$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/efe69591-9077-3472-b000-4469aae43941.roa File: efe69591-9077-3472-b000-4469aae43941.roa (raw, json) Hash identifier: ChCqUU4yRKiKfrR/8TJsTB1MID1QrpEZPSywkdBDKQE= Subject key identifier: 34:0F:95:37:C7:87:85:B4:B7:E1:DD:E1:3C:5F:E9:AE:AB:C0:6B:16 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1927F1E28BEF75CAE4F8FC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/efe69591-9077-3472-b000-4469aae43941.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 198.41.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:7f:1e:28:be:f7:5c:ae:4f:8f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=034e68bd-4f22-47a0-afc3-c7b64d411193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:53:18:02:63:58:2c:a8:98:a4:96:38:81:64: 58:38:0c:19:59:ca:4d:9b:ee:2a:8f:ff:79:ab:98: ef:e6:fc:58:f2:23:93:46:f0:bf:cb:cb:5d:6f:7d: 09:58:d1:45:96:28:ed:eb:e6:de:b2:cc:b4:d9:92: 22:b4:b3:a3:11:04:3a:f7:bb:c0:49:63:4a:98:40: 6f:b7:e1:da:94:e6:f0:7c:d4:d1:6c:38:17:13:9e: 4e:74:92:33:16:83:5f:da:6d:81:7f:4d:ff:fa:ae: f1:d0:77:73:7e:46:a2:a2:8f:3a:93:a4:aa:66:7b: 87:4d:8f:b7:a0:42:ef:c6:63:91:45:e8:46:0b:a8: 4e:4d:65:cb:31:1c:60:a3:07:37:f5:77:d8:aa:a5: d0:d2:86:f1:a7:f5:fb:78:1e:ff:18:f7:65:4b:4f: c7:71:ad:34:bc:f5:3d:bf:a1:9a:65:11:8b:8b:da: 3a:84:32:3c:b4:c6:64:05:80:92:04:18:34:9a:ef: d0:c8:78:f9:68:1c:a7:ab:a4:28:91:22:e7:95:9c: 50:4e:ec:bd:99:2d:a1:b7:e0:dc:1b:f0:94:c4:d7: fb:90:36:f8:42:d2:4b:35:59:c5:43:bf:b2:03:19: 6c:a7:11:ce:a3:70:f2:6c:d0:65:5a:09:9a:71:41: 56:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:0F:95:37:C7:87:85:B4:B7:E1:DD:E1:3C:5F:E9:AE:AB:C0:6B:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/efe69591-9077-3472-b000-4469aae43941.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:04:6e:31:5b:66:2c:41:b4:f1:a3:4e:43:a0:1c:c7:27:80: 1a:d6:03:34:00:2e:21:92:4c:a8:41:f3:26:c8:0f:8d:55:1a: ed:93:61:f3:6e:ff:0e:9f:80:85:12:be:26:10:52:95:44:4d: 83:58:8e:ef:28:f2:b0:05:cd:00:f2:1b:85:ac:d8:64:5e:14: 92:d3:89:75:cd:a7:58:ab:6d:5c:54:6d:e5:09:16:d8:09:cb: 9e:8a:36:0d:ce:e7:0d:29:61:67:2c:92:48:4b:a4:c3:b0:17: 07:7f:c5:f7:bc:60:02:cd:bb:c8:9d:da:dd:b2:12:65:53:9d: de:27:3b:09:a2:8d:f3:cc:a1:0b:a4:88:18:1d:78:8e:26:7d: 9f:9c:db:c1:3b:0b:39:79:0c:1d:12:a1:36:3c:3c:c1:e6:ab: 71:0c:cb:4e:1d:fe:05:73:d0:b3:62:ae:8b:86:ce:21:59:4b: 50:20:77:49:b2:90:c9:05:ae:24:bd:97:87:c1:d4:a4:93:9f: c6:cf:17:07:cd:f1:2a:4f:a6:ac:5b:a3:9c:86:25:be:1e:85: 86:e8:18:f1:d6:de:f7:c6:f0:2b:0e:f1:3c:57:d4:42:93:81: b3:d2:f3:1e:df:f2:7d:e6:f6:d7:29:bf:79:16:4d:e8:82:e4: ae:af:f7:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkn8eKL73XK5Pj8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk MDM0ZTY4YmQtNGYyMi00N2EwLWFmYzMtYzdiNjRkNDExMTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51MYAmNYLKiYpJY4gWRYOAwZWcpNm+4qj/95 q5jv5vxY8iOTRvC/y8tdb30JWNFFlijt6+bessy02ZIitLOjEQQ697vASWNKmEBv t+HalObwfNTRbDgXE55OdJIzFoNf2m2Bf03/+q7x0Hdzfkaioo86k6SqZnuHTY+3 oELvxmORRehGC6hOTWXLMRxgowc39XfYqqXQ0obxp/X7eB7/GPdlS0/Hca00vPU9 v6GaZRGLi9o6hDI8tMZkBYCSBBg0mu/QyHj5aBynq6QokSLnlZxQTuy9mS2ht+Dc G/CUxNf7kDb4QtJLNVnFQ7+yAxlspxHOo3DybNBlWgmacUFWvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQPlTfHh4W0t+Hd4Txf6a6rwGsWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWZlNjk1OTEtOTA3Ny0z NDcyLWIwMDAtNDQ2OWFhZTQzOTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxinpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEEbjFbZixBtPGjTkOgHMcngBrWAzQALiGSTKhB8ybID41VGu2TYfNu /w6fgIUSviYQUpVETYNYju8o8rAFzQDyG4Ws2GReFJLTiXXNp1irbVxUbeUJFtgJ y56KNg3O5w0pYWcskkhLpMOwFwd/xfe8YALNu8id2t2yEmVTnd4nOwmijfPMoQuk iBgdeI4mfZ+c28E7Czl5DB0SoTY8PMHmq3EMy04d/gVz0LNirouGziFZS1Agd0my kMkFriS9l4fB1KSTn8bPFwfN8SpPpqxbo5yGJb4ehYboGPHW3vfG8CsO8TxX1EKT gbPS8x7f8n3m9tcpv3kWTeiC5K6v9xI= -----END CERTIFICATE-----Generated at Sat Nov 1 10:01:32 2025 by rpki-client