$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0329ca24-543b-3e14-bff3-7ef70cd0936e.roa File: 0329ca24-543b-3e14-bff3-7ef70cd0936e.roa (raw, json) Hash identifier: a+ZfvVCU0zftS9rd2pmIjGzXyQfYmJ/4xfjMfBKqGAo= Subject key identifier: 8A:2C:42:5B:FE:89:69:AA:A8:34:B5:55:23:3D:5D:73:E4:30:19:BA Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB192718CF2092A8180AD9480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0329ca24-543b-3e14-bff3-7ef70cd0936e.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 198.41.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:71:8c:f2:09:2a:81:80:ad:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=62de9940-a450-4af4-8c80-fdb341ba14e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:43:61:62:14:87:e9:ef:9a:d3:48:53:3c:e8: e6:04:bf:7a:87:20:e7:5a:89:17:b0:7b:bb:fb:c7: 9d:85:8e:90:ee:4c:ee:59:2b:83:91:34:ce:2f:8d: 3d:72:7c:7e:d6:f9:30:1e:90:19:3c:ed:9c:f6:d2: b6:24:e8:ba:e3:15:4e:e9:06:75:56:d9:5e:3c:7d: c7:22:8b:7d:85:35:82:bb:93:73:04:e6:38:fe:ae: 21:5e:ff:58:60:42:6e:b7:12:f4:b8:d7:3f:0e:8e: 1e:de:a7:b3:a2:0b:66:16:70:0b:11:c7:f9:8a:28: 89:a7:f9:06:ed:54:e0:ca:de:ab:ad:a4:b9:4a:ed: 2b:0f:ec:99:f5:81:76:a4:1e:96:00:13:f5:c9:4d: e7:7e:94:e8:32:12:76:94:25:27:56:a2:b7:96:ce: 50:de:10:39:4d:33:3e:91:f9:e8:3a:8b:f3:31:87: 0a:d3:47:21:04:91:f9:c7:ab:80:af:72:16:22:dd: ff:76:6b:e2:dd:e0:ca:0f:95:b2:bb:74:54:95:14: e6:ce:61:ee:f2:af:54:a0:ed:3b:85:41:1f:bb:b4: 88:ee:53:9f:d8:ec:65:ec:6a:46:2a:c6:bb:11:ca: 52:5b:98:aa:a4:a9:a2:f7:e5:7e:d1:b0:35:b4:40: e6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:2C:42:5B:FE:89:69:AA:A8:34:B5:55:23:3D:5D:73:E4:30:19:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0329ca24-543b-3e14-bff3-7ef70cd0936e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:bc:3b:77:d7:80:3d:da:20:55:3e:da:36:5f:df:4b:24:f9: e3:b8:58:17:4c:6a:de:4b:c8:65:fb:4b:a1:e3:eb:52:35:d8: cd:23:2c:50:2d:fc:e1:76:0a:51:e7:c0:9b:32:4c:de:d7:b6: bd:21:d9:e1:dd:0d:b0:c1:46:1d:c0:f9:8f:32:63:78:40:40: f2:9f:aa:21:cb:91:7a:84:24:9b:f8:dd:a2:d4:75:dc:05:fd: 68:37:1f:d9:96:fa:89:29:ab:6f:78:d0:4c:dd:74:d0:16:bc: 0a:e2:3f:a4:6a:96:69:da:3a:0c:0d:4c:4d:89:a7:f5:fe:e6: 28:4d:8b:39:e7:af:49:2a:3a:be:c4:9b:de:51:6b:42:32:f7: 3a:38:1d:42:5d:51:6f:dd:0a:e5:a6:a9:cc:3e:3f:7d:8b:76: 75:3f:be:45:e1:65:47:b1:1d:ec:76:4f:de:f8:93:99:4c:a0: 92:73:f5:8a:f7:e7:58:7a:44:8d:10:79:ce:d4:2f:af:ea:9c: 1a:55:a3:8b:7a:63:1f:b1:40:be:47:d4:0e:48:19:6f:41:92: ef:77:b5:41:03:cf:0e:db:d3:fd:ea:e6:84:05:e2:3f:8b:b6: 1d:ab:4f:61:b7:ef:44:64:27:b3:c8:b8:87:8e:56:71:b1:b3: 47:c4:91:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxknGM8gkqgYCtlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk NjJkZTk5NDAtYTQ1MC00YWY0LThjODAtZmRiMzQxYmExNGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0NhYhSH6e+a00hTPOjmBL96hyDnWokXsHu7 +8edhY6Q7kzuWSuDkTTOL409cnx+1vkwHpAZPO2c9tK2JOi64xVO6QZ1VtlePH3H Iot9hTWCu5NzBOY4/q4hXv9YYEJutxL0uNc/Do4e3qezogtmFnALEcf5iiiJp/kG 7VTgyt6rraS5Su0rD+yZ9YF2pB6WABP1yU3nfpToMhJ2lCUnVqK3ls5Q3hA5TTM+ kfnoOovzMYcK00chBJH5x6uAr3IWIt3/dmvi3eDKD5Wyu3RUlRTmzmHu8q9UoO07 hUEfu7SI7lOf2Oxl7GpGKsa7EcpSW5iqpKmi9+V+0bA1tEDmewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIosQlv+iWmqqDS1VSM9XXPkMBm6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDMyOWNhMjQtNTQzYi0z ZTE0LWJmZjMtN2VmNzBjZDA5MzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxinUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHa8O3fXgD3aIFU+2jZf30sk+eO4WBdMat5LyGX7S6Hj61I12M0jLFAt /OF2ClHnwJsyTN7Xtr0h2eHdDbDBRh3A+Y8yY3hAQPKfqiHLkXqEJJv43aLUddwF /Wg3H9mW+okpq2940EzddNAWvAriP6RqlmnaOgwNTE2Jp/X+5ihNiznnr0kqOr7E m95Ra0Iy9zo4HUJdUW/dCuWmqcw+P32LdnU/vkXhZUexHex2T974k5lMoJJz9Yr3 51h6RI0Qec7UL6/qnBpVo4t6Yx+xQL5H1A5IGW9Bku93tUEDzw7b0/3q5oQF4j+L th2rT2G370RkJ7PIuIeOVnGxs0fEkT4= -----END CERTIFICATE-----Generated at Sat Nov 1 10:02:32 2025 by rpki-client