$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/608d5643-5a4c-3465-a37d-1d731349d1e4.roa File: 608d5643-5a4c-3465-a37d-1d731349d1e4.roa (raw, json) Hash identifier: znsUGhlEX+IEpqme5fwauVtvYLZqbxZT3UFErU1qftQ= Subject key identifier: F3:20:4F:84:2A:E7:C5:7F:DB:FA:82:65:1E:0D:B9:7D:D8:D4:32:70 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D653B43751FC37802F9F62 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/608d5643-5a4c-3465-a37d-1d731349d1e4.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 198.41.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:53:b4:37:51:fc:37:80:2f:9f:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=72d7aa22-0d1d-4d49-8b78-3602afe1d7c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:21:cf:b2:a4:c8:22:f1:f9:a4:01:e4:e4:4d: df:1c:aa:31:d0:41:ed:d9:29:62:ea:2f:84:8a:0a: 71:ee:4c:13:50:54:8c:84:8f:e7:ce:81:4b:1e:5f: 08:23:b6:1e:30:3d:a1:20:2f:d5:ce:1f:52:65:6e: eb:38:55:db:44:e3:98:ff:65:42:87:09:ad:af:a4: 68:1f:cb:e2:12:a8:6f:f9:28:f2:b3:4c:ed:1c:a4: 9b:f6:2d:91:84:b3:ea:7f:c1:8c:b0:d3:a9:c9:76: 09:42:9e:b7:ac:80:cb:b6:eb:df:3a:f1:5e:14:af: 97:66:c7:2e:68:8c:9b:47:a0:e5:bd:74:21:79:ae: 33:c7:c2:9b:30:ea:49:cf:dc:59:98:4e:fb:81:9e: 74:3d:d2:e0:2b:15:59:b5:2e:2a:3d:3a:c4:39:a4: 19:2e:a7:f8:d6:b2:96:09:5a:e3:3e:b7:d9:61:7d: b7:7e:76:52:ed:e7:77:11:d9:d1:36:25:35:4a:22: 00:98:0e:31:24:4e:02:44:ba:c5:cb:aa:d9:2f:1a: 1b:a2:7c:13:61:4a:a9:d1:c6:1d:51:d1:17:4b:ba: 21:f6:66:d6:7b:67:5e:98:7b:24:eb:b8:b8:67:cc: e3:9d:3a:23:2f:6c:1f:cd:f5:99:2c:4d:e2:52:bd: 0e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:20:4F:84:2A:E7:C5:7F:DB:FA:82:65:1E:0D:B9:7D:D8:D4:32:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/608d5643-5a4c-3465-a37d-1d731349d1e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:b8:a1:f8:5d:b5:75:f6:1c:77:88:41:8f:4a:15:7a:d7:8f: b9:30:18:82:10:a3:f1:9a:6e:e4:67:88:3c:1c:04:02:9c:66: 5c:07:06:48:41:d9:ec:db:73:ca:f5:8d:87:ac:58:e6:0b:f2: 91:34:a7:23:b3:3d:c4:96:5d:27:6b:ca:9e:a1:3d:6d:3b:2f: 3b:6c:f8:ba:17:b1:04:0c:64:15:9f:5f:0e:44:f2:5a:d4:15: a2:49:c1:20:b1:04:c8:3c:83:47:ea:39:08:c4:cc:86:7d:96: 38:8b:a7:81:25:df:20:03:3e:15:48:d4:c7:c6:c3:92:40:df: b6:96:8a:71:58:20:9d:13:63:af:ff:43:c9:bd:ea:f3:a9:b3: 12:9b:49:81:ac:69:41:cc:9f:e2:b1:e4:cf:21:c5:b7:9a:2a: 38:2c:0c:d2:9b:08:a8:cf:f9:f0:af:a3:31:dc:e9:a8:4b:ea: cc:97:90:d8:f1:41:c0:05:dd:81:1a:b2:db:82:67:3f:9f:a9: 1e:ea:8a:5a:36:94:5c:39:20:6d:36:d2:67:e1:ad:59:25:b7: ba:e7:85:d2:94:cf:6d:25:94:19:7a:0d:2f:b8:55:e6:b5:75: 0a:ce:1e:d3:78:62:b6:bd:95:4c:5c:7b:2e:00:d2:b4:c9:b7: ff:69:fb:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1lO0N1H8N4Avn2IwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk NzJkN2FhMjItMGQxZC00ZDQ5LThiNzgtMzYwMmFmZTFkN2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yHPsqTIIvH5pAHk5E3fHKox0EHt2Sli6i+E igpx7kwTUFSMhI/nzoFLHl8II7YeMD2hIC/Vzh9SZW7rOFXbROOY/2VChwmtr6Ro H8viEqhv+Sjys0ztHKSb9i2RhLPqf8GMsNOpyXYJQp63rIDLtuvfOvFeFK+XZscu aIybR6DlvXQhea4zx8KbMOpJz9xZmE77gZ50PdLgKxVZtS4qPTrEOaQZLqf41rKW CVrjPrfZYX23fnZS7ed3EdnRNiU1SiIAmA4xJE4CRLrFy6rZLxobonwTYUqp0cYd UdEXS7oh9mbWe2demHsk67i4Z8zjnTojL2wfzfWZLE3iUr0OUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPMgT4Qq58V/2/qCZR4NuX3Y1DJwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjA4ZDU2NDMtNWE0Yy0z NDY1LWEzN2QtMWQ3MzEzNDlkMWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxinAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ+4ofhdtXX2HHeIQY9KFXrXj7kwGIIQo/GabuRniDwcBAKcZlwHBkhB 2ezbc8r1jYesWOYL8pE0pyOzPcSWXSdryp6hPW07Lzts+LoXsQQMZBWfXw5E8lrU FaJJwSCxBMg8g0fqOQjEzIZ9ljiLp4El3yADPhVI1MfGw5JA37aWinFYIJ0TY6// Q8m96vOpsxKbSYGsaUHMn+Kx5M8hxbeaKjgsDNKbCKjP+fCvozHc6ahL6syXkNjx QcAF3YEastuCZz+fqR7qilo2lFw5IG020mfhrVklt7rnhdKUz20llBl6DS+4Vea1 dQrOHtN4Yra9lUxcey4A0rTJt/9p++k= -----END CERTIFICATE-----Generated at Sat Aug 23 15:10:40 2025 by rpki-client