$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8dd4d43b-40e4-3083-a8d2-5088e71cc472.roa File: 8dd4d43b-40e4-3083-a8d2-5088e71cc472.roa (raw, json) Hash identifier: 8cxL9KuYX7ueiLcnia7ykvfjKJc6Sx7288W8DNYtVo8= Subject key identifier: 1C:52:DB:85:1E:5E:DD:8A:C0:47:39:8E:46:36:FC:C0:E7:FD:FE:04 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1927EF8C5C78F9E673BB900 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8dd4d43b-40e4-3083-a8d2-5088e71cc472.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 198.41.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:7e:f8:c5:c7:8f:9e:67:3b:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=bc820ab1-52ae-42c9-aa1a-5b331bfd4703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:5d:2a:0d:c5:be:d9:71:cf:63:52:5e:dd:7f: 1e:e4:a0:fb:e1:0c:ad:1e:b7:77:34:dc:45:92:2e: 7c:df:bf:06:70:81:d6:a8:52:e0:ae:08:e0:21:13: 78:87:2c:5a:84:84:d6:d6:41:c5:c3:8e:87:19:d8: 04:2d:cf:ac:29:a2:30:fa:ee:c0:ee:d2:c6:1f:49: 56:2e:9e:6c:f9:fd:3a:49:75:ad:d6:1d:56:4a:73: e4:14:da:a4:bc:d8:f5:47:10:f2:5d:1f:0a:f9:a2: d4:52:5c:d9:e3:97:0e:91:b2:a1:a6:56:26:b0:fc: a5:f6:ee:51:2f:66:de:14:e2:ae:64:c0:8c:fb:c5: b8:f6:7d:31:9b:73:2a:52:20:3e:4c:bd:a9:09:79: 1a:ac:4c:c3:47:7d:57:eb:28:f1:7a:1f:10:5a:57: 2f:e3:77:de:34:98:2a:6b:57:47:28:f2:15:59:45: 23:68:a7:9b:3e:8c:2d:0d:bb:66:a5:20:ae:ae:02: 93:cc:d2:2f:85:5c:a1:d8:32:35:2b:37:02:27:a3: a5:58:8c:7f:cf:51:af:03:b9:2d:8f:3e:c4:15:e6: d6:a5:ee:a2:49:68:37:b3:65:df:1a:8d:1c:3a:75: 39:35:94:4e:90:55:93:51:08:f8:d7:2a:1c:66:02: 40:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:52:DB:85:1E:5E:DD:8A:C0:47:39:8E:46:36:FC:C0:E7:FD:FE:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8dd4d43b-40e4-3083-a8d2-5088e71cc472.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:4d:8f:68:42:f3:cd:a2:ff:55:8f:bc:f2:a1:d0:50:98:c2: d3:b3:36:04:fe:9f:f0:74:1d:de:fd:8b:bc:4d:c1:f6:c9:ea: 02:69:38:8c:b0:f1:b9:d8:52:ba:3a:57:78:d6:71:89:5c:0f: fb:be:47:52:cc:ed:d8:a3:1e:2c:c6:1a:ab:1e:b0:38:ed:07: 5f:a4:33:81:0d:c8:05:fe:15:22:58:ae:69:cd:74:e1:aa:63: 45:8f:94:6b:85:d0:91:68:07:66:2a:e5:5d:43:b1:6b:23:f8: 04:90:66:64:59:ea:10:e0:87:d9:69:dd:1f:84:3f:61:03:a3: 0b:77:b9:49:eb:3f:51:00:7a:76:55:25:22:ff:4d:ce:c6:28: 6d:c0:2b:4c:38:f0:42:51:bb:6c:ca:b2:06:ae:23:68:01:ad: c4:ce:fc:1e:51:91:cb:1d:48:34:7d:8d:52:1e:8f:72:6b:98: 3b:85:1e:da:3f:99:75:fa:a5:c6:62:ad:7e:bf:14:bb:ab:3c: 7a:d5:c3:8b:8a:a2:f0:21:ad:df:b8:10:8e:7a:e4:bf:f3:6d: 33:f4:3f:d1:47:f6:74:0f:e7:b5:c3:ae:fb:0a:af:b3:09:c6: 58:50:e9:fb:06:77:ce:87:6b:b1:79:4a:d2:0f:69:ef:11:51: 5e:72:fa:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkn74xcePnmc7uQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk YmM4MjBhYjEtNTJhZS00MmM5LWFhMWEtNWIzMzFiZmQ0NzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhV0qDcW+2XHPY1Je3X8e5KD74QytHrd3NNxF ki58378GcIHWqFLgrgjgIRN4hyxahITW1kHFw46HGdgELc+sKaIw+u7A7tLGH0lW Lp5s+f06SXWt1h1WSnPkFNqkvNj1RxDyXR8K+aLUUlzZ45cOkbKhplYmsPyl9u5R L2beFOKuZMCM+8W49n0xm3MqUiA+TL2pCXkarEzDR31X6yjxeh8QWlcv43feNJgq a1dHKPIVWUUjaKebPowtDbtmpSCurgKTzNIvhVyh2DI1KzcCJ6OlWIx/z1GvA7kt jz7EFebWpe6iSWg3s2XfGo0cOnU5NZROkFWTUQj41yocZgJAZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxS24UeXt2KwEc5jkY2/MDn/f4EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGRkNGQ0M2ItNDBlNC0z MDgzLWE4ZDItNTA4OGU3MWNjNDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxinmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALBNj2hC882i/1WPvPKh0FCYwtOzNgT+n/B0Hd79i7xNwfbJ6gJpOIyw 8bnYUro6V3jWcYlcD/u+R1LM7dijHizGGqsesDjtB1+kM4ENyAX+FSJYrmnNdOGq Y0WPlGuF0JFoB2Yq5V1DsWsj+ASQZmRZ6hDgh9lp3R+EP2EDowt3uUnrP1EAenZV JSL/Tc7GKG3AK0w48EJRu2zKsgauI2gBrcTO/B5RkcsdSDR9jVIej3JrmDuFHto/ mXX6pcZirX6/FLurPHrVw4uKovAhrd+4EI565L/zbTP0P9FH9nQP57XDrvsKr7MJ xlhQ6fsGd86Ha7F5StIPae8RUV5y+ro= -----END CERTIFICATE-----Generated at Sat Nov 1 15:24:06 2025 by rpki-client