$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0e4ef407-ddf3-3409-ab6c-3d04f1385971.roa File: 0e4ef407-ddf3-3409-ab6c-3d04f1385971.roa (raw, json) Hash identifier: Ai9YPqtX3KHFEt0RQ+Q1JB5OaZ5Xd0xpW/IOxrnW5Ws= Subject key identifier: 18:6D:74:40:48:BB:8D:A3:34:18:95:C3:69:E6:64:5C:5F:EF:DF:73 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584B3B292CD649144ED73B71A0E0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0e4ef407-ddf3-3409-ab6c-3d04f1385971.roa Signing time: Thu 18 Sep 2025 03:03:21 +0000 ROA not before: Thu 18 Sep 2025 03:03:21 +0000 ROA not after: Wed 17 Dec 2025 04:03:21 +0000 asID: 395747 IP address blocks: 198.41.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3b:29:2c:d6:49:14:4e:d7:3b:71:a0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 18 03:03:21 2025 GMT Not After : Dec 17 04:03:21 2025 GMT Subject: CN=1b5ce57b-a30c-4072-992b-047c35927827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:45:41:7d:52:38:ea:6b:ea:14:50:0c:98:23: 51:52:74:3b:bd:63:c2:45:a4:5a:87:aa:ba:57:98: 0a:45:eb:03:a9:41:91:b9:56:d0:70:1f:2f:0d:f3: e1:69:11:ae:ac:de:94:0c:f6:6b:43:d0:5f:3a:fb: e0:20:4c:70:3d:74:6e:ec:bd:2b:fd:fb:25:be:04: 14:fb:4b:a6:e3:63:d1:a4:a3:2b:c4:8c:98:96:cf: 3c:ff:d0:c2:bc:4c:d7:1a:21:9c:77:c5:02:1b:7d: 14:04:86:8c:cb:3d:53:41:c5:31:7b:9c:f3:fa:94: 60:9f:b2:4a:e2:c5:fb:93:27:6b:20:48:99:c6:20: b1:83:ab:40:f8:65:53:d6:87:12:88:a5:a9:6d:e2: 7f:59:fc:3d:d5:55:52:25:e4:4d:b3:72:85:4e:c4: 28:93:d0:35:d8:fc:c6:52:f2:ad:18:84:e2:d3:45: b3:9f:51:28:df:78:66:3e:14:be:ac:9f:ad:16:34: 03:3f:42:b9:99:e9:08:46:e0:14:07:ae:b5:06:a8: 12:33:5a:21:c0:66:6e:db:ba:53:90:af:89:b4:75: fd:dc:b9:85:aa:88:3b:7a:37:4e:11:e2:aa:71:a1: ea:8b:e9:79:03:7c:0b:f1:ec:37:97:5b:3d:c4:70: 03:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:6D:74:40:48:BB:8D:A3:34:18:95:C3:69:E6:64:5C:5F:EF:DF:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0e4ef407-ddf3-3409-ab6c-3d04f1385971.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:bc:8a:7f:2c:f8:92:6f:41:55:02:0e:46:ff:69:db:74:45: 02:7c:77:96:c3:fc:58:e1:fa:ae:ed:91:12:0e:d3:19:14:64: 4a:99:0e:a5:b9:13:59:0f:69:c3:11:c7:6a:da:43:40:96:d9: 31:30:04:41:3d:ec:99:e2:8d:ee:f6:fe:ae:b2:06:c5:c5:b9: 87:87:71:2b:43:ac:2a:19:f5:71:21:04:42:98:ae:f4:8a:8b: 73:98:07:30:78:d4:77:a6:12:ad:bd:99:b4:8c:0f:44:53:4a: 74:d0:c4:11:93:05:16:f0:bb:aa:d9:31:f8:e8:30:5f:d9:12: b7:47:76:d8:c0:37:6d:fc:26:6a:e9:bf:ad:22:ef:8b:f9:59: f1:93:47:3d:81:f5:46:aa:e3:84:b8:aa:63:5a:9c:44:2e:d3: e5:16:e1:1f:22:4d:9a:27:18:0b:cf:db:b3:96:25:80:22:56: c6:99:6b:6b:99:41:b0:7b:c9:34:c9:c5:39:64:4c:b4:2c:dd: bf:d1:62:c0:e1:6e:43:4e:9b:35:85:d3:78:83:46:e4:4a:63: 2d:ec:ff:26:a3:41:41:7b:28:6d:d5:ad:f6:e0:c9:0e:b7:7c: 90:e4:26:20:b4:cd:c5:a7:a2:72:9d:2d:7f:83:35:2b:c9:68: 4c:29:7d:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs7KSzWSRRO1ztxoOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDkxODAzMDMyMVoXDTI1MTIxNzA0MDMyMVowLzEtMCsGA1UEAxMk MWI1Y2U1N2ItYTMwYy00MDcyLTk5MmItMDQ3YzM1OTI3ODI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkVBfVI46mvqFFAMmCNRUnQ7vWPCRaRah6q6 V5gKResDqUGRuVbQcB8vDfPhaRGurN6UDPZrQ9BfOvvgIExwPXRu7L0r/fslvgQU +0um42PRpKMrxIyYls88/9DCvEzXGiGcd8UCG30UBIaMyz1TQcUxe5zz+pRgn7JK 4sX7kydrIEiZxiCxg6tA+GVT1ocSiKWpbeJ/Wfw91VVSJeRNs3KFTsQok9A12PzG UvKtGITi00Wzn1Eo33hmPhS+rJ+tFjQDP0K5mekIRuAUB661BqgSM1ohwGZu27pT kK+JtHX93LmFqog7ejdOEeKqcaHqi+l5A3wL8ew3l1s9xHAD0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhtdEBIu42jNBiVw2nmZFxf799zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGU0ZWY0MDctZGRmMy0z NDA5LWFiNmMtM2QwNGYxMzg1OTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAximBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMK8in8s+JJvQVUCDkb/adt0RQJ8d5bD/Fjh+q7tkRIO0xkUZEqZDqW5 E1kPacMRx2raQ0CW2TEwBEE97Jnije72/q6yBsXFuYeHcStDrCoZ9XEhBEKYrvSK i3OYBzB41HemEq29mbSMD0RTSnTQxBGTBRbwu6rZMfjoMF/ZErdHdtjAN238Jmrp v60i74v5WfGTRz2B9Uaq44S4qmNanEQu0+UW4R8iTZonGAvP27OWJYAiVsaZa2uZ QbB7yTTJxTlkTLQs3b/RYsDhbkNOmzWF03iDRuRKYy3s/yajQUF7KG3VrfbgyQ63 fJDkJiC0zcWnonKdLX+DNSvJaEwpfVs= -----END CERTIFICATE-----Generated at Mon Oct 20 02:40:42 2025 by rpki-client