$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/59d53a3d-8223-3e3c-a175-786b0e4fb45a.roa File: 59d53a3d-8223-3e3c-a175-786b0e4fb45a.roa (raw, json) Hash identifier: 3l9T0Z6YBYytG0YIRMiPl+gVoKx71bFjiHb9t6MaTJU= Subject key identifier: BD:DB:92:DA:A0:43:56:71:36:19:93:27:C0:B8:01:2B:C1:0E:54:DF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB19271FC144112B2B7855180 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/59d53a3d-8223-3e3c-a175-786b0e4fb45a.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 198.41.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:71:fc:14:41:12:b2:b7:85:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=ef5fdb4f-2327-46b0-908b-72a3bbfaffd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f4:87:bd:72:65:2f:c2:1e:19:84:af:98:13: cc:52:63:e7:bf:ed:aa:7f:36:79:5e:5d:7b:f1:0f: 0f:44:6b:7e:2c:71:a8:42:ac:7f:74:f4:2e:87:06: 1b:54:13:04:39:a5:37:3d:f5:d4:98:16:5d:8d:a1: 7e:8d:d9:d4:f1:91:a5:79:f4:5e:ec:c0:83:31:06: 76:42:43:73:a2:88:e6:ef:e1:fe:da:c0:62:84:a3: 03:e4:21:66:a0:d0:1b:7a:a1:b7:70:1c:c7:26:a8: 22:aa:5a:45:8a:55:1b:68:61:17:82:d8:6d:de:cf: 73:86:17:36:aa:90:6d:4f:4b:e2:03:8f:56:d6:7f: b2:10:80:0c:4c:09:cf:a1:d5:4c:1f:c4:40:e2:b4: 4c:e8:3c:ab:4d:f0:31:01:52:49:f4:02:a2:d2:cf: a7:14:9d:84:27:e6:11:80:ad:bf:0b:5d:5a:ae:73: c3:a8:e2:43:01:b5:7b:a3:80:55:69:c0:8d:ec:e3: 86:62:ec:dd:09:56:4c:1a:b3:1e:30:fe:32:0c:ab: 92:18:a5:e5:c9:73:e1:ea:ca:4d:0b:1e:45:7d:36: 8e:0b:ac:79:07:5e:3c:62:fe:78:fa:18:31:52:17: e9:c0:09:9c:4f:25:67:8e:51:fe:6d:cd:9c:3c:8d: e2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:DB:92:DA:A0:43:56:71:36:19:93:27:C0:B8:01:2B:C1:0E:54:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/59d53a3d-8223-3e3c-a175-786b0e4fb45a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:c5:a8:9a:30:1f:8c:04:4d:b6:2b:b0:56:6e:8d:c3:39:2e: c0:be:a1:ea:a1:9e:f2:bf:d3:b1:83:48:2f:c2:a7:15:6e:40: 87:fe:9d:7c:c4:6e:89:6c:96:4c:61:74:02:96:83:76:b4:53: 53:e4:8b:cc:73:40:a4:ef:8e:cc:e6:1e:c8:de:a8:17:84:d6: 35:81:52:a9:24:33:38:cb:22:41:cb:f8:62:b8:ba:25:9e:ca: bd:54:e3:17:04:9a:4c:24:53:67:2e:33:35:8e:b3:c5:91:80: 9d:a1:b9:ff:49:3a:37:d9:df:06:8a:14:a7:3d:9a:61:c0:71: f6:12:45:c8:1e:79:e6:7f:b4:df:66:46:8b:dc:cd:79:81:f2: 69:87:e2:34:37:d2:3b:f9:a1:c8:06:f6:84:94:c0:bd:66:99: 6d:32:04:9e:0e:67:00:7f:55:29:79:d9:bb:e4:f7:44:22:26: cf:70:7d:4a:ed:10:ea:9b:01:43:09:e3:a6:c7:39:2b:63:68: 97:e8:49:9f:80:4c:6a:d5:89:5e:66:ee:d6:e2:98:1c:e3:11: 28:69:72:ea:e2:85:56:3d:cf:f4:cb:22:9c:2a:68:7e:a7:b9: da:1d:c6:07:0e:c1:5d:c2:be:04:c4:cf:bf:83:01:23:62:69: ef:0c:59:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxknH8FEESsreFUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk ZWY1ZmRiNGYtMjMyNy00NmIwLTkwOGItNzJhM2JiZmFmZmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PSHvXJlL8IeGYSvmBPMUmPnv+2qfzZ5Xl17 8Q8PRGt+LHGoQqx/dPQuhwYbVBMEOaU3PfXUmBZdjaF+jdnU8ZGlefRe7MCDMQZ2 QkNzoojm7+H+2sBihKMD5CFmoNAbeqG3cBzHJqgiqlpFilUbaGEXgtht3s9zhhc2 qpBtT0viA49W1n+yEIAMTAnPodVMH8RA4rRM6DyrTfAxAVJJ9AKi0s+nFJ2EJ+YR gK2/C11arnPDqOJDAbV7o4BVacCN7OOGYuzdCVZMGrMeMP4yDKuSGKXlyXPh6spN Cx5FfTaOC6x5B148Yv54+hgxUhfpwAmcTyVnjlH+bc2cPI3ihwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3bktqgQ1ZxNhmTJ8C4ASvBDlTfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTlkNTNhM2QtODIyMy0z ZTNjLWExNzUtNzg2YjBlNGZiNDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxincMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKDFqJowH4wETbYrsFZujcM5LsC+oeqhnvK/07GDSC/CpxVuQIf+nXzE bolslkxhdAKWg3a0U1Pki8xzQKTvjszmHsjeqBeE1jWBUqkkMzjLIkHL+GK4uiWe yr1U4xcEmkwkU2cuMzWOs8WRgJ2huf9JOjfZ3waKFKc9mmHAcfYSRcgeeeZ/tN9m RovczXmB8mmH4jQ30jv5ocgG9oSUwL1mmW0yBJ4OZwB/VSl52bvk90QiJs9wfUrt EOqbAUMJ46bHOStjaJfoSZ+ATGrViV5m7tbimBzjEShpcurihVY9z/TLIpwqaH6n udodxgcOwV3CvgTEz7+DASNiae8MWTs= -----END CERTIFICATE-----Generated at Sat Nov 1 12:30:27 2025 by rpki-client