$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/4a98f038-d297-3838-953a-f34c5fe38c5f.roa File: 4a98f038-d297-3838-953a-f34c5fe38c5f.roa (raw, json) Hash identifier: 4Os4vvLBUy0cxn3pGGXOv03kAt0Xfo1qTZTnvhh8VLU= Subject key identifier: B9:A0:85:77:25:B3:34:46:F4:A1:3F:14:98:BE:E1:90:07:67:FA:7C Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584EA78728657D1B20D6A9375C00 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/4a98f038-d297-3838-953a-f34c5fe38c5f.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 20001 IP address blocks: 198.1.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:28:65:7d:1b:20:d6:a9:37:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a8f7d86d-3859-4b9f-a7ae-b68ce85ae580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f4:52:01:d9:45:86:14:8d:81:b4:71:1e:6f: f2:e5:c1:4f:7f:e7:ea:b2:a1:19:c2:6e:e7:9b:bb: ba:7b:89:73:f9:1c:f4:a9:67:25:e0:93:6f:29:c9: 13:cb:97:9e:6e:4c:c1:13:9a:35:97:d0:75:b6:88: ed:5d:47:a7:9a:c9:f6:4e:ad:81:93:d4:42:e5:e5: ec:3f:60:6c:22:0a:dd:e9:71:b9:f6:18:21:04:dd: fd:43:f0:c7:a5:fc:78:3d:a4:0e:c2:d1:82:93:a2: 0e:09:8f:ba:48:78:ff:a4:40:3e:64:0c:4f:76:4e: f7:74:cc:b3:a1:ff:81:f8:fe:57:ca:3f:af:d3:b5: 18:4b:c1:c1:82:c5:27:85:85:94:38:c7:31:65:32: ef:ee:24:65:97:ad:dc:59:f1:50:b5:d0:fa:89:e5: 8f:7f:5e:ac:a3:2d:1e:bb:bb:0e:cd:3f:24:cf:af: b6:2d:cd:4f:db:b1:b3:dc:20:f2:fe:fb:d8:62:a7: a7:4c:17:9d:a9:4d:a0:b4:24:18:b6:8d:cd:bf:08: 60:e7:b4:d1:c7:7e:16:56:59:a2:f8:67:de:0c:b3: 3e:9b:b8:70:0e:38:65:ef:05:fd:04:71:88:8b:31: aa:f4:2a:f5:be:8f:23:f7:b7:6c:29:fb:07:35:0a: ef:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A0:85:77:25:B3:34:46:F4:A1:3F:14:98:BE:E1:90:07:67:FA:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/4a98f038-d297-3838-953a-f34c5fe38c5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:c8:fd:6c:a8:80:ac:be:14:41:ef:61:39:8a:7a:b7:b6:a8: f0:c7:f4:07:05:b3:f8:06:6e:d1:47:57:f9:ed:1a:7f:6c:e3: 7d:fe:4e:05:62:67:d6:df:a1:1a:24:f6:77:22:26:62:84:7c: 16:e2:b0:28:2c:e3:ca:78:7b:5b:95:93:2e:12:0e:3e:75:2a: 0c:69:27:bb:49:71:4c:3c:db:be:0b:bc:51:4a:1a:cf:8b:9c: 41:b1:b4:b5:ec:7e:e0:8c:bb:04:d4:53:fc:47:05:0d:65:17: 61:3c:c8:c0:8d:dd:67:3c:a7:94:29:02:bf:7a:38:07:10:86: 93:68:75:36:74:ff:95:67:fd:5f:db:c1:a4:16:04:40:67:f9: c1:70:16:5c:db:2b:3b:16:7d:8d:42:2a:c2:fb:a6:26:32:31: 2a:8e:0a:67:88:91:f5:d0:5d:19:1d:55:5d:e9:fd:e0:1e:9c: e6:99:10:a3:bb:b9:61:18:eb:02:2f:2f:db:84:cb:a4:a3:11: 5f:08:ab:6b:3d:3b:d5:52:a7:a2:38:32:d6:a0:2d:c7:88:6e: 92:90:3b:0f:a4:86:39:a8:c3:86:1e:a1:14:2b:50:8a:31:05: 72:b1:8f:cd:c2:17:c6:17:a8:89:51:52:aa:57:65:96:0f:d5: 62:cd:01:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhyhlfRsg1qk3XAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YThmN2Q4NmQtMzg1OS00YjlmLWE3YWUtYjY4Y2U4NWFlNTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfRSAdlFhhSNgbRxHm/y5cFPf+fqsqEZwm7n m7u6e4lz+Rz0qWcl4JNvKckTy5eebkzBE5o1l9B1tojtXUenmsn2Tq2Bk9RC5eXs P2BsIgrd6XG59hghBN39Q/DHpfx4PaQOwtGCk6IOCY+6SHj/pEA+ZAxPdk73dMyz of+B+P5Xyj+v07UYS8HBgsUnhYWUOMcxZTLv7iRll63cWfFQtdD6ieWPf16soy0e u7sOzT8kz6+2Lc1P27Gz3CDy/vvYYqenTBedqU2gtCQYto3Nvwhg57TRx34WVlmi +GfeDLM+m7hwDjhl7wX9BHGIizGq9Cr1vo8j97dsKfsHNQrv8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmghXclszRG9KE/FJi+4ZAHZ/p8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvNGE5OGYwMzgtZDI5Ny0z ODM4LTk1M2EtZjM0YzVmZTM4YzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELI/WyogKy+FEHvYTmKere2qPDH9AcFs/gGbtFHV/ntGn9s433+TgVi Z9bfoRok9nciJmKEfBbisCgs48p4e1uVky4SDj51KgxpJ7tJcUw8274LvFFKGs+L nEGxtLXsfuCMuwTUU/xHBQ1lF2E8yMCN3Wc8p5QpAr96OAcQhpNodTZ0/5Vn/V/b waQWBEBn+cFwFlzbKzsWfY1CKsL7piYyMSqOCmeIkfXQXRkdVV3p/eAenOaZEKO7 uWEY6wIvL9uEy6SjEV8Iq2s9O9VSp6I4MtagLceIbpKQOw+khjmow4YeoRQrUIox BXKxj83CF8YXqIlRUqpXZZYP1WLNAdo= -----END CERTIFICATE-----Generated at Thu Sep 3 23:29:39 2026 by rpki-client