$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3af862da-851f-39d9-9db1-d644ee402747.roa File: 3af862da-851f-39d9-9db1-d644ee402747.roa (raw, json) Hash identifier: Xw7fgfOyacTVSHLM57TRkSpmexLuDTpb/Vl7NIQRkR4= Subject key identifier: 52:8A:40:C8:7C:4A:E5:C2:B1:2B:1E:DB:03:37:FE:C4:98:18:78:B3 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584EA78723FBBAB79D04223C23E0 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3af862da-851f-39d9-9db1-d644ee402747.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 20001 IP address blocks: 198.1.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:23:fb:ba:b7:9d:04:22:3c:23:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=90e39167-6aac-4f42-8bea-b5282798614a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d8:5f:70:18:ce:6c:b6:16:2b:83:53:5d:d4: 53:e8:c7:b6:2c:46:72:b4:81:9b:c2:ec:b0:37:ca: 93:a3:d4:68:62:7b:0d:0c:d0:af:5a:b4:c5:c7:6d: 0a:13:b7:b9:af:71:77:b4:16:79:67:9b:fe:4b:4b: b5:62:06:59:42:f4:59:d3:a8:13:5c:5a:7f:7f:2f: df:89:1c:00:24:e5:c9:ce:91:0b:a0:73:da:56:e8: 97:1b:d3:b8:30:26:fd:35:82:6e:c9:e2:51:23:5f: 4c:45:1a:15:e6:09:94:41:a4:d3:e0:bf:a9:de:4f: 5d:f3:5d:1d:8e:3f:73:e1:72:62:f0:7d:27:51:82: d4:62:63:d0:57:68:d3:ee:eb:b9:a8:e1:60:61:ca: 52:eb:b7:6b:9f:c2:c1:cc:0a:7c:77:f5:cf:29:13: d8:cb:01:2e:e6:5c:25:1a:ef:b1:fc:ed:03:2e:f0: bd:ae:c2:05:bb:f2:95:a9:13:fe:a8:1b:e0:ed:93: 3f:1e:f5:c6:3c:4a:78:d5:cf:3d:e6:b5:76:4d:e9: 95:af:ec:84:5c:d8:34:87:3a:65:40:10:99:42:5a: 48:84:2d:27:a8:72:a4:a6:47:0e:97:52:a4:47:7a: 42:71:74:bf:57:ff:69:c0:95:a4:30:58:d6:2c:ef: 19:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:8A:40:C8:7C:4A:E5:C2:B1:2B:1E:DB:03:37:FE:C4:98:18:78:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3af862da-851f-39d9-9db1-d644ee402747.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:ef:80:23:11:84:1b:83:89:df:37:c2:74:c4:64:91:2e:83: a7:d6:35:14:84:7b:ce:7a:f9:11:34:7b:4b:e8:08:c8:7d:2a: 04:0a:41:b4:2d:89:c0:f2:f7:49:6b:51:07:4f:b5:10:c1:a7: 30:71:76:a8:27:1d:18:ac:21:7a:46:a3:58:31:46:31:5e:b0: 74:d0:8c:25:f4:b9:49:ba:cc:ca:41:49:b3:b3:c8:94:04:18: 40:57:3a:a1:3c:56:ac:2c:b4:f0:57:4d:4e:aa:3d:92:d3:2c: 9b:90:96:54:32:e3:b8:56:24:dc:a2:4c:8d:10:e5:4c:b6:9b: f0:4b:99:dc:97:42:04:6e:61:a7:27:80:51:a2:4a:3a:ef:bc: 63:fa:ad:69:e0:c7:5d:11:7b:cd:0f:53:ae:ef:7d:de:fc:fb: 2d:ff:19:92:96:6a:17:d9:f6:f8:34:20:90:2a:70:6a:76:47: 3d:18:64:80:39:0e:63:a9:e3:3f:32:2b:6a:e8:a3:31:5c:0c: 01:e8:f6:73:b2:4f:70:6b:9d:a5:30:e4:59:16:90:b8:11:ea: 3c:f2:63:c3:2a:77:4d:49:a8:f0:69:bb:3f:a2:3b:4d:31:09: fa:3e:6f:d7:ea:87:57:40:77:4a:fa:76:63:0a:56:13:8a:ea: f8:c0:e0:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhyP7uredBCI8I+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTBlMzkxNjctNmFhYy00ZjQyLThiZWEtYjUyODI3OTg2MTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNhfcBjObLYWK4NTXdRT6Me2LEZytIGbwuyw N8qTo9RoYnsNDNCvWrTFx20KE7e5r3F3tBZ5Z5v+S0u1YgZZQvRZ06gTXFp/fy/f iRwAJOXJzpELoHPaVuiXG9O4MCb9NYJuyeJRI19MRRoV5gmUQaTT4L+p3k9d810d jj9z4XJi8H0nUYLUYmPQV2jT7uu5qOFgYcpS67drn8LBzAp8d/XPKRPYywEu5lwl Gu+x/O0DLvC9rsIFu/KVqRP+qBvg7ZM/HvXGPEp41c895rV2TemVr+yEXNg0hzpl QBCZQlpIhC0nqHKkpkcOl1KkR3pCcXS/V/9pwJWkMFjWLO8ZVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFKKQMh8SuXCsSse2wM3/sSYGHizMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvM2FmODYyZGEtODUxZi0z OWQ5LTlkYjEtZDY0NGVlNDAyNzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzvgCMRhBuDid83wnTEZJEug6fWNRSEe856+RE0e0voCMh9KgQKQbQt icDy90lrUQdPtRDBpzBxdqgnHRisIXpGo1gxRjFesHTQjCX0uUm6zMpBSbOzyJQE GEBXOqE8VqwstPBXTU6qPZLTLJuQllQy47hWJNyiTI0Q5Uy2m/BLmdyXQgRuYacn gFGiSjrvvGP6rWngx10Re80PU67vfd78+y3/GZKWahfZ9vg0IJAqcGp2Rz0YZIA5 DmOp4z8yK2roozFcDAHo9nOyT3BrnaUw5FkWkLgR6jzyY8Mqd01JqPBpuz+iO00x Cfo+b9fqh1dAd0r6dmMKVhOK6vjA4Lc= -----END CERTIFICATE-----Generated at Thu Sep 3 22:31:54 2026 by rpki-client