$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3651ecde-4f02-3d6b-9449-4ee300bf7c97.roa File: 3651ecde-4f02-3d6b-9449-4ee300bf7c97.roa (raw, json) Hash identifier: XRTmHBsQ34skHUOJWQWu/w47uj4zEPxw1yOhyaU9pLM= Subject key identifier: 7F:41:39:65:C3:FA:B7:58:75:47:23:02:B2:25:85:CB:C7:A1:D0:8B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EFCACDB1B8DB33DAF48BDF6C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3651ecde-4f02-3d6b-9449-4ee300bf7c97.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 395747 IP address blocks: 198.41.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:db:1b:8d:b3:3d:af:48:bd:f6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=8c1ac5cb-3b26-47fb-b8a3-efebe02e61ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:81:19:9a:c1:80:26:8a:fa:b6:f4:f1:26:66: e6:f9:32:85:ae:57:2b:75:a7:c2:c1:ea:35:1c:4d: 56:73:c0:c8:69:47:e1:15:35:df:46:c9:78:9e:a1: 42:be:cc:91:8d:1c:d0:e1:66:d7:a9:d3:a4:68:dc: 93:0f:c7:bd:42:d8:9c:ef:28:e0:24:d6:c2:5f:0c: 91:7c:81:9c:ec:68:6d:88:69:d4:d2:87:a4:47:9f: e4:dc:23:a8:6d:c3:de:50:3f:3f:6c:23:4a:26:ca: aa:88:26:05:4e:fa:12:7e:09:6a:e2:dc:b7:78:4a: a3:6a:43:e0:f7:de:1d:bd:0c:9b:72:66:9d:be:fa: a2:4e:2c:7b:03:39:b9:aa:60:a0:fe:3b:2f:9c:7e: 44:a9:07:c0:45:e5:dd:66:7b:ef:af:63:b4:74:6e: 26:49:f4:60:c6:7a:c2:6a:f8:54:ec:49:ef:e5:fe: cf:a9:e9:be:9a:ca:d7:88:8d:08:26:ee:90:5e:6a: 0a:c0:ba:9f:7c:c1:a6:70:4c:a4:2c:b9:e2:45:ba: d4:6b:92:c1:f4:4c:ae:d5:15:bf:81:38:c5:be:99: e4:82:4e:bd:92:e3:ef:d2:5b:57:83:37:a0:72:a0: fa:32:bf:29:a6:c2:ad:a1:ee:13:b1:4c:f8:c8:42: 21:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:41:39:65:C3:FA:B7:58:75:47:23:02:B2:25:85:CB:C7:A1:D0:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3651ecde-4f02-3d6b-9449-4ee300bf7c97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:20:57:eb:20:8b:3a:bb:80:f7:10:86:0a:01:fb:df:23:46: 86:e5:2a:b9:a0:5b:ff:ec:51:94:cb:37:af:93:a0:12:46:b0: 9e:c3:25:a7:83:49:0a:79:ea:2c:15:2f:ca:45:2c:9f:a1:40: 69:76:d5:e2:a6:1d:bb:0e:a3:5e:f9:5b:9a:3e:0e:4c:37:f9: b2:42:08:08:c4:26:75:cd:2d:0d:f6:59:39:41:ee:93:76:4d: 8f:9d:90:e5:e1:8e:5c:87:12:74:b9:f9:7e:2a:a9:34:7c:d9: 29:67:09:5a:22:2f:59:45:7e:b1:f3:3f:be:70:9b:6a:0f:9b: 52:6e:ca:e0:c6:b9:70:09:9a:46:64:61:53:ab:07:b0:02:a0: cb:77:bd:53:e1:3a:15:12:f9:56:d0:14:9f:06:06:31:8d:ff: 23:01:49:33:6f:6a:1f:6b:32:a2:67:50:e9:d3:ec:e2:26:bb: db:3a:a5:61:30:ad:25:cf:12:9e:02:c2:1e:93:c3:88:88:f9: 45:6a:c8:48:9a:6f:d6:1e:4a:b4:ea:66:f5:c4:d7:63:aa:19: ea:1a:98:ac:86:53:30:5e:91:07:62:c7:82:a2:b9:f3:d5:28: e7:11:46:53:60:b2:7e:fd:a9:93:d7:62:ff:b1:c4:a3:38:42: d7:ca:06:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rNsbjbM9r0i99sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk OGMxYWM1Y2ItM2IyNi00N2ZiLWI4YTMtZWZlYmUwMmU2MWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4EZmsGAJor6tvTxJmbm+TKFrlcrdafCweo1 HE1Wc8DIaUfhFTXfRsl4nqFCvsyRjRzQ4WbXqdOkaNyTD8e9Qtic7yjgJNbCXwyR fIGc7GhtiGnU0oekR5/k3COobcPeUD8/bCNKJsqqiCYFTvoSfglq4ty3eEqjakPg 994dvQybcmadvvqiTix7Azm5qmCg/jsvnH5EqQfAReXdZnvvr2O0dG4mSfRgxnrC avhU7Env5f7Pqem+msrXiI0IJu6QXmoKwLqffMGmcEykLLniRbrUa5LB9Eyu1RW/ gTjFvpnkgk69kuPv0ltXgzegcqD6Mr8ppsKtoe4TsUz4yEIhgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH9BOWXD+rdYdUcjArIlhcvHodCLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzY1MWVjZGUtNGYwMi0z ZDZiLTk0NDktNGVlMzAwYmY3Yzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAximCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcgV+sgizq7gPcQhgoB+98jRoblKrmgW//sUZTLN6+ToBJGsJ7DJaeD SQp56iwVL8pFLJ+hQGl21eKmHbsOo175W5o+Dkw3+bJCCAjEJnXNLQ32WTlB7pN2 TY+dkOXhjlyHEnS5+X4qqTR82SlnCVoiL1lFfrHzP75wm2oPm1JuyuDGuXAJmkZk YVOrB7ACoMt3vVPhOhUS+VbQFJ8GBjGN/yMBSTNvah9rMqJnUOnT7OImu9s6pWEw rSXPEp4Cwh6Tw4iI+UVqyEiab9YeSrTqZvXE12OqGeoamKyGUzBekQdix4KiufPV KOcRRlNgsn79qZPXYv+xxKM4QtfKBu4= -----END CERTIFICATE-----Generated at Tue Sep 22 14:46:44 2026 by rpki-client