$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bac980e3-b8b5-351c-893e-4f5357a6df2b.roa File: bac980e3-b8b5-351c-893e-4f5357a6df2b.roa (raw, json) Hash identifier: 66dpCifYMziQGem2gBkhs/2P8UxRXBkC5BKv1J2rbuY= Subject key identifier: D7:94:8B:28:CB:72:84:2E:AC:4D:EF:A7:6F:4A:63:B0:C9:5F:50:E1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF44CBE54421B52E77B3BF600 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bac980e3-b8b5-351c-893e-4f5357a6df2b.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 198.41.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:be:54:42:1b:52:e7:7b:3b:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=898a3be6-8ebd-42ac-8bf6-c3b780d03845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ef:9a:f2:2a:d1:dd:01:aa:d0:66:d9:f2:bd: 0d:54:92:7a:a8:02:a3:e7:a7:e7:45:31:99:4f:23: 75:77:10:f2:41:5e:ad:a4:0a:51:ef:ed:a8:e6:28: 38:bb:1e:2f:35:e8:a7:5d:32:45:93:7c:a9:f8:f0: 36:79:05:5d:79:77:70:4d:63:ed:8c:66:de:d0:4a: a3:db:d0:86:1c:fe:ef:07:54:c9:d2:07:36:2f:44: 48:27:a5:e5:af:de:60:c1:34:1b:bb:33:71:56:9b: 2e:45:8b:c8:cb:08:cd:85:2c:dd:e2:4b:9a:7f:07: 2b:52:4b:f4:dd:32:dc:33:23:48:ef:31:f7:5f:df: 5f:9e:66:cd:13:20:ee:8e:b1:7b:b6:09:a9:9a:94: 33:e7:cb:ee:44:ad:ec:d9:cc:7d:6a:d1:38:8c:be: b0:58:ac:58:06:da:bb:2c:62:71:d1:d7:5f:41:cc: 77:23:40:4c:8e:da:38:41:14:ab:42:2e:69:30:23: 94:a8:12:0b:24:13:2f:e5:b4:b3:3f:ce:cd:70:21: 70:cd:3a:0a:1d:82:47:db:c0:cf:ce:e1:01:71:41: 2b:f8:f5:6e:97:01:12:49:9b:0b:e8:db:74:dc:98: d8:40:ba:63:74:f3:f9:49:11:43:2f:c5:fe:87:7b: cc:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:94:8B:28:CB:72:84:2E:AC:4D:EF:A7:6F:4A:63:B0:C9:5F:50:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bac980e3-b8b5-351c-893e-4f5357a6df2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:15:60:ab:df:2c:d6:0a:e6:f0:88:62:44:65:b6:07:fa:10: aa:9c:8b:ab:52:8e:0f:19:af:7e:0a:62:f1:0b:43:bf:43:d5: 5c:44:89:aa:26:d0:7e:94:80:5c:ab:57:ae:13:0a:d3:18:12: 75:36:07:0f:09:b5:fb:64:f3:7f:fa:c6:81:a5:ea:b5:18:11: 7b:0f:ed:32:8d:1f:b7:8b:0f:20:6d:ef:a9:23:4d:a4:7a:0f: 05:b1:b7:64:7b:d1:7a:7e:d1:ea:0b:4b:92:fa:5a:0c:4c:28: 42:4e:23:ec:65:1f:b5:42:af:76:37:02:bb:f3:25:57:0c:66: 7b:7d:32:9f:27:8e:65:2a:a2:5c:69:54:6a:04:69:db:2f:31: e2:ff:66:ea:64:c8:36:64:dd:8e:4e:91:61:31:5f:b6:e2:54: 74:79:c0:8a:c8:41:d7:d8:77:34:99:68:49:2e:51:5c:ac:66: 08:3d:65:22:2c:33:89:88:4a:0d:06:38:2b:30:68:4b:bf:2a: f3:28:69:73:70:81:c0:35:26:b9:ce:96:95:79:ec:41:3b:7f: e3:01:30:97:9a:eb:15:a7:f7:c2:4c:66:27:f1:3e:23:29:23: 96:4a:37:5a:0e:7f:fa:4e:da:1f:19:f5:6d:df:74:13:b2:3d: d2:4f:4e:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TL5UQhtS53s79gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk ODk4YTNiZTYtOGViZC00MmFjLThiZjYtYzNiNzgwZDAzODQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO+a8irR3QGq0GbZ8r0NVJJ6qAKj56fnRTGZ TyN1dxDyQV6tpApR7+2o5ig4ux4vNeinXTJFk3yp+PA2eQVdeXdwTWPtjGbe0Eqj 29CGHP7vB1TJ0gc2L0RIJ6Xlr95gwTQbuzNxVpsuRYvIywjNhSzd4kuafwcrUkv0 3TLcMyNI7zH3X99fnmbNEyDujrF7tgmpmpQz58vuRK3s2cx9atE4jL6wWKxYBtq7 LGJx0ddfQcx3I0BMjto4QRSrQi5pMCOUqBILJBMv5bSzP87NcCFwzToKHYJH28DP zuEBcUEr+PVulwESSZsL6Nt03JjYQLpjdPP5SRFDL8X+h3vM6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNeUiyjLcoQurE3vp29KY7DJX1DhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmFjOTgwZTMtYjhiNS0z NTFjLTg5M2UtNGY1MzU3YTZkZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxinsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwVYKvfLNYK5vCIYkRltgf6EKqci6tSjg8Zr34KYvELQ79D1VxEiaom 0H6UgFyrV64TCtMYEnU2Bw8Jtftk83/6xoGl6rUYEXsP7TKNH7eLDyBt76kjTaR6 DwWxt2R70Xp+0eoLS5L6WgxMKEJOI+xlH7VCr3Y3ArvzJVcMZnt9Mp8njmUqolxp VGoEadsvMeL/ZupkyDZk3Y5OkWExX7biVHR5wIrIQdfYdzSZaEkuUVysZgg9ZSIs M4mISg0GOCswaEu/KvMoaXNwgcA1JrnOlpV57EE7f+MBMJea6xWn98JMZifxPiMp I5ZKN1oOf/pO2h8Z9W3fdBOyPdJPTto= -----END CERTIFICATE-----Generated at Tue Sep 22 10:41:04 2026 by rpki-client