$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3597fa41-0807-3147-8c7b-86c72ed87a96.roa File: 3597fa41-0807-3147-8c7b-86c72ed87a96.roa (raw, json) Hash identifier: 4YI2xKICTDDSZc2KX1A6kiH3zRgdLusSDgrIf7zkFlU= Subject key identifier: AF:C0:F6:54:FA:47:D2:50:4C:9F:9E:C5:D4:BE:8F:50:81:25:D4:A1 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584EA787A98A0E5B232D8A333600 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3597fa41-0807-3147-8c7b-86c72ed87a96.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 399672 IP address blocks: 198.1.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:a9:8a:0e:5b:23:2d:8a:33:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a4ce3141-44d3-4744-acdd-733c6b52d18e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:27:ec:b9:c1:c1:73:67:eb:30:54:77:29:f0: 3b:d2:ed:9d:52:25:e1:7d:3a:a0:da:5e:96:f4:74: 42:f6:bf:cd:db:b4:22:73:2f:5e:0a:3a:1e:07:8d: 48:7f:16:ae:0d:e6:8e:0b:a3:71:f9:10:c3:79:1b: c3:8b:4e:c0:9a:3a:95:8a:56:bc:f7:52:b6:0b:43: 51:5a:61:57:77:ff:2a:5d:c3:f1:60:d5:d6:e4:2c: 8a:b3:fc:6a:f2:79:7c:58:a9:9d:70:60:37:52:bb: 7b:db:46:a7:bb:56:be:4f:04:65:30:1e:43:40:54: 2f:ad:0f:78:07:cd:3d:8c:bf:94:49:d0:a2:6c:c8: e5:67:6a:25:97:23:14:27:3a:2a:46:4a:97:fd:04: 69:ab:7f:21:d3:b3:f6:31:59:61:b9:a3:8a:f2:f9: 59:7f:b5:86:d2:02:c0:df:77:3c:2f:7d:2c:81:cc: ce:52:ef:a9:b9:7e:52:ad:e0:b3:76:73:de:4f:ad: 91:7b:db:7e:1c:2c:2b:15:20:79:d9:1f:9d:db:d6: 65:72:a1:24:bd:16:fb:26:74:8c:95:c3:7c:91:cb: 6d:28:44:99:29:03:9b:07:98:08:0b:3e:1c:79:13: 64:1a:00:10:65:3b:1c:cb:a6:52:0e:ed:98:2c:0a: 74:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C0:F6:54:FA:47:D2:50:4C:9F:9E:C5:D4:BE:8F:50:81:25:D4:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3597fa41-0807-3147-8c7b-86c72ed87a96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:8a:64:90:a8:e5:6d:2e:77:be:71:88:4e:b9:7e:8d:98:24: a0:9c:41:3d:ac:b4:5a:c3:44:3c:4c:41:3e:5d:3a:e7:79:dd: 52:b0:e8:76:cc:91:42:ce:f2:df:66:29:d9:27:c6:c0:8b:c4: 8a:af:2d:ca:c2:6b:3a:fd:84:fc:82:7b:5c:7a:4a:b6:23:01: 74:37:36:30:0f:f2:96:0d:56:28:42:36:0c:74:bb:96:38:11: 8a:07:04:62:06:13:0e:3c:6e:94:e9:f8:aa:c5:93:08:03:d3: b2:e4:a0:6e:a6:38:d4:78:41:e6:f8:77:4a:29:8c:1b:71:b2: 20:0f:1b:a1:21:fc:7c:1f:fc:7c:d2:44:32:46:bb:8d:b4:fa: e2:4c:c9:38:fd:d1:67:3e:5f:09:3e:cf:17:0f:42:f4:14:56: 84:41:12:5a:be:dc:be:5b:30:2f:59:9a:5d:70:68:a4:e3:a6: dc:8c:9e:ff:ce:43:9e:ea:18:b8:b3:36:d4:4c:44:23:ab:1a: 98:21:a8:ec:8f:3c:71:37:29:1c:5f:30:49:9d:94:53:37:38: 37:49:69:db:7b:46:73:37:d9:9c:31:7a:7e:ee:f4:00:b0:98: 79:fb:68:02:b0:70:26:3b:bf:3e:90:fd:67:d6:5f:4d:2f:7d: f5:b9:9d:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh6mKDlsjLYozNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YTRjZTMxNDEtNDRkMy00NzQ0LWFjZGQtNzMzYzZiNTJkMThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyfsucHBc2frMFR3KfA70u2dUiXhfTqg2l6W 9HRC9r/N27Qicy9eCjoeB41IfxauDeaOC6Nx+RDDeRvDi07AmjqVila891K2C0NR WmFXd/8qXcPxYNXW5CyKs/xq8nl8WKmdcGA3Urt720anu1a+TwRlMB5DQFQvrQ94 B809jL+USdCibMjlZ2ollyMUJzoqRkqX/QRpq38h07P2MVlhuaOK8vlZf7WG0gLA 33c8L30sgczOUu+puX5SreCzdnPeT62Re9t+HCwrFSB52R+d29ZlcqEkvRb7JnSM lcN8kcttKESZKQObB5gICz4ceRNkGgAQZTscy6ZSDu2YLAp0XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/A9lT6R9JQTJ+exdS+j1CBJdShMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvMzU5N2ZhNDEtMDgwNy0z MTQ3LThjN2ItODZjNzJlZDg3YTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECKZJCo5W0ud75xiE65fo2YJKCcQT2stFrDRDxMQT5dOud53VKw6HbM kULO8t9mKdknxsCLxIqvLcrCazr9hPyCe1x6SrYjAXQ3NjAP8pYNVihCNgx0u5Y4 EYoHBGIGEw48bpTp+KrFkwgD07LkoG6mONR4Qeb4d0opjBtxsiAPG6Eh/Hwf/HzS RDJGu420+uJMyTj90Wc+Xwk+zxcPQvQUVoRBElq+3L5bMC9Zml1waKTjptyMnv/O Q57qGLizNtRMRCOrGpghqOyPPHE3KRxfMEmdlFM3ODdJadt7RnM32Zwxen7u9ACw mHn7aAKwcCY7vz6Q/WfWX00vffW5nWI= -----END CERTIFICATE-----Generated at Thu Sep 3 22:31:53 2026 by rpki-client