$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5fa6f675-946f-3abf-828f-5569afcc12df.roa File: 5fa6f675-946f-3abf-828f-5569afcc12df.roa (raw, json) Hash identifier: s0oX7ea01IvUyE0sEfWu1LCnN2vnaFCqERxx3z37YlQ= Subject key identifier: 37:FD:0A:12:9F:D5:4B:DC:80:98:22:71:E0:28:15:EB:67:0F:5A:1A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB19271D6A3BC9D0303AB0730 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5fa6f675-946f-3abf-828f-5569afcc12df.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 198.41.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:71:d6:a3:bc:9d:03:03:ab:07:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=6a7c34e4-8ee0-4e43-8006-cbf9291fff94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:12:67:d8:6a:99:eb:d2:66:05:74:f9:fa:89: c1:37:09:08:dd:f8:b0:22:ce:c2:35:21:b6:17:62: 07:b3:27:a3:6f:3f:ae:8e:00:42:31:66:28:40:2a: a3:3c:07:8e:7e:33:98:68:38:bf:02:72:ad:25:38: 3b:1d:08:16:bf:0b:cf:54:cf:cd:26:95:27:1f:b9: ff:2f:25:ee:0a:68:37:a5:eb:c8:86:7b:ac:ff:2b: 2c:26:39:53:5f:00:89:a0:68:e3:77:17:5a:f4:79: fb:55:54:52:b2:23:a4:a1:f9:5b:cb:2a:2c:38:2c: dd:44:41:d6:13:19:a1:24:4c:c7:e7:cf:b1:9f:9e: ca:e7:1e:cd:ce:4e:02:ce:24:45:7c:4b:b5:de:43: f6:0f:8b:39:d5:54:15:56:75:1e:64:58:a4:13:68: 04:f7:3d:6f:76:9d:a3:56:03:dd:f4:c3:9a:bf:2d: 3d:d0:ad:57:fb:00:dd:96:5e:75:a2:cc:8d:41:d9: 27:89:f9:1c:d9:44:26:63:c2:8f:6e:7d:d0:18:a1: 60:ae:ce:29:1b:4f:51:d5:90:f4:a5:23:92:ac:b8: 8c:4a:d2:30:8a:a7:f4:27:01:6f:1c:37:f5:f7:c3: 67:ce:0b:8a:1d:1a:73:de:50:ee:e5:97:90:86:be: 6c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:FD:0A:12:9F:D5:4B:DC:80:98:22:71:E0:28:15:EB:67:0F:5A:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5fa6f675-946f-3abf-828f-5569afcc12df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:e3:b9:5a:dc:6d:be:c3:a0:70:4a:c2:69:9f:4c:15:0a:48: 9e:7a:dd:1a:3a:93:64:cd:66:55:5a:02:0e:56:19:01:7f:96: d8:81:8f:b8:3b:d9:3f:1f:f1:eb:79:67:55:78:b5:3b:a9:8a: 23:3a:92:d4:5d:9e:e1:2b:bb:f6:fd:1f:51:3f:60:95:78:28: e8:b7:54:2a:29:7b:3a:92:68:b3:bd:ab:d1:8c:4e:26:0d:5a: 08:ed:bf:c6:37:42:f9:ad:10:68:ed:c4:44:44:40:c6:ab:4c: 85:14:dc:c2:70:8d:ee:5e:87:06:f9:7c:1a:b7:51:72:bb:53: 57:25:25:56:53:47:8b:af:f2:8c:39:2e:64:f8:65:84:2e:d9: f6:ba:fb:fc:36:de:ec:6c:3e:f9:01:52:c6:4e:74:06:6c:06: 04:b2:e8:a9:2b:f3:b3:61:73:4c:d2:27:8c:ce:76:10:42:c2: a5:b6:83:e3:3d:7e:0b:69:bd:10:d9:a8:c5:83:54:7e:61:0c: 13:ce:63:31:ef:72:db:42:f2:02:00:34:0a:b5:e3:7f:4a:47: b3:35:09:1b:3a:bd:b3:df:13:c9:fb:64:ad:c0:f9:b3:78:fb: aa:8c:00:3f:c2:0e:80:82:a8:31:6e:ea:a6:cb:49:b9:d3:0d: a0:b3:47:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxknHWo7ydAwOrBzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk NmE3YzM0ZTQtOGVlMC00ZTQzLTgwMDYtY2JmOTI5MWZmZjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxJn2GqZ69JmBXT5+onBNwkI3fiwIs7CNSG2 F2IHsyejbz+ujgBCMWYoQCqjPAeOfjOYaDi/AnKtJTg7HQgWvwvPVM/NJpUnH7n/ LyXuCmg3pevIhnus/yssJjlTXwCJoGjjdxda9Hn7VVRSsiOkoflbyyosOCzdREHW ExmhJEzH58+xn57K5x7Nzk4CziRFfEu13kP2D4s51VQVVnUeZFikE2gE9z1vdp2j VgPd9MOavy090K1X+wDdll51osyNQdknifkc2UQmY8KPbn3QGKFgrs4pG09R1ZD0 pSOSrLiMStIwiqf0JwFvHDf198NnzguKHRpz3lDu5ZeQhr5sSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDf9ChKf1UvcgJgiceAoFetnD1oaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWZhNmY2NzUtOTQ2Zi0z YWJmLTgyOGYtNTU2OWFmY2MxMmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxinaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLjuVrcbb7DoHBKwmmfTBUKSJ563Ro6k2TNZlVaAg5WGQF/ltiBj7g7 2T8f8et5Z1V4tTupiiM6ktRdnuEru/b9H1E/YJV4KOi3VCopezqSaLO9q9GMTiYN Wgjtv8Y3QvmtEGjtxEREQMarTIUU3MJwje5ehwb5fBq3UXK7U1clJVZTR4uv8ow5 LmT4ZYQu2fa6+/w23uxsPvkBUsZOdAZsBgSy6Kkr87Nhc0zSJ4zOdhBCwqW2g+M9 fgtpvRDZqMWDVH5hDBPOYzHvcttC8gIANAq1439KR7M1CRs6vbPfE8n7ZK3A+bN4 +6qMAD/CDoCCqDFu6qbLSbnTDaCzR+8= -----END CERTIFICATE-----Generated at Sat Nov 1 12:36:57 2025 by rpki-client