$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d1362f30-4f26-32bd-a895-daa0f6e40413.roa File: d1362f30-4f26-32bd-a895-daa0f6e40413.roa (raw, json) Hash identifier: JIoJaSgnXPJWV07ZuGeq9LQVrtlDSZgYpFJfjlV2DN8= Subject key identifier: 64:F8:18:7C:9D:AF:A0:50:76:C0:A6:BD:DC:C0:DF:2A:F2:B7:8C:FA Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EE423319A2417BCEDD06D44C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d1362f30-4f26-32bd-a895-daa0f6e40413.roa Signing time: Wed 19 Aug 2026 18:03:44 +0000 ROA not before: Wed 19 Aug 2026 18:03:44 +0000 ROA not after: Sat 27 Nov 2027 05:00:00 +0000 asID: 13335 IP address blocks: 198.41.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:31:9a:24:17:bc:ed:d0:6d:44:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 19 18:03:44 2026 GMT Not After : Nov 27 05:00:00 2027 GMT Subject: CN=cf1ffeee-7a4c-4d8b-a020-c678ec36547e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:96:c5:3b:bf:a3:c1:ce:b7:b1:8e:8a:23:2d: 80:1d:a4:a5:34:3b:da:87:a5:87:cb:62:a5:c8:3d: 0a:b8:d6:79:6f:95:d0:b6:30:26:ff:54:9f:1d:a7: 13:53:a8:a6:aa:2b:47:b1:23:28:94:1f:56:84:3d: cd:68:59:67:1b:1f:aa:ee:71:f3:79:7d:ef:fd:76: 76:8c:c3:e2:09:e0:c0:5e:42:94:b9:dd:c0:15:90: 2c:d3:7e:c9:2f:db:76:c1:1d:10:84:1a:de:b4:3e: 07:77:1a:11:86:7c:ad:25:54:e0:88:95:8b:24:16: a0:4a:a2:94:3c:03:06:e4:bd:00:62:9b:fc:10:31: 9c:03:e7:ce:f7:66:26:60:73:d7:8d:9b:c3:aa:03: 70:8f:6b:ab:99:0d:2a:f2:fa:ba:7a:88:ac:d8:cd: ca:9a:24:58:69:e0:2e:f6:51:e9:6e:1c:1e:41:f7: be:3f:4f:df:10:97:40:47:a5:9b:86:fb:49:d3:96: f4:be:04:fc:1f:93:6f:cd:6f:ff:f7:fd:c5:a7:a7: 83:16:65:b5:3b:41:d1:d6:7c:2b:ff:56:5e:d7:f4: bb:aa:69:e7:ad:79:18:2a:13:84:c8:90:f0:5e:d8: 68:b7:60:41:40:21:be:bc:0f:62:8c:32:ae:29:3b: af:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F8:18:7C:9D:AF:A0:50:76:C0:A6:BD:DC:C0:DF:2A:F2:B7:8C:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d1362f30-4f26-32bd-a895-daa0f6e40413.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:9b:f0:37:64:9b:aa:a6:cc:51:4e:88:79:66:16:3b:f5:f6: 8e:4f:39:87:00:50:48:2b:ba:77:ce:ed:fa:dc:6d:25:20:46: 1a:47:85:91:22:8b:88:a8:7d:30:29:88:59:c4:7c:9d:1b:ee: 3e:a1:89:a4:9c:95:35:30:74:bc:65:6a:d6:23:f3:9c:e8:bf: 23:6c:9e:bb:d2:68:68:cf:6d:0b:82:21:31:b9:13:32:ab:9c: 77:6b:78:b6:f5:f4:96:aa:c9:ab:b5:2a:e1:a8:7c:ca:4d:ed: 35:f3:bc:12:8a:53:a4:35:51:54:e7:56:b1:2a:fc:49:a3:77: 18:2e:d7:95:4c:84:fc:bc:68:6f:40:7e:58:fc:43:b6:5e:55: 8c:3d:f1:3f:61:46:b5:64:ee:e1:e9:9b:98:13:ca:65:59:cf: ad:39:fe:aa:16:6c:9c:5e:cf:e4:f5:c4:73:23:a4:ae:c2:46: de:85:ba:7c:5d:9c:9b:6f:77:c3:8b:8a:b7:b2:13:8f:8e:0b: e7:b3:05:8c:6f:d7:f3:75:b5:12:d0:aa:3c:ce:f6:f9:5d:9e: db:7f:a2:09:98:bc:18:46:19:3a:90:f3:71:f7:43:0c:d0:e2: d1:db:d5:aa:61:dd:04:59:eb:f7:04:f4:48:30:a2:b8:8e:bd: ce:1b:ac:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kIzGaJBe87dBtRMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgxOTE4MDM0NFoXDTI3MTEyNzA1MDAwMFowLzEtMCsGA1UEAxMk Y2YxZmZlZWUtN2E0Yy00ZDhiLWEwMjAtYzY3OGVjMzY1NDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpbFO7+jwc63sY6KIy2AHaSlNDvah6WHy2Kl yD0KuNZ5b5XQtjAm/1SfHacTU6imqitHsSMolB9WhD3NaFlnGx+q7nHzeX3v/XZ2 jMPiCeDAXkKUud3AFZAs037JL9t2wR0QhBretD4HdxoRhnytJVTgiJWLJBagSqKU PAMG5L0AYpv8EDGcA+fO92YmYHPXjZvDqgNwj2urmQ0q8vq6eois2M3KmiRYaeAu 9lHpbhweQfe+P0/fEJdAR6WbhvtJ05b0vgT8H5NvzW//9/3Fp6eDFmW1O0HR1nwr /1Ze1/S7qmnnrXkYKhOEyJDwXthot2BBQCG+vA9ijDKuKTuvIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGT4GHydr6BQdsCmvdzA3yryt4z6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDEzNjJmMzAtNGYyNi0z MmJkLWE4OTUtZGFhMGY2ZTQwNDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxinVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWb8Ddkm6qmzFFOiHlmFjv19o5POYcAUEgrunfO7frcbSUgRhpHhZEi i4iofTApiFnEfJ0b7j6hiaSclTUwdLxlatYj85zovyNsnrvSaGjPbQuCITG5EzKr nHdreLb19Jaqyau1KuGofMpN7TXzvBKKU6Q1UVTnVrEq/Emjdxgu15VMhPy8aG9A flj8Q7ZeVYw98T9hRrVk7uHpm5gTymVZz605/qoWbJxez+T1xHMjpK7CRt6Funxd nJtvd8OLireyE4+OC+ezBYxv1/N1tRLQqjzO9vldntt/ogmYvBhGGTqQ83H3QwzQ 4tHb1aph3QRZ6/cE9EgworiOvc4brIg= -----END CERTIFICATE-----Generated at Tue Sep 22 11:03:22 2026 by rpki-client