$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/35f18c49-410e-385c-bf76-b1ef40393ba3.roa File: 35f18c49-410e-385c-bf76-b1ef40393ba3.roa (raw, json) Hash identifier: BSucA1L24M9xLWxZEzwr4nhX+/3dK+3+/Vc5OIYBS78= Subject key identifier: AB:B2:07:A5:52:4F:AB:EA:9A:13:4E:90:6C:87:36:00:71:0B:1C:C3 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF44CC6B4CA442BFB954C2060 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/35f18c49-410e-385c-bf76-b1ef40393ba3.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 198.41.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:c6:b4:ca:44:2b:fb:95:4c:20:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=b8ed6032-58f8-47c6-a0de-04aceefcf417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ea:df:cc:03:99:8c:5d:3e:02:93:d5:b7:3c: 16:cd:4b:39:f7:3b:89:1a:29:25:64:fe:1f:02:d5: 4d:07:ca:a2:d1:e1:de:d9:55:50:51:d2:36:11:87: 9c:3c:84:35:d7:9b:8f:2d:65:00:15:11:11:2e:f3: 2c:eb:c9:e7:9a:57:d2:eb:23:f0:0e:f9:d6:3a:1a: 83:cd:bd:6b:1b:8d:3b:e4:c9:d9:8d:fd:49:c8:2e: 4c:3e:a2:d4:28:1c:c5:38:39:5f:f1:6a:de:83:bc: 02:aa:4b:68:e0:7b:4a:a0:69:f3:a5:28:09:bf:3c: 5a:de:5a:d3:21:8d:3d:90:5f:92:db:a7:6f:32:ee: f1:87:f4:42:d1:30:77:cc:77:3c:26:2b:0d:65:26: f0:41:cb:40:01:c8:08:4e:83:d1:03:94:a2:32:fd: 47:91:bd:1f:b0:85:16:a9:56:87:db:b9:63:42:73: 77:d3:47:04:c6:c5:c3:1a:9d:d5:bb:84:f4:ec:c0: ea:93:1c:d2:76:a2:d3:7f:3c:50:03:da:15:e2:cc: 20:53:9e:80:30:6d:a9:40:d3:1d:dd:76:1c:fd:d1: 55:0a:23:13:71:77:b3:f7:fe:83:6b:69:08:3a:0c: 9e:a4:a0:fb:95:56:96:fa:81:23:3c:61:a3:1a:bd: de:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B2:07:A5:52:4F:AB:EA:9A:13:4E:90:6C:87:36:00:71:0B:1C:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/35f18c49-410e-385c-bf76-b1ef40393ba3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:07:6a:c6:da:82:02:f5:12:43:93:05:1f:7a:36:ab:2d:c2: de:d0:fb:86:7d:9d:e4:b5:56:98:6c:26:f6:fb:2e:8c:2d:60: b9:54:b0:04:15:90:d5:06:fa:ff:87:df:90:13:be:a4:35:e5: ad:02:28:e0:b4:b9:0a:86:1f:56:ba:13:af:ce:16:2d:2b:79: 06:1d:ca:19:dc:cf:2f:0c:42:88:56:7f:52:fe:58:b0:7d:c9: 52:f5:00:5d:a0:05:84:c0:66:e4:b0:b0:0a:71:26:24:0c:da: 95:04:d2:65:b2:0d:7c:4d:cc:e6:fd:66:b4:4b:b2:d6:0b:73: 5c:15:1e:c4:e7:6f:61:96:87:8d:c0:71:92:3e:39:4a:2d:1b: 70:21:0a:24:b4:d0:eb:78:91:24:6f:db:d9:d2:b4:5c:0a:44: a4:b4:0a:32:f0:0b:4e:61:24:7b:06:1a:16:ba:8c:c7:63:69: b6:30:be:4f:ac:9c:65:bc:77:f6:4b:43:73:52:9a:df:a2:87: d3:36:0c:b9:e2:93:ab:5e:3f:f8:25:bd:a1:d4:9f:d3:59:f4: 5a:d5:90:55:d8:e3:df:94:ad:a2:d1:5e:5a:32:97:39:f4:f4: 06:5d:de:1e:b9:aa:d4:36:ea:26:25:ab:e9:bb:fe:c2:0b:8e: 85:12:0b:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TMa0ykQr+5VMIGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk YjhlZDYwMzItNThmOC00N2M2LWEwZGUtMDRhY2VlZmNmNDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkerfzAOZjF0+ApPVtzwWzUs59zuJGiklZP4f AtVNB8qi0eHe2VVQUdI2EYecPIQ115uPLWUAFRERLvMs68nnmlfS6yPwDvnWOhqD zb1rG4075MnZjf1JyC5MPqLUKBzFODlf8Wreg7wCqkto4HtKoGnzpSgJvzxa3lrT IY09kF+S26dvMu7xh/RC0TB3zHc8JisNZSbwQctAAcgIToPRA5SiMv1Hkb0fsIUW qVaH27ljQnN300cExsXDGp3Vu4T07MDqkxzSdqLTfzxQA9oV4swgU56AMG2pQNMd 3XYc/dFVCiMTcXez9/6Da2kIOgyepKD7lVaW+oEjPGGjGr3eowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKuyB6VST6vqmhNOkGyHNgBxCxzDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzVmMThjNDktNDEwZS0z ODVjLWJmNzYtYjFlZjQwMzkzYmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxingMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIHasbaggL1EkOTBR96Nqstwt7Q+4Z9neS1VphsJvb7LowtYLlUsAQV kNUG+v+H35ATvqQ15a0CKOC0uQqGH1a6E6/OFi0reQYdyhnczy8MQohWf1L+WLB9 yVL1AF2gBYTAZuSwsApxJiQM2pUE0mWyDXxNzOb9ZrRLstYLc1wVHsTnb2GWh43A cZI+OUotG3AhCiS00Ot4kSRv29nStFwKRKS0CjLwC05hJHsGGha6jMdjabYwvk+s nGW8d/ZLQ3NSmt+ih9M2DLnik6teP/glvaHUn9NZ9FrVkFXY49+UraLRXloylzn0 9AZd3h65qtQ26iYlq+m7/sILjoUSC0U= -----END CERTIFICATE-----Generated at Tue Sep 22 17:05:06 2026 by rpki-client