$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/60c1e1a6-0534-329e-9bfa-4c1aafaa27be.roa File: 60c1e1a6-0534-329e-9bfa-4c1aafaa27be.roa (raw, json) Hash identifier: KlN7iu8C9RM4k8GZIYAEiyaOAP4AbnQ4EsUnPEt6ts8= Subject key identifier: A8:BA:F0:1E:E0:52:D0:D7:08:11:75:CC:B0:5B:2A:8D:A3:DE:5A:F6 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB192719DBADFADC514AFE600 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/60c1e1a6-0534-329e-9bfa-4c1aafaa27be.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 198.41.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:71:9d:ba:df:ad:c5:14:af:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=aace3c64-039a-4c7f-adf5-91ae71e1cd0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8b:23:4f:4b:30:e9:1e:8c:be:39:66:1c:d7: 4d:21:a4:06:13:b1:74:13:bc:fc:b1:e2:ab:00:c5: 95:f8:45:e3:d9:f2:ff:d0:10:a4:8a:f3:9d:73:a8: 13:3b:6a:74:0e:a7:75:f6:0a:e9:3e:38:f6:9c:67: 7d:be:15:d3:83:48:57:43:f5:32:1b:d8:20:c6:f8: d1:9f:63:25:c5:70:02:dc:80:87:39:ad:63:aa:61: a1:81:bd:57:59:82:8f:35:cd:d4:ae:49:05:dd:49: 81:fa:66:69:3a:e4:a6:c7:4c:07:a3:a4:70:d5:09: a0:3b:98:55:7f:0c:1a:01:6d:22:af:c9:00:13:5d: a1:75:0b:4f:5a:cd:85:8d:0d:92:dc:49:ef:1a:44: 88:0e:6f:38:84:c0:0a:fc:cc:ad:3b:62:1a:91:85: 66:2d:84:f5:60:91:39:06:0f:27:18:f7:3e:f0:13: 64:02:4b:e3:42:0f:41:9e:cf:0b:b5:88:3c:17:e3: 61:a0:78:ff:79:26:3a:c2:73:25:b4:57:21:52:8f: 74:14:6f:bc:0e:9a:54:fc:7b:13:cb:d1:bc:33:50: 26:55:46:68:37:7a:19:82:39:8f:4c:f5:58:92:37: 80:85:10:75:39:65:60:17:c4:4c:06:8d:97:cb:c5: 5b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:BA:F0:1E:E0:52:D0:D7:08:11:75:CC:B0:5B:2A:8D:A3:DE:5A:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/60c1e1a6-0534-329e-9bfa-4c1aafaa27be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:d8:9f:12:d4:24:35:d0:40:c3:55:0c:ba:8a:04:8b:bc:de: 34:a3:b4:54:90:ba:9b:54:53:f9:f4:dc:5d:7b:4c:c7:87:97: 60:fd:fd:72:83:c9:2d:ec:eb:58:73:ae:ed:82:f9:63:bc:95: 77:cb:7a:d5:84:af:ba:d6:22:d9:d3:de:db:b7:31:8b:ad:e8: 52:35:92:30:f9:ef:0d:91:40:53:fc:dc:15:ad:d8:71:0d:af: de:6f:a0:23:a5:16:46:a3:7c:99:33:af:36:3b:93:af:13:9b: e7:6f:49:50:5d:1a:be:fa:78:b3:3d:c2:8a:3d:f6:5e:26:07: 01:02:34:a7:af:be:59:27:1b:05:48:0e:13:f7:35:27:f2:20: 01:96:3f:b5:ba:8e:9b:7d:5f:50:8a:0d:39:4f:a5:9f:3b:61: b9:72:ea:76:48:21:0b:63:84:5c:d1:e8:92:da:dd:30:95:88: d0:71:02:fa:d0:8a:7c:a8:dc:ff:02:79:99:e7:6c:6b:dc:d1: a0:19:da:1f:be:64:de:b1:ea:d5:68:71:c5:08:fa:64:f5:6f: 20:cf:0a:ea:db:71:bd:8a:a8:c4:88:e4:99:4a:44:da:94:30: 63:85:82:7a:be:05:21:bf:5c:df:5b:5a:f2:5f:3f:fe:88:92: 4d:5d:41:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxknGdut+txRSv5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk YWFjZTNjNjQtMDM5YS00YzdmLWFkZjUtOTFhZTcxZTFjZDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYsjT0sw6R6MvjlmHNdNIaQGE7F0E7z8seKr AMWV+EXj2fL/0BCkivOdc6gTO2p0Dqd19grpPjj2nGd9vhXTg0hXQ/UyG9ggxvjR n2MlxXAC3ICHOa1jqmGhgb1XWYKPNc3UrkkF3UmB+mZpOuSmx0wHo6Rw1QmgO5hV fwwaAW0ir8kAE12hdQtPWs2FjQ2S3EnvGkSIDm84hMAK/MytO2IakYVmLYT1YJE5 Bg8nGPc+8BNkAkvjQg9Bns8LtYg8F+NhoHj/eSY6wnMltFchUo90FG+8DppU/HsT y9G8M1AmVUZoN3oZgjmPTPVYkjeAhRB1OWVgF8RMBo2Xy8Vb9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKi68B7gUtDXCBF1zLBbKo2j3lr2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjBjMWUxYTYtMDUzNC0z MjllLTliZmEtNGMxYWFmYWEyN2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxinVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/YnxLUJDXQQMNVDLqKBIu83jSjtFSQuptUU/n03F17TMeHl2D9/XKD yS3s61hzru2C+WO8lXfLetWEr7rWItnT3tu3MYut6FI1kjD57w2RQFP83BWt2HEN r95voCOlFkajfJkzrzY7k68Tm+dvSVBdGr76eLM9woo99l4mBwECNKevvlknGwVI DhP3NSfyIAGWP7W6jpt9X1CKDTlPpZ87Ybly6nZIIQtjhFzR6JLa3TCViNBxAvrQ inyo3P8CeZnnbGvc0aAZ2h++ZN6x6tVoccUI+mT1byDPCurbcb2KqMSI5JlKRNqU MGOFgnq+BSG/XN9bWvJfP/6Ikk1dQWc= -----END CERTIFICATE-----Generated at Sat Nov 1 12:32:40 2025 by rpki-client