$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bac980e3-b8b5-351c-893e-4f5357a6df2b.roa File: bac980e3-b8b5-351c-893e-4f5357a6df2b.roa (raw, json) Hash identifier: KtCKcsJv5dTdujPw5fulniXUDlTZV+WOOexeZ1xcFww= Subject key identifier: AE:56:45:5B:17:8D:A6:4E:B2:53:2E:EA:AD:1C:AD:E2:FB:5F:58:51 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1927257AE703103E79D1280 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bac980e3-b8b5-351c-893e-4f5357a6df2b.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 198.41.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:72:57:ae:70:31:03:e7:9d:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=81c0dc43-7a09-4c79-af0d-feca59881650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:6c:0d:2c:56:25:c5:5b:ad:c2:45:d1:8a:47: ed:02:4f:bb:f5:ad:25:23:48:83:0f:26:67:47:ad: b5:f1:b0:ea:52:e9:95:ec:cb:76:63:7d:02:fa:75: c3:e2:66:eb:2c:3b:ff:2b:ed:e0:a3:c4:94:32:4a: a3:08:be:7f:a9:fc:46:f1:a4:f5:d6:55:82:7f:d8: 64:cf:99:f1:ad:96:b3:62:f0:2d:67:31:ff:7f:d8: e4:25:85:e8:32:b4:01:42:8e:6b:6b:47:50:45:7f: 09:89:d8:5e:55:d2:e2:ec:ff:e9:6f:dc:bc:8a:08: 88:71:29:50:e9:90:49:44:27:d9:76:93:4a:d4:94: 93:59:1e:46:cf:23:76:c1:24:de:74:1b:91:2f:73: 7e:ee:c4:73:36:1a:f1:18:c6:76:2e:a0:05:36:c2: 43:07:b9:c4:23:63:94:60:56:55:d1:40:cf:4d:90: 10:61:53:a2:33:9d:e6:2b:51:5c:e7:01:53:4b:7a: 25:d3:5e:32:2f:47:87:8e:c1:37:18:b0:63:05:a9: f2:20:6e:ce:96:55:1f:a3:c2:b3:e4:26:10:94:64: 61:fe:f4:4e:d9:ca:7f:b4:be:d8:26:f1:ea:7e:78: 54:ae:ce:51:57:be:4c:db:d0:c5:63:6c:67:0a:7c: cd:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:56:45:5B:17:8D:A6:4E:B2:53:2E:EA:AD:1C:AD:E2:FB:5F:58:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bac980e3-b8b5-351c-893e-4f5357a6df2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:9b:d9:d4:b1:b8:26:ab:0e:d1:3d:9f:12:7e:be:de:4b:f8: 68:a1:5e:9e:11:79:13:d7:2e:95:1e:49:10:20:4b:e7:2c:69: 4b:3a:30:e9:61:7c:96:3f:01:e9:da:cb:11:02:ea:91:e1:fb: 59:48:d4:31:46:ff:0a:63:56:53:0a:82:20:c9:fe:3f:4a:95: 82:4f:3b:2e:c8:c3:a6:8e:2f:31:ed:f1:99:96:95:79:5f:ae: 82:16:08:01:1a:44:f1:96:97:2d:7b:96:a5:3f:95:ba:52:44: 98:b2:c9:e7:9f:f7:5c:0e:a9:87:29:05:c2:92:c3:25:45:dc: 64:14:7c:11:1b:ef:45:5c:0a:b2:5c:83:b3:4c:93:f6:15:58: 53:a2:2f:bd:04:7e:ed:75:da:a9:38:41:8e:5d:a9:c5:0a:07: 45:7a:c1:a1:6c:62:01:3e:7a:e0:df:e1:ab:04:76:79:74:c2: 47:2e:a0:d1:98:e9:74:c4:4a:93:89:2e:6c:fd:1d:33:c8:43: bc:c5:61:44:e0:a9:e8:bf:b9:85:c5:1f:e4:9f:60:67:5c:a2: a8:50:87:56:3b:46:b8:89:e2:51:47:9a:aa:66:d8:e7:ea:f6: 0c:24:16:ee:be:e6:04:07:84:99:14:65:7a:33:0a:9d:64:72: d3:04:f6:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxknJXrnAxA+edEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk ODFjMGRjNDMtN2EwOS00Yzc5LWFmMGQtZmVjYTU5ODgxNjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGwNLFYlxVutwkXRikftAk+79a0lI0iDDyZn R6218bDqUumV7Mt2Y30C+nXD4mbrLDv/K+3go8SUMkqjCL5/qfxG8aT11lWCf9hk z5nxrZazYvAtZzH/f9jkJYXoMrQBQo5ra0dQRX8JidheVdLi7P/pb9y8igiIcSlQ 6ZBJRCfZdpNK1JSTWR5GzyN2wSTedBuRL3N+7sRzNhrxGMZ2LqAFNsJDB7nEI2OU YFZV0UDPTZAQYVOiM53mK1Fc5wFTS3ol014yL0eHjsE3GLBjBanyIG7OllUfo8Kz 5CYQlGRh/vRO2cp/tL7YJvHqfnhUrs5RV75M29DFY2xnCnzN+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5WRVsXjaZOslMu6q0creL7X1hRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmFjOTgwZTMtYjhiNS0z NTFjLTg5M2UtNGY1MzU3YTZkZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxinsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAeb2dSxuCarDtE9nxJ+vt5L+GihXp4ReRPXLpUeSRAgS+csaUs6MOlh fJY/AenayxEC6pHh+1lI1DFG/wpjVlMKgiDJ/j9KlYJPOy7Iw6aOLzHt8ZmWlXlf roIWCAEaRPGWly17lqU/lbpSRJiyyeef91wOqYcpBcKSwyVF3GQUfBEb70VcCrJc g7NMk/YVWFOiL70Efu112qk4QY5dqcUKB0V6waFsYgE+euDf4asEdnl0wkcuoNGY 6XTESpOJLmz9HTPIQ7zFYUTgqei/uYXFH+SfYGdcoqhQh1Y7RriJ4lFHmqpm2Ofq 9gwkFu6+5gQHhJkUZXozCp1kctME9k8= -----END CERTIFICATE-----Generated at Sat Nov 1 10:02:57 2025 by rpki-client