$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/e93a276a-a54c-307d-ba26-50404f6fb85e.roa File: e93a276a-a54c-307d-ba26-50404f6fb85e.roa (raw, json) Hash identifier: PQuh7+ghM4N9b6ZUn3J0oiZnCJ67qqu5u33oZS5fm3s= Subject key identifier: 32:64:C0:F4:C0:7A:2F:68:53:F0:C3:D3:30:95:62:F4:58:ED:64:36 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584FB24111C798CFEC11079F4480 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/e93a276a-a54c-307d-ba26-50404f6fb85e.roa Signing time: Sun 01 Nov 2026 14:00:13 +0000 ROA not before: Sun 01 Nov 2026 14:00:13 +0000 ROA not after: Sat 30 Jan 2027 14:00:13 +0000 asID: 64267 IP address blocks: 198.1.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b2:41:11:c7:98:cf:ec:11:07:9f:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Nov 1 14:00:13 2026 GMT Not After : Jan 30 14:00:13 2027 GMT Subject: CN=eb4a57a8-7a3e-4521-877b-5b55d15da99c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:59:16:10:3b:ad:9b:4e:1c:ee:2a:fd:3d:f2: 78:3d:49:dc:f3:bf:f9:5a:03:44:6b:86:6d:33:c2: 25:18:59:80:c2:69:5c:98:5e:be:41:0f:5a:d8:86: 74:5c:a1:dd:9b:b1:73:cc:65:b2:2f:09:9e:23:4c: 02:17:56:c3:3e:f7:c3:55:5b:54:6d:c6:a3:4b:a5: 2d:be:bb:0c:82:c3:20:ce:c0:bb:14:6c:c8:79:9e: 5f:26:d7:b2:51:94:fe:ff:67:7d:07:6b:93:ec:e0: 7a:25:da:0b:65:f5:ac:31:52:0c:4b:56:86:a8:36: a4:3b:07:d6:be:d9:8f:a1:0d:ab:53:17:ad:2b:15: 21:bb:a2:ab:ff:54:c2:c4:28:a9:bd:f3:73:00:b9: 3c:99:1e:2b:54:f5:ca:b6:19:96:1f:dd:54:a9:fd: 91:26:c6:79:c7:d7:df:0a:4c:b9:2d:c3:32:22:42: 21:07:04:ba:8f:82:03:17:1e:29:20:e1:a7:81:75: 41:71:73:f8:44:d9:15:91:ba:4a:05:18:6f:c8:b1: 89:bb:08:77:e4:cf:e6:5e:a8:f7:a1:6a:0e:20:be: 96:35:5d:35:b4:90:bd:d0:0f:d2:fd:27:47:8d:77: 2c:c1:84:80:4f:07:b1:42:88:41:d1:96:cf:d3:33: 25:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:64:C0:F4:C0:7A:2F:68:53:F0:C3:D3:30:95:62:F4:58:ED:64:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/e93a276a-a54c-307d-ba26-50404f6fb85e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:d9:a0:ae:8b:d4:6f:84:04:ef:b4:f8:eb:19:1f:80:09:4a: a0:a6:c0:2a:4a:7b:6f:fb:ed:87:c8:37:ba:ae:8a:b8:91:3a: 3d:17:be:68:ef:3d:bf:ea:c9:c2:ae:10:30:f6:d0:b1:ab:99: e9:a9:2b:21:e3:2b:15:82:65:c8:86:00:52:46:d5:99:ed:4f: 5e:70:aa:09:ac:82:a7:bd:5b:85:57:16:24:e2:dd:a8:fb:33: 95:ae:81:22:31:f3:a0:c2:4a:9f:a4:f1:18:88:1a:36:0e:4d: 61:df:3f:63:2e:b2:b8:55:a4:d7:48:34:a6:9a:9b:0b:02:62: c5:c8:fc:16:d4:44:c8:39:27:7a:67:4f:10:f7:ab:22:8d:2e: 16:f4:06:fe:b4:5f:63:a4:dd:5c:76:f3:d2:a2:56:ed:d2:9d: fa:83:24:5b:72:af:a1:95:b7:fb:a5:8f:2d:f2:fd:48:a9:8e: 22:fa:71:5a:19:4a:3e:f8:51:46:2f:8c:5e:f6:0d:bc:cd:43: ad:e5:3d:3d:c3:91:ba:1b:64:7a:99:5d:49:9e:5f:79:e2:7a: d6:fa:ce:da:4e:73:c9:15:d4:8c:25:d6:dd:03:6c:e7:91:30: 6b:df:67:3a:e1:5d:99:d8:a2:af:a0:c4:d2:13:59:df:24:82: 94:a8:05:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+yQRHHmM/sEQefRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI2MTEwMTE0MDAxM1oXDTI3MDEzMDE0MDAxM1owLzEtMCsGA1UEAxMk ZWI0YTU3YTgtN2EzZS00NTIxLTg3N2ItNWI1NWQxNWRhOTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lkWEDutm04c7ir9PfJ4PUnc87/5WgNEa4Zt M8IlGFmAwmlcmF6+QQ9a2IZ0XKHdm7FzzGWyLwmeI0wCF1bDPvfDVVtUbcajS6Ut vrsMgsMgzsC7FGzIeZ5fJteyUZT+/2d9B2uT7OB6JdoLZfWsMVIMS1aGqDakOwfW vtmPoQ2rUxetKxUhu6Kr/1TCxCipvfNzALk8mR4rVPXKthmWH91Uqf2RJsZ5x9ff Cky5LcMyIkIhBwS6j4IDFx4pIOGngXVBcXP4RNkVkbpKBRhvyLGJuwh35M/mXqj3 oWoOIL6WNV01tJC90A/S/SdHjXcswYSATwexQohB0ZbP0zMlfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJkwPTAei9oU/DD0zCVYvRY7WQ2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvZTkzYTI3NmEtYTU0Yy0z MDdkLWJhMjYtNTA0MDRmNmZiODVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/ZoK6L1G+EBO+0+OsZH4AJSqCmwCpKe2/77YfIN7quiriROj0Xvmjv Pb/qycKuEDD20LGrmempKyHjKxWCZciGAFJG1ZntT15wqgmsgqe9W4VXFiTi3aj7 M5WugSIx86DCSp+k8RiIGjYOTWHfP2MusrhVpNdINKaamwsCYsXI/BbURMg5J3pn TxD3qyKNLhb0Bv60X2Ok3Vx289KiVu3SnfqDJFtyr6GVt/uljy3y/UipjiL6cVoZ Sj74UUYvjF72DbzNQ63lPT3DkbobZHqZXUmeX3nietb6ztpOc8kV1Iwl1t0DbOeR MGvfZzrhXZnYoq+gxNITWd8kgpSoBUE= -----END CERTIFICATE-----Generated at Sun Nov 15 14:03:21 2026 by rpki-client