$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/caed8d92-1433-37e7-bdb4-e3c6a36ce79a.roa File: caed8d92-1433-37e7-bdb4-e3c6a36ce79a.roa (raw, json) Hash identifier: /wWJ/ykNSbn5pT9PvfE3XGbB4p404YTdPb17Fqe5Qwg= Subject key identifier: 6E:89:69:2F:09:93:40:0D:56:8A:58:63:6B:09:CC:50:71:B8:DA:E4 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584DA2800BE24F0FD0C9C840A300 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/caed8d92-1433-37e7-bdb4-e3c6a36ce79a.roa Signing time: Sun 26 Apr 2026 13:00:30 +0000 ROA not before: Sun 26 Apr 2026 13:00:30 +0000 ROA not after: Sat 25 Jul 2026 13:00:30 +0000 asID: 13335 IP address blocks: 198.41.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a2:80:0b:e2:4f:0f:d0:c9:c8:40:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 26 13:00:30 2026 GMT Not After : Jul 25 13:00:30 2026 GMT Subject: CN=426ce4c1-3817-46a0-ae20-068e168ac6d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:08:2e:cc:ed:0b:e3:b9:c8:30:dc:bd:28:d4: c7:04:55:75:e4:02:95:19:e3:b4:bd:5c:7c:b5:6f: 10:98:80:9f:31:bc:54:26:f9:ef:d6:41:cd:7a:72: 09:2f:03:72:78:a2:d9:ba:9a:20:a9:62:8f:a0:c1: 69:35:af:92:53:0f:a1:79:82:5a:5a:91:c5:f8:62: 98:be:ce:98:f5:ac:68:e2:d0:fd:a6:b0:de:80:a3: 53:ef:a1:1a:b5:8b:72:19:0f:51:8e:6f:07:48:40: 30:9f:81:f3:73:dd:82:17:39:53:b1:38:35:c5:b8: 3b:c4:51:d7:8b:9e:e1:6f:05:2a:e9:8a:42:0e:93: 3d:48:c4:cc:20:46:f2:d7:7f:cd:f8:5c:c3:6e:8e: 05:e5:d8:d8:fb:13:56:41:c5:3a:7e:00:27:27:81: b5:59:a5:73:39:05:f9:4b:d9:55:18:5c:c5:f3:36: da:d3:9c:ab:2a:65:d2:bc:25:ef:b1:bd:84:21:b6: 0a:4d:df:0c:c4:8a:64:9a:0d:c5:c1:f7:be:23:f4: 58:92:2a:d7:5d:dc:8e:3e:e4:c5:37:2a:9d:46:49: ec:f4:7b:e6:6f:fd:0b:db:85:aa:78:8a:4c:03:df: 44:4d:9b:e3:7a:fe:24:f2:aa:74:25:e4:af:2a:97: 2f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:89:69:2F:09:93:40:0D:56:8A:58:63:6B:09:CC:50:71:B8:DA:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/caed8d92-1433-37e7-bdb4-e3c6a36ce79a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:5a:04:34:1b:c0:97:20:95:94:6d:d4:b4:41:ed:e1:11:49: d2:52:c4:b5:1f:ce:7b:c0:2e:4f:a5:98:6f:f2:bc:95:fd:07: 93:32:0a:bc:2c:01:ed:e3:08:59:d2:91:a9:23:eb:b6:e9:fe: 69:28:49:cd:c8:ae:d8:93:5f:d9:0d:f4:36:8b:fa:f1:b8:82: a0:88:18:f3:20:cc:c6:1b:fe:ae:c5:fa:07:87:75:e0:cd:f2: e2:13:77:be:9e:f7:e6:dd:27:76:1f:a1:3b:26:4e:12:84:e0: c5:8f:57:09:3e:cc:71:6a:a6:8a:e3:74:dd:d6:76:cb:74:08: b7:af:56:48:ac:9d:71:99:23:b5:49:00:cf:35:9e:32:0a:d6: 9b:f2:3f:30:fe:7c:11:e5:df:69:f4:26:1c:1c:c4:91:00:7f: 6a:01:3a:aa:f4:05:ac:08:64:7b:7f:ab:fd:fb:68:0a:db:fb: 25:73:ea:0f:96:0f:37:9f:4b:db:aa:a5:27:67:f5:a8:52:f5: ac:79:b1:09:44:d5:a8:0a:21:b0:aa:78:bf:70:6b:07:24:a5: 62:42:f8:e4:c8:9c:ce:63:5d:1e:0a:2d:4d:a3:83:49:89:64: 5a:49:d2:37:34:86:09:b8:0b:b0:00:01:dd:57:5e:d6:15:63: c2:f3:01:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2igAviTw/QychAowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQyNjEzMDAzMFoXDTI2MDcyNTEzMDAzMFowLzEtMCsGA1UEAxMk NDI2Y2U0YzEtMzgxNy00NmEwLWFlMjAtMDY4ZTE2OGFjNmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQguzO0L47nIMNy9KNTHBFV15AKVGeO0vVx8 tW8QmICfMbxUJvnv1kHNenIJLwNyeKLZupogqWKPoMFpNa+SUw+heYJaWpHF+GKY vs6Y9axo4tD9prDegKNT76EatYtyGQ9Rjm8HSEAwn4Hzc92CFzlTsTg1xbg7xFHX i57hbwUq6YpCDpM9SMTMIEby13/N+FzDbo4F5djY+xNWQcU6fgAnJ4G1WaVzOQX5 S9lVGFzF8zba05yrKmXSvCXvsb2EIbYKTd8MxIpkmg3Fwfe+I/RYkirXXdyOPuTF NyqdRkns9Hvmb/0L24WqeIpMA99ETZvjev4k8qp0JeSvKpcvzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6JaS8Jk0ANVopYY2sJzFBxuNrkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2FlZDhkOTItMTQzMy0z N2U3LWJkYjQtZTNjNmEzNmNlNzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCximEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALVaBDQbwJcglZRt1LRB7eERSdJSxLUfznvALk+lmG/yvJX9B5MyCrws Ae3jCFnSkakj67bp/mkoSc3IrtiTX9kN9DaL+vG4gqCIGPMgzMYb/q7F+geHdeDN 8uITd76e9+bdJ3YfoTsmThKE4MWPVwk+zHFqporjdN3Wdst0CLevVkisnXGZI7VJ AM81njIK1pvyPzD+fBHl32n0JhwcxJEAf2oBOqr0BawIZHt/q/37aArb+yVz6g+W DzefS9uqpSdn9ahS9ax5sQlE1agKIbCqeL9wawckpWJC+OTInM5jXR4KLU2jg0mJ ZFpJ0jc0hgm4C7AAAd1XXtYVY8LzAbg= -----END CERTIFICATE-----Generated at Sat May 9 08:10:08 2026 by rpki-client