$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/00108f21-dd53-38a3-afc0-dddc3a21b293.roa File: 00108f21-dd53-38a3-afc0-dddc3a21b293.roa (raw, json) Hash identifier: iCrzRqcGZC2ArzqalYUy/cmxTBjxCz/b28aK4PtagMA= Subject key identifier: 58:02:6B:12:DB:98:7E:90:3B:40:28:9B:2D:2C:45:40:79:27:23:53 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEA8787D69EAA04790F600680 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/00108f21-dd53-38a3-afc0-dddc3a21b293.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 198.41.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:87:d6:9e:aa:04:79:0f:60:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=833048dd-ecc0-435a-9ef2-0709a001990f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:73:e7:91:88:ad:7c:b0:5f:81:9c:6f:c3:c4: 67:94:48:fc:cb:62:9d:cc:63:f6:07:71:c7:8e:da: b8:46:cb:be:ed:fd:27:90:85:5d:ad:95:20:58:68: 1c:3d:56:4d:b8:7b:6c:c5:ab:4b:6e:06:91:8b:d8: ca:e8:00:0d:5b:66:ec:a5:20:45:b5:e7:41:72:d5: 90:30:95:78:56:75:0b:d9:e1:75:da:b6:35:07:c1: e5:34:e5:35:80:07:d4:85:34:14:c3:b1:55:2b:aa: 23:6c:ef:40:a6:18:19:be:57:2d:0a:48:14:48:c5: d2:c2:1d:94:59:9a:a9:16:78:2d:73:4f:de:cc:4b: 4d:8a:69:f4:3a:11:3d:52:e4:57:7d:cb:3c:5c:fe: a1:e6:4e:07:e5:9c:cc:73:30:e2:91:d2:31:4a:b4: 59:84:c2:3b:04:e9:12:9d:bd:dc:96:5b:0b:9c:9e: 03:3c:e6:53:20:c5:a7:87:cb:eb:cc:7b:e3:d9:49: ae:af:0d:ee:2e:e6:c0:0f:2f:78:5d:dd:81:5e:6d: 24:80:e2:2b:ba:b4:c2:24:7b:3e:37:65:02:1d:43: 4c:5e:8d:66:15:6d:60:96:27:32:d0:3f:7b:f8:1e: b4:11:34:ae:51:25:74:96:11:1c:d2:8d:7f:47:75: 66:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:02:6B:12:DB:98:7E:90:3B:40:28:9B:2D:2C:45:40:79:27:23:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/00108f21-dd53-38a3-afc0-dddc3a21b293.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:7d:fe:f1:a5:76:0c:cd:8c:76:86:eb:d5:05:1d:47:e3:14: 74:07:f8:ed:72:c2:7b:f4:8f:3e:68:8e:cf:25:79:dd:d4:ea: c6:b3:c2:76:0f:4f:3c:d0:06:e7:41:9b:3f:a4:17:d4:5c:72: 91:08:bb:75:4f:7d:79:39:ca:e3:ec:fc:ec:84:5c:bc:05:00: df:95:6b:bc:7a:3a:7d:95:f8:40:51:40:15:c1:94:8b:58:07: bf:57:cb:ff:46:18:09:36:c8:97:b7:1a:45:fa:c2:9a:23:dc: 63:7c:e4:2b:25:7c:ec:d2:e7:80:5d:81:2b:a5:0f:dd:63:68: 44:26:a9:ec:37:5b:04:2b:66:8f:b2:a1:06:7b:bf:c4:8d:81: 85:06:47:91:d1:84:49:57:38:fd:08:c7:d3:65:7a:b0:ce:1e: 1f:75:35:e1:1c:a0:61:66:29:95:74:18:40:bf:60:51:e3:10: 00:d1:8d:96:6e:f8:e5:ca:a3:f8:a6:5b:ec:84:f3:4f:c3:dd: 69:2a:2d:de:c3:8b:07:3d:2f:bf:1e:d6:bc:68:06:8a:4c:60: 61:c2:7c:10:10:35:25:3c:84:d1:a8:1e:bd:9a:dd:31:ae:80: de:39:f5:02:82:d6:00:1c:d3:ae:53:d3:df:67:14:b3:e1:d3: f7:87:08:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh4fWnqoEeQ9gBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk ODMzMDQ4ZGQtZWNjMC00MzVhLTllZjItMDcwOWEwMDE5OTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnPnkYitfLBfgZxvw8RnlEj8y2KdzGP2B3HH jtq4Rsu+7f0nkIVdrZUgWGgcPVZNuHtsxatLbgaRi9jK6AANW2bspSBFtedBctWQ MJV4VnUL2eF12rY1B8HlNOU1gAfUhTQUw7FVK6ojbO9AphgZvlctCkgUSMXSwh2U WZqpFngtc0/ezEtNimn0OhE9UuRXfcs8XP6h5k4H5ZzMczDikdIxSrRZhMI7BOkS nb3cllsLnJ4DPOZTIMWnh8vrzHvj2Umurw3uLubADy94Xd2BXm0kgOIrurTCJHs+ N2UCHUNMXo1mFW1glicy0D97+B60ETSuUSV0lhEc0o1/R3Vm8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgCaxLbmH6QO0Aomy0sRUB5JyNTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDAxMDhmMjEtZGQ1My0z OGEzLWFmYzAtZGRkYzNhMjFiMjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxingMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJ9/vGldgzNjHaG69UFHUfjFHQH+O1ywnv0jz5ojs8led3U6sazwnYP TzzQBudBmz+kF9RccpEIu3VPfXk5yuPs/OyEXLwFAN+Va7x6On2V+EBRQBXBlItY B79Xy/9GGAk2yJe3GkX6wpoj3GN85CslfOzS54BdgSulD91jaEQmqew3WwQrZo+y oQZ7v8SNgYUGR5HRhElXOP0Ix9NlerDOHh91NeEcoGFmKZV0GEC/YFHjEADRjZZu +OXKo/imW+yE80/D3WkqLd7Diwc9L78e1rxoBopMYGHCfBAQNSU8hNGoHr2a3TGu gN459QKC1gAc065T099nFLPh0/eHCOQ= -----END CERTIFICATE-----Generated at Sun Sep 20 17:59:50 2026 by rpki-client