$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7906c5ec-daff-3fea-8c7b-43fd9d82fb07.roa File: 7906c5ec-daff-3fea-8c7b-43fd9d82fb07.roa (raw, json) Hash identifier: l6LSKfcQAH97qyYikxTmsRXmQJzvzbuvpjyiI2hiPFA= Subject key identifier: 9D:31:FD:FC:EC:B4:A9:15:89:30:15:9F:80:0D:A1:47:B4:CD:5A:97 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BABFD1C5FC99B039E3D183B60 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7906c5ec-daff-3fea-8c7b-43fd9d82fb07.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 198.41.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:1c:5f:c9:9b:03:9e:3d:18:3b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=cc3ab1a0-ac1b-4e45-9ef9-f15a028841e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:80:af:85:b2:0f:31:ed:68:8f:fc:bc:e7:af: 44:8c:19:de:1b:c1:38:5d:c1:06:8b:c3:83:51:6b: aa:af:2a:85:8d:73:7a:4f:4e:ce:6d:6f:02:ee:05: 28:ef:96:82:15:ec:d4:88:c0:d2:76:d3:5a:e2:17: 18:74:1a:21:e4:63:09:7f:2c:a4:79:a7:9b:4b:e0: b3:be:f3:3b:79:31:5d:7f:d5:99:76:23:54:26:2b: 4c:a1:94:01:69:1f:4e:c1:60:44:f8:d6:94:4c:21: 33:8d:06:f2:dd:01:0c:6e:e4:8d:95:49:01:fb:12: 6d:e8:32:32:5e:31:79:f1:63:f2:b4:a4:4a:4c:21: 8b:f4:c8:a5:84:6d:bb:63:7c:19:9c:8f:0f:7f:58: 43:3e:e3:cd:0a:11:47:07:54:3e:4a:a6:d3:b7:ec: f5:cc:c6:fe:bf:10:79:39:86:4f:42:3d:ff:d2:a2: cb:85:ab:6f:fa:85:3d:da:28:fe:46:06:20:c9:e7: b9:36:35:24:a5:fa:2e:fd:c5:6e:6c:17:00:6d:51: fc:72:84:46:72:8c:8c:4d:53:d9:9a:bb:a6:46:a0: 6c:1e:74:6b:14:ec:4a:2d:3a:83:a1:22:46:fb:5f: 93:1e:ce:a5:3e:76:3c:f4:1c:19:a3:81:3c:a4:a3: d8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:31:FD:FC:EC:B4:A9:15:89:30:15:9F:80:0D:A1:47:B4:CD:5A:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7906c5ec-daff-3fea-8c7b-43fd9d82fb07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:d5:26:26:b6:bd:32:59:fb:76:ad:4a:e4:39:1f:41:4f:65: 96:9c:92:e0:e5:36:cf:69:6b:de:79:34:d8:1a:2d:c0:1e:e1: 34:2a:cc:f0:ce:2e:1e:8e:c4:dc:28:31:66:fc:29:a6:93:b6: 3b:fb:2e:6c:51:3d:17:f1:dc:06:8e:08:5d:7e:40:39:d4:a3: 23:96:4b:9c:70:d5:6a:8d:f1:10:1d:fb:a6:53:a8:1e:18:b5: 71:30:48:0b:2b:21:09:e6:14:1d:ba:d8:e2:19:65:4a:c9:cd: 4c:7c:57:71:e6:0f:e4:9a:0b:56:1b:21:83:98:34:a5:56:12: fd:3e:27:9c:02:91:cf:fc:b1:9e:e5:2f:dc:4b:fe:45:c6:c9: 4e:a8:c6:10:c3:c6:4b:16:57:5f:32:f0:fb:62:42:11:55:94: b1:b2:86:c9:0e:50:23:55:2f:dc:f7:8d:14:bc:fc:32:b4:48: 92:a3:6b:c0:0c:d4:7e:3b:12:67:c1:32:5c:19:d4:b5:b1:d0: ab:f4:cd:2a:f9:a3:0c:ba:40:43:d6:e3:2d:4e:37:82:dc:b4: 04:fb:58:f8:dc:fa:1d:75:d9:6e:3a:7c:65:4a:c9:de:1f:98: 29:4f:a5:ac:cb:e4:7f:e5:e9:80:09:c7:9d:1c:fe:bd:22:e1: 50:a0:05:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/RxfyZsDnj0YO2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk Y2MzYWIxYTAtYWMxYi00ZTQ1LTllZjktZjE1YTAyODg0MWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4CvhbIPMe1oj/y8569EjBneG8E4XcEGi8OD UWuqryqFjXN6T07ObW8C7gUo75aCFezUiMDSdtNa4hcYdBoh5GMJfyykeaebS+Cz vvM7eTFdf9WZdiNUJitMoZQBaR9OwWBE+NaUTCEzjQby3QEMbuSNlUkB+xJt6DIy XjF58WPytKRKTCGL9MilhG27Y3wZnI8Pf1hDPuPNChFHB1Q+SqbTt+z1zMb+vxB5 OYZPQj3/0qLLhatv+oU92ij+RgYgyee5NjUkpfou/cVubBcAbVH8coRGcoyMTVPZ mrumRqBsHnRrFOxKLTqDoSJG+1+THs6lPnY89BwZo4E8pKPYSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0x/fzstKkViTAVn4ANoUe0zVqXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzkwNmM1ZWMtZGFmZi0z ZmVhLThjN2ItNDNmZDlkODJmYjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxinsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDVJia2vTJZ+3atSuQ5H0FPZZackuDlNs9pa955NNgaLcAe4TQqzPDO Lh6OxNwoMWb8KaaTtjv7LmxRPRfx3AaOCF1+QDnUoyOWS5xw1WqN8RAd+6ZTqB4Y tXEwSAsrIQnmFB262OIZZUrJzUx8V3HmD+SaC1YbIYOYNKVWEv0+J5wCkc/8sZ7l L9xL/kXGyU6oxhDDxksWV18y8PtiQhFVlLGyhskOUCNVL9z3jRS8/DK0SJKja8AM 1H47EmfBMlwZ1LWx0Kv0zSr5owy6QEPW4y1ON4LctAT7WPjc+h112W46fGVKyd4f mClPpazL5H/l6YAJx50c/r0i4VCgBUw= -----END CERTIFICATE-----Generated at Sat Nov 1 10:02:49 2025 by rpki-client