$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/439476d3-49e4-3f63-9364-f4d0a72e9e5c.roa File: 439476d3-49e4-3f63-9364-f4d0a72e9e5c.roa (raw, json) Hash identifier: NDk7JJRQHaoAaNXft5FnZQIP4pA5Q388MnBtJGONgKk= Subject key identifier: 34:72:93:81:5C:97:96:68:6B:87:4F:01:0A:BA:28:2F:58:8F:9F:C9 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584D6D9492B1369C2C598AABD3E0 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/439476d3-49e4-3f63-9364-f4d0a72e9e5c.roa Signing time: Tue 07 Apr 2026 14:04:02 +0000 ROA not before: Tue 07 Apr 2026 14:04:02 +0000 ROA not after: Mon 06 Jul 2026 14:04:02 +0000 asID: 40352 IP address blocks: 198.1.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:94:92:b1:36:9c:2c:59:8a:ab:d3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Apr 7 14:04:02 2026 GMT Not After : Jul 6 14:04:02 2026 GMT Subject: CN=ffd9faf8-090c-455f-a210-d86e967935ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:3a:f4:d1:81:1c:40:61:e9:d9:50:98:11:fd: 47:64:40:76:63:f5:fb:80:e2:df:06:0e:fa:8c:6c: 3e:81:92:11:8c:cb:74:52:23:7e:30:a5:94:05:d0: ed:53:c1:b6:88:c3:09:2c:c0:35:32:bc:0b:6e:1f: 91:ab:f7:86:77:83:3f:ea:c5:8e:6a:2c:27:d0:d5: cc:bd:e8:73:53:6f:2e:76:a0:42:64:7d:ae:cf:be: eb:d4:b0:b6:cb:be:de:d7:61:47:8c:92:c0:8d:00: 74:d7:74:21:f9:9e:90:aa:d3:f4:a7:22:18:88:02: cd:5c:f2:64:6b:d4:1b:06:ba:ad:ed:50:89:11:44: 09:dc:03:84:79:71:c4:7b:73:c0:7c:09:c2:34:a9: 81:70:78:d4:ec:c0:b6:03:53:0d:4e:ae:37:e6:fc: 6c:fe:38:d4:70:bf:dc:fb:75:f0:16:cd:c8:fd:2c: d8:10:1a:62:7d:c4:44:5f:d9:41:a9:74:80:92:03: ec:f3:15:4d:12:ac:33:68:c3:93:2c:63:23:1d:79: e4:b5:af:ba:c4:b1:b9:b2:35:3b:e6:96:6b:ec:51: 4a:90:c3:c3:ac:3b:31:db:d2:96:58:f5:1a:b7:39: 70:ce:62:35:ab:37:a2:66:aa:09:f9:b0:85:a0:4e: 4c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:72:93:81:5C:97:96:68:6B:87:4F:01:0A:BA:28:2F:58:8F:9F:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/439476d3-49e4-3f63-9364-f4d0a72e9e5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:88:93:f4:2c:4a:a6:e4:c1:78:5d:b4:39:d2:47:e1:a3:f7: da:83:f6:f5:9c:5d:14:c4:90:ee:91:8b:28:cf:90:16:58:03: 45:b9:6d:9a:45:3b:2b:fa:4c:6f:fe:ee:e0:9e:cb:2d:f8:d5: 4e:17:d6:cc:6b:56:e9:32:ee:62:84:36:2b:c2:8d:91:fd:98: bc:48:89:42:f6:75:a7:9f:b0:0b:ed:c7:0b:44:3b:a4:04:f8: 7e:87:c5:21:ea:9e:5a:33:d8:ea:a4:0f:73:b5:a6:44:57:36: 03:08:8b:6c:0b:ca:83:50:85:fc:ca:68:61:c2:e0:6c:e0:e9: 90:9d:c0:bb:8f:ed:aa:87:ab:eb:04:1a:2c:a5:1b:1b:11:cf: c4:03:c8:78:f7:ef:da:43:cf:29:06:30:48:15:d4:57:89:ad: bd:be:95:f7:32:a3:0b:f4:5a:24:f1:9a:58:3c:22:b1:77:12: 2b:ec:23:ab:77:e1:73:00:61:8d:6a:f6:ac:ce:b6:97:a5:96: c6:71:f7:1f:a5:ea:b4:2b:06:4d:3e:7e:31:da:68:e8:04:26: 92:6e:ff:be:a2:49:f2:d3:2f:04:d7:96:b9:a7:8f:4e:61:f4: 7a:49:61:db:6a:24:bc:71:dd:8c:99:2c:03:99:53:e3:32:e0: fd:93:0b:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1tlJKxNpwsWYqr0+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI2MDQwNzE0MDQwMloXDTI2MDcwNjE0MDQwMlowLzEtMCsGA1UEAxMk ZmZkOWZhZjgtMDkwYy00NTVmLWEyMTAtZDg2ZTk2NzkzNWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDr00YEcQGHp2VCYEf1HZEB2Y/X7gOLfBg76 jGw+gZIRjMt0UiN+MKWUBdDtU8G2iMMJLMA1MrwLbh+Rq/eGd4M/6sWOaiwn0NXM vehzU28udqBCZH2uz77r1LC2y77e12FHjJLAjQB013Qh+Z6QqtP0pyIYiALNXPJk a9QbBrqt7VCJEUQJ3AOEeXHEe3PAfAnCNKmBcHjU7MC2A1MNTq435vxs/jjUcL/c +3XwFs3I/SzYEBpifcREX9lBqXSAkgPs8xVNEqwzaMOTLGMjHXnkta+6xLG5sjU7 5pZr7FFKkMPDrDsx29KWWPUatzlwzmI1qzeiZqoJ+bCFoE5MhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDRyk4Fcl5Zoa4dPAQq6KC9Yj5/JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvNDM5NDc2ZDMtNDllNC0z ZjYzLTkzNjQtZjRkMGE3MmU5ZTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2Ik/QsSqbkwXhdtDnSR+Gj99qD9vWcXRTEkO6RiyjPkBZYA0W5bZpF Oyv6TG/+7uCeyy341U4X1sxrVuky7mKENivCjZH9mLxIiUL2daefsAvtxwtEO6QE +H6HxSHqnloz2OqkD3O1pkRXNgMIi2wLyoNQhfzKaGHC4Gzg6ZCdwLuP7aqHq+sE GiylGxsRz8QDyHj379pDzykGMEgV1FeJrb2+lfcyowv0WiTxmlg8IrF3EivsI6t3 4XMAYY1q9qzOtpellsZx9x+l6rQrBk0+fjHaaOgEJpJu/76iSfLTLwTXlrmnj05h 9HpJYdtqJLxx3YyZLAOZU+My4P2TC30= -----END CERTIFICATE-----Generated at Sat Apr 11 01:28:59 2026 by rpki-client