$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/af343535-df03-3bb3-abfa-f22f7b41cef6.roa File: af343535-df03-3bb3-abfa-f22f7b41cef6.roa (raw, json) Hash identifier: xQTPD3j59Az/xNEpmxIpk+tCbuSTL8UpZC89O0iV1DY= Subject key identifier: 2C:1E:CD:B7:44:02:B4:0B:9E:E5:B5:0B:11:56:89:4E:AB:ED:28:99 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584E6C6F76FE10F578D0C792A580 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/af343535-df03-3bb3-abfa-f22f7b41cef6.roa Signing time: Tue 07 Jul 2026 21:00:13 +0000 ROA not before: Tue 07 Jul 2026 21:00:13 +0000 ROA not after: Mon 05 Oct 2026 21:00:13 +0000 asID: 834 IP address blocks: 198.1.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6c:6f:76:fe:10:f5:78:d0:c7:92:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Jul 7 21:00:13 2026 GMT Not After : Oct 5 21:00:13 2026 GMT Subject: CN=d3c2da73-b707-4812-8f1b-c1da5b639c1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:45:88:45:ce:6f:c4:43:44:5f:ed:e9:e8:0a: 99:c8:b1:7a:9f:ae:0d:79:27:bb:2e:3a:aa:89:86: 31:19:47:e4:1a:a9:bd:bf:71:07:bd:9b:de:d9:fb: 51:2f:dd:25:c4:ea:77:36:67:bd:20:4a:cf:d2:5f: 22:43:57:5e:fb:fe:73:7a:af:aa:6d:71:e0:cc:3e: da:2a:d8:46:9b:4c:e6:df:ae:6a:6b:cc:58:7a:04: 6e:0e:d0:93:dd:2f:a9:d2:89:e2:73:9e:1a:fd:23: d8:9e:82:e7:6b:0c:b5:d7:d7:aa:bd:b3:e4:31:ef: 7c:06:3f:6f:a1:66:f7:25:33:65:ff:76:37:92:12: a7:c9:e9:a5:4a:fe:e2:08:2e:22:d1:a2:ee:7f:f1: 45:e5:c4:88:4f:6b:db:5c:99:74:ea:b6:a6:38:27: 8c:0c:29:6c:dc:69:1a:a5:73:0b:43:a9:2c:84:43: c8:8e:cb:67:41:69:ee:57:32:f9:de:9c:c6:9c:5d: 07:f6:35:a6:76:cc:1e:b8:64:43:80:8f:8e:df:36: 84:23:19:0a:e2:fd:fe:25:71:2e:0c:e6:84:1f:a4: ef:96:48:e2:05:95:5d:58:4b:10:c4:eb:da:7c:1c: c0:69:13:bf:62:00:70:25:78:67:0b:ae:48:a6:c1: 69:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:1E:CD:B7:44:02:B4:0B:9E:E5:B5:0B:11:56:89:4E:AB:ED:28:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/af343535-df03-3bb3-abfa-f22f7b41cef6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:4c:20:54:71:8e:08:20:b4:e8:53:bd:64:92:a9:5a:9e:0f: dd:74:1b:2d:88:0c:51:e0:e5:b2:52:ae:7c:cf:7a:d2:29:1e: 10:2c:c2:d6:a5:df:00:a7:57:65:73:31:40:00:cf:38:f1:85: 32:98:45:39:b3:71:c9:3d:f2:76:95:95:8d:03:1f:1a:73:2e: 09:55:9b:7c:91:23:a7:45:46:5c:a0:de:77:4b:58:14:82:b5: 0a:5c:8b:c4:05:33:c7:f1:8c:fe:83:7b:4c:95:29:8f:2c:93: e6:a6:1d:e0:4c:08:57:15:6c:0a:53:13:41:18:77:ae:4d:57: c3:6c:6b:4d:07:48:fd:b2:5a:6f:6e:95:a5:d4:1b:ba:e9:4f: 6c:d4:0a:6d:ed:f4:ec:db:08:a3:77:75:d7:d3:d9:37:78:cb: c2:2b:30:91:0c:fe:43:15:51:66:24:ea:86:75:99:80:6a:06: 34:da:24:4e:79:16:a0:e9:d3:e5:98:21:db:ae:ca:e2:04:1a: ee:2c:7e:07:99:16:8a:38:71:ce:05:87:39:ef:75:97:c9:67: 26:05:cc:7e:8f:0f:c1:d1:00:f7:0f:74:23:5b:4c:e8:26:4f: cb:03:2f:dd:cd:07:42:96:7c:4f:7c:41:37:75:8d:86:50:8a: fe:a4:af:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5sb3b+EPV40MeSpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI2MDcwNzIxMDAxM1oXDTI2MTAwNTIxMDAxM1owLzEtMCsGA1UEAxMk ZDNjMmRhNzMtYjcwNy00ODEyLThmMWItYzFkYTViNjM5YzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkWIRc5vxENEX+3p6AqZyLF6n64NeSe7Ljqq iYYxGUfkGqm9v3EHvZve2ftRL90lxOp3Nme9IErP0l8iQ1de+/5zeq+qbXHgzD7a KthGm0zm365qa8xYegRuDtCT3S+p0onic54a/SPYnoLnawy119eqvbPkMe98Bj9v oWb3JTNl/3Y3khKnyemlSv7iCC4i0aLuf/FF5cSIT2vbXJl06ramOCeMDCls3Gka pXMLQ6kshEPIjstnQWnuVzL53pzGnF0H9jWmdsweuGRDgI+O3zaEIxkK4v3+JXEu DOaEH6TvlkjiBZVdWEsQxOvafBzAaRO/YgBwJXhnC65IpsFp4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwezbdEArQLnuW1CxFWiU6r7SiZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvYWYzNDM1MzUtZGYwMy0z YmIzLWFiZmEtZjIyZjdiNDFjZWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpMIFRxjgggtOhTvWSSqVqeD910Gy2IDFHg5bJSrnzPetIpHhAswtal 3wCnV2VzMUAAzzjxhTKYRTmzcck98naVlY0DHxpzLglVm3yRI6dFRlyg3ndLWBSC tQpci8QFM8fxjP6De0yVKY8sk+amHeBMCFcVbApTE0EYd65NV8Nsa00HSP2yWm9u laXUG7rpT2zUCm3t9OzbCKN3ddfT2Td4y8IrMJEM/kMVUWYk6oZ1mYBqBjTaJE55 FqDp0+WYIduuyuIEGu4sfgeZFoo4cc4FhznvdZfJZyYFzH6PD8HRAPcPdCNbTOgm T8sDL93NB0KWfE98QTd1jYZQiv6kr5Y= -----END CERTIFICATE-----Generated at Sat Jul 18 02:21:12 2026 by rpki-client