$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bb16decf-65a9-3da2-84fe-f4ec2bcb26e0.roa File: bb16decf-65a9-3da2-84fe-f4ec2bcb26e0.roa (raw, json) Hash identifier: k8lF5zxkz/AGh+GxHDtv7v6HYHtb5KuKmUoeE+BpcMQ= Subject key identifier: 89:CD:A9:17:06:32:C5:96:93:0D:7F:AE:04:E3:3D:4F:8D:65:82:09 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF44CC6DB4E1A7D70A377A280 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bb16decf-65a9-3da2-84fe-f4ec2bcb26e0.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 198.41.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:c6:db:4e:1a:7d:70:a3:77:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=bf5bf04c-b8a5-4439-91ca-574e866dbe00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:47:d4:53:89:e8:a1:af:1d:1b:96:b5:ea:16: dd:15:eb:51:71:fd:d5:33:b7:6d:a6:ad:fb:47:57: ab:b8:f5:3f:3c:bc:09:68:84:fa:a8:fb:74:f3:30: c0:fe:0a:bb:9c:fa:42:56:b4:01:b3:99:7c:6b:64: 41:13:6d:e8:f1:48:6f:11:aa:6b:de:ae:34:23:cb: 7f:96:00:a3:47:cc:c8:d3:b1:4d:f2:49:0e:35:b2: 02:94:55:49:40:ab:4a:4f:04:c1:79:5f:a0:15:f9: f6:55:0c:84:4b:76:2f:e3:25:e8:15:13:5c:c9:ff: c9:3f:ba:9c:44:90:ad:3a:53:50:c5:04:7d:a1:b7: 41:3e:98:8b:35:f9:3f:f7:d6:ac:e4:68:70:ca:11: 02:73:61:c6:43:4f:89:c3:24:64:0b:98:82:fa:2b: 26:4d:09:c4:a4:7b:88:5b:b7:95:96:91:9f:3f:23: f9:61:08:b5:68:b5:d4:db:39:53:08:dd:d2:39:68: 72:8e:49:08:93:21:4e:ca:dd:08:32:cf:c2:e0:ec: 7c:27:fd:5d:b3:ed:c7:aa:49:c5:36:90:c6:07:d4: 3e:12:b1:81:69:e7:92:4c:ae:bc:6b:1e:b3:2d:e6: 53:fe:52:b4:22:7a:37:4c:1d:04:80:a2:85:ad:ff: 52:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:CD:A9:17:06:32:C5:96:93:0D:7F:AE:04:E3:3D:4F:8D:65:82:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bb16decf-65a9-3da2-84fe-f4ec2bcb26e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:5a:b9:ac:00:29:cb:d8:bf:f9:83:11:3c:73:35:5f:4c:7d: 98:99:6b:58:e1:77:23:d3:ff:83:0d:2c:0f:4d:5f:b2:25:2d: 01:75:05:d4:c1:ee:fa:8d:f8:b4:7e:43:ac:ef:76:9d:53:b4: 88:03:8d:6f:f5:00:4b:29:48:6b:a9:a7:20:d7:17:cf:55:fc: cd:da:85:15:a5:dd:3c:ca:77:31:60:f9:5b:ee:f4:74:2e:30: 4f:56:4a:1b:d9:16:48:71:0d:93:9f:3f:22:61:a4:5a:7e:61: ce:5b:23:2e:6d:d6:e8:7b:e3:c9:f5:3f:20:97:00:ad:cb:b3: 93:d1:9a:d7:0f:d4:d7:21:0a:1a:82:3a:4d:60:f0:14:e3:b2: 9f:3e:84:05:41:b5:76:3d:d1:41:dd:9f:9c:3a:2d:b8:82:73: 10:0c:b2:74:40:e7:37:5a:59:19:c9:f4:6d:c7:0e:b8:6c:02: 3b:d1:b5:e4:71:8e:8d:39:f6:49:15:e5:75:28:07:6a:d6:e3: bf:fe:08:95:73:93:5b:d3:b3:d4:a8:7a:14:26:6a:a0:40:8e: 0b:17:5f:d6:cb:2b:8d:a2:68:9e:3b:2a:4e:1c:c7:2a:15:a8: 0e:9f:8f:23:8e:d2:3a:d5:94:35:7a:59:9f:9f:0e:57:b3:b0: 96:d0:1d:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TMbbThp9cKN3ooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk YmY1YmYwNGMtYjhhNS00NDM5LTkxY2EtNTc0ZTg2NmRiZTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkfUU4nooa8dG5a16hbdFetRcf3VM7dtpq37 R1eruPU/PLwJaIT6qPt08zDA/gq7nPpCVrQBs5l8a2RBE23o8UhvEapr3q40I8t/ lgCjR8zI07FN8kkONbIClFVJQKtKTwTBeV+gFfn2VQyES3Yv4yXoFRNcyf/JP7qc RJCtOlNQxQR9obdBPpiLNfk/99as5GhwyhECc2HGQ0+JwyRkC5iC+ismTQnEpHuI W7eVlpGfPyP5YQi1aLXU2zlTCN3SOWhyjkkIkyFOyt0IMs/C4Ox8J/1ds+3HqknF NpDGB9Q+ErGBaeeSTK68ax6zLeZT/lK0Ino3TB0EgKKFrf9SswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInNqRcGMsWWkw1/rgTjPU+NZYIJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmIxNmRlY2YtNjVhOS0z ZGEyLTg0ZmUtZjRlYzJiY2IyNmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxinnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENauawAKcvYv/mDETxzNV9MfZiZa1jhdyPT/4MNLA9NX7IlLQF1BdTB 7vqN+LR+Q6zvdp1TtIgDjW/1AEspSGuppyDXF89V/M3ahRWl3TzKdzFg+Vvu9HQu ME9WShvZFkhxDZOfPyJhpFp+Yc5bIy5t1uh748n1PyCXAK3Ls5PRmtcP1NchChqC Ok1g8BTjsp8+hAVBtXY90UHdn5w6LbiCcxAMsnRA5zdaWRnJ9G3HDrhsAjvRteRx jo059kkV5XUoB2rW47/+CJVzk1vTs9SoehQmaqBAjgsXX9bLK42iaJ47Kk4cxyoV qA6fjyOO0jrVlDV6WZ+fDlezsJbQHSI= -----END CERTIFICATE-----Generated at Tue Sep 1 01:44:19 2026 by rpki-client