$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/acafe627-5dfc-3a59-9b16-c8645b637595.roa File: acafe627-5dfc-3a59-9b16-c8645b637595.roa (raw, json) Hash identifier: JY7Wm7fDPTo01O0jkgzy3lcRo9P2XwEuQXy5pnVWRLM= Subject key identifier: 43:4E:1D:25:BB:4B:0F:BE:4C:2E:E1:33:35:7D:C1:A0:77:39:B5:E7 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D653C84F067E613DC76780 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/acafe627-5dfc-3a59-9b16-c8645b637595.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 198.41.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:53:c8:4f:06:7e:61:3d:c7:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=1e67f987-f739-4f79-be48-95db9f3baee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:73:e4:1f:11:b4:ee:69:63:75:ec:a0:f1:d0: e5:dd:4f:8f:84:0a:63:a1:cd:e3:9e:d0:e0:cb:ab: 49:bc:d2:6d:fe:74:fd:98:8d:20:e1:e1:8e:a4:03: 7a:84:50:c5:48:4e:cb:52:56:4e:4b:96:e7:57:34: 32:9a:14:b7:74:ce:44:53:ac:b8:87:c3:cd:b5:61: 6b:1f:b7:16:c2:7e:96:7d:18:72:9f:c2:da:13:9e: f9:87:bc:cd:ff:fb:9b:97:12:d6:3c:54:c3:4f:90: 1f:7b:d4:6a:4d:e2:52:58:c4:cf:1d:cc:81:b0:c1: 7a:21:55:ec:30:96:cb:24:8c:d2:41:29:f6:fb:59: 0a:c9:a1:fd:a9:36:3d:70:d6:42:f2:5e:2f:6c:26: 97:ac:1b:e6:49:b1:ec:db:b8:95:bd:95:b7:53:02: 7d:fb:8e:ca:98:51:98:ae:7f:3b:c0:ac:27:c2:39: 3d:ba:74:f0:46:1a:16:1b:e9:93:13:32:0c:54:24: 13:99:af:4e:a4:b2:a7:ff:ef:60:03:54:ff:32:03: 35:08:44:a4:26:bc:e7:1b:be:1d:c0:96:42:c1:7d: 14:5c:bb:0d:59:49:ae:10:58:75:09:18:c3:3c:54: c6:56:d0:90:4f:9f:fc:94:60:28:8b:f6:83:73:65: 57:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:4E:1D:25:BB:4B:0F:BE:4C:2E:E1:33:35:7D:C1:A0:77:39:B5:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/acafe627-5dfc-3a59-9b16-c8645b637595.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:c8:b3:e3:33:69:22:93:41:ec:dc:db:61:33:74:0e:be:d4: 3b:2e:9c:a5:d1:1e:91:67:c7:f0:aa:45:22:39:34:6d:f8:9d: c1:dd:4a:1e:e0:1b:e0:78:d2:ff:84:6b:c5:7b:a2:46:12:31: bf:6a:a2:56:8f:66:0d:85:92:96:31:ee:a8:2f:cb:b0:be:2d: 84:dd:10:88:32:5b:93:be:4a:83:a6:86:f7:20:00:3e:50:a0: 09:70:85:9e:d6:8e:8d:b1:2c:37:11:07:b2:cd:f9:34:d2:49: 0a:31:04:ed:75:b4:e0:8c:f7:52:df:67:63:14:33:78:e9:c5: fd:18:8d:34:2c:55:6b:5c:9e:38:ac:25:57:8f:d6:ac:77:91: 2d:24:45:9c:60:a8:e4:2f:2d:c7:2e:36:ab:d4:bc:f5:ec:34: b9:b5:fc:7e:56:40:ff:8d:b8:4c:96:e4:f7:e4:19:a0:d0:66: d9:1d:62:f5:cc:ad:c8:8a:c7:ad:f1:51:28:a1:fb:d9:7b:cd: 06:39:f9:60:c5:4c:fe:cb:c3:6e:c1:e8:34:31:c6:57:40:52: 42:fc:e5:8d:6a:07:f5:a0:bd:5e:c7:8b:c0:f9:bd:74:d2:3a: 70:ef:fc:e7:57:57:3e:bb:16:b3:51:6f:61:d9:89:ac:54:71: 98:4e:0d:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1lPITwZ+YT3HZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk MWU2N2Y5ODctZjczOS00Zjc5LWJlNDgtOTVkYjlmM2JhZWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3PkHxG07mljdeyg8dDl3U+PhApjoc3jntDg y6tJvNJt/nT9mI0g4eGOpAN6hFDFSE7LUlZOS5bnVzQymhS3dM5EU6y4h8PNtWFr H7cWwn6WfRhyn8LaE575h7zN//ublxLWPFTDT5Afe9RqTeJSWMTPHcyBsMF6IVXs MJbLJIzSQSn2+1kKyaH9qTY9cNZC8l4vbCaXrBvmSbHs27iVvZW3UwJ9+47KmFGY rn87wKwnwjk9unTwRhoWG+mTEzIMVCQTma9OpLKn/+9gA1T/MgM1CESkJrznG74d wJZCwX0UXLsNWUmuEFh1CRjDPFTGVtCQT5/8lGAoi/aDc2VXJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENOHSW7Sw++TC7hMzV9waB3ObXnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWNhZmU2MjctNWRmYy0z YTU5LTliMTYtYzg2NDViNjM3NTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxinIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7Is+MzaSKTQezc22EzdA6+1DsunKXRHpFnx/CqRSI5NG34ncHdSh7g G+B40v+Ea8V7okYSMb9qolaPZg2FkpYx7qgvy7C+LYTdEIgyW5O+SoOmhvcgAD5Q oAlwhZ7Wjo2xLDcRB7LN+TTSSQoxBO11tOCM91LfZ2MUM3jpxf0YjTQsVWtcnjis JVeP1qx3kS0kRZxgqOQvLccuNqvUvPXsNLm1/H5WQP+NuEyW5PfkGaDQZtkdYvXM rciKx63xUSih+9l7zQY5+WDFTP7Lw27B6DQxxldAUkL85Y1qB/WgvV7Hi8D5vXTS OnDv/OdXVz67FrNRb2HZiaxUcZhODYU= -----END CERTIFICATE-----Generated at Sat Aug 23 15:12:19 2025 by rpki-client