$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4635ddba-f536-3736-a87a-086c361d2270.roa File: 4635ddba-f536-3736-a87a-086c361d2270.roa (raw, json) Hash identifier: kUkhKt9p3iUAcGXBMb8Q2pLPSlmpkfuVYKXzlGxD2a0= Subject key identifier: 96:A1:FE:29:59:60:60:0C:F2:5E:E6:6E:BC:02:1B:AE:38:65:FF:DB Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB192722D5F8A83CD582FAD64 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4635ddba-f536-3736-a87a-086c361d2270.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 198.41.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:72:2d:5f:8a:83:cd:58:2f:ad:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=1ff0a9af-f4f1-4a41-93a6-5c534faa7d31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d1:a4:9b:f5:ea:8c:97:b0:18:1b:e4:0d:55: a7:ef:fe:06:e8:92:ca:8c:7e:0f:6b:b9:2a:ca:63: 08:13:24:56:f2:12:3d:af:dd:25:31:28:58:2e:bf: ca:7c:03:5d:52:4d:23:07:8d:63:10:2c:ea:e5:9b: 5b:29:de:55:0f:7f:31:28:53:8e:d5:67:ac:8c:a3: c9:bb:be:f2:dc:3a:44:c7:98:36:57:c2:5d:4c:95: 2c:be:06:6f:bb:d0:41:4a:72:6d:0b:07:85:e7:81: 8d:04:a0:e0:56:05:f2:f6:55:60:c8:9c:75:95:4a: b1:d8:11:c1:ca:0d:04:e9:65:04:1a:54:ac:8c:22: c8:e0:f7:de:0a:d3:f6:2b:f5:e6:0b:b2:ed:41:b4: 5c:a8:de:31:3f:63:c4:e8:b2:e4:f0:55:14:34:ce: 18:fa:94:37:12:5f:7d:53:42:40:04:92:ce:99:ad: ff:83:8d:94:a4:47:e2:ef:bd:42:b7:18:6c:05:3a: 75:a5:17:55:69:6e:a2:ca:8d:74:3c:83:34:74:df: b8:08:dc:0e:df:ac:cc:88:8e:ef:54:fc:b9:8f:df: f9:37:18:5a:70:f2:96:d0:28:c9:7c:6a:cf:8f:fc: b4:99:cd:c3:2c:6f:d0:1f:7e:d2:44:76:21:e8:6c: b5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A1:FE:29:59:60:60:0C:F2:5E:E6:6E:BC:02:1B:AE:38:65:FF:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4635ddba-f536-3736-a87a-086c361d2270.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:b5:74:de:10:dc:7e:e5:41:62:40:58:6b:3d:e3:34:65:5c: 77:ab:11:0c:92:30:53:fb:d5:d5:8d:6f:1a:ee:8f:32:ab:da: 04:1b:a3:46:b7:ed:81:fd:56:f4:51:90:2e:31:ae:48:5a:92: 02:dc:f7:fb:3b:0d:79:db:60:cd:01:cd:a4:68:7d:4f:62:f1: e9:d9:28:7c:9f:6f:43:cb:a1:6f:83:02:38:68:9d:e8:39:46: 99:74:18:9c:62:75:3a:3a:49:75:46:8f:a8:2d:56:01:e9:15: 93:3c:4a:0c:05:61:b9:94:31:4a:0d:7b:57:27:79:24:8c:cb: 36:b3:03:92:2d:22:5c:6d:f2:58:ea:25:73:8a:44:50:6e:03: 6f:44:67:c1:cd:31:50:16:4a:8a:0e:cf:bf:76:bc:a1:27:03: 71:16:02:6a:0a:e9:19:4a:ee:bd:10:13:fc:9c:cc:3b:13:a7: 18:76:6d:df:16:7c:30:5a:4a:d9:31:b0:33:ef:17:25:bf:54: 1d:f6:b7:f4:dd:05:ee:f6:74:0f:f9:b6:5f:35:bb:1f:b9:8d: 7d:bb:35:46:ba:d2:55:24:6f:e9:d7:40:83:9c:77:4f:f5:9f: 9b:2b:7c:0c:1b:26:78:08:3f:bb:3e:f7:46:11:1e:ad:2f:05: 23:cb:53:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxknItX4qDzVgvrWQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk MWZmMGE5YWYtZjRmMS00YTQxLTkzYTYtNWM1MzRmYWE3ZDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNGkm/XqjJewGBvkDVWn7/4G6JLKjH4Pa7kq ymMIEyRW8hI9r90lMShYLr/KfANdUk0jB41jECzq5ZtbKd5VD38xKFOO1WesjKPJ u77y3DpEx5g2V8JdTJUsvgZvu9BBSnJtCweF54GNBKDgVgXy9lVgyJx1lUqx2BHB yg0E6WUEGlSsjCLI4PfeCtP2K/XmC7LtQbRcqN4xP2PE6LLk8FUUNM4Y+pQ3El99 U0JABJLOma3/g42UpEfi771CtxhsBTp1pRdVaW6iyo10PIM0dN+4CNwO36zMiI7v VPy5j9/5NxhacPKW0CjJfGrPj/y0mc3DLG/QH37SRHYh6Gy16wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJah/ilZYGAM8l7mbrwCG644Zf/bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDYzNWRkYmEtZjUzNi0z NzM2LWE4N2EtMDg2YzM2MWQyMjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxinlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKm1dN4Q3H7lQWJAWGs94zRlXHerEQySMFP71dWNbxrujzKr2gQbo0a3 7YH9VvRRkC4xrkhakgLc9/s7DXnbYM0BzaRofU9i8enZKHyfb0PLoW+DAjhoneg5 Rpl0GJxidTo6SXVGj6gtVgHpFZM8SgwFYbmUMUoNe1cneSSMyzazA5ItIlxt8ljq JXOKRFBuA29EZ8HNMVAWSooOz792vKEnA3EWAmoK6RlK7r0QE/yczDsTpxh2bd8W fDBaStkxsDPvFyW/VB32t/TdBe72dA/5tl81ux+5jX27NUa60lUkb+nXQIOcd0/1 n5srfAwbJngIP7s+90YRHq0vBSPLU64= -----END CERTIFICATE-----Generated at Sat Nov 1 10:01:39 2025 by rpki-client