$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/29ab6ee8-78f2-3fbb-9c80-da5a7e4bb2ae.roa File: 29ab6ee8-78f2-3fbb-9c80-da5a7e4bb2ae.roa (raw, json) Hash identifier: xPJ1zSgCewbZCLWLldXKoB8kLIJiz/46XZe6CcBdLJw= Subject key identifier: 86:E7:A3:34:7F:18:08:51:2C:61:92:45:8D:AF:07:70:36:4C:02:E3 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584B196C0C9F8B609B7A80F9F600 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/29ab6ee8-78f2-3fbb-9c80-da5a7e4bb2ae.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 22516 IP address blocks: 198.1.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:0c:9f:8b:60:9b:7a:80:f9:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=d4566d0a-60ef-49ba-9101-2f6b4dce1e7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4b:1a:84:35:98:d7:05:e6:72:ba:eb:55:f1: 92:92:b8:6c:6c:be:58:77:98:05:7c:3a:ff:36:d1: 80:86:eb:3d:37:16:08:eb:01:07:75:9e:3b:8e:ff: 6c:76:44:06:4e:4e:af:75:25:f0:67:77:dd:cf:da: 90:ba:16:cf:07:06:88:be:60:d9:68:f9:f4:d4:1f: 20:a6:17:24:c9:c6:24:f8:e1:5d:d5:c7:65:03:60: 71:68:55:d9:aa:01:13:b7:d7:1a:67:ec:89:2b:24: 03:8a:11:74:d7:25:e8:d9:27:21:1c:f4:30:1b:cd: 96:f2:7b:78:d5:b2:5f:10:3e:12:fa:33:0d:32:e3: e5:3d:c5:f4:53:8a:7a:0d:d2:6a:45:eb:48:4d:ed: f5:7f:51:97:16:d5:5c:78:b0:70:f0:9c:5c:a2:62: 5e:77:66:20:b7:74:c3:b1:23:51:5a:bb:28:82:f5: ab:cb:22:69:c8:97:4c:2f:db:67:3c:f6:99:e0:22: 01:46:dd:49:4e:f4:5f:48:a7:5f:18:3b:d0:de:bb: b6:24:47:84:c3:c3:b2:58:1e:a4:60:ce:01:cd:47: 08:65:98:59:cf:81:06:3c:cb:8d:b6:e4:63:b4:8e: 3b:94:e0:b6:34:f0:60:ce:c3:d5:64:0b:2d:5c:fe: 7b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:E7:A3:34:7F:18:08:51:2C:61:92:45:8D:AF:07:70:36:4C:02:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/29ab6ee8-78f2-3fbb-9c80-da5a7e4bb2ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:3a:d1:e1:64:29:42:51:30:b0:64:d3:0c:27:19:a5:ba:5d: a0:4b:58:95:34:0f:57:08:6c:f3:01:67:60:cc:49:79:d5:3a: 01:25:fd:de:e2:77:80:18:45:e6:e5:f8:38:02:42:a5:3d:5c: 17:12:3b:ed:77:f3:bc:bc:b6:ae:2a:c0:c2:71:0a:ca:7a:d2: 34:33:92:36:9e:08:a7:e9:e4:ae:90:31:10:9e:5e:01:eb:31: 73:df:56:e3:4a:d9:13:db:26:17:32:36:e3:00:b8:3e:00:61: 96:e8:03:5b:cb:b4:a1:d6:2b:5d:e8:f0:47:07:6e:28:ae:c4: 75:69:85:fd:b2:a8:4d:a6:b4:8c:82:ea:a9:8b:f8:b9:9c:83: 9a:ff:cd:fc:d7:10:95:c4:a3:75:d8:bb:a9:1c:f8:ca:65:1d: e2:c1:4e:6f:e6:db:68:c4:9e:80:25:c0:85:24:20:52:f5:11: 76:de:3b:4a:f1:06:e9:1f:e6:dc:ab:09:cc:82:f9:70:ff:28: 90:57:92:be:1e:b3:01:40:51:5b:51:a3:6d:99:c4:0e:2b:41: f5:b9:38:87:72:81:6f:9a:08:4b:fa:19:71:7c:5b:43:38:ac: f3:b5:9f:a5:11:a5:3c:bd:89:0b:c1:cb:9d:ac:01:d2:54:be: c4:51:77:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbAyfi2CbeoD59gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk ZDQ1NjZkMGEtNjBlZi00OWJhLTkxMDEtMmY2YjRkY2UxZTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0sahDWY1wXmcrrrVfGSkrhsbL5Yd5gFfDr/ NtGAhus9NxYI6wEHdZ47jv9sdkQGTk6vdSXwZ3fdz9qQuhbPBwaIvmDZaPn01B8g phckycYk+OFd1cdlA2BxaFXZqgETt9caZ+yJKyQDihF01yXo2SchHPQwG82W8nt4 1bJfED4S+jMNMuPlPcX0U4p6DdJqRetITe31f1GXFtVceLBw8JxcomJed2Ygt3TD sSNRWrsogvWryyJpyJdML9tnPPaZ4CIBRt1JTvRfSKdfGDvQ3ru2JEeEw8OyWB6k YM4BzUcIZZhZz4EGPMuNtuRjtI47lOC2NPBgzsPVZAstXP57GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbnozR/GAhRLGGSRY2vB3A2TALjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvMjlhYjZlZTgtNzhmMi0z ZmJiLTljODAtZGE1YTdlNGJiMmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE460eFkKUJRMLBk0wwnGaW6XaBLWJU0D1cIbPMBZ2DMSXnVOgEl/d7i d4AYRebl+DgCQqU9XBcSO+1387y8tq4qwMJxCsp60jQzkjaeCKfp5K6QMRCeXgHr MXPfVuNK2RPbJhcyNuMAuD4AYZboA1vLtKHWK13o8EcHbiiuxHVphf2yqE2mtIyC 6qmL+Lmcg5r/zfzXEJXEo3XYu6kc+MplHeLBTm/m22jEnoAlwIUkIFL1EXbeO0rx Bukf5tyrCcyC+XD/KJBXkr4eswFAUVtRo22ZxA4rQfW5OIdygW+aCEv6GXF8W0M4 rPO1n6URpTy9iQvBy52sAdJUvsRRd4w= -----END CERTIFICATE-----Generated at Fri Oct 10 20:07:24 2025 by rpki-client