$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/f0e09651-85f8-36f0-b2bb-1ec26275b7f4.roa File: f0e09651-85f8-36f0-b2bb-1ec26275b7f4.roa (raw, json) Hash identifier: D+PAC3M1R5WvlBZKJeE0c83GKy2m9rjFeG5IMakcn50= Subject key identifier: F4:CD:11:82:36:DF:51:CE:FE:AF:69:D5:10:9F:38:E8:37:89:E4:F6 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584F4972B6B8B82638FDE59C2700 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/f0e09651-85f8-36f0-b2bb-1ec26275b7f4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 6079 IP address blocks: 198.1.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:b6:b8:b8:26:38:fd:e5:9c:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=298b2434-8389-42c7-8bae-8cab420c71b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:65:f9:e0:93:3a:8b:be:c1:ce:d6:95:d3:4a: da:e4:a5:7f:ac:0b:87:e9:8c:2b:dc:4c:ae:d7:57: ff:5c:f0:1a:c8:4f:a7:fd:14:f9:92:92:75:96:7e: 0f:e7:9c:4f:ae:21:57:0d:d3:4c:1e:d0:17:7b:31: 58:1e:0e:00:2c:56:0c:63:d1:18:c2:34:13:c6:81: 9b:0c:78:a4:54:ec:38:a9:a6:c8:12:6f:49:f5:41: 75:df:ea:b9:e0:88:f6:86:46:5e:f0:ff:95:2f:4a: 8a:2a:ad:49:66:03:a4:d2:73:9b:2e:79:93:a6:17: 85:9d:53:42:08:a5:a3:19:42:74:30:db:8d:0e:39: 94:92:6c:3f:12:86:21:d3:81:ef:9b:13:99:42:a5: be:4b:e9:b5:35:21:2c:f5:e7:1e:4f:df:d8:0a:ff: 35:f3:df:ba:38:5d:a5:c5:a1:3a:37:ac:c8:b1:da: 8a:b2:9a:64:2c:47:b3:76:b2:0a:14:a0:cd:89:25: 08:7b:1c:63:d7:f1:9b:0e:d1:bc:8e:63:34:8c:eb: 98:cf:3e:bf:d8:0d:46:21:5a:6e:46:c4:b3:a5:61: 95:a7:26:6e:ec:06:1b:80:14:be:55:5d:d2:fb:99: b5:79:df:b1:31:0a:76:ef:cc:9a:60:27:4e:ed:4b: be:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:CD:11:82:36:DF:51:CE:FE:AF:69:D5:10:9F:38:E8:37:89:E4:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/f0e09651-85f8-36f0-b2bb-1ec26275b7f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:10:00:26:95:93:7a:4e:e7:34:c6:c7:02:ad:52:0d:39:af: e5:07:48:3e:c9:27:59:7f:0b:8b:4b:4c:e7:4b:b2:32:64:34: d2:71:c0:31:e7:d4:38:11:de:6b:8d:c5:e1:99:8c:17:44:4d: f5:62:70:eb:31:c5:cd:fa:6f:92:77:68:9f:6b:b1:fa:66:e2: 72:f6:60:98:d3:33:bc:6d:d8:99:e8:ff:11:ad:e6:60:95:7d: 7c:1e:9f:c6:fb:08:f5:6e:02:a2:9c:49:b9:ce:ed:8e:48:79: e1:c1:b5:f5:f9:f8:a0:c6:bd:d1:e3:cf:df:c5:1a:c9:af:91: 6f:25:34:3e:5b:5e:26:f8:0b:9d:88:53:a0:4b:48:cb:99:ed: b2:27:5b:94:0a:d9:e4:fb:da:90:38:75:b6:fa:c5:ad:8d:dc: 14:8d:71:18:6a:c6:31:36:f3:63:da:de:ba:a3:0a:c0:72:42: f4:b2:bf:d8:12:68:ab:d7:09:ef:a5:51:d1:f0:9a:0d:0f:d8: 72:a3:0f:5a:30:2d:6e:33:fe:06:10:a3:7e:a0:59:04:9f:d0: 53:15:c1:fe:f4:77:3a:87:eb:ef:0e:e6:db:4e:fa:f2:ac:1d: af:09:66:f2:4f:1e:60:00:d1:27:7a:9e:fa:04:6e:68:8f:28: be:b6:09:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcra4uCY4/eWcJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Mjk4YjI0MzQtODM4OS00MmM3LThiYWUtOGNhYjQyMGM3MWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmX54JM6i77BztaV00ra5KV/rAuH6Ywr3Eyu 11f/XPAayE+n/RT5kpJ1ln4P55xPriFXDdNMHtAXezFYHg4ALFYMY9EYwjQTxoGb DHikVOw4qabIEm9J9UF13+q54Ij2hkZe8P+VL0qKKq1JZgOk0nObLnmTpheFnVNC CKWjGUJ0MNuNDjmUkmw/EoYh04HvmxOZQqW+S+m1NSEs9eceT9/YCv8189+6OF2l xaE6N6zIsdqKsppkLEezdrIKFKDNiSUIexxj1/GbDtG8jmM0jOuYzz6/2A1GIVpu RsSzpWGVpyZu7AYbgBS+VV3S+5m1ed+xMQp278yaYCdO7Uu+oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPTNEYI231HO/q9p1RCfOOg3ieT2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvZjBlMDk2NTEtODVmOC0z NmYwLWIyYmItMWVjMjYyNzViN2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8QACaVk3pO5zTGxwKtUg05r+UHSD7JJ1l/C4tLTOdLsjJkNNJxwDHn 1DgR3muNxeGZjBdETfVicOsxxc36b5J3aJ9rsfpm4nL2YJjTM7xt2Jno/xGt5mCV fXwen8b7CPVuAqKcSbnO7Y5IeeHBtfX5+KDGvdHjz9/FGsmvkW8lND5bXib4C52I U6BLSMuZ7bInW5QK2eT72pA4dbb6xa2N3BSNcRhqxjE282Pa3rqjCsByQvSyv9gS aKvXCe+lUdHwmg0P2HKjD1owLW4z/gYQo36gWQSf0FMVwf70dzqH6+8O5ttO+vKs Ha8JZvJPHmAA0Sd6nvoEbmiPKL62Cbo= -----END CERTIFICATE-----Generated at Tue Oct 20 02:47:33 2026 by rpki-client