed:87:14:c6:90:53:82:4b:3b:51:53:af: 15:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:58:7E:90:DC:70:F3:74:21:8C:6A:E1:88:19:89:43:D6:B1:74:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/af40fea8-3202-3a90-bad2-52443552faaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:f6:eb:c3:58:39:46:17:ec:53:1f:a2:df:70:59:cc:ca:b3: c8:fa:9e:63:00:a2:a4:a1:84:1c:4b:a2:13:df:47:ee:f3:63: 4a:91:d0:ed:78:3a:4a:2b:6a:9d:ae:ba:9f:73:7a:35:ae:68: 6a:5e:46:c1:ec:34:30:c4:e5:8f:55:83:d5:f7:85:37:d2:20: 7d:b3:f0:bc:4e:88:11:34:77:33:a4:c7:f1:c4:2e:f9:d5:3e: 0e:75:47:ec:63:d6:5f:a4:73:1d:22:1b:62:49:30:fa:21:e0: b4:28:a5:e6:b9:c3:bf:41:1a:1a:2d:a1:6c:b7:f7:f3:6e:e4: 9a:21:a8:07:c8:f8:a7:99:95:77:11:bf:6a:fb:e8:9d:90:9e: 33:8a:51:51:be:58:ff:fb:4b:88:47:be:db:a8:91:6f:e3:8f: 60:31:b3:f1:52:61:5a:21:fc:39:90:fc:ed:dc:6f:68:02:b5: 5b:38:be:eb:b2:04:f6:d1:6d:8c:74:1d:09:10:23:a0:9c:2d: 1f:24:bb:03:c1:7d:92:da:33:27:f4:33:5e:49:67:56:cc:db: 70:28:e8:54:3a:0f:fc:15:c8:3c:74:1c:04:89:f9:8a:b1:44: dd:a1:eb:2d:80:48:f2:46:78:64:a2:6f:d1:15:be:0f:6f:c8: 06:2d:c6:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+5O7GDImfljwKVMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI2MTEwNDAyMDAxM1oXDTI3MDIwMjAyMDAxM1owLzEtMCsGA1UEAxMk YjE1NjdiZjktNWJhOC00NDNkLWE3ZGItNGE2OWJhMzZlMTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguXKhRqXPrU8Fgz+0SisrS2DKEWliGWtKJEP n3u7mdlM0sAl3gZF2GTF2/MM7LNP602E+k8DoSmzLDmCbqN+OqU3NUjiY05XcxQ6 ezqw9X07DFx8nnnFmi84AL8OGawhr3DUoOU1xvh1pAKTO6lum2K6TJrU9CgvIuOb GY2dSlw1mwmdOOLPiFulznDHPQP+Z98S7/lVAKqfe4slRIi4zpg0upOk3gDnzArZ hh3S0mmMgn8U7shQ+JDQjueFNa16iVB7hkM+fJhXRdgsX7d8rxMf0yke6unf7Kz1 +/Y6t7tbqqGm9F1cd5I6fZOuMTulHK7thxTGkFOCSztRU68VBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH9YfpDccPN0IYxq4YgZiUPWsXROMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvYWY0MGZlYTgtMzIwMi0z YTkwLWJhZDItNTI0NDM1NTJmYWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGX268NYOUYX7FMfot9wWczKs8j6nmMAoqShhBxLohPfR+7zY0qR0O14 Okorap2uup9zejWuaGpeRsHsNDDE5Y9Vg9X3hTfSIH2z8LxOiBE0dzOkx/HELvnV Pg51R+xj1l+kcx0iG2JJMPoh4LQopea5w79BGhotoWy39/Nu5JohqAfI+KeZlXcR v2r76J2QnjOKUVG+WP/7S4hHvtuokW/jj2Axs/FSYVoh/DmQ/O3cb2gCtVs4vuuy BPbRbYx0HQkQI6CcLR8kuwPBfZLaMyf0M15JZ1bM23Ao6FQ6D/wVyDx0HASJ+Yqx RN2h6y2ASPJGeGSib9EVvg9vyAYtxsk= -----END CERTIFICATE-----Generated at Sun Nov 15 14:58:06 2026 by rpki-client