$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/afd61a45-4551-3ab1-a3bb-928990ff0f81.roa File: afd61a45-4551-3ab1-a3bb-928990ff0f81.roa (raw, json) Hash identifier: WDyZe+LHNO54gG7BZCHNlsG7Mm3vbUbFAnGd+BaOYGE= Subject key identifier: 93:F1:E3:C8:E7:0E:0F:25:9B:62:04:F7:30:AB:D4:0B:BF:D5:91:CA Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F13024AB780DC9837399C8880 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/afd61a45-4551-3ab1-a3bb-928990ff0f81.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 132892 IP address blocks: 198.41.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:4a:b7:80:dc:98:37:39:9c:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=4b316365-83b7-4685-aba1-300a004029f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:da:c3:9c:94:17:90:35:8d:ba:73:62:87:e3: ae:bc:70:6e:dd:8e:2d:b7:5d:47:d1:7a:b8:82:37: 9e:c6:66:44:67:28:ad:ec:b9:94:3d:0d:94:78:06: a7:f7:fc:b4:11:77:ca:76:5a:00:58:dd:85:5b:e0: eb:1e:8d:58:c5:82:fa:5e:a5:c9:a9:2f:c1:05:94: 48:d7:e0:6b:3d:b1:7b:d4:98:9b:24:4c:9c:47:58: f7:9b:23:c6:15:d5:c7:24:e9:f7:a4:72:ca:1e:67: 7e:7b:ea:b5:1f:b4:d3:0b:84:16:30:68:22:97:37: 3b:9d:ca:90:5f:e3:0f:72:f9:bd:35:9e:49:02:a2: be:c9:cb:9e:17:e5:25:d2:0e:af:ad:3a:bc:89:de: 52:74:3a:0e:43:82:e8:58:9d:61:c4:c2:48:86:64: 47:4f:94:43:28:b4:3c:2f:34:63:df:84:ae:31:c3: 99:8a:7c:f0:e0:d0:92:43:ec:cb:91:b3:64:2b:fd: dc:6f:b9:72:21:d4:b5:51:95:d7:90:82:44:b7:fd: e1:7f:a8:6c:c7:29:46:33:b6:15:53:05:30:eb:bb: d1:36:aa:98:4e:7f:34:6b:52:1c:fc:e4:80:84:9d: a4:fe:6a:99:1a:53:38:af:f0:6c:7e:f0:45:b9:9f: 25:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:F1:E3:C8:E7:0E:0F:25:9B:62:04:F7:30:AB:D4:0B:BF:D5:91:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/afd61a45-4551-3ab1-a3bb-928990ff0f81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:7d:65:03:e4:d8:dd:4f:c8:b7:5d:94:ba:2d:1b:f0:02:60: 3d:dc:a0:d5:84:ed:e7:98:c8:f4:73:76:85:1c:84:a8:32:2a: ea:3b:be:a6:9d:6e:b9:99:91:f4:b4:5c:a3:27:c9:a2:4b:ce: 98:07:8a:5c:36:ff:b4:c1:46:5f:b6:b9:7f:31:10:78:88:a7: 33:54:6c:f0:dc:53:a0:d5:37:4e:f5:5b:98:42:2a:d2:7d:19: d6:c5:5a:1e:4b:21:17:07:cb:86:d6:9a:19:80:c7:ae:56:c9: c1:c2:f3:0d:a4:d4:b9:a8:d8:16:7b:44:0e:70:33:43:44:57: f9:72:f7:98:e7:3d:24:17:58:64:79:77:e9:f0:a9:db:6f:cd: 3b:a0:0e:20:ee:f5:d6:a0:e3:30:dc:8b:87:20:52:0a:3f:ab: 65:da:f9:f8:8c:ec:1c:f0:d7:c6:25:47:fb:8b:6f:1e:4f:14: 21:93:6c:9e:a8:c5:5d:5a:32:ba:65:a4:31:2e:7c:1c:88:bb: 30:29:3d:fb:6f:63:46:87:71:80:66:a4:46:6a:2b:d7:e8:37: e0:14:b2:b8:6c:23:a1:f7:c8:bd:cc:9f:aa:90:64:74:4f:d2: b9:d1:77:7d:b6:2d:d3:db:5d:62:ed:8a:7d:f6:ce:d7:14:55: f7:25:2c:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAkq3gNyYNzmciIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk NGIzMTYzNjUtODNiNy00Njg1LWFiYTEtMzAwYTAwNDAyOWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdrDnJQXkDWNunNih+OuvHBu3Y4tt11H0Xq4 gjeexmZEZyit7LmUPQ2UeAan9/y0EXfKdloAWN2FW+DrHo1YxYL6XqXJqS/BBZRI 1+BrPbF71JibJEycR1j3myPGFdXHJOn3pHLKHmd+e+q1H7TTC4QWMGgilzc7ncqQ X+MPcvm9NZ5JAqK+ycueF+Ul0g6vrTq8id5SdDoOQ4LoWJ1hxMJIhmRHT5RDKLQ8 LzRj34SuMcOZinzw4NCSQ+zLkbNkK/3cb7lyIdS1UZXXkIJEt/3hf6hsxylGM7YV UwUw67vRNqqYTn80a1Ic/OSAhJ2k/mqZGlM4r/BsfvBFuZ8lFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJPx48jnDg8lm2IE9zCr1Au/1ZHKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWZkNjFhNDUtNDU1MS0z YWIxLWEzYmItOTI4OTkwZmYwZjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxin5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHt9ZQPk2N1PyLddlLotG/ACYD3coNWE7eeYyPRzdoUchKgyKuo7vqad brmZkfS0XKMnyaJLzpgHilw2/7TBRl+2uX8xEHiIpzNUbPDcU6DVN071W5hCKtJ9 GdbFWh5LIRcHy4bWmhmAx65WycHC8w2k1Lmo2BZ7RA5wM0NEV/ly95jnPSQXWGR5 d+nwqdtvzTugDiDu9dag4zDci4cgUgo/q2Xa+fiM7Bzw18YlR/uLbx5PFCGTbJ6o xV1aMrplpDEufByIuzApPftvY0aHcYBmpEZqK9foN+AUsrhsI6H3yL3Mn6qQZHRP 0rnRd322LdPbXWLtin32ztcUVfclLDQ= -----END CERTIFICATE-----Generated at Tue Sep 22 09:38:46 2026 by rpki-client