$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/35f18c49-410e-385c-bf76-b1ef40393ba3.roa File: 35f18c49-410e-385c-bf76-b1ef40393ba3.roa (raw, json) Hash identifier: ek+qE/u/M5MwoJzrgrFoIxIhOdL3/6i8wJf/FDkxFYA= Subject key identifier: 65:19:AA:D8:E9:A9:80:34:64:69:B0:EA:84:DF:E5:9A:C9:41:36:FD Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D66295935D3EECBD43ED40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/35f18c49-410e-385c-bf76-b1ef40393ba3.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 198.41.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:62:95:93:5d:3e:ec:bd:43:ed:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=05b67534-eec1-435e-8915-5c7812ab55aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a3:7d:aa:e8:71:26:2c:42:75:f3:1e:e8:10: e7:97:f7:2b:82:2e:04:37:58:a6:ef:a0:84:c2:2c: b1:b0:72:34:07:93:b2:47:36:8a:1b:1f:43:0e:99: eb:04:84:36:5c:85:60:aa:b8:b4:b7:f2:fc:5f:47: 13:e9:eb:a6:14:d7:7b:09:f4:de:e0:a5:3c:43:73: c7:95:a1:fc:bd:64:cb:0c:5a:c8:d5:db:d1:05:7d: 9a:85:16:47:bd:1d:3c:68:a2:a0:5c:97:3f:95:07: d8:56:f0:c0:5a:bc:66:30:b4:2b:07:ac:32:ea:56: 6d:3d:85:af:cf:a0:c6:92:f7:e1:8a:33:89:5a:bb: b5:f6:0d:78:c4:aa:18:a1:10:8b:a1:df:f6:13:59: 4d:dd:fd:c1:21:69:fe:e0:71:ee:05:57:2d:f5:dc: 42:8b:92:e9:a6:57:49:42:97:72:a2:1d:61:47:18: 45:7a:fe:5c:ce:42:98:f1:2d:53:51:ce:56:72:aa: 4b:80:9a:09:5d:8f:ee:94:98:07:a3:7b:25:07:f0: d6:b7:5f:b5:d6:bd:e7:f6:d1:6e:00:e4:3e:09:2e: 3a:85:10:43:ae:d6:20:e5:4b:84:c8:6c:a1:51:dc: c9:4b:da:cc:fe:0c:11:27:5d:fb:d3:2c:5b:a3:25: 90:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:19:AA:D8:E9:A9:80:34:64:69:B0:EA:84:DF:E5:9A:C9:41:36:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/35f18c49-410e-385c-bf76-b1ef40393ba3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:59:ea:03:0f:78:27:de:7e:48:77:23:cb:11:b8:13:57:8e: 30:b5:1a:bd:62:c5:77:61:7a:32:13:b3:23:2e:b8:05:a3:a2: 99:31:db:e7:df:70:48:35:b4:41:e0:83:58:20:4a:80:2c:c2: be:74:50:f9:1e:da:7b:07:62:3d:3d:e7:80:0c:46:46:dd:38: 3d:99:44:0c:ff:76:8d:66:ff:0a:75:4c:ee:6d:b1:f1:82:de: 20:34:1d:d9:1c:96:5b:4a:5e:97:85:53:5d:64:8e:9a:c7:4f: ec:64:3a:b9:43:f9:cb:10:f3:e8:00:44:9b:38:16:20:fa:bb: a4:32:80:5c:3c:a2:0e:ec:4e:0d:9b:bc:33:71:7f:fb:94:d5: 13:ad:88:be:86:7c:75:f8:cc:d0:80:2e:11:50:d5:f6:93:32: 14:e6:23:2b:34:da:48:c4:76:4c:e9:92:cb:5c:c8:2b:77:0f: b0:f4:f2:0e:fb:4b:2d:43:58:f9:92:82:7d:f5:c4:41:ae:41: 47:57:1e:fd:00:28:f0:d3:fd:9c:81:26:dd:86:56:7e:06:36: 9f:b5:03:20:e9:55:cd:08:ed:a0:e8:3d:4b:65:98:b5:15:3a: cc:40:f2:ae:4d:f3:c7:5f:ba:51:52:91:58:d4:bc:b8:e0:e7: 22:8b:5b:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1mKVk10+7L1D7UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk MDViNjc1MzQtZWVjMS00MzVlLTg5MTUtNWM3ODEyYWI1NWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6N9quhxJixCdfMe6BDnl/crgi4EN1im76CE wiyxsHI0B5OyRzaKGx9DDpnrBIQ2XIVgqri0t/L8X0cT6eumFNd7CfTe4KU8Q3PH laH8vWTLDFrI1dvRBX2ahRZHvR08aKKgXJc/lQfYVvDAWrxmMLQrB6wy6lZtPYWv z6DGkvfhijOJWru19g14xKoYoRCLod/2E1lN3f3BIWn+4HHuBVct9dxCi5LppldJ Qpdyoh1hRxhFev5czkKY8S1TUc5WcqpLgJoJXY/ulJgHo3slB/DWt1+11r3n9tFu AOQ+CS46hRBDrtYg5UuEyGyhUdzJS9rM/gwRJ1370yxboyWQ9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUZqtjpqYA0ZGmw6oTf5ZrJQTb9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzVmMThjNDktNDEwZS0z ODVjLWJmNzYtYjFlZjQwMzkzYmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxingMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpZ6gMPeCfefkh3I8sRuBNXjjC1Gr1ixXdhejITsyMuuAWjopkx2+ff cEg1tEHgg1ggSoAswr50UPke2nsHYj0954AMRkbdOD2ZRAz/do1m/wp1TO5tsfGC 3iA0HdkclltKXpeFU11kjprHT+xkOrlD+csQ8+gARJs4FiD6u6QygFw8og7sTg2b vDNxf/uU1ROtiL6GfHX4zNCALhFQ1faTMhTmIys02kjEdkzpkstcyCt3D7D08g77 Sy1DWPmSgn31xEGuQUdXHv0AKPDT/ZyBJt2GVn4GNp+1AyDpVc0I7aDoPUtlmLUV OsxA8q5N88dfulFSkVjUvLjg5yKLW5o= -----END CERTIFICATE-----Generated at Sat Aug 23 22:05:13 2025 by rpki-client