$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8d9d4ab9-c44f-3301-bd61-b61e8db842c7.roa File: 8d9d4ab9-c44f-3301-bd61-b61e8db842c7.roa (raw, json) Hash identifier: NJN81d2uv/qMmj7O1eyWHoj4upxDHRAauO7gJ8dI84U= Subject key identifier: 33:5B:0C:D8:54:20:F6:23:21:7B:4F:25:9E:E8:AF:82:35:E4:DB:7C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EFCACE9F66083BDB63BB86720 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8d9d4ab9-c44f-3301-bd61-b61e8db842c7.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 132892 IP address blocks: 198.41.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:e9:f6:60:83:bd:b6:3b:b8:67:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=cc0e7cb0-fb87-4cb6-940e-5fdc9a977011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6f:76:44:f6:8c:16:fa:b7:ff:56:32:1e:bc: 92:42:9a:ab:d5:a8:c6:9c:37:76:33:0c:6e:73:07: 75:9f:7c:a5:20:96:25:5a:2d:76:b2:9f:e6:6e:9a: d2:b1:03:5b:32:51:83:b1:67:f2:97:3d:7d:95:04: 24:f3:ba:dc:ae:36:e2:02:44:29:95:36:1a:90:c6: 4f:12:51:26:bf:44:45:db:0a:de:20:ff:9a:61:95: c7:b4:99:fa:b6:3a:76:e5:01:fa:89:3d:7d:1c:44: 14:f9:81:e2:2b:c3:6b:dc:46:00:fb:2c:e2:a8:1d: d3:f1:ba:15:22:08:ce:08:34:70:fe:c1:ce:2b:ea: 2d:8b:99:54:8e:59:67:f1:de:ef:bb:db:c3:fe:7b: 83:01:22:ea:b5:b9:95:ab:09:8f:8b:6e:12:67:a4: 62:40:4b:bf:56:ba:b2:49:e9:ef:a4:5c:45:22:76: 96:fc:81:53:ce:0f:cd:42:08:fa:5d:98:e7:8b:94: 6e:ae:eb:89:e0:04:bb:da:21:a2:56:ad:fb:42:82: 9c:0e:9d:25:80:d9:eb:ec:91:c0:6c:20:72:11:94: 7b:6b:b2:a0:f0:c3:19:6a:ba:b6:f2:5c:07:f1:87: c0:b1:e4:8a:40:e4:00:95:6c:4d:a4:12:0c:ac:90: 44:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:5B:0C:D8:54:20:F6:23:21:7B:4F:25:9E:E8:AF:82:35:E4:DB:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8d9d4ab9-c44f-3301-bd61-b61e8db842c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:07:29:a5:ca:92:44:39:d9:9a:f3:32:93:09:4f:2f:be:91: 7b:97:f2:1b:57:ad:b6:c1:6b:39:0c:ca:08:e8:dc:1b:e3:72: 75:78:05:1f:cb:8d:ec:df:16:d3:7b:66:a3:16:b1:1e:78:9f: 6f:3c:91:97:ef:ce:c5:1c:51:c5:e2:bc:a3:91:2d:f2:f4:7b: bf:10:8f:07:01:e0:0b:9f:ef:32:96:87:f2:2c:19:fb:b3:03: fb:8e:73:55:5a:e3:c1:3a:40:e7:b2:a1:b2:4a:ff:10:0e:ef: 9b:0f:1b:14:0f:21:f8:97:74:fa:eb:2b:25:58:c3:1f:d9:56: 62:53:74:73:31:28:57:e9:69:16:0d:97:25:49:d9:0a:58:f5: f8:c3:43:96:f5:03:76:5c:4e:6b:84:ae:1b:b8:e2:24:88:55: 33:cc:cd:ea:47:d8:2c:27:af:c3:f7:85:36:66:36:11:6c:29: 42:c4:73:06:65:02:10:79:5b:c5:14:e5:28:9d:f5:c1:b5:b2: 2e:9e:1c:22:28:32:e1:c9:9b:ab:5d:22:16:78:26:e4:2d:ac: bc:6c:c4:cb:e0:10:6b:a9:0b:56:60:3e:ca:65:4e:29:7a:44: 81:98:48:fa:89:cb:1c:94:bf:ee:6b:b0:b3:4c:98:5a:43:e6: 70:a2:c4:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rOn2YIO9tju4ZyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk Y2MwZTdjYjAtZmI4Ny00Y2I2LTk0MGUtNWZkYzlhOTc3MDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAom92RPaMFvq3/1YyHrySQpqr1ajGnDd2Mwxu cwd1n3ylIJYlWi12sp/mbprSsQNbMlGDsWfylz19lQQk87rcrjbiAkQplTYakMZP ElEmv0RF2wreIP+aYZXHtJn6tjp25QH6iT19HEQU+YHiK8Nr3EYA+yziqB3T8boV IgjOCDRw/sHOK+oti5lUjlln8d7vu9vD/nuDASLqtbmVqwmPi24SZ6RiQEu/Vrqy SenvpFxFInaW/IFTzg/NQgj6XZjni5RuruuJ4AS72iGiVq37QoKcDp0lgNnr7JHA bCByEZR7a7Kg8MMZarq28lwH8YfAseSKQOQAlWxNpBIMrJBEMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNbDNhUIPYjIXtPJZ7or4I15Nt8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGQ5ZDRhYjktYzQ0Zi0z MzAxLWJkNjEtYjYxZThkYjg0MmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxin/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJwHKaXKkkQ52ZrzMpMJTy++kXuX8htXrbbBazkMygjo3BvjcnV4BR/L jezfFtN7ZqMWsR54n288kZfvzsUcUcXivKORLfL0e78QjwcB4Auf7zKWh/IsGfuz A/uOc1Va48E6QOeyobJK/xAO75sPGxQPIfiXdPrrKyVYwx/ZVmJTdHMxKFfpaRYN lyVJ2QpY9fjDQ5b1A3ZcTmuErhu44iSIVTPMzepH2Cwnr8P3hTZmNhFsKULEcwZl AhB5W8UU5Sid9cG1si6eHCIoMuHJm6tdIhZ4JuQtrLxsxMvgEGupC1ZgPsplTil6 RIGYSPqJyxyUv+5rsLNMmFpD5nCixOc= -----END CERTIFICATE-----Generated at Tue Sep 22 09:52:47 2026 by rpki-client