$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/ba0136e4-bde7-3b49-b89a-31bfece2e729.roa File: ba0136e4-bde7-3b49-b89a-31bfece2e729.roa (raw, json) Hash identifier: YaUCbmY+E7LdzdajDP1dFIBKfgFW8rglRrWvK+bqFDs= Subject key identifier: 1B:CE:3D:9B:A9:24:FA:3F:EF:1A:18:E3:28:B4:C3:2E:DC:88:EB:F3 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584D44FA6359FE1DC2812EA60100 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/ba0136e4-bde7-3b49-b89a-31bfece2e729.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 834 IP address blocks: 198.1.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:63:59:fe:1d:c2:81:2e:a6:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=20e084e8-377f-4c93-9e5a-11aeb05b51f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c2:87:ea:ff:f0:39:86:f9:e8:1e:5c:78:13: 6e:00:a9:c5:16:0b:1e:44:c8:b0:94:62:af:67:23: ff:0d:22:1b:0d:f8:a3:8b:5a:80:fb:2f:d8:af:84: e5:36:6b:5f:2b:b1:07:2a:5f:3f:07:46:71:7f:2b: 9a:90:1c:31:0f:69:e9:4a:0c:cb:27:50:d0:b8:00: 78:09:bd:c1:97:36:60:71:f7:64:25:a5:ee:57:85: c0:0c:a5:dc:92:51:aa:31:6a:3f:8e:15:b8:f2:ba: b8:ad:6d:f3:01:07:44:b4:ff:44:37:dc:7b:f3:4b: 65:45:2e:d3:77:59:76:af:15:75:14:24:97:82:3e: f1:5b:ba:33:3e:e1:5c:9c:48:4a:91:dc:03:ec:71: 14:40:9b:5f:99:b6:d3:a7:c8:28:e9:c4:78:cb:61: 04:a3:c6:8d:2c:b8:47:57:ce:7d:ab:70:ab:4f:07: 83:40:b5:74:73:00:47:f0:be:79:5c:10:a2:1f:a4: 2d:cb:29:b0:58:c5:98:2c:5d:c4:e5:89:57:a7:1f: e6:2a:db:48:61:3f:a3:8c:b8:12:2a:5e:b6:21:33: d0:f4:55:96:c9:02:83:88:09:9c:cf:e9:87:4d:69: 83:07:96:3e:dc:ee:a3:8e:db:6d:62:b6:b8:06:28: a1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CE:3D:9B:A9:24:FA:3F:EF:1A:18:E3:28:B4:C3:2E:DC:88:EB:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/ba0136e4-bde7-3b49-b89a-31bfece2e729.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:3e:c3:91:4a:e8:f0:ee:d7:9f:78:e6:99:ff:b1:d6:7e:89: 1c:42:90:df:1e:98:7d:2d:93:18:dd:04:ea:b3:d2:fe:ca:a3: f0:ba:71:a6:90:a0:49:d8:d4:10:d5:c5:1d:19:d2:e7:aa:dc: 86:ff:b8:e5:c3:4b:ef:c1:38:8d:c8:4b:3d:3a:4a:20:6d:6c: bd:7d:76:f7:36:5a:d3:a8:9d:95:e9:b5:db:3f:2d:90:e0:21: d1:e2:64:98:d5:fe:17:ba:a1:4f:aa:b3:34:47:60:00:c8:fe: f8:f8:ea:7d:86:5c:30:ce:00:b8:f7:bf:7d:94:02:47:74:6c: f7:f1:bd:8c:b0:cd:be:27:53:6e:8c:50:56:95:52:fd:a1:d9: 98:f0:c3:63:06:fb:91:09:c8:72:26:a8:d5:dd:b4:25:bc:bb: 88:02:22:cf:86:e6:10:eb:3b:c9:e5:ec:85:88:d6:9d:e0:41: 59:f9:e5:30:c7:0d:4b:27:b5:fe:81:7a:ad:ce:ed:7b:8b:82: 5e:12:16:1f:de:fb:f8:8e:c5:88:8b:4c:57:c1:95:0a:22:8e: c2:2e:85:91:b7:ec:3b:45:ba:fc:d3:66:f3:d5:ef:34:fe:65: 8a:5c:00:c9:f9:db:c1:c9:91:a6:ca:49:d8:78:f8:bb:1e:98: f1:e8:8f:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+mNZ/h3CgS6mAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk MjBlMDg0ZTgtMzc3Zi00YzkzLTllNWEtMTFhZWIwNWI1MWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsKH6v/wOYb56B5ceBNuAKnFFgseRMiwlGKv ZyP/DSIbDfiji1qA+y/Yr4TlNmtfK7EHKl8/B0ZxfyuakBwxD2npSgzLJ1DQuAB4 Cb3BlzZgcfdkJaXuV4XADKXcklGqMWo/jhW48rq4rW3zAQdEtP9EN9x780tlRS7T d1l2rxV1FCSXgj7xW7ozPuFcnEhKkdwD7HEUQJtfmbbTp8go6cR4y2EEo8aNLLhH V859q3CrTweDQLV0cwBH8L55XBCiH6QtyymwWMWYLF3E5YlXpx/mKttIYT+jjLgS Kl62ITPQ9FWWyQKDiAmcz+mHTWmDB5Y+3O6jjtttYra4BiihUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvOPZupJPo/7xoY4yi0wy7ciOvzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvYmEwMTM2ZTQtYmRlNy0z YjQ5LWI4OWEtMzFiZmVjZTJlNzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEw+w5FK6PDu15945pn/sdZ+iRxCkN8emH0tkxjdBOqz0v7Ko/C6caaQ oEnY1BDVxR0Z0ueq3Ib/uOXDS+/BOI3ISz06SiBtbL19dvc2WtOonZXptds/LZDg IdHiZJjV/he6oU+qszRHYADI/vj46n2GXDDOALj3v32UAkd0bPfxvYywzb4nU26M UFaVUv2h2Zjww2MG+5EJyHImqNXdtCW8u4gCIs+G5hDrO8nl7IWI1p3gQVn55TDH DUsntf6Beq3O7XuLgl4SFh/e+/iOxYiLTFfBlQoijsIuhZG37DtFuvzTZvPV7zT+ ZYpcAMn528HJkabKSdh4+LsemPHojxU= -----END CERTIFICATE-----Generated at Sat Mar 28 10:39:38 2026 by rpki-client