$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8dd4d43b-40e4-3083-a8d2-5088e71cc472.roa File: 8dd4d43b-40e4-3083-a8d2-5088e71cc472.roa (raw, json) Hash identifier: c2Faz0pQ9dSVu0A5ixWtcs3zi47RBxlodl8zR5g+EyA= Subject key identifier: B9:BE:D1:4C:59:64:88:48:CD:2F:D5:36:B2:5F:50:C7:E2:76:66:C7 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D662BB8C8FD2C69401B300 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8dd4d43b-40e4-3083-a8d2-5088e71cc472.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 198.41.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:62:bb:8c:8f:d2:c6:94:01:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=38e13aa7-3957-4f54-88a6-92cf2e21b5a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:6f:e4:ad:f4:1f:94:1a:e7:18:e3:42:c1:79: 6e:16:22:a0:50:46:fd:cd:62:07:6b:37:a6:2f:72: 8d:1c:d0:57:1e:81:53:2d:44:a3:99:8d:78:e9:be: c4:a8:e1:1d:5a:58:3d:6f:46:41:ef:b9:38:4d:22: d7:f0:35:6d:7e:a1:9a:b0:f4:00:b8:1a:2d:ee:91: 00:68:52:42:1c:0a:17:a4:47:4a:06:f7:80:6a:aa: 1c:e0:0d:64:93:a0:bf:ad:9e:e8:da:94:22:a3:19: fd:3f:a1:a4:e3:ca:63:2a:c9:3f:92:4f:a6:d9:e3: c1:21:c3:ad:5e:11:de:3a:f3:f3:29:6f:32:f1:16: 05:c2:ea:6f:3a:9b:84:bb:4f:f9:10:eb:7f:d3:ee: 20:41:35:bd:36:41:0b:69:da:3f:86:c3:ac:a4:7e: 38:ed:07:5f:bd:9e:88:65:70:7d:67:52:69:1a:fe: 48:91:61:39:b3:0b:8e:10:2e:f9:41:a8:0b:0d:17: c1:42:a4:d7:10:d0:04:98:a2:1f:7d:6e:ea:c2:5c: 48:d2:b7:cc:9a:5c:d6:31:6a:02:73:53:fa:29:1d: ca:a7:57:f3:01:05:e1:fb:23:4d:f4:01:47:e2:d5: 12:b2:42:f7:10:d6:bb:ec:fe:21:c5:8b:20:1f:14: 45:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:BE:D1:4C:59:64:88:48:CD:2F:D5:36:B2:5F:50:C7:E2:76:66:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8dd4d43b-40e4-3083-a8d2-5088e71cc472.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:f5:d4:7d:72:3b:86:c3:c4:ae:c0:9a:91:14:d0:ee:da:91: 7d:e5:7e:7c:2a:a9:94:4f:b3:6d:47:b1:73:08:53:94:50:33: 68:51:50:23:3b:10:22:54:22:c8:a8:41:6c:c3:21:a9:94:d9: c4:15:6d:c0:83:73:1a:54:2b:68:ec:98:fc:cd:c7:85:3f:59: fb:89:58:f7:1d:fc:b7:93:20:62:a1:d4:d8:f3:f3:5b:2c:87: 9c:66:c5:3f:0a:98:da:ba:57:91:94:4f:56:19:31:d2:cb:4b: 7f:83:72:84:6d:bd:4b:30:3d:47:fe:98:fe:be:35:a1:d5:14: 83:47:08:30:0c:fe:6c:6f:60:9e:ba:37:77:30:1b:2e:a4:ca: c4:98:4c:41:27:a9:4d:e9:e7:8f:7d:bd:98:ba:5b:f3:9d:78: 51:7d:aa:db:6e:c4:0d:f5:74:b8:50:bf:a8:cc:e7:4d:ac:ae: b3:1a:a9:3d:1d:47:5f:e9:d9:8a:24:1a:7b:21:ee:02:0b:7f: ed:d3:f7:a6:1d:d2:ef:ce:55:7a:a4:41:92:13:c1:ba:5f:2a: b8:c1:e8:8d:9f:e8:e7:6d:ea:2d:fe:68:ed:39:9c:d5:ca:e6: cc:db:33:14:96:af:23:03:02:f5:2f:b2:9a:be:31:78:6c:25: d4:06:74:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1mK7jI/SxpQBswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk MzhlMTNhYTctMzk1Ny00ZjU0LTg4YTYtOTJjZjJlMjFiNWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgG/krfQflBrnGONCwXluFiKgUEb9zWIHazem L3KNHNBXHoFTLUSjmY146b7EqOEdWlg9b0ZB77k4TSLX8DVtfqGasPQAuBot7pEA aFJCHAoXpEdKBveAaqoc4A1kk6C/rZ7o2pQioxn9P6Gk48pjKsk/kk+m2ePBIcOt XhHeOvPzKW8y8RYFwupvOpuEu0/5EOt/0+4gQTW9NkELado/hsOspH447QdfvZ6I ZXB9Z1JpGv5IkWE5swuOEC75QagLDRfBQqTXENAEmKIffW7qwlxI0rfMmlzWMWoC c1P6KR3Kp1fzAQXh+yNN9AFH4tUSskL3ENa77P4hxYsgHxRFqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLm+0UxZZIhIzS/VNrJfUMfidmbHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGRkNGQ0M2ItNDBlNC0z MDgzLWE4ZDItNTA4OGU3MWNjNDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxinmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJf11H1yO4bDxK7AmpEU0O7akX3lfnwqqZRPs21HsXMIU5RQM2hRUCM7 ECJUIsioQWzDIamU2cQVbcCDcxpUK2jsmPzNx4U/WfuJWPcd/LeTIGKh1Njz81ss h5xmxT8KmNq6V5GUT1YZMdLLS3+DcoRtvUswPUf+mP6+NaHVFINHCDAM/mxvYJ66 N3cwGy6kysSYTEEnqU3p5499vZi6W/OdeFF9qttuxA31dLhQv6jM502srrMaqT0d R1/p2YokGnsh7gILf+3T96Yd0u/OVXqkQZITwbpfKrjB6I2f6Odt6i3+aO05nNXK 5szbMxSWryMDAvUvspq+MXhsJdQGdNA= -----END CERTIFICATE-----Generated at Sat Aug 23 18:15:16 2025 by rpki-client