$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/388e0a17-41a0-3d83-81a2-e73bf3c7531e.roa File: 388e0a17-41a0-3d83-81a2-e73bf3c7531e.roa (raw, json) Hash identifier: f8DjSCekefQyKuUOH2rM+6YWcMDbDnQi3Llzy4G63/k= Subject key identifier: 4D:51:ED:F7:D9:71:A0:1A:B8:F5:E7:FD:92:6C:2D:E6:37:D7:8B:5B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1927E902A2568FE5A96EB80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/388e0a17-41a0-3d83-81a2-e73bf3c7531e.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 198.41.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:7e:90:2a:25:68:fe:5a:96:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=9d52fc78-ebbf-4525-8819-173d0438fd75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:18:82:05:a0:4d:b5:e6:d1:e0:62:40:6f:9e: 4c:1d:83:c2:95:c1:4d:db:6a:71:1a:81:dd:35:3f: 47:f7:2d:4d:9c:6b:75:90:99:8c:8a:b7:36:74:02: bd:8d:78:d4:77:cd:c4:3e:8a:00:de:01:9a:4c:73: 4c:89:03:f5:fb:3a:34:d6:72:bc:e2:82:93:2d:96: 58:ca:91:91:bf:85:35:3b:04:fc:e7:3a:62:ca:c1: 06:17:10:d9:4d:97:53:42:76:22:10:34:40:89:c6: b6:5c:01:08:f6:66:e3:76:43:95:47:84:9f:7e:30: cf:63:d6:2b:97:db:c0:bc:cf:df:9b:01:39:50:5b: f7:9e:1e:fe:2a:f4:da:8e:7c:8c:91:ed:81:cf:dd: 79:5a:f1:2c:28:68:02:0d:de:94:81:c7:7a:d2:6b: 38:61:f9:04:b3:b2:2f:2a:76:5c:56:9f:6d:ec:db: b5:d0:f8:b6:55:18:c1:73:f5:8b:df:06:f2:14:6b: 54:ac:84:b0:c1:d9:b6:a1:4c:f7:20:bb:3f:ba:ac: 16:c3:78:31:0c:4a:dd:4c:0c:fa:c6:78:27:ec:ae: 25:58:39:8f:ff:cd:d1:92:25:38:4d:eb:99:47:64: 52:24:85:1c:6c:8c:10:5b:76:51:b2:1c:8d:55:6c: e8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:51:ED:F7:D9:71:A0:1A:B8:F5:E7:FD:92:6C:2D:E6:37:D7:8B:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/388e0a17-41a0-3d83-81a2-e73bf3c7531e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:67:71:c6:c3:d2:70:f4:2d:eb:38:9e:be:a2:ea:b0:dd:f7: 39:45:8a:59:9d:45:af:b0:8e:96:7e:4c:71:c9:1a:8c:11:a8: 14:21:2a:fd:1d:b8:c7:89:f5:3f:24:c9:a4:db:2b:b5:62:35: 2e:6e:2d:2b:13:8b:81:7d:c2:63:84:c2:86:64:32:6d:8b:d0: c2:f1:ee:7f:fc:c7:03:ed:9c:6c:4e:6b:43:fc:a3:1f:a6:b3: 3d:c7:a6:fd:e0:b2:53:88:3b:d7:18:ba:bf:5f:e9:53:db:fe: 6d:89:91:92:de:c8:e4:26:26:f8:f8:40:9b:af:74:3c:32:98: 81:81:6e:42:86:b1:8d:08:26:fa:c3:95:f0:97:2b:37:0f:0c: 32:c0:d3:e0:61:d2:1e:2f:c2:00:81:63:8b:03:39:45:32:29: a0:71:b9:ad:c7:04:ea:1c:29:81:0f:06:61:34:89:1b:77:56: 6c:f2:ac:1a:be:52:16:0c:f4:18:5b:71:55:00:14:b8:c4:1c: 09:b0:12:58:4f:0c:4d:36:8e:f6:0d:8d:df:ff:4c:64:ed:a9: 06:fb:20:f7:15:77:4d:ab:7b:a5:bc:72:a7:81:2e:bc:4e:b1: bd:5c:ea:1e:37:4b:61:e5:51:b6:6c:35:2b:51:de:cb:9a:c2: c2:a6:f5:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkn6QKiVo/lqW64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk OWQ1MmZjNzgtZWJiZi00NTI1LTg4MTktMTczZDA0MzhmZDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBiCBaBNtebR4GJAb55MHYPClcFN22pxGoHd NT9H9y1NnGt1kJmMirc2dAK9jXjUd83EPooA3gGaTHNMiQP1+zo01nK84oKTLZZY ypGRv4U1OwT85zpiysEGFxDZTZdTQnYiEDRAica2XAEI9mbjdkOVR4SffjDPY9Yr l9vAvM/fmwE5UFv3nh7+KvTajnyMke2Bz915WvEsKGgCDd6Ugcd60ms4YfkEs7Iv KnZcVp9t7Nu10Pi2VRjBc/WL3wbyFGtUrISwwdm2oUz3ILs/uqwWw3gxDErdTAz6 xngn7K4lWDmP/83RkiU4TeuZR2RSJIUcbIwQW3ZRshyNVWzotwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1R7ffZcaAauPXn/ZJsLeY314tbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzg4ZTBhMTctNDFhMC0z ZDgzLTgxYTItZTczYmYzYzc1MzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxinWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKxnccbD0nD0Les4nr6i6rDd9zlFilmdRa+wjpZ+THHJGowRqBQhKv0d uMeJ9T8kyaTbK7ViNS5uLSsTi4F9wmOEwoZkMm2L0MLx7n/8xwPtnGxOa0P8ox+m sz3Hpv3gslOIO9cYur9f6VPb/m2JkZLeyOQmJvj4QJuvdDwymIGBbkKGsY0IJvrD lfCXKzcPDDLA0+Bh0h4vwgCBY4sDOUUyKaBxua3HBOocKYEPBmE0iRt3VmzyrBq+ UhYM9BhbcVUAFLjEHAmwElhPDE02jvYNjd//TGTtqQb7IPcVd02re6W8cqeBLrxO sb1c6h43S2HlUbZsNStR3suawsKm9Ss= -----END CERTIFICATE-----Generated at Sat Nov 1 10:03:12 2025 by rpki-client