$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/acafe627-5dfc-3a59-9b16-c8645b637595.roa File: acafe627-5dfc-3a59-9b16-c8645b637595.roa (raw, json) Hash identifier: ITfJBUSKNwXF2giWBLXzzfN84RmaUxph+jZBTX0UrQc= Subject key identifier: 4D:91:F6:2C:BD:78:AE:DE:4A:0A:3A:B2:8D:2C:57:12:6D:A1:9C:F4 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB192716AC2A2DA0023D6B170 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/acafe627-5dfc-3a59-9b16-c8645b637595.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 198.41.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:71:6a:c2:a2:da:00:23:d6:b1:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=4ec17789-ec1f-4648-b036-d686b2648d8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:86:a6:68:b8:bd:49:ca:a1:f6:10:bb:7f:d3: 89:8f:41:5c:8b:5f:4a:6c:fb:97:cd:74:6a:6f:ef: 8a:02:20:04:82:ee:c5:ba:ec:43:fc:03:15:d4:fc: 7d:b7:f0:b1:3e:b3:bd:8a:2e:c7:ef:71:a7:5c:29: bd:77:a1:f7:95:7d:7b:a4:21:72:2d:cc:6d:b9:e3: 39:57:d5:78:7b:90:d6:d5:3f:27:49:61:aa:75:f0: da:04:1a:a4:57:23:df:45:97:e2:c4:b7:07:cd:e2: cb:5a:76:9c:43:32:64:a5:0d:cb:c5:68:1f:6f:fb: a1:2e:1d:e5:7e:d3:6d:1a:58:66:3e:a2:e1:0b:ff: 3f:95:05:8d:c2:73:43:43:80:07:c7:03:84:d8:99: a9:06:ff:5c:ae:e3:e7:df:e0:db:c8:40:d8:6c:b0: 8e:c4:cd:96:66:21:84:9e:3f:d5:7c:80:c7:cf:4b: 9c:e1:f4:50:4f:b1:5f:45:7b:2b:fc:34:0a:66:1b: 65:fe:00:c3:43:41:16:0e:db:7b:f3:a9:ef:cb:77: f8:31:40:ea:30:b3:05:ca:cd:a3:96:02:4f:1c:51: e3:9f:c5:c6:37:32:f8:14:54:60:71:53:0b:b2:47: 38:df:a1:8f:d6:bd:de:fd:ea:ad:c3:b5:67:fa:db: 7a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:91:F6:2C:BD:78:AE:DE:4A:0A:3A:B2:8D:2C:57:12:6D:A1:9C:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/acafe627-5dfc-3a59-9b16-c8645b637595.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:a9:ca:9b:5f:f0:d0:78:6f:40:18:2a:75:82:85:4b:ea:00: b5:61:9d:07:c3:30:cd:f2:73:95:91:4a:6b:e3:86:18:5d:be: ff:11:33:db:6a:68:ba:f2:91:83:d9:d4:71:19:57:d8:a5:29: a1:2a:7c:38:df:28:7d:40:a2:89:ff:64:b7:d2:87:6e:7a:85: 31:8e:c6:9d:14:1f:ee:e4:cb:54:18:30:8c:5f:01:ae:22:9f: 17:af:4c:21:bb:e0:16:e0:95:55:ac:ba:78:be:78:a2:4a:43: 2a:95:bd:f7:99:2c:cc:52:8d:0b:a4:3c:12:8b:37:65:68:0a: d0:2a:9a:5c:51:d1:52:20:1a:a5:5b:e2:7d:74:24:cc:65:e8: 20:2b:61:72:37:84:bb:3e:58:ae:0e:e0:6b:0a:a3:39:8f:2b: 96:41:7d:53:fe:66:19:a2:6a:4c:70:00:4e:77:96:b4:5e:2c: 24:a6:f0:c2:4a:cb:6a:cc:f0:61:f8:92:50:d4:19:9a:a4:37: 42:4b:7d:20:3b:b4:49:74:2e:a7:01:84:07:a6:a7:4b:b9:95: 88:8a:0c:0c:47:2b:1b:57:3f:1f:5a:3a:61:fe:1b:46:f4:36: bd:84:74:92:f6:f9:6b:7e:d8:1b:27:a5:1a:33:1a:ec:ea:9c: 0a:ce:c2:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxknFqwqLaACPWsXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk NGVjMTc3ODktZWMxZi00NjQ4LWIwMzYtZDY4NmIyNjQ4ZDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIamaLi9Scqh9hC7f9OJj0Fci19KbPuXzXRq b++KAiAEgu7FuuxD/AMV1Px9t/CxPrO9ii7H73GnXCm9d6H3lX17pCFyLcxtueM5 V9V4e5DW1T8nSWGqdfDaBBqkVyPfRZfixLcHzeLLWnacQzJkpQ3LxWgfb/uhLh3l ftNtGlhmPqLhC/8/lQWNwnNDQ4AHxwOE2JmpBv9cruPn3+DbyEDYbLCOxM2WZiGE nj/VfIDHz0uc4fRQT7FfRXsr/DQKZhtl/gDDQ0EWDtt786nvy3f4MUDqMLMFys2j lgJPHFHjn8XGNzL4FFRgcVMLskc436GP1r3e/eqtw7Vn+tt6PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2R9iy9eK7eSgo6so0sVxJtoZz0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWNhZmU2MjctNWRmYy0z YTU5LTliMTYtYzg2NDViNjM3NTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxinIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+pyptf8NB4b0AYKnWChUvqALVhnQfDMM3yc5WRSmvjhhhdvv8RM9tq aLrykYPZ1HEZV9ilKaEqfDjfKH1Aoon/ZLfSh256hTGOxp0UH+7ky1QYMIxfAa4i nxevTCG74BbglVWsuni+eKJKQyqVvfeZLMxSjQukPBKLN2VoCtAqmlxR0VIgGqVb 4n10JMxl6CArYXI3hLs+WK4O4GsKozmPK5ZBfVP+ZhmiakxwAE53lrReLCSm8MJK y2rM8GH4klDUGZqkN0JLfSA7tEl0LqcBhAemp0u5lYiKDAxHKxtXPx9aOmH+G0b0 Nr2EdJL2+Wt+2BsnpRozGuzqnArOwn0= -----END CERTIFICATE-----Generated at Sat Nov 1 09:59:23 2025 by rpki-client