$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1668c26f-f5a6-3860-82eb-769d959387f4.roa File: 1668c26f-f5a6-3860-82eb-769d959387f4.roa (raw, json) Hash identifier: Syvtw7vkLzZTFghZpofPW5wJHedmZ7bABpl319/iPNg= Subject key identifier: B1:40:DC:1A:54:66:AE:1D:BD:AB:F5:54:C9:04:EA:48:F3:32:47:DE Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD7D1383C2634763B3B09FE80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1668c26f-f5a6-3860-82eb-769d959387f4.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 132892 IP address blocks: 198.41.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:38:3c:26:34:76:3b:3b:09:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=6524f7f2-77ae-4c2a-8538-436a404b1f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:30:2d:0f:4e:55:05:ff:84:18:39:c4:ca:24: c8:f7:cc:8f:81:29:bc:a1:e1:3c:ad:2f:f5:95:b7: 4d:7b:4f:bb:ac:58:e8:27:00:67:74:c3:40:ee:59: 61:d5:0c:2f:60:b4:a2:1c:db:eb:ba:7e:7d:b0:4c: 1e:8d:30:78:e8:54:f2:38:e2:1c:e8:b3:af:ee:e4: a5:0b:94:96:94:d7:fe:65:cb:9c:f9:5a:49:45:84: 61:30:c7:95:12:18:18:80:71:38:e3:da:e5:70:30: 67:5b:7f:f6:d4:4c:54:2a:2c:31:d5:10:bc:14:fd: 37:5e:ae:d6:72:14:86:5e:85:77:ac:ee:06:8b:27: e8:6a:b3:31:17:5c:e5:18:4a:1d:fe:f8:b1:37:68: 16:d4:c6:98:6c:ff:23:96:bd:4a:7a:bf:27:00:eb: c2:0d:42:f3:85:f5:0c:af:2b:9f:42:71:91:9c:99: 46:84:80:4d:0c:c0:ef:04:cd:29:93:0e:22:84:ce: 13:5a:2f:ae:69:85:85:2a:f5:e6:1f:76:b3:8c:21: 77:45:49:68:e3:2f:1b:dc:1c:88:b7:2a:e7:01:6a: 37:22:f0:95:00:87:91:35:6f:b9:52:b1:9d:51:6f: e8:9e:09:6e:41:8a:8b:f9:62:a0:0c:f7:48:57:fa: b4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:40:DC:1A:54:66:AE:1D:BD:AB:F5:54:C9:04:EA:48:F3:32:47:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1668c26f-f5a6-3860-82eb-769d959387f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:28:66:b3:e4:1a:47:5c:b6:31:cf:c4:7e:a8:7b:82:0d:eb: 8d:e7:4b:eb:b2:5d:10:d5:df:9a:bf:e9:19:de:70:ac:1e:79: 43:9f:9f:e1:72:6f:31:db:66:f1:b4:e4:5d:bb:bc:e3:0d:c6: 6c:c6:c4:a2:ee:13:0f:a8:96:b8:6d:9a:60:2d:e7:e2:a4:59: 54:33:84:8b:6f:ea:f0:33:15:17:a6:5c:b4:2f:e3:cd:51:94: 3b:ed:29:37:a0:5b:78:fc:fd:3c:5c:6c:e2:4a:cb:f1:00:5e: 6a:d8:17:94:b9:f4:90:f8:bc:f6:a0:b2:6a:d0:cd:72:ea:71: 8e:be:80:5e:52:15:e6:c0:2a:60:e2:4a:3c:70:00:04:ad:13: 23:df:84:e8:d1:00:db:b3:fb:04:d0:00:26:26:75:5f:9a:ff: d7:3a:7a:62:27:4e:e4:34:7e:75:c5:c9:17:d5:d2:6d:61:0b: 84:65:ea:9a:e6:e9:9e:11:50:32:16:20:fd:61:4d:d4:a0:aa: 8e:ec:ca:37:ca:43:77:4c:7b:ae:ec:f7:17:62:63:28:ef:0e: 43:bc:a5:5e:b9:63:3b:99:2b:13:27:c6:a5:d8:9c:2b:87:c6: 10:14:5b:5d:0c:5a:54:31:5d:56:7b:42:d2:be:24:fa:6e:3c: a2:82:a7:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0Tg8JjR2OzsJ/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk NjUyNGY3ZjItNzdhZS00YzJhLTg1MzgtNDM2YTQwNGIxZjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTAtD05VBf+EGDnEyiTI98yPgSm8oeE8rS/1 lbdNe0+7rFjoJwBndMNA7llh1QwvYLSiHNvrun59sEwejTB46FTyOOIc6LOv7uSl C5SWlNf+Zcuc+VpJRYRhMMeVEhgYgHE449rlcDBnW3/21ExUKiwx1RC8FP03Xq7W chSGXoV3rO4GiyfoarMxF1zlGEod/vixN2gW1MaYbP8jlr1Ker8nAOvCDULzhfUM ryufQnGRnJlGhIBNDMDvBM0pkw4ihM4TWi+uaYWFKvXmH3azjCF3RUlo4y8b3ByI tyrnAWo3IvCVAIeRNW+5UrGdUW/ongluQYqL+WKgDPdIV/q0AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFA3BpUZq4dvav1VMkE6kjzMkfeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTY2OGMyNmYtZjVhNi0z ODYwLTgyZWItNzY5ZDk1OTM4N2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxin0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMoZrPkGkdctjHPxH6oe4IN643nS+uyXRDV35q/6RnecKweeUOfn+Fy bzHbZvG05F27vOMNxmzGxKLuEw+olrhtmmAt5+KkWVQzhItv6vAzFRemXLQv481R lDvtKTegW3j8/TxcbOJKy/EAXmrYF5S59JD4vPagsmrQzXLqcY6+gF5SFebAKmDi SjxwAAStEyPfhOjRANuz+wTQACYmdV+a/9c6emInTuQ0fnXFyRfV0m1hC4Rl6prm 6Z4RUDIWIP1hTdSgqo7syjfKQ3dMe67s9xdiYyjvDkO8pV65YzuZKxMnxqXYnCuH xhAUW10MWlQxXVZ7QtK+JPpuPKKCp/Y= -----END CERTIFICATE-----Generated at Sat Aug 23 18:19:01 2025 by rpki-client