$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f861b26-c03e-31fa-ae19-11f336173cdc.roa File: 2f861b26-c03e-31fa-ae19-11f336173cdc.roa (raw, json) Hash identifier: SrHAgR3oibcXSZ+fJPLZzHUnxDUkKzHtT3JT2Gg8U2M= Subject key identifier: 16:82:5A:DA:D7:F4:61:E9:78:F8:25:65:0B:68:91:09:25:44:23:D6 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EFCACEA180225173D56D0D580 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f861b26-c03e-31fa-ae19-11f336173cdc.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 202623 IP address blocks: 198.41.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:ea:18:02:25:17:3d:56:d0:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=a0b82893-4344-45ef-a20f-56211cf22ab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c3:ec:a2:a6:6a:ae:9c:00:02:34:c7:0c:92: 70:87:4d:87:5f:f9:ce:ce:ba:ab:fe:35:0a:4c:6b: 40:4d:1b:0a:ca:99:11:67:07:b7:f0:54:43:fa:bf: 7d:61:35:42:75:cc:7f:74:b5:2f:fe:b3:bb:c1:a5: 2c:dd:4b:64:9d:3f:56:7d:35:14:84:c6:62:80:b8: bd:2a:4d:aa:fd:3c:9a:2a:6e:b1:ea:59:c5:f7:33: 85:0a:7d:09:d6:16:a9:f0:0a:4b:97:05:59:6b:c0: 15:38:b7:48:cf:47:ff:21:a2:c3:c3:61:a4:59:fb: 01:dc:a5:c4:06:b8:9c:52:a1:e5:dc:27:41:4e:7f: 8b:1b:c8:dc:c2:10:e1:91:ef:5c:86:5f:1d:d6:d2: d3:aa:cf:e0:f5:51:d9:3e:aa:a9:56:b5:11:a9:fc: 0f:36:13:c6:ec:a0:6e:21:9f:09:e5:3b:b5:2a:61: 99:68:83:99:c6:c4:eb:07:47:da:17:c7:c2:c0:80: 02:51:67:dd:5d:32:5d:78:5d:54:3a:cb:c0:6c:f1: 76:20:6e:1d:1a:78:76:88:74:a2:5a:cb:b4:68:7c: f7:f7:1c:ee:2e:92:05:26:90:c7:f8:c9:ff:e2:a2: 1a:14:db:a9:94:c4:2f:0a:9d:04:4c:e5:ff:bf:c0: ac:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:82:5A:DA:D7:F4:61:E9:78:F8:25:65:0B:68:91:09:25:44:23:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f861b26-c03e-31fa-ae19-11f336173cdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:99:2c:87:a3:e5:46:87:ca:56:1b:12:a1:cd:36:1d:50:a1: db:bc:c3:91:2a:42:d1:5a:61:e3:a0:46:7d:7a:c2:4a:39:03: 3e:70:15:57:d3:eb:26:e2:21:64:4a:8e:b2:30:db:77:e3:31: 69:93:59:9e:10:27:32:a4:65:eb:13:65:92:4a:07:03:24:ac: 98:95:6f:ec:b4:8a:22:a4:ac:74:f6:3b:7c:31:c5:4f:55:90: 4d:6c:f4:d0:83:07:c4:79:d4:df:a1:17:61:89:7f:ce:0f:51: 1a:2e:d4:d7:d3:3c:a0:9d:13:91:d3:08:0b:b0:69:19:3d:ed: 5b:de:7a:b0:65:1a:2b:f8:ab:75:e1:59:b2:ca:d1:9a:ae:63: 68:45:e3:12:62:37:31:2c:93:df:11:58:0c:1b:2f:94:7d:a1: 69:4b:bf:86:43:d3:68:b4:df:de:fe:2d:60:b0:1c:df:33:e2: b7:19:36:af:a2:85:c1:30:2e:af:a1:85:7d:fd:29:69:80:bc: 37:85:4b:ad:5c:6d:2b:fb:e8:48:60:63:7c:54:a6:fb:a4:6a: 9d:93:0b:ba:82:78:43:fd:81:b7:2c:ea:98:c4:a4:0e:99:a8: 94:46:6b:37:45:fc:72:19:8c:3b:d9:d4:79:4d:74:06:d7:40: f2:47:dd:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rOoYAiUXPVbQ1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk YTBiODI4OTMtNDM0NC00NWVmLWEyMGYtNTYyMTFjZjIyYWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMPsoqZqrpwAAjTHDJJwh02HX/nOzrqr/jUK TGtATRsKypkRZwe38FRD+r99YTVCdcx/dLUv/rO7waUs3UtknT9WfTUUhMZigLi9 Kk2q/TyaKm6x6lnF9zOFCn0J1hap8ApLlwVZa8AVOLdIz0f/IaLDw2GkWfsB3KXE BricUqHl3CdBTn+LG8jcwhDhke9chl8d1tLTqs/g9VHZPqqpVrURqfwPNhPG7KBu IZ8J5Tu1KmGZaIOZxsTrB0faF8fCwIACUWfdXTJdeF1UOsvAbPF2IG4dGnh2iHSi Wsu0aHz39xzuLpIFJpDH+Mn/4qIaFNuplMQvCp0ETOX/v8CsMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBaCWtrX9GHpePglZQtokQklRCPWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmY4NjFiMjYtYzAzZS0z MWZhLWFlMTktMTFmMzM2MTczY2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCximUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaZLIej5UaHylYbEqHNNh1Qodu8w5EqQtFaYeOgRn16wko5Az5wFVfT 6ybiIWRKjrIw23fjMWmTWZ4QJzKkZesTZZJKBwMkrJiVb+y0iiKkrHT2O3wxxU9V kE1s9NCDB8R51N+hF2GJf84PURou1NfTPKCdE5HTCAuwaRk97VveerBlGiv4q3Xh WbLK0ZquY2hF4xJiNzEsk98RWAwbL5R9oWlLv4ZD02i0397+LWCwHN8z4rcZNq+i hcEwLq+hhX39KWmAvDeFS61cbSv76EhgY3xUpvukap2TC7qCeEP9gbcs6pjEpA6Z qJRGazdF/HIZjDvZ1HlNdAbXQPJH3TI= -----END CERTIFICATE-----Generated at Tue Sep 22 07:15:50 2026 by rpki-client