$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/997b1190-cae3-3fcb-80f5-b1f8228cd0df.roa File: 997b1190-cae3-3fcb-80f5-b1f8228cd0df.roa (raw, json) Hash identifier: lzNk9rgefY/Szx1PXqw6l0TJx9A12jystgrPqNH/Tis= Subject key identifier: 44:90:47:A7:8D:14:07:73:4B:43:69:C5:D7:27:6A:85:27:DC:D9:7B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEA8773933EC9CAA91ABCD3A0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/997b1190-cae3-3fcb-80f5-b1f8228cd0df.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 198.41.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:73:93:3e:c9:ca:a9:1a:bc:d3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=dc07c0d6-58b6-4d0d-b349-9e1159e5b39a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9e:6a:c6:42:bc:09:b8:09:58:36:84:ef:77: c4:bd:ec:c2:e4:cc:35:4e:39:a3:cc:2d:76:e2:92: 49:56:a2:0a:34:ff:4b:4e:cf:43:0a:63:52:dd:55: 95:34:db:ed:75:b7:90:0c:ae:be:ad:e4:7f:c5:ef: 0b:10:a8:6d:11:53:ec:ba:7c:07:01:ca:ba:ce:b1: 9b:c3:6a:87:ec:8a:12:68:46:68:87:de:88:66:10: c3:33:47:f1:aa:e8:58:d9:0a:23:d0:53:2c:f5:b0: b6:d0:26:ed:1e:c6:91:cf:f3:fc:50:96:b3:42:e4: 00:40:e7:10:1d:a7:1a:71:da:e4:c9:b0:1c:e3:81: 80:0a:15:de:0f:5a:ce:9f:99:3d:4b:a2:0e:85:f0: b1:59:bc:f2:90:85:42:8f:ce:9b:0f:42:55:01:ac: f2:8c:fd:e3:13:34:01:8e:fd:f6:2b:a5:d3:66:ac: 16:0a:7b:2d:20:21:30:b0:7d:41:fc:e7:52:95:78: 4b:31:32:1d:14:b7:ce:1b:87:f9:5e:0f:90:a2:2c: 63:67:41:c3:d6:90:bf:8d:0b:a4:e1:6d:c9:97:9a: b6:84:c4:f2:16:fa:9a:5d:c3:1b:52:3f:09:57:c1: 5c:c5:f5:c4:43:a3:af:89:04:07:76:1f:b5:0a:8e: 38:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:90:47:A7:8D:14:07:73:4B:43:69:C5:D7:27:6A:85:27:DC:D9:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/997b1190-cae3-3fcb-80f5-b1f8228cd0df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:43:2a:80:fc:f3:ff:20:1e:1a:e4:be:a1:e0:04:14:19:e8: f1:15:a1:23:2d:f7:59:cf:03:c6:f7:c0:93:f9:b3:71:d4:5d: 8a:11:39:84:b9:7e:c2:0a:f4:0e:66:a2:58:ee:26:5e:63:19: 80:29:4d:01:ce:fc:31:6c:25:1e:cd:a3:6c:d1:a7:8d:82:bc: 8f:8a:f7:11:8c:ff:14:64:8d:cd:e7:4d:a8:ff:35:34:90:a7: 94:dd:b8:86:dd:05:00:a0:74:56:4c:58:b8:81:03:5e:5d:e7: 36:98:64:28:3c:fc:50:fd:1d:4a:52:2b:32:69:b9:05:ce:4a: a1:ae:3d:6d:5e:0b:94:95:c4:b1:10:bb:9b:1e:45:b3:76:56: 0e:d8:cd:17:80:66:36:0a:a3:f5:2a:ce:70:e7:33:a8:b5:b1: fe:9c:a7:a0:51:a7:30:fd:e7:02:79:c4:49:c4:ba:99:96:0a: 1b:62:4b:e6:8c:a2:fe:0d:80:50:56:8d:c9:8e:bb:2c:4b:da: ac:4f:b2:17:58:1c:c9:ee:a9:ba:b5:08:fe:62:c9:05:99:ee: 34:7e:10:a0:cf:0e:3f:a5:4a:92:75:f4:43:ae:e9:9a:b4:d6: 7c:3d:08:22:85:fb:53:8a:98:ca:84:32:42:93:61:fb:18:19: 9b:a9:4f:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh3OTPsnKqRq806AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk ZGMwN2MwZDYtNThiNi00ZDBkLWIzNDktOWUxMTU5ZTViMzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvp5qxkK8CbgJWDaE73fEvezC5Mw1TjmjzC12 4pJJVqIKNP9LTs9DCmNS3VWVNNvtdbeQDK6+reR/xe8LEKhtEVPsunwHAcq6zrGb w2qH7IoSaEZoh96IZhDDM0fxquhY2Qoj0FMs9bC20CbtHsaRz/P8UJazQuQAQOcQ HacacdrkybAc44GAChXeD1rOn5k9S6IOhfCxWbzykIVCj86bD0JVAazyjP3jEzQB jv32K6XTZqwWCnstICEwsH1B/OdSlXhLMTIdFLfOG4f5Xg+QoixjZ0HD1pC/jQuk 4W3Jl5q2hMTyFvqaXcMbUj8JV8FcxfXEQ6OviQQHdh+1Co44DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESQR6eNFAdzS0NpxdcnaoUn3Nl7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTk3YjExOTAtY2FlMy0z ZmNiLTgwZjUtYjFmODIyOGNkMGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxinvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJDKoD88/8gHhrkvqHgBBQZ6PEVoSMt91nPA8b3wJP5s3HUXYoROYS5 fsIK9A5moljuJl5jGYApTQHO/DFsJR7No2zRp42CvI+K9xGM/xRkjc3nTaj/NTSQ p5TduIbdBQCgdFZMWLiBA15d5zaYZCg8/FD9HUpSKzJpuQXOSqGuPW1eC5SVxLEQ u5seRbN2Vg7YzReAZjYKo/UqznDnM6i1sf6cp6BRpzD95wJ5xEnEupmWChtiS+aM ov4NgFBWjcmOuyxL2qxPshdYHMnuqbq1CP5iyQWZ7jR+EKDPDj+lSpJ19EOu6Zq0 1nw9CCKF+1OKmMqEMkKTYfsYGZupT+Y= -----END CERTIFICATE-----Generated at Tue Sep 1 01:44:27 2026 by rpki-client