$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b2e360c2-c4e3-3add-a378-ea1e4e21358d.roa File: b2e360c2-c4e3-3add-a378-ea1e4e21358d.roa (raw, json) Hash identifier: FD0sxIZcEsq8zguLox5G+BsT2VqFyd4S7X0H9TIdPDU= Subject key identifier: 44:74:03:A1:A8:CB:0D:87:E1:DD:C6:B9:B7:6D:0F:03:25:16:EA:6C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584B02B821EA937D673157387C80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b2e360c2-c4e3-3add-a378-ea1e4e21358d.roa Signing time: Thu 28 Aug 2025 21:50:19 +0000 ROA not before: Thu 28 Aug 2025 21:50:19 +0000 ROA not after: Wed 26 Nov 2025 22:50:19 +0000 asID: 13335 IP address blocks: 198.41.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:02:b8:21:ea:93:7d:67:31:57:38:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 28 21:50:19 2025 GMT Not After : Nov 26 22:50:19 2025 GMT Subject: CN=b81f95cc-a5bf-4be6-b2de-6205588ed5ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ca:b9:1c:ab:ae:20:56:31:ea:dd:58:b1:2b: 35:2d:2e:41:65:a0:1b:1a:9f:47:83:3d:da:13:13: da:a1:bf:0d:81:f7:c0:59:b5:2c:cf:5f:e2:f2:2c: db:7a:2c:4f:16:0e:81:23:ec:f2:37:0f:58:22:dc: 8b:5a:57:c6:38:8b:0e:33:a3:33:7a:52:b6:ff:22: 6c:a2:e4:3e:44:52:a6:69:5d:2d:8a:a0:38:77:22: 77:92:fb:91:37:3b:4b:ac:67:51:17:e4:76:38:db: a2:cf:c6:6c:9c:5c:80:fa:3a:97:54:4e:b2:90:e7: 00:91:3a:2e:22:5f:5a:f5:8a:a8:43:8c:88:12:4a: f1:e2:4f:86:45:26:94:a7:2c:4c:df:b5:6d:b5:46: a9:03:03:b1:db:5e:56:c5:fe:f9:7d:66:2f:8b:71: 35:77:64:dd:4f:c6:21:a9:29:d7:6d:94:9d:d1:96: 3f:0c:f9:1e:0b:fd:45:45:4a:a8:43:0c:55:b5:67: 80:73:ea:d7:cc:07:25:89:65:f4:ec:8e:49:76:5a: fb:0b:58:79:bf:04:54:f5:6f:9a:7d:4c:f6:3a:ce: bd:c6:1a:f4:34:4b:ef:b7:16:52:71:69:18:34:87: bc:ca:92:b0:22:b0:b8:78:ea:38:a7:57:a3:65:21: 4c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:74:03:A1:A8:CB:0D:87:E1:DD:C6:B9:B7:6D:0F:03:25:16:EA:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b2e360c2-c4e3-3add-a378-ea1e4e21358d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:b8:da:cc:ac:7a:27:93:80:c0:19:9f:1c:f9:90:f9:75:0b: cb:d2:12:3f:04:54:ae:c7:1d:4a:5a:bd:e8:4e:4e:a3:d5:6d: 0f:09:ac:36:13:d5:6d:06:c5:22:bf:86:91:0d:ba:53:e0:a0: 82:ef:af:3a:8f:e0:68:5b:f6:38:c9:02:2b:00:95:05:63:c9: 21:3f:02:23:15:3d:ac:36:bf:e7:9b:f2:93:e4:f9:d0:ed:e4: 96:64:a9:98:f2:f0:2c:41:63:25:fc:8f:3d:42:fa:8e:7c:8e: 96:43:a2:94:9f:1a:4a:45:08:b2:6e:32:4c:2a:d4:3c:40:e3: 60:62:9e:86:bc:4b:8f:eb:64:7d:50:ab:47:61:9b:bb:a1:ab: de:1d:c9:2c:6d:88:65:42:ac:8c:cf:1f:bb:bf:be:3a:ae:dd: 1d:c0:c5:21:80:ee:fd:9c:16:fa:6a:f1:d5:6a:f3:aa:19:2d: 7e:d5:50:21:4e:73:f4:b6:15:c2:71:ba:0d:70:d9:e6:73:05: 1d:32:ae:d5:b2:ce:46:23:2c:79:83:00:31:1f:17:82:3a:fe: ad:6f:99:fc:04:5d:ed:42:3a:0e:d7:d0:a6:a4:95:3a:86:ee: 27:58:ea:8e:09:df:4d:d8:50:52:9f:a6:31:be:4c:83:8c:38: 21:cb:18:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsCuCHqk31nMVc4fIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgyODIxNTAxOVoXDTI1MTEyNjIyNTAxOVowLzEtMCsGA1UEAxMk YjgxZjk1Y2MtYTViZi00YmU2LWIyZGUtNjIwNTU4OGVkNWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cq5HKuuIFYx6t1YsSs1LS5BZaAbGp9Hgz3a ExPaob8NgffAWbUsz1/i8izbeixPFg6BI+zyNw9YItyLWlfGOIsOM6MzelK2/yJs ouQ+RFKmaV0tiqA4dyJ3kvuRNztLrGdRF+R2ONuiz8ZsnFyA+jqXVE6ykOcAkTou Il9a9YqoQ4yIEkrx4k+GRSaUpyxM37VttUapAwOx215Wxf75fWYvi3E1d2TdT8Yh qSnXbZSd0ZY/DPkeC/1FRUqoQwxVtWeAc+rXzAcliWX07I5Jdlr7C1h5vwRU9W+a fUz2Os69xhr0NEvvtxZScWkYNIe8ypKwIrC4eOo4p1ejZSFMvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFER0A6Goyw2H4d3GubdtDwMlFupsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjJlMzYwYzItYzRlMy0z YWRkLWEzNzgtZWExZTRlMjEzNThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCximIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI242syseieTgMAZnxz5kPl1C8vSEj8EVK7HHUpavehOTqPVbQ8JrDYT 1W0GxSK/hpENulPgoILvrzqP4Ghb9jjJAisAlQVjySE/AiMVPaw2v+eb8pPk+dDt 5JZkqZjy8CxBYyX8jz1C+o58jpZDopSfGkpFCLJuMkwq1DxA42Binoa8S4/rZH1Q q0dhm7uhq94dySxtiGVCrIzPH7u/vjqu3R3AxSGA7v2cFvpq8dVq86oZLX7VUCFO c/S2FcJxug1w2eZzBR0yrtWyzkYjLHmDADEfF4I6/q1vmfwEXe1COg7X0KaklTqG 7idY6o4J303YUFKfpjG+TIOMOCHLGBs= -----END CERTIFICATE-----Generated at Wed Sep 3 13:48:25 2025 by rpki-client