$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3f4bf858-3db2-3e37-a47f-ce4307185f94.roa File: 3f4bf858-3db2-3e37-a47f-ce4307185f94.roa (raw, json) Hash identifier: kTGRNZU60at1FsMcMOwybMRIUEFh26TkCXWuMjvgIyo= Subject key identifier: F1:78:F2:9C:11:8A:90:CB:72:A9:77:8F:6D:02:8C:E8:2A:58:55:21 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584F497395B95EBA9E4D55A14000 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3f4bf858-3db2-3e37-a47f-ce4307185f94.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20001 IP address blocks: 198.1.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:95:b9:5e:ba:9e:4d:55:a1:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=fddb5640-2215-468d-9f50-2997cc1914e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:00:62:7c:bd:3f:8d:fe:29:9b:1d:ea:15:14: cf:9f:11:b4:6d:df:f1:67:78:34:45:5e:a1:ef:40: f6:85:5a:20:37:fb:ac:cf:cf:39:7d:ba:95:31:34: c8:9c:68:96:18:da:65:ec:01:39:4e:7a:22:3d:80: 20:11:ec:cc:09:00:e0:20:6e:90:8a:76:68:81:11: 08:64:71:1e:f3:0a:44:55:3a:39:a6:52:34:22:1b: 0a:06:a4:b3:c5:30:0e:87:fa:a4:30:a3:99:a3:9f: d5:11:82:5c:42:ff:76:13:2d:b0:ed:a6:c4:00:92: a7:76:ff:02:80:6f:5f:ab:9f:30:4a:97:f9:16:70: c4:35:6d:18:90:e1:65:3e:b4:a9:3d:1a:49:38:89: 66:2a:07:22:71:5b:8b:35:97:20:e6:ee:85:bb:29: 06:11:03:88:fe:2a:0f:60:98:52:29:5f:b8:dc:78: 32:f0:52:3d:25:27:cf:82:e3:70:14:84:44:48:cf: fa:82:d3:7a:c5:61:d1:d6:16:70:0f:29:44:bd:fd: dd:2b:cf:18:4e:8a:0e:dc:90:22:b5:d6:1b:23:c1: 7f:7a:40:42:ff:de:e3:5b:24:fb:5d:37:09:e6:a0: 8b:da:ba:aa:95:8c:aa:bd:bc:bd:78:7f:04:fe:50: 41:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:78:F2:9C:11:8A:90:CB:72:A9:77:8F:6D:02:8C:E8:2A:58:55:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3f4bf858-3db2-3e37-a47f-ce4307185f94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:95:bd:89:78:3c:c2:4e:f3:c0:91:14:4f:1b:15:33:1b:c9: 2e:ff:7a:9d:d6:c5:80:65:3f:1c:4a:da:aa:64:38:51:17:0a: da:5a:c6:7e:cc:96:cd:cf:ce:90:b9:19:23:61:7e:b1:8b:0c: 19:55:a1:c6:84:68:0f:d7:04:48:05:f2:52:6e:2e:54:6d:06: 29:c9:70:ea:5e:22:5d:77:a3:22:be:88:c0:9f:66:4d:7f:d2: 23:28:07:a8:9a:45:62:2d:b3:fb:57:0d:d8:e8:42:53:83:15: 82:ae:a1:7e:0e:d3:52:eb:db:de:0d:a2:f1:7d:2f:fd:bd:37: 59:45:52:b0:2c:37:d0:88:05:11:83:9d:46:c2:4f:12:6d:7e: 97:b0:a7:31:0f:13:1a:80:09:34:91:39:76:52:4e:60:a0:79: 17:47:a3:5d:e1:e7:03:49:49:c8:be:8a:b5:6d:13:8f:b6:1b: 80:dc:f1:e7:49:c1:ac:a5:e5:a9:f8:10:25:eb:db:f3:56:9c: 8b:b3:33:f9:3b:ba:e0:0d:05:2b:51:4a:08:ed:da:75:cd:30: 99:b1:91:f3:28:4c:bf:0a:c2:ee:22:e3:6e:14:d3:2e:f0:52: 3c:79:91:c5:06:23:28:31:b0:f2:87:c5:14:69:08:48:1d:f9: b5:d8:8c:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc5W5XrqeTVWhQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmRkYjU2NDAtMjIxNS00NjhkLTlmNTAtMjk5N2NjMTkxNGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgBifL0/jf4pmx3qFRTPnxG0bd/xZ3g0RV6h 70D2hVogN/usz885fbqVMTTInGiWGNpl7AE5TnoiPYAgEezMCQDgIG6QinZogREI ZHEe8wpEVTo5plI0IhsKBqSzxTAOh/qkMKOZo5/VEYJcQv92Ey2w7abEAJKndv8C gG9fq58wSpf5FnDENW0YkOFlPrSpPRpJOIlmKgcicVuLNZcg5u6FuykGEQOI/ioP YJhSKV+43Hgy8FI9JSfPguNwFIRESM/6gtN6xWHR1hZwDylEvf3dK88YTooO3JAi tdYbI8F/ekBC/97jWyT7XTcJ5qCL2rqqlYyqvby9eH8E/lBBhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPF48pwRipDLcql3j20CjOgqWFUhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvM2Y0YmY4NTgtM2RiMi0z ZTM3LWE0N2YtY2U0MzA3MTg1Zjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISVvYl4PMJO88CRFE8bFTMbyS7/ep3WxYBlPxxK2qpkOFEXCtpaxn7M ls3PzpC5GSNhfrGLDBlVocaEaA/XBEgF8lJuLlRtBinJcOpeIl13oyK+iMCfZk1/ 0iMoB6iaRWIts/tXDdjoQlODFYKuoX4O01Lr294NovF9L/29N1lFUrAsN9CIBRGD nUbCTxJtfpewpzEPExqACTSROXZSTmCgeRdHo13h5wNJSci+irVtE4+2G4Dc8edJ wayl5an4ECXr2/NWnIuzM/k7uuANBStRSgjt2nXNMJmxkfMoTL8Kwu4i424U0y7w Ujx5kcUGIygxsPKHxRRpCEgd+bXYjK8= -----END CERTIFICATE-----Generated at Tue Oct 20 09:13:26 2026 by rpki-client