$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/bd5c8fde-ac51-3e34-996d-f7fc7315fdfb.roa File: bd5c8fde-ac51-3e34-996d-f7fc7315fdfb.roa (raw, json) Hash identifier: I1FE3AYAOsIHxS4SdFRBmGkwWQtDyFp2pE7dv2dkTXs= Subject key identifier: 6B:D8:62:4B:1F:04:31:48:46:E2:46:CD:96:84:42:63:A7:63:59:E0 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584F6292B084C9EBD6288B6D5880 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/bd5c8fde-ac51-3e34-996d-f7fc7315fdfb.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 212238 IP address blocks: 198.1.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:b0:84:c9:eb:d6:28:8b:6d:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=8fc963da-664c-45bf-aee6-3e59bb91681d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:1a:30:b6:72:5a:bd:0d:49:1d:15:25:13:27: 35:21:d4:4c:9c:49:74:c6:59:57:b4:a4:3d:d9:3e: 33:2c:aa:ec:fa:7f:f4:fe:b8:ed:f8:eb:f1:79:42: 8f:3f:79:76:57:10:52:66:22:8b:da:38:1c:38:68: a9:65:f8:6e:bb:5f:6a:96:d3:aa:3b:ff:f9:4f:8a: 04:6f:69:5f:28:e5:8a:8f:83:42:be:1f:0b:71:d6: 0d:74:8d:9f:9c:ca:11:03:5c:e5:1f:5e:4f:79:9d: 51:f3:41:ea:58:05:4a:b9:75:20:ac:3b:32:a5:0a: 47:32:d7:ae:58:f4:d5:7a:04:1f:23:78:6b:35:30: 05:b7:b5:36:a0:29:24:17:ec:04:2a:aa:88:18:7b: b4:c8:b4:5d:24:d0:b2:01:3a:05:0c:86:f3:fd:0a: 16:2f:13:b8:1b:9a:90:7c:d1:e5:4c:06:cd:94:95: fd:ac:a1:11:5d:dc:c6:ff:74:95:87:ba:3d:a6:51: cf:46:21:80:41:90:4a:99:b8:de:1d:9b:09:33:7f: d9:13:c2:9a:19:b8:af:88:d2:66:bc:24:b2:61:5d: eb:26:88:a6:19:39:3e:a6:86:76:fb:a1:ab:9d:3f: 5c:1f:4a:a7:0a:42:86:2e:3b:67:61:15:b1:b7:4d: b5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D8:62:4B:1F:04:31:48:46:E2:46:CD:96:84:42:63:A7:63:59:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/bd5c8fde-ac51-3e34-996d-f7fc7315fdfb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:ea:24:17:5d:4c:d9:15:55:64:43:1b:77:a2:5d:a2:f0:27: b2:78:f2:2d:3d:00:8d:31:92:b8:80:99:75:e0:f1:b7:d9:5b: 9c:77:4c:c4:e9:39:3e:32:36:c4:60:ca:75:63:9e:71:e6:6b: 1f:cb:90:db:36:7b:ae:c4:12:23:90:08:47:f0:e0:c7:d5:fa: 49:a6:3f:55:b9:5e:60:62:da:18:e8:c9:7f:e0:56:94:ad:55: e9:45:08:ae:04:4f:1a:11:b3:83:c8:23:fd:87:08:44:f9:4a: a4:51:83:ed:cd:e7:60:39:e2:76:d0:64:2e:be:09:0d:9e:0d: 77:71:fe:bb:22:84:2b:5b:4c:14:d0:77:80:8c:0e:54:ce:a1: 23:bf:d9:4e:79:da:fe:4d:ff:04:39:85:99:b5:01:81:b0:a5: f4:fe:ea:64:32:e2:0b:48:6d:b9:bc:4e:28:e2:55:8f:01:c4: 68:65:f0:4c:ed:3a:aa:34:11:4e:ef:19:dd:0e:6d:1d:79:07: 4c:48:aa:95:b6:07:8c:c7:86:8b:99:03:af:6b:17:94:a5:6c: 86:58:f0:f0:73:66:85:3b:46:46:f1:39:ac:dd:f9:4c:13:56: 44:83:d6:d3:13:c9:87:c7:2e:cc:1d:b5:39:c1:a3:67:7e:d1: 31:0d:93:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikrCEyevWKIttWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk OGZjOTYzZGEtNjY0Yy00NWJmLWFlZTYtM2U1OWJiOTE2ODFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhowtnJavQ1JHRUlEyc1IdRMnEl0xllXtKQ9 2T4zLKrs+n/0/rjt+OvxeUKPP3l2VxBSZiKL2jgcOGipZfhuu19qltOqO//5T4oE b2lfKOWKj4NCvh8LcdYNdI2fnMoRA1zlH15PeZ1R80HqWAVKuXUgrDsypQpHMteu WPTVegQfI3hrNTAFt7U2oCkkF+wEKqqIGHu0yLRdJNCyAToFDIbz/QoWLxO4G5qQ fNHlTAbNlJX9rKERXdzG/3SVh7o9plHPRiGAQZBKmbjeHZsJM3/ZE8KaGbiviNJm vCSyYV3rJoimGTk+poZ2+6GrnT9cH0qnCkKGLjtnYRWxt021uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvYYksfBDFIRuJGzZaEQmOnY1ngMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvYmQ1YzhmZGUtYWM1MS0z ZTM0LTk5NmQtZjdmYzczMTVmZGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnqJBddTNkVVWRDG3eiXaLwJ7J48i09AI0xkriAmXXg8bfZW5x3TMTp OT4yNsRgynVjnnHmax/LkNs2e67EEiOQCEfw4MfV+kmmP1W5XmBi2hjoyX/gVpSt VelFCK4ETxoRs4PII/2HCET5SqRRg+3N52A54nbQZC6+CQ2eDXdx/rsihCtbTBTQ d4CMDlTOoSO/2U552v5N/wQ5hZm1AYGwpfT+6mQy4gtIbbm8TijiVY8BxGhl8Ezt Oqo0EU7vGd0ObR15B0xIqpW2B4zHhouZA69rF5SlbIZY8PBzZoU7RkbxOazd+UwT VkSD1tMTyYfHLswdtTnBo2d+0TENk/c= -----END CERTIFICATE-----Generated at Tue Oct 20 09:13:49 2026 by rpki-client