$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0cfd6db9-1498-3cfa-a73f-8a2b22c61159.roa File: 0cfd6db9-1498-3cfa-a73f-8a2b22c61159.roa (raw, json) Hash identifier: mwR29G/uYJssEBmKXadYC4qiuzBVW2x7dy2Cne/s9BU= Subject key identifier: F7:23:90:45:05:72:AD:77:45:3E:70:7C:E3:5D:2D:25:31:F7:E0:94 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1927F52BF338156794C8840 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0cfd6db9-1498-3cfa-a73f-8a2b22c61159.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 198.41.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:7f:52:bf:33:81:56:79:4c:88:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=75a184a1-03a1-49ff-880d-2d4ac2fa059f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:3f:a0:f1:a9:89:ec:1e:81:d5:5a:86:46:bf: 53:57:f4:c4:f2:a3:db:bf:60:46:06:54:8a:69:ac: ab:69:9e:a9:0b:b7:01:d8:3f:75:00:21:81:55:be: 71:a0:1c:1c:02:13:55:74:f9:50:80:6a:8d:6e:df: f2:b3:3a:71:06:16:71:6d:54:ba:b2:30:37:2d:34: 05:4c:b0:16:b1:c6:8d:f3:ae:26:20:ca:7c:ba:ea: 32:6f:72:9b:dd:be:55:1d:69:1b:e3:c8:fd:9f:88: 62:b7:d0:bf:3c:6a:86:19:f1:ba:fa:fa:32:c4:72: 92:eb:26:83:4a:e9:c5:37:23:15:f5:7d:56:96:ad: c3:ea:05:39:8b:61:b5:a3:e1:2e:51:37:9a:bb:fd: 87:d3:84:30:82:81:3f:a3:12:ea:b8:08:9c:a3:65: ba:9d:04:5d:35:db:cb:98:bf:f6:8e:7a:05:97:ad: 51:98:ed:cf:f1:11:37:cf:06:d2:c2:eb:ba:c9:89: 92:90:7c:56:90:f5:26:27:5b:8d:8c:45:a3:4a:7f: 4e:f2:d3:6d:2d:1d:36:a5:3e:51:00:69:75:f4:ba: cc:56:96:94:18:f9:fb:ac:b1:db:51:11:d8:f0:2d: b0:dd:6d:0e:21:f1:5a:54:00:74:b7:31:d0:b9:f8: 83:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:23:90:45:05:72:AD:77:45:3E:70:7C:E3:5D:2D:25:31:F7:E0:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0cfd6db9-1498-3cfa-a73f-8a2b22c61159.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:a5:93:d5:4e:54:5a:a2:f3:4e:ff:18:1e:04:5b:ce:f4:47: c2:8f:16:76:2e:4c:b3:d0:56:96:59:04:56:a4:42:d0:5a:9a: 6c:39:bc:96:34:ae:9e:d9:7b:da:40:0a:0e:65:4b:ce:56:03: 1c:06:5d:df:5a:48:fb:ac:4f:b5:37:35:3a:24:03:49:23:fc: e5:a6:d1:41:ff:05:d6:54:29:53:62:f6:0d:70:b5:ce:00:81: 68:e3:10:54:6a:70:19:b0:2f:9e:17:b6:4a:f8:39:6a:04:c4: b6:9f:97:19:6c:27:69:7f:71:36:0d:f3:af:62:4b:e5:83:53: 83:09:57:59:0e:d1:f5:0f:13:7b:eb:96:b2:ad:b9:4c:7f:aa: f3:9d:bc:38:4f:65:e1:f1:81:31:31:06:a3:5e:a4:5e:78:45: 9a:3d:4e:91:f5:c0:4e:fb:90:72:d4:75:74:1c:be:7f:20:f2: ca:c0:04:bb:af:1b:3d:4d:a7:73:91:dc:af:30:02:61:65:fb: ce:9b:4a:51:a4:3d:df:56:05:80:77:bd:ff:76:3a:6f:a9:4f: a7:8c:0d:c5:74:a4:d0:a4:ee:23:a0:22:f9:6e:61:93:88:06: 39:b6:f2:eb:2a:83:05:95:67:01:5a:7b:fa:2e:4d:3b:bb:b0: 52:a9:37:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkn9SvzOBVnlMiEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk NzVhMTg0YTEtMDNhMS00OWZmLTg4MGQtMmQ0YWMyZmEwNTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgD+g8amJ7B6B1VqGRr9TV/TE8qPbv2BGBlSK aayraZ6pC7cB2D91ACGBVb5xoBwcAhNVdPlQgGqNbt/yszpxBhZxbVS6sjA3LTQF TLAWscaN864mIMp8uuoyb3Kb3b5VHWkb48j9n4hit9C/PGqGGfG6+voyxHKS6yaD SunFNyMV9X1Wlq3D6gU5i2G1o+EuUTeau/2H04QwgoE/oxLquAico2W6nQRdNdvL mL/2jnoFl61RmO3P8RE3zwbSwuu6yYmSkHxWkPUmJ1uNjEWjSn9O8tNtLR02pT5R AGl19LrMVpaUGPn7rLHbURHY8C2w3W0OIfFaVAB0tzHQufiDywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPcjkEUFcq13RT5wfONdLSUx9+CUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGNmZDZkYjktMTQ5OC0z Y2ZhLWE3M2YtOGEyYjIyYzYxMTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxinzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6lk9VOVFqi807/GB4EW870R8KPFnYuTLPQVpZZBFakQtBammw5vJY0 rp7Ze9pACg5lS85WAxwGXd9aSPusT7U3NTokA0kj/OWm0UH/BdZUKVNi9g1wtc4A gWjjEFRqcBmwL54Xtkr4OWoExLaflxlsJ2l/cTYN869iS+WDU4MJV1kO0fUPE3vr lrKtuUx/qvOdvDhPZeHxgTExBqNepF54RZo9TpH1wE77kHLUdXQcvn8g8srABLuv Gz1Np3OR3K8wAmFl+86bSlGkPd9WBYB3vf92Om+pT6eMDcV0pNCk7iOgIvluYZOI Bjm28usqgwWVZwFae/ouTTu7sFKpN4Q= -----END CERTIFICATE-----Generated at Sat Nov 1 10:02:52 2025 by rpki-client