$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/35f18c49-410e-385c-bf76-b1ef40393ba3.roa File: 35f18c49-410e-385c-bf76-b1ef40393ba3.roa (raw, json) Hash identifier: BRwaupC5HAv+KaaR05RkzK0xA2UYTOvo65tKv/gl4Zc= Subject key identifier: 7A:C2:79:C4:48:6E:EC:FE:91:B6:A7:C0:18:D0:87:0A:C3:1D:4F:D3 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1927ED475D0937DCBC19F00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/35f18c49-410e-385c-bf76-b1ef40393ba3.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 198.41.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:7e:d4:75:d0:93:7d:cb:c1:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=76e9cd9c-0282-48c8-8daf-0eecf5cf5510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4f:d5:62:3a:2f:21:64:d7:08:21:36:40:f0: 02:ee:de:7f:51:af:64:46:fe:dd:de:00:42:df:45: 0c:4f:af:83:91:9e:52:41:2b:02:20:cb:ae:38:a6: 5d:ae:2c:c6:0d:e9:07:a5:a4:56:db:48:7d:d0:bf: a3:f9:8c:8a:fd:3b:aa:97:64:7b:6a:13:64:62:de: fc:f1:64:68:64:d7:61:11:9e:c2:60:d9:d5:5d:6a: 3e:d8:b8:60:36:ec:64:c5:18:1f:83:f3:39:b5:ad: 73:d0:ed:8a:3c:90:a2:c2:80:90:77:c5:6f:5a:51: 71:05:6b:f9:b1:d9:81:f9:69:26:e7:29:a3:d1:35: 33:e3:de:6f:41:96:f5:9d:d9:2a:3c:2d:42:5d:37: 49:b9:c5:9c:26:25:ca:18:ca:d7:60:0f:a2:38:cd: 6c:ef:b5:7c:19:7b:e7:22:68:61:bf:26:3b:1b:18: c1:7d:a8:a6:bb:cd:a2:57:ea:14:21:e3:8d:fb:50: 62:c0:93:24:5b:6a:40:bb:d3:8b:fb:8f:48:65:ce: 00:b7:6f:e1:c3:1d:93:c8:26:c3:04:b9:f4:be:a9: 5e:1c:d8:3f:63:04:e0:2d:10:c7:2c:69:0f:e3:43: 50:ec:d8:c3:13:dc:07:31:24:67:17:7e:6a:d2:a8: fa:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C2:79:C4:48:6E:EC:FE:91:B6:A7:C0:18:D0:87:0A:C3:1D:4F:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/35f18c49-410e-385c-bf76-b1ef40393ba3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:50:b3:1c:4b:29:2f:a9:6d:23:85:a9:bd:2e:a7:5f:07:f9: 51:6f:bf:7b:df:bd:af:a6:7a:db:b4:e5:8e:41:26:81:d3:52: 01:d5:66:66:ff:c1:33:ec:72:31:1a:b3:e5:87:a2:d3:f6:9f: 03:2b:5d:d1:99:22:5e:df:8c:af:6f:18:6a:76:77:fc:b9:6d: a8:29:4f:a0:b8:71:03:f1:69:ee:0f:93:b2:a0:d1:dc:fa:9e: 43:4c:29:68:2e:be:39:91:ab:1f:19:2d:7b:5c:ee:f8:8a:47: b6:99:6d:06:29:90:7c:5e:9c:a3:95:f7:8e:a9:47:72:47:03: 58:3e:7b:a6:51:60:c5:75:25:f5:76:10:b6:9b:f6:e2:10:9d: 56:ac:e1:0f:bb:59:81:e2:aa:e7:3b:4c:38:28:d0:12:66:c7: 7b:f2:7f:44:3b:94:8b:04:40:fa:50:42:ce:10:e4:be:e0:8c: 53:b0:16:ef:c3:52:81:e9:18:19:eb:e6:d1:bf:0d:c3:68:05: 7c:58:b1:83:53:2c:b3:cb:64:9e:e5:1b:bd:11:1d:d8:0b:a8: 52:fd:8e:8c:26:19:ed:ab:f2:68:60:69:3f:16:e1:67:a3:f8: f8:63:bf:bd:58:1a:4e:2d:3d:be:bb:bc:84:83:93:04:ea:c7: 5f:a1:3f:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkn7UddCTfcvBnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk NzZlOWNkOWMtMDI4Mi00OGM4LThkYWYtMGVlY2Y1Y2Y1NTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmE/VYjovIWTXCCE2QPAC7t5/Ua9kRv7d3gBC 30UMT6+DkZ5SQSsCIMuuOKZdrizGDekHpaRW20h90L+j+YyK/Tuql2R7ahNkYt78 8WRoZNdhEZ7CYNnVXWo+2LhgNuxkxRgfg/M5ta1z0O2KPJCiwoCQd8VvWlFxBWv5 sdmB+Wkm5ymj0TUz495vQZb1ndkqPC1CXTdJucWcJiXKGMrXYA+iOM1s77V8GXvn ImhhvyY7GxjBfaimu82iV+oUIeON+1BiwJMkW2pAu9OL+49IZc4At2/hwx2TyCbD BLn0vqleHNg/YwTgLRDHLGkP40NQ7NjDE9wHMSRnF35q0qj68wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrCecRIbuz+kbanwBjQhwrDHU/TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzVmMThjNDktNDEwZS0z ODVjLWJmNzYtYjFlZjQwMzkzYmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxingMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpQsxxLKS+pbSOFqb0up18H+VFvv3vfva+metu05Y5BJoHTUgHVZmb/ wTPscjEas+WHotP2nwMrXdGZIl7fjK9vGGp2d/y5bagpT6C4cQPxae4Pk7Kg0dz6 nkNMKWguvjmRqx8ZLXtc7viKR7aZbQYpkHxenKOV946pR3JHA1g+e6ZRYMV1JfV2 ELab9uIQnVas4Q+7WYHiquc7TDgo0BJmx3vyf0Q7lIsEQPpQQs4Q5L7gjFOwFu/D UoHpGBnr5tG/DcNoBXxYsYNTLLPLZJ7lG70RHdgLqFL9jowmGe2r8mhgaT8W4Wej +Phjv71YGk4tPb67vISDkwTqx1+hP6g= -----END CERTIFICATE-----Generated at Sat Nov 1 10:03:14 2025 by rpki-client