$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/59d53a3d-8223-3e3c-a175-786b0e4fb45a.roa File: 59d53a3d-8223-3e3c-a175-786b0e4fb45a.roa (raw, json) Hash identifier: 71RYY+FTSDkqkYbpXuaq27N9DRsMZSxr3iMTaCFvVHs= Subject key identifier: AF:5F:C3:B6:39:A0:EB:43:E6:D3:C3:50:5F:AC:9E:C0:6A:56:C0:FA Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D654730C97CDD84257B720 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/59d53a3d-8223-3e3c-a175-786b0e4fb45a.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 198.41.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:54:73:0c:97:cd:d8:42:57:b7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=a7a59991-5af9-4ebe-957c-a0783f8483f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f2:4e:b7:b1:3d:e2:0f:7a:5b:bc:d2:29:22: 16:1d:d6:34:64:e9:90:d5:5b:18:4e:6d:92:ae:3e: ed:90:cb:50:72:1a:c4:69:a2:d9:e1:cf:c1:4f:40: 6b:55:62:2b:94:1d:50:b0:ce:f1:d4:12:1c:1a:ec: 27:97:ae:1d:45:10:b3:0e:47:8c:3a:0b:15:10:80: 3b:9c:71:71:33:49:4b:49:92:66:a0:0e:5d:13:ca: 14:2f:84:1f:67:54:13:a0:4f:a7:e7:ac:98:7d:a1: 7b:8b:53:d0:01:27:d0:68:70:6d:18:cf:01:4c:7b: 66:25:75:d8:3d:8d:62:d7:8a:a3:48:05:97:7c:b2: c2:63:0d:f2:97:88:19:24:c2:be:bf:98:19:8e:50: 38:e5:e9:d4:4b:f1:88:7d:18:0f:7c:eb:c9:96:d0: 50:5e:2e:92:98:9c:d6:df:95:4f:17:d6:5d:ae:1d: b2:75:5c:db:5a:1e:c0:7b:c5:47:23:e3:ef:ce:a5: 5a:45:4c:56:b4:f2:a4:7d:1e:79:dd:39:0c:9d:85: d7:e5:d8:67:92:21:31:a1:6f:eb:af:29:89:d4:ff: 3b:d8:f9:09:21:ff:bc:d9:31:90:6c:3b:e8:e9:27: 16:8c:58:53:57:2f:63:9f:b6:14:38:c4:73:c1:06: 77:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:5F:C3:B6:39:A0:EB:43:E6:D3:C3:50:5F:AC:9E:C0:6A:56:C0:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/59d53a3d-8223-3e3c-a175-786b0e4fb45a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:b2:12:0d:a9:07:7e:32:3c:72:ae:89:55:5c:e2:10:60:53: 8e:60:6e:f8:c3:fa:41:4e:b1:99:bd:35:87:d8:eb:68:1b:64: 24:b8:fe:af:7e:ca:7c:23:2c:73:af:da:3f:84:5e:2f:51:f5: 07:84:59:a4:c2:16:27:94:db:b6:e7:2b:7b:04:dc:45:60:ae: 72:e0:1c:53:2b:57:6c:51:fa:f5:d5:ec:66:9d:e5:19:a6:17: 4f:d2:c9:1e:5d:4c:d2:43:e0:28:56:df:58:8c:b5:14:7c:b7: 40:15:37:4e:0e:50:30:49:80:80:24:8e:f3:3f:d7:45:a3:d3: e8:cc:f4:3c:b1:d5:ec:56:42:f3:1c:20:75:c0:0c:c4:8f:4d: 23:89:2f:5c:1a:4d:22:13:d6:cc:bb:46:b1:5f:4a:06:54:9e: fc:06:a5:25:1b:cc:9d:6d:df:34:c4:cd:9c:e5:85:fb:44:95: 2f:f4:fc:71:02:f9:07:5b:85:df:e2:f1:2f:57:17:54:ea:48: 35:c3:8e:30:54:40:08:0b:5a:e7:e0:3c:ed:fe:3b:f3:bb:9c: 95:9b:74:c3:3d:d5:01:c0:a5:9b:96:96:7d:e2:40:89:98:be: 44:ae:bb:3d:e9:12:27:79:5c:b6:95:b9:9b:6e:b5:b5:52:9a: 14:bb:25:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1lRzDJfN2EJXtyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk YTdhNTk5OTEtNWFmOS00ZWJlLTk1N2MtYTA3ODNmODQ4M2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfJOt7E94g96W7zSKSIWHdY0ZOmQ1VsYTm2S rj7tkMtQchrEaaLZ4c/BT0BrVWIrlB1QsM7x1BIcGuwnl64dRRCzDkeMOgsVEIA7 nHFxM0lLSZJmoA5dE8oUL4QfZ1QToE+n56yYfaF7i1PQASfQaHBtGM8BTHtmJXXY PY1i14qjSAWXfLLCYw3yl4gZJMK+v5gZjlA45enUS/GIfRgPfOvJltBQXi6SmJzW 35VPF9Zdrh2ydVzbWh7Ae8VHI+PvzqVaRUxWtPKkfR553TkMnYXX5dhnkiExoW/r rymJ1P872PkJIf+82TGQbDvo6ScWjFhTVy9jn7YUOMRzwQZ3GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9fw7Y5oOtD5tPDUF+snsBqVsD6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTlkNTNhM2QtODIyMy0z ZTNjLWExNzUtNzg2YjBlNGZiNDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxincMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAayEg2pB34yPHKuiVVc4hBgU45gbvjD+kFOsZm9NYfY62gbZCS4/q9+ ynwjLHOv2j+EXi9R9QeEWaTCFieU27bnK3sE3EVgrnLgHFMrV2xR+vXV7Gad5Rmm F0/SyR5dTNJD4ChW31iMtRR8t0AVN04OUDBJgIAkjvM/10Wj0+jM9Dyx1exWQvMc IHXADMSPTSOJL1waTSIT1sy7RrFfSgZUnvwGpSUbzJ1t3zTEzZzlhftElS/0/HEC +Qdbhd/i8S9XF1TqSDXDjjBUQAgLWufgPO3+O/O7nJWbdMM91QHApZuWln3iQImY vkSuuz3pEid5XLaVuZtutbVSmhS7JZk= -----END CERTIFICATE-----Generated at Sat Aug 23 19:50:39 2025 by rpki-client