$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/af343535-df03-3bb3-abfa-f22f7b41cef6.roa File: af343535-df03-3bb3-abfa-f22f7b41cef6.roa (raw, json) Hash identifier: yometzYUzNP1xUPA2jSe5+R9fkVxcuh0h6UVZ3ZoFVc= Subject key identifier: CF:77:F9:4E:69:1E:61:F2:64:52:ED:27:F6:58:C2:6E:78:92:9D:19 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584D8C5FD4F3C7925341C2573C20 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/af343535-df03-3bb3-abfa-f22f7b41cef6.roa Signing time: Sat 18 Apr 2026 14:47:50 +0000 ROA not before: Sat 18 Apr 2026 14:47:50 +0000 ROA not after: Fri 17 Jul 2026 14:47:50 +0000 asID: 834 IP address blocks: 198.1.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:5f:d4:f3:c7:92:53:41:c2:57:3c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Apr 18 14:47:50 2026 GMT Not After : Jul 17 14:47:50 2026 GMT Subject: CN=3e903a6d-02d2-4ca2-91a9-a8a487735fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d0:0d:ae:94:cb:97:58:c9:0a:8b:6c:e1:20: 58:b0:24:cf:92:7b:01:10:02:38:dd:43:a9:b0:76: 79:d7:d8:09:e4:60:a8:af:f5:91:0c:67:34:3a:3e: 1c:00:8b:82:92:5c:42:b8:99:4d:ca:b1:ca:20:0e: a8:e9:95:b3:72:4f:dd:4a:89:47:4e:b1:93:9a:25: 5b:93:c2:b6:bf:64:84:01:33:41:83:8e:b6:3f:7a: a1:62:58:57:ba:1b:40:cb:d7:81:f0:45:a6:01:f4: 67:e0:21:92:32:13:0d:9e:0b:ee:a9:27:41:ae:af: 68:a6:ea:8c:f7:4f:76:98:f6:7f:25:32:46:32:2e: df:89:fb:86:de:f6:7e:42:d9:b6:c4:0d:f6:80:7d: 3a:e3:38:4f:d2:ad:08:3b:71:21:ee:89:de:85:bb: 6d:35:5a:93:41:0f:d0:1a:59:e2:80:44:27:44:a3: e1:11:5a:af:f4:fb:fd:c0:62:37:5a:93:94:2f:37: b7:e6:0b:d1:a7:06:86:e8:47:0d:f2:ea:b4:30:f4: 3f:91:be:2d:91:5b:51:af:36:c9:9c:a4:7a:8b:9d: 47:fc:e0:0b:76:2c:e8:d8:f8:c5:12:46:f0:1d:2a: 30:06:b3:48:ec:27:1a:6e:f4:4d:bd:c7:1b:34:3c: 62:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:77:F9:4E:69:1E:61:F2:64:52:ED:27:F6:58:C2:6E:78:92:9D:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/af343535-df03-3bb3-abfa-f22f7b41cef6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:58:4f:04:c9:da:d4:d5:21:a8:05:7f:a5:5f:03:8d:9f:74: cf:4f:9b:c0:dd:b2:10:70:fd:07:e9:54:0f:a7:5a:4b:79:3c: 1c:5a:7a:09:d2:02:01:d8:cb:0d:30:45:d6:68:0a:7a:ac:d0: b1:93:83:1b:17:5d:79:03:53:8f:55:04:b6:b7:5e:53:dd:33: 0d:27:4e:17:0c:ad:7f:a4:e1:4c:a0:c9:26:cc:90:78:13:5a: fc:ef:90:b8:94:c6:66:76:a1:d0:a1:e0:0a:05:93:f0:7b:a4: 11:4f:be:f5:d5:b6:0c:90:0c:51:26:cd:b3:37:d2:5b:a7:0f: 06:92:63:bf:00:b7:4c:e4:3c:8e:40:d7:fe:ce:03:5b:19:31: c2:c9:93:43:52:6a:c8:63:db:31:64:79:45:f2:67:6f:14:e5: df:14:54:99:fe:1a:5a:07:ca:8d:65:f7:1d:2b:20:3d:f1:70: 8b:44:b7:1d:80:2a:98:89:4a:99:31:36:33:ae:c3:b7:30:d1: 19:31:dd:f0:fa:52:ca:55:fb:70:3f:6a:4d:11:c4:52:5d:60: 8f:fb:5c:67:2c:79:32:20:8d:2b:12:dc:a1:d4:87:de:e5:9f: a1:9d:9d:bf:4f:ff:82:77:17:3e:54:21:6e:76:3e:47:0a:1a: 4f:c1:08:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2MX9Tzx5JTQcJXPCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI2MDQxODE0NDc1MFoXDTI2MDcxNzE0NDc1MFowLzEtMCsGA1UEAxMk M2U5MDNhNmQtMDJkMi00Y2EyLTkxYTktYThhNDg3NzM1ZmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtANrpTLl1jJCots4SBYsCTPknsBEAI43UOp sHZ519gJ5GCor/WRDGc0Oj4cAIuCklxCuJlNyrHKIA6o6ZWzck/dSolHTrGTmiVb k8K2v2SEATNBg462P3qhYlhXuhtAy9eB8EWmAfRn4CGSMhMNngvuqSdBrq9opuqM 9092mPZ/JTJGMi7fifuG3vZ+Qtm2xA32gH064zhP0q0IO3Eh7onehbttNVqTQQ/Q GlnigEQnRKPhEVqv9Pv9wGI3WpOULze35gvRpwaG6EcN8uq0MPQ/kb4tkVtRrzbJ nKR6i51H/OALdizo2PjFEkbwHSowBrNI7CcabvRNvccbNDxiKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM93+U5pHmHyZFLtJ/ZYwm54kp0ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvYWYzNDM1MzUtZGYwMy0z YmIzLWFiZmEtZjIyZjdiNDFjZWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1YTwTJ2tTVIagFf6VfA42fdM9Pm8DdshBw/QfpVA+nWkt5PBxaegnS AgHYyw0wRdZoCnqs0LGTgxsXXXkDU49VBLa3XlPdMw0nThcMrX+k4UygySbMkHgT WvzvkLiUxmZ2odCh4AoFk/B7pBFPvvXVtgyQDFEmzbM30lunDwaSY78At0zkPI5A 1/7OA1sZMcLJk0NSashj2zFkeUXyZ28U5d8UVJn+GloHyo1l9x0rID3xcItEtx2A KpiJSpkxNjOuw7cw0Rkx3fD6UspV+3A/ak0RxFJdYI/7XGcseTIgjSsS3KHUh97l n6Gdnb9P/4J3Fz5UIW52PkcKGk/BCH0= -----END CERTIFICATE-----Generated at Sat Apr 18 19:36:38 2026 by rpki-client