$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/b1acea19-a627-369b-99ba-987ed1a52445.roa File: b1acea19-a627-369b-99ba-987ed1a52445.roa (raw, json) Hash identifier: qeGQmiZKkyOcU6i6rtHrUAmxuSy58J0LlgSZtG6u5mw= Subject key identifier: CF:19:9F:BA:6D:34:67:85:BB:80:98:D3:7F:8E:84:B2:5E:99:B6:20 Certificate issuer: /CN=bb49c202-f644-4fa6-8a36-084312761f72 Certificate serial: 010D0C9F4328584EDB2C8C543BDC83FE1C7196D0 Authority key identifier: CF:B3:27:7C:51:09:97:90:36:B3:FB:CF:B2:8C:86:C0:AB:F0:6B:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/b1acea19-a627-369b-99ba-987ed1a52445.roa Signing time: Sun 16 Aug 2026 13:00:12 +0000 ROA not before: Sun 16 Aug 2026 13:00:12 +0000 ROA not after: Sat 14 Nov 2026 14:00:12 +0000 asID: 212238 IP address blocks: 172.98.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/bb49c202-f644-4fa6-8a36-084312761f72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/bb49c202-f644-4fa6-8a36-084312761f72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:db:2c:8c:54:3b:dc:83:fe:1c:71:96:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb49c202-f644-4fa6-8a36-084312761f72 Validity Not Before: Aug 16 13:00:12 2026 GMT Not After : Nov 14 14:00:12 2026 GMT Subject: CN=6fa9f2ed-737c-4a39-b56c-3c823f7b7382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b4:e9:53:92:25:2c:77:95:95:fe:e4:80:ff: 0f:f2:f5:4a:9e:b4:1c:cf:c8:63:cd:f2:7b:ea:1c: b4:fa:fe:37:e3:76:74:d2:e6:91:c6:d6:a2:8e:d8: 48:f4:e6:3d:74:80:8a:52:60:c7:94:8b:06:b7:e3: 49:69:81:15:9d:cd:1a:e1:77:0e:e0:bb:5e:f1:c8: 43:c8:e2:42:9c:0a:5e:1e:7a:68:86:da:30:40:4b: 8c:1c:ad:27:37:64:2a:65:5d:57:33:26:d4:a6:06: e9:1e:43:73:f3:4e:d1:4b:c4:fc:28:a7:8a:ba:68: 19:b6:40:d3:61:de:5b:af:ee:cb:f7:aa:2e:e1:a0: 44:71:93:da:8f:e9:2f:fc:01:d7:fc:f8:4d:b3:db: 64:05:f9:5e:3a:62:66:16:84:b1:01:28:ae:5b:87: 36:c4:1d:0e:77:8b:2c:63:a3:81:42:e5:a7:f0:95: 0b:82:db:ac:ef:fb:a8:37:0f:9b:b6:dc:fd:92:74: 6f:8d:d1:cc:2e:87:33:f1:7a:72:84:9d:e9:85:5a: 32:3c:1d:0b:ad:ef:2a:e1:47:0b:bf:d0:d3:2a:e0: d7:66:9c:50:a6:ef:f4:e8:9b:2a:0b:73:77:41:62: 86:ab:fb:11:07:40:c1:5f:42:da:32:a9:db:a1:94: f3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:19:9F:BA:6D:34:67:85:BB:80:98:D3:7F:8E:84:B2:5E:99:B6:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/b1acea19-a627-369b-99ba-987ed1a52445.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/bb49c202-f644-4fa6-8a36-084312761f72.crl X509v3 Authority Key Identifier: keyid:CF:B3:27:7C:51:09:97:90:36:B3:FB:CF:B2:8C:86:C0:AB:F0:6B:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72.cer sbgp-ipAddrBlock: critical IPv4: 172.98.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:3c:7c:0c:28:9a:e9:56:04:a9:99:d1:68:35:fc:c7:e6:d4: 87:f0:d5:fa:0b:ea:dd:5b:5b:1e:ba:85:d2:d7:ef:b1:56:8d: 7e:ec:2c:3e:b4:7d:ab:93:f4:67:58:d9:54:98:ea:e4:23:ca: 64:b6:5a:d0:91:8f:fd:3a:6f:d4:c0:cd:41:d8:b2:76:7a:9e: 6f:44:3a:3f:48:43:f9:ce:9f:a2:d1:49:f6:21:02:6c:7b:02: f5:28:a6:1f:c7:bf:f6:fc:2f:e8:47:ea:18:08:b3:0b:71:75: e5:d8:e7:92:b6:23:a6:74:5f:4e:32:44:69:6b:82:0e:a4:94: 9f:21:d2:e8:ac:7a:5c:57:32:a2:75:72:a2:fe:d0:eb:70:9c: 82:19:15:a3:be:e8:af:6f:ff:e9:c9:c2:6e:24:26:e4:a5:39: b8:52:ad:ed:27:1b:33:1b:da:f6:21:a6:29:bc:c7:31:ff:cc: fc:67:2f:6a:3c:7c:aa:4e:f4:c3:53:02:32:c9:04:5c:b8:e1: 4f:83:ab:d4:b6:b5:92:2e:e5:dd:8c:eb:10:c8:4b:48:ef:5a: 23:78:2a:7b:74:0c:24:ff:a1:5d:5b:82:99:95:96:dc:c8:7c: 2f:9c:65:dc:7d:38:22:e2:18:06:fe:91:fd:97:bd:57:23:f1: 80:ae:01:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7bLIxUO9yD/hxxltAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmI0OWMyMDItZjY0NC00ZmE2LThhMzYtMDg0MzEyNzYx ZjcyMB4XDTI2MDgxNjEzMDAxMloXDTI2MTExNDE0MDAxMlowLzEtMCsGA1UEAxMk NmZhOWYyZWQtNzM3Yy00YTM5LWI1NmMtM2M4MjNmN2I3MzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bTpU5IlLHeVlf7kgP8P8vVKnrQcz8hjzfJ7 6hy0+v4343Z00uaRxtaijthI9OY9dICKUmDHlIsGt+NJaYEVnc0a4XcO4Lte8chD yOJCnApeHnpohtowQEuMHK0nN2QqZV1XMybUpgbpHkNz807RS8T8KKeKumgZtkDT Yd5br+7L96ou4aBEcZPaj+kv/AHX/PhNs9tkBfleOmJmFoSxASiuW4c2xB0Od4ss Y6OBQuWn8JULgtus7/uoNw+bttz9knRvjdHMLocz8XpyhJ3phVoyPB0Lre8q4UcL v9DTKuDXZpxQpu/06JsqC3N3QWKGq/sRB0DBX0LaMqnboZTzkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM8Zn7ptNGeFu4CY03+OhLJembYgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iYjQ5 YzIwMi1mNjQ0LTRmYTYtOGEzNi0wODQzMTI3NjFmNzIvYjFhY2VhMTktYTYyNy0z NjliLTk5YmEtOTg3ZWQxYTUyNDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmI0OWMyMDItZjY0NC00ZmE2LThh MzYtMDg0MzEyNzYxZjcyL2JiNDljMjAyLWY2NDQtNGZhNi04YTM2LTA4NDMxMjc2 MWY3Mi5jcmwwHwYDVR0jBBgwFoAUz7MnfFEJl5A2s/vPsoyGwKvwa6gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iYjQ5YzIwMi1mNjQ0LTRmYTYtOGEzNi0wODQz MTI3NjFmNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGLVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIY8fAwomulWBKmZ0Wg1/Mfm1Ifw1foL6t1bWx66hdLX77FWjX7sLD60 fauT9GdY2VSY6uQjymS2WtCRj/06b9TAzUHYsnZ6nm9EOj9IQ/nOn6LRSfYhAmx7 AvUoph/Hv/b8L+hH6hgIswtxdeXY55K2I6Z0X04yRGlrgg6klJ8h0uiselxXMqJ1 cqL+0OtwnIIZFaO+6K9v/+nJwm4kJuSlObhSre0nGzMb2vYhpim8xzH/zPxnL2o8 fKpO9MNTAjLJBFy44U+Dq9S2tZIu5d2M6xDIS0jvWiN4Knt0DCT/oV1bgpmVltzI fC+cZdx9OCLiGAb+kf2XvVcj8YCuAbE= -----END CERTIFICATE-----Generated at Tue Aug 25 01:30:12 2026 by rpki-client