$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0cfd6db9-1498-3cfa-a73f-8a2b22c61159.roa File: 0cfd6db9-1498-3cfa-a73f-8a2b22c61159.roa (raw, json) Hash identifier: YfE7P2G9Q8VBqpbCrNHG9Zi5ju8zdkhj0s0vRP/dp3c= Subject key identifier: 86:30:DF:28:1F:8A:A8:BA:A6:F1:14:FC:88:13:D0:6C:CB:B0:E9:35 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF44CC70C17A2324640A94700 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0cfd6db9-1498-3cfa-a73f-8a2b22c61159.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 198.41.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:c7:0c:17:a2:32:46:40:a9:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=6641950d-fc2a-46eb-a22f-2b75589f9e5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2e:69:e5:a2:54:5f:de:46:80:34:6e:23:e9: cf:35:b5:f8:37:a0:63:69:71:96:93:b4:26:7a:bd: 4a:a6:6c:e7:91:2e:88:3e:37:ed:8c:ad:fc:a9:49: 57:30:2b:62:c0:15:b0:5d:1f:ba:5b:c7:09:73:0e: 98:ee:45:8e:5f:e7:43:c8:bc:4f:93:97:8a:52:0c: a6:36:57:d2:f5:96:7f:c5:6e:8f:c4:7a:b7:b7:45: 56:bd:b7:35:6d:ea:d5:38:00:79:1c:e1:0c:e9:0f: 33:86:8d:12:6c:09:03:5f:0f:e6:55:70:a1:aa:c2: da:f6:b5:42:3b:95:67:d6:72:fb:33:dd:80:b0:f0: cc:2c:b9:f2:1d:9e:f2:06:1d:23:a5:3a:4a:df:64: cd:a5:bf:2b:69:e0:f0:1c:b0:5f:34:6d:1f:0a:40: 12:9d:b1:77:3e:5d:09:a6:42:24:c6:c8:6c:22:0d: 0e:8d:bb:82:05:0a:9a:9a:6d:97:60:07:be:de:37: d8:bd:01:65:fa:a8:38:a8:db:8a:c8:ec:b0:ef:66: 61:b3:f7:9b:20:89:74:a9:b6:7d:45:76:cb:c6:71: 2c:b6:39:66:49:4e:19:2b:09:ec:ed:e3:1b:75:71: 29:08:46:ef:26:38:8f:63:8f:99:9c:33:49:ad:c4: c2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:30:DF:28:1F:8A:A8:BA:A6:F1:14:FC:88:13:D0:6C:CB:B0:E9:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0cfd6db9-1498-3cfa-a73f-8a2b22c61159.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:af:df:88:35:1b:81:06:ce:32:26:da:df:69:4a:74:3d:dc: a5:48:c7:d4:16:c2:b0:19:5f:91:4a:da:8d:f8:9e:6b:b6:4e: e2:84:e4:bb:cb:84:d2:f7:aa:48:5e:9a:d1:76:e6:a3:f8:59: 03:08:69:7c:e5:c9:29:8a:95:eb:32:bd:9a:e4:91:b2:99:bb: a9:2b:5b:00:7b:d1:99:85:56:56:07:84:c1:41:b0:65:eb:86: 91:a2:8a:74:7b:b1:d4:5b:78:28:36:54:c5:5c:6e:7f:2e:a4: 3a:27:12:eb:76:ea:74:fa:9c:b7:86:68:b1:c3:d2:7b:80:c9: f5:78:47:74:d2:27:88:b4:3c:9a:f9:c2:42:2b:54:f7:9c:7c: 9f:a0:1a:ac:0a:7f:e2:07:d2:8e:6c:f3:b6:66:41:6f:11:f9: 04:1e:b3:df:a4:00:4f:67:3e:82:dc:6d:93:25:3b:4d:6b:2f: c7:ee:bb:3e:92:6d:13:1e:84:fa:d9:6f:24:18:cf:41:2f:a1: dc:91:9e:5f:d3:84:3d:08:fa:83:de:98:c4:fb:57:a5:dd:7e: 81:e3:37:8a:6e:b5:e0:a6:4e:67:0a:1b:30:6b:0f:b9:f2:b5: e4:fe:91:f8:5d:07:27:75:08:6e:30:4d:94:b5:5e:f1:76:e4: 95:ab:73:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TMcMF6IyRkCpRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk NjY0MTk1MGQtZmMyYS00NmViLWEyMmYtMmI3NTU4OWY5ZTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuS5p5aJUX95GgDRuI+nPNbX4N6BjaXGWk7Qm er1KpmznkS6IPjftjK38qUlXMCtiwBWwXR+6W8cJcw6Y7kWOX+dDyLxPk5eKUgym NlfS9ZZ/xW6PxHq3t0VWvbc1berVOAB5HOEM6Q8zho0SbAkDXw/mVXChqsLa9rVC O5Vn1nL7M92AsPDMLLnyHZ7yBh0jpTpK32TNpb8raeDwHLBfNG0fCkASnbF3Pl0J pkIkxshsIg0OjbuCBQqamm2XYAe+3jfYvQFl+qg4qNuKyOyw72Zhs/ebIIl0qbZ9 RXbLxnEstjlmSU4ZKwns7eMbdXEpCEbvJjiPY4+ZnDNJrcTC6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYw3ygfiqi6pvEU/IgT0GzLsOk1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGNmZDZkYjktMTQ5OC0z Y2ZhLWE3M2YtOGEyYjIyYzYxMTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxinzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiv34g1G4EGzjIm2t9pSnQ93KVIx9QWwrAZX5FK2o34nmu2TuKE5LvL hNL3qkhemtF25qP4WQMIaXzlySmKlesyvZrkkbKZu6krWwB70ZmFVlYHhMFBsGXr hpGiinR7sdRbeCg2VMVcbn8upDonEut26nT6nLeGaLHD0nuAyfV4R3TSJ4i0PJr5 wkIrVPecfJ+gGqwKf+IH0o5s87ZmQW8R+QQes9+kAE9nPoLcbZMlO01rL8fuuz6S bRMehPrZbyQYz0EvodyRnl/ThD0I+oPemMT7V6XdfoHjN4puteCmTmcKGzBrD7ny teT+kfhdByd1CG4wTZS1XvF25JWrczw= -----END CERTIFICATE-----Generated at Tue Sep 1 01:45:13 2026 by rpki-client