$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/d530230e-9e1b-3027-9062-9049eebb48ef.roa File: d530230e-9e1b-3027-9062-9049eebb48ef.roa (raw, json) Hash identifier: 8Pbqtub5eF+tw4rtp8hFe4VCwby2Q5hBCsE+5p2H2Ho= Subject key identifier: B4:65:75:70:24:B2:C9:41:EC:27:00:1A:1B:A5:39:FF:F3:00:52:8C Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584D8D8FF669088EAE0D71758CC0 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/d530230e-9e1b-3027-9062-9049eebb48ef.roa Signing time: Sun 19 Apr 2026 01:00:23 +0000 ROA not before: Sun 19 Apr 2026 01:00:23 +0000 ROA not after: Sat 18 Jul 2026 01:00:23 +0000 asID: 64267 IP address blocks: 198.1.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8d:8f:f6:69:08:8e:ae:0d:71:75:8c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Apr 19 01:00:23 2026 GMT Not After : Jul 18 01:00:23 2026 GMT Subject: CN=c1a4fc9c-dd10-4b2d-893e-683805f57abf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8b:28:8f:b2:e6:6f:90:cb:5b:66:4e:4b:49: 28:ef:4c:4b:9c:7d:09:ab:a3:50:ef:29:ed:ed:35: 89:f7:42:58:55:ee:e2:66:bb:9d:ae:14:2f:92:91: 5f:bd:9e:b2:54:e1:3c:27:18:49:1f:cf:0d:65:d3: 5f:e0:bc:ab:3d:37:ae:c8:ff:f3:e8:36:c8:c6:9b: 45:76:db:55:20:de:e2:24:13:91:1d:a7:49:85:18: 75:d3:60:55:95:a4:14:3d:97:74:90:d0:7c:09:dd: f1:2c:e7:81:39:a5:0f:81:27:17:42:a3:dd:d8:67: cf:63:0f:ed:f7:54:e8:51:82:d3:8c:d0:b3:82:17: 10:ed:b4:d3:fe:f0:df:e5:55:f4:3b:70:fb:7e:40: c0:6f:1f:d5:b1:7a:aa:a8:cf:bd:9b:f5:18:52:f5: 50:50:2a:a7:4c:16:29:15:ed:76:15:4a:cd:54:e4: 69:d2:5a:8b:ca:be:4e:91:67:c5:71:7e:07:ea:d2: 47:1e:33:e5:02:49:0c:70:62:43:f0:e0:63:df:bf: 3a:5c:45:e1:80:63:aa:09:d7:ec:95:5b:c9:74:5a: d7:3f:c4:25:e8:fb:bc:e8:81:13:01:15:a2:81:cb: 97:22:17:9f:33:59:94:3c:04:73:4c:52:60:c8:73: f2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:65:75:70:24:B2:C9:41:EC:27:00:1A:1B:A5:39:FF:F3:00:52:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/d530230e-9e1b-3027-9062-9049eebb48ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:7c:de:48:c5:c6:4c:bf:25:8d:9a:06:e1:46:64:55:1b:78: c2:07:30:28:a2:7a:4a:26:26:01:7f:23:c5:47:57:27:e8:ba: ab:e4:42:3b:ca:3b:d0:20:05:1d:e9:f5:cd:94:55:47:85:04: 7e:58:95:9d:7d:97:16:63:0c:a5:69:44:c2:29:2d:8a:fc:7f: d0:af:bc:d0:d3:98:a0:b6:8d:e5:0d:73:9b:b8:bb:ac:86:0a: 3f:c9:5e:3f:6c:ee:97:3f:05:db:51:be:d9:98:d3:f5:bf:c2: 38:42:a7:5d:f6:cd:f6:fc:97:c2:12:99:ae:2d:9e:20:76:b9: db:cf:19:1d:31:6c:90:cc:60:58:17:1b:6e:26:c0:19:8d:41: 8a:74:38:8e:f1:23:cb:db:74:83:b3:32:04:9c:a9:ee:33:47: 76:14:c3:5c:12:dc:46:1e:49:23:d6:dc:49:13:c3:6f:ec:18: 27:47:8c:09:fd:08:2b:5c:3f:b3:30:a8:8c:17:95:7e:60:c8: 34:ff:2e:21:b9:9f:81:25:47:8b:cf:10:36:df:0c:2f:e2:17: 63:f3:e8:ff:b3:31:f9:ee:c2:7f:ec:17:1f:42:59:4b:51:1a: 2f:51:f1:65:93:42:9d:20:77:97:19:15:3f:c9:8b:50:31:54: 92:0b:67:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Nj/ZpCI6uDXF1jMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI2MDQxOTAxMDAyM1oXDTI2MDcxODAxMDAyM1owLzEtMCsGA1UEAxMk YzFhNGZjOWMtZGQxMC00YjJkLTg5M2UtNjgzODA1ZjU3YWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIsoj7Lmb5DLW2ZOS0ko70xLnH0Jq6NQ7ynt 7TWJ90JYVe7iZrudrhQvkpFfvZ6yVOE8JxhJH88NZdNf4LyrPTeuyP/z6DbIxptF dttVIN7iJBORHadJhRh102BVlaQUPZd0kNB8Cd3xLOeBOaUPgScXQqPd2GfPYw/t 91ToUYLTjNCzghcQ7bTT/vDf5VX0O3D7fkDAbx/VsXqqqM+9m/UYUvVQUCqnTBYp Fe12FUrNVORp0lqLyr5OkWfFcX4H6tJHHjPlAkkMcGJD8OBj3786XEXhgGOqCdfs lVvJdFrXP8Ql6Pu86IETARWigcuXIhefM1mUPARzTFJgyHPyfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLRldXAksslB7CcAGhulOf/zAFKMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvZDUzMDIzMGUtOWUxYi0z MDI3LTkwNjItOTA0OWVlYmI0OGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZ83kjFxky/JY2aBuFGZFUbeMIHMCiiekomJgF/I8VHVyfouqvkQjvK O9AgBR3p9c2UVUeFBH5YlZ19lxZjDKVpRMIpLYr8f9CvvNDTmKC2jeUNc5u4u6yG Cj/JXj9s7pc/BdtRvtmY0/W/wjhCp132zfb8l8ISma4tniB2udvPGR0xbJDMYFgX G24mwBmNQYp0OI7xI8vbdIOzMgScqe4zR3YUw1wS3EYeSSPW3EkTw2/sGCdHjAn9 CCtcP7MwqIwXlX5gyDT/LiG5n4ElR4vPEDbfDC/iF2Pz6P+zMfnuwn/sFx9CWUtR Gi9R8WWTQp0gd5cZFT/Ji1AxVJILZ3g= -----END CERTIFICATE-----Generated at Wed May 13 03:02:12 2026 by rpki-client