$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4635ddba-f536-3736-a87a-086c361d2270.roa File: 4635ddba-f536-3736-a87a-086c361d2270.roa (raw, json) Hash identifier: K4bnIihvbuUBeoI4bmn3CGd8REV57UYq08NKmZZj0tU= Subject key identifier: C6:B5:2F:DD:EC:41:32:DE:B1:22:0B:C6:37:7D:70:2A:CA:EC:74:97 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF44CBE307AE12F3A6E17E280 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4635ddba-f536-3736-a87a-086c361d2270.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 198.41.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:be:30:7a:e1:2f:3a:6e:17:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=3d4efc60-862d-4c37-a289-6b78bbfcd4c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:36:a7:0f:e5:d4:6c:e4:8d:fe:23:27:02:c2: 87:cb:42:87:16:23:c8:25:42:88:f2:23:c5:83:d7: 35:2f:ff:3e:9e:ee:d9:1f:9f:c5:f8:a9:28:9d:0d: 0a:0d:86:31:ec:15:12:37:a2:98:5d:6a:e9:5b:c9: 02:29:ab:ab:bc:17:0e:2a:00:18:c6:25:38:89:c6: a5:15:46:e3:45:59:4a:a1:0b:c0:bb:18:49:1a:f2: 3c:3e:ee:e5:55:45:a4:cd:80:00:46:65:69:c9:f6: f1:ba:b7:66:40:6d:94:4d:c3:52:01:87:12:5d:83: df:ff:69:15:54:a4:ad:5e:ad:38:56:31:49:bc:ec: e2:db:f1:1d:10:da:dd:ba:fd:66:9d:ef:ba:7e:32: 36:f1:19:58:53:70:0c:84:a2:a6:4a:7f:7a:7f:10: 67:e1:d6:7e:31:d9:c5:0f:7e:20:dd:c2:2b:98:de: 14:ca:ff:90:db:6b:10:bd:4d:32:b6:e3:70:00:90: dd:29:ba:b2:89:7f:87:dc:d3:44:f0:0f:3e:74:36: ac:2c:1d:04:4e:97:0e:38:22:a5:50:e3:c4:3e:33: 1d:90:98:21:91:16:9e:b9:87:bb:6a:6a:c2:76:c3: 25:1f:41:bb:6b:5b:2d:29:cc:8e:68:f7:0e:36:a1: 38:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:B5:2F:DD:EC:41:32:DE:B1:22:0B:C6:37:7D:70:2A:CA:EC:74:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4635ddba-f536-3736-a87a-086c361d2270.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:bb:bf:80:03:6d:4d:d1:33:43:9a:47:81:52:c2:14:08:b6: a8:01:c6:a6:81:3e:62:3a:d3:fd:15:42:6b:41:67:cc:6a:d5: e0:ac:49:cf:22:87:1e:8a:e4:a2:88:0e:a3:1b:a5:21:f5:0f: ca:8b:21:7c:30:14:11:c6:bd:7e:1e:5a:09:9a:81:ef:9e:74: 09:b0:91:02:78:8b:29:96:5d:97:90:62:b8:fd:e8:4c:36:01: 65:36:5c:36:3e:c0:82:db:eb:81:f0:1f:c3:15:52:38:a1:25: 01:74:71:01:7d:7e:26:2f:e6:32:75:9f:61:0d:56:a4:2a:ca: 3e:81:17:25:65:a0:d2:6a:d4:7a:99:42:99:8e:b0:5f:2e:f4: c6:08:17:9f:65:57:71:9c:de:28:0a:b6:97:a8:fc:db:bb:4a: 91:90:a8:09:7d:cd:0c:be:8f:1f:e4:c2:55:f6:93:cd:f4:4d: 62:dd:04:3b:ca:a8:9b:6a:bd:ab:dd:e1:2a:3c:d6:7a:70:5f: b3:8d:e2:1e:05:e2:55:47:ce:a4:ce:8c:31:ee:52:67:2e:ab: a0:be:a6:03:b9:46:8e:4e:20:54:fe:e9:b0:db:ac:88:0c:ad: 05:84:c4:66:a1:74:99:9a:d9:ff:ee:29:64:f8:26:4e:61:f6: 28:3a:6e:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TL4weuEvOm4X4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk M2Q0ZWZjNjAtODYyZC00YzM3LWEyODktNmI3OGJiZmNkNGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTanD+XUbOSN/iMnAsKHy0KHFiPIJUKI8iPF g9c1L/8+nu7ZH5/F+KkonQ0KDYYx7BUSN6KYXWrpW8kCKaurvBcOKgAYxiU4ical FUbjRVlKoQvAuxhJGvI8Pu7lVUWkzYAARmVpyfbxurdmQG2UTcNSAYcSXYPf/2kV VKStXq04VjFJvOzi2/EdENrduv1mne+6fjI28RlYU3AMhKKmSn96fxBn4dZ+MdnF D34g3cIrmN4Uyv+Q22sQvU0ytuNwAJDdKbqyiX+H3NNE8A8+dDasLB0ETpcOOCKl UOPEPjMdkJghkRaeuYe7amrCdsMlH0G7a1stKcyOaPcONqE4CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMa1L93sQTLesSILxjd9cCrK7HSXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDYzNWRkYmEtZjUzNi0z NzM2LWE4N2EtMDg2YzM2MWQyMjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxinlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADG7v4ADbU3RM0OaR4FSwhQItqgBxqaBPmI60/0VQmtBZ8xq1eCsSc8i hx6K5KKIDqMbpSH1D8qLIXwwFBHGvX4eWgmage+edAmwkQJ4iymWXZeQYrj96Ew2 AWU2XDY+wILb64HwH8MVUjihJQF0cQF9fiYv5jJ1n2ENVqQqyj6BFyVloNJq1HqZ QpmOsF8u9MYIF59lV3Gc3igKtpeo/Nu7SpGQqAl9zQy+jx/kwlX2k830TWLdBDvK qJtqvavd4So81npwX7ON4h4F4lVHzqTOjDHuUmcuq6C+pgO5Ro5OIFT+6bDbrIgM rQWExGahdJma2f/uKWT4Jk5h9ig6bjg= -----END CERTIFICATE-----Generated at Sat Oct 10 00:27:49 2026 by rpki-client