$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ff906c3e-9bdb-33f8-bef4-6c8dcb46f4f3.roa File: ff906c3e-9bdb-33f8-bef4-6c8dcb46f4f3.roa (raw, json) Hash identifier: EBb67LZ56HzOrwpVpAfgCX50xeE21yupadzXlcRPHGM= Subject key identifier: BA:17:30:AC:A9:B5:20:04:41:69:41:CE:EA:73:DA:BA:BD:93:D4:8C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EE423372B53A1FC9C9C1036C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ff906c3e-9bdb-33f8-bef4-6c8dcb46f4f3.roa Signing time: Wed 19 Aug 2026 18:03:46 +0000 ROA not before: Wed 19 Aug 2026 18:03:46 +0000 ROA not after: Sat 27 Nov 2027 05:00:00 +0000 asID: 202623 IP address blocks: 198.41.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:37:2b:53:a1:fc:9c:9c:10:36:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 19 18:03:46 2026 GMT Not After : Nov 27 05:00:00 2027 GMT Subject: CN=6c8d0ddf-9b0e-42c9-b4d2-509c4bb436de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e6:f1:25:50:22:0f:40:e2:bb:26:0d:f8:83: 5d:e3:2e:4c:6c:92:95:f0:6f:92:38:0b:ed:bb:b1: 5d:90:21:1d:0f:30:ec:1f:f0:16:66:00:25:41:2a: a7:b6:75:cd:fb:61:70:4a:04:27:f9:ca:c6:5c:2d: 84:ec:9d:61:bd:ad:83:68:65:b1:35:cf:d9:04:6e: 21:7a:e0:2a:5c:82:9c:4a:1b:69:50:2d:06:e1:10: 5c:52:5d:3c:e4:8b:09:3a:4b:2a:17:56:45:f1:af: 20:40:0e:77:e0:5f:9f:42:c8:7c:03:6b:96:d4:a4: 9b:4e:03:5b:16:da:22:33:92:49:4c:53:39:e6:16: 7c:ee:6e:9b:31:b7:08:55:62:9e:7b:c4:04:a5:c5: 8f:1d:5e:d9:44:8e:cd:f1:f8:0a:de:a4:4f:bb:98: 63:0d:0c:25:c1:09:93:50:8b:a3:68:35:8b:74:54: 93:ea:fe:75:49:62:7a:41:4f:cd:87:25:2b:37:2e: 5e:ae:69:b5:a8:b4:7d:ec:36:0c:bf:8e:68:a9:e1: 2d:da:63:14:9d:e2:f1:d5:37:2d:bf:86:54:28:4a: a3:13:5e:5a:36:86:9c:0a:da:da:81:ec:7a:de:39: 36:ff:3e:05:2e:bd:12:c2:82:d2:96:7f:81:fa:66: 80:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:17:30:AC:A9:B5:20:04:41:69:41:CE:EA:73:DA:BA:BD:93:D4:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ff906c3e-9bdb-33f8-bef4-6c8dcb46f4f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:e4:7e:ff:fe:3f:de:7b:47:9f:c3:d2:d5:5a:a8:dd:d1:b4: 52:b0:44:75:96:b0:b1:55:08:f8:a0:51:6b:cf:61:5d:65:0b: 91:9d:4a:c2:be:d1:c2:89:13:22:35:14:0d:e2:86:db:d8:fe: 88:36:c4:0b:5f:f0:30:3a:b0:17:36:b3:75:0e:75:01:20:09: e7:34:a1:65:71:75:29:a8:5c:2c:29:9a:31:1d:c0:65:88:98: 40:0b:df:b7:2b:75:33:ea:8d:ef:2b:48:43:11:d4:f7:eb:c1: b2:1e:4c:e7:9f:68:5d:c5:ab:4e:8b:98:9c:36:5f:2a:5d:e8: f6:bd:70:76:71:7c:37:f5:a5:79:ad:67:86:ed:6f:3f:4b:dd: 01:ab:aa:78:25:d1:00:88:e3:21:e3:06:d9:77:a6:9b:ed:d6: 9c:0a:bc:75:90:2a:6f:23:57:a2:bf:59:e3:73:65:5d:f0:64: df:50:27:0f:5f:fe:72:a4:a0:61:be:b3:bd:b7:32:8b:c6:e6: 57:d7:67:f2:6b:ed:b5:02:a1:8c:4d:2f:13:00:e6:78:bd:14: fc:96:a0:8c:59:35:d7:ae:b3:ae:25:35:dc:91:1f:18:1f:17: 4d:9b:c5:9d:55:d4:78:b6:38:01:c2:cd:11:ac:8c:37:74:62: e4:72:ac:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kIzcrU6H8nJwQNsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgxOTE4MDM0NloXDTI3MTEyNzA1MDAwMFowLzEtMCsGA1UEAxMk NmM4ZDBkZGYtOWIwZS00MmM5LWI0ZDItNTA5YzRiYjQzNmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuObxJVAiD0DiuyYN+INd4y5MbJKV8G+SOAvt u7FdkCEdDzDsH/AWZgAlQSqntnXN+2FwSgQn+crGXC2E7J1hva2DaGWxNc/ZBG4h euAqXIKcShtpUC0G4RBcUl085IsJOksqF1ZF8a8gQA534F+fQsh8A2uW1KSbTgNb FtoiM5JJTFM55hZ87m6bMbcIVWKee8QEpcWPHV7ZRI7N8fgK3qRPu5hjDQwlwQmT UIujaDWLdFST6v51SWJ6QU/NhyUrNy5ermm1qLR97DYMv45oqeEt2mMUneLx1Tct v4ZUKEqjE15aNoacCtragex63jk2/z4FLr0SwoLSln+B+maAqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLoXMKyptSAEQWlBzupz2rq9k9SMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmY5MDZjM2UtOWJkYi0z M2Y4LWJlZjQtNmM4ZGNiNDZmNGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCximYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzkfv/+P957R5/D0tVaqN3RtFKwRHWWsLFVCPigUWvPYV1lC5GdSsK+ 0cKJEyI1FA3ihtvY/og2xAtf8DA6sBc2s3UOdQEgCec0oWVxdSmoXCwpmjEdwGWI mEAL37crdTPqje8rSEMR1PfrwbIeTOefaF3Fq06LmJw2Xypd6Pa9cHZxfDf1pXmt Z4btbz9L3QGrqngl0QCI4yHjBtl3ppvt1pwKvHWQKm8jV6K/WeNzZV3wZN9QJw9f /nKkoGG+s723MovG5lfXZ/Jr7bUCoYxNLxMA5ni9FPyWoIxZNdeus64lNdyRHxgf F02bxZ1V1Hi2OAHCzRGsjDd0YuRyrEg= -----END CERTIFICATE-----Generated at Tue Sep 22 15:10:22 2026 by rpki-client