$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0cfd6db9-1498-3cfa-a73f-8a2b22c61159.roa File: 0cfd6db9-1498-3cfa-a73f-8a2b22c61159.roa (raw, json) Hash identifier: OB+jiOKIKx8CvbDyjlwFi1E0AwDEXb3dvedaJbPHDNw= Subject key identifier: DF:E9:3B:25:60:D8:C8:42:0F:90:34:0F:AD:40:36:E8:4C:EB:DE:BD Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D71A523802AF7F9B894C0C380 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0cfd6db9-1498-3cfa-a73f-8a2b22c61159.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 198.41.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:23:80:2a:f7:f9:b8:94:c0:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=3ddeaed5-5f9e-4615-a275-0633d520d6e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:00:3f:b0:a0:56:b5:71:1e:d0:4b:e0:06:71: 43:94:2f:da:b5:ce:af:3b:1e:b5:27:36:f5:8d:e3: 15:75:35:02:20:a8:26:94:86:51:6e:39:9d:1f:1b: 2b:89:aa:65:08:f7:0e:cc:9e:47:c2:48:2e:30:53: 16:a7:71:e8:67:0c:fd:2a:41:b7:c8:97:f6:59:7c: a2:bb:cf:df:b5:84:e8:07:ad:69:90:b6:b1:18:da: f9:3f:0b:95:0c:83:1b:1e:2c:6c:ad:44:d5:e7:46: 20:dd:1a:a6:c7:86:79:95:c9:1e:88:26:61:be:fb: 6a:e2:62:e6:ea:1d:aa:54:ef:48:99:3a:2d:24:eb: 4f:90:b3:5e:4a:8e:80:a2:5c:e8:ba:16:63:3f:65: b3:60:b9:5f:b8:e5:91:47:7f:a5:8b:e3:79:de:f5: 37:d8:51:dc:31:eb:c0:f7:e8:b2:b6:bf:b1:7f:37: ea:96:e3:6b:80:34:94:41:2a:89:66:9e:7f:28:5c: 48:b1:f6:52:b4:05:6c:60:26:05:9e:7a:5c:5e:c9: 62:8b:4c:93:b5:5c:1e:05:24:e6:20:88:99:44:22: 9d:68:e0:dd:37:97:ac:0f:c5:08:98:20:35:2a:70: 90:28:97:24:34:32:bd:8e:32:42:e9:c2:eb:3f:63: 83:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E9:3B:25:60:D8:C8:42:0F:90:34:0F:AD:40:36:E8:4C:EB:DE:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0cfd6db9-1498-3cfa-a73f-8a2b22c61159.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:91:14:03:7d:52:93:00:4b:1a:04:4b:6e:01:00:37:39:7d: 50:ba:d4:2c:61:0d:b4:df:cf:28:21:92:af:49:51:93:00:21: 07:e7:04:85:cf:df:cc:61:16:90:b4:f1:83:35:4b:8b:5f:7d: a8:f7:76:79:75:09:06:33:4a:8b:4d:83:f0:14:2e:bc:f4:7b: 77:dc:3c:7a:14:6c:4f:be:42:16:be:49:e3:19:31:a8:f3:c0: f9:92:a8:68:ca:08:42:0b:17:59:04:ae:ee:2c:fa:8e:cb:31: 06:02:26:e2:4b:69:d6:c0:3d:5c:e0:a9:0e:f2:74:da:da:21: c6:be:71:59:d5:b1:ac:21:cb:76:9f:7f:22:df:d3:18:9e:5e: 4c:10:20:87:f5:a0:63:a4:e0:81:f2:54:0d:26:fe:da:bc:11: a5:cf:df:c1:5e:75:c0:c3:17:5e:0a:aa:2f:e5:c3:de:96:89: 1d:78:a3:c9:c5:d7:87:08:67:cd:ab:36:c8:b1:bc:a4:69:3e: 1e:bd:97:65:a6:ac:0d:fe:d6:40:24:68:6c:bc:25:95:6a:4d: 67:4d:54:8e:e5:72:2c:4b:9f:17:0c:40:e1:6c:cc:f6:03:9b: f1:70:9d:0a:67:d3:5b:c1:f1:29:bc:97:c3:93:fe:3a:89:f8: d7:cd:ee:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpSOAKvf5uJTAw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk M2RkZWFlZDUtNWY5ZS00NjE1LWEyNzUtMDYzM2Q1MjBkNmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAA/sKBWtXEe0EvgBnFDlC/atc6vOx61Jzb1 jeMVdTUCIKgmlIZRbjmdHxsriaplCPcOzJ5HwkguMFMWp3HoZwz9KkG3yJf2WXyi u8/ftYToB61pkLaxGNr5PwuVDIMbHixsrUTV50Yg3Rqmx4Z5lckeiCZhvvtq4mLm 6h2qVO9ImTotJOtPkLNeSo6AolzouhZjP2WzYLlfuOWRR3+li+N53vU32FHcMevA 9+iytr+xfzfqluNrgDSUQSqJZp5/KFxIsfZStAVsYCYFnnpcXslii0yTtVweBSTm IIiZRCKdaODdN5esD8UImCA1KnCQKJckNDK9jjJC6cLrP2OD+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/pOyVg2MhCD5A0D61ANuhM6969MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGNmZDZkYjktMTQ5OC0z Y2ZhLWE3M2YtOGEyYjIyYzYxMTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxinzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqRFAN9UpMASxoES24BADc5fVC61CxhDbTfzyghkq9JUZMAIQfnBIXP 38xhFpC08YM1S4tffaj3dnl1CQYzSotNg/AULrz0e3fcPHoUbE++Qha+SeMZMajz wPmSqGjKCEILF1kEru4s+o7LMQYCJuJLadbAPVzgqQ7ydNraIca+cVnVsawhy3af fyLf0xieXkwQIIf1oGOk4IHyVA0m/tq8EaXP38FedcDDF14Kqi/lw96WiR14o8nF 14cIZ82rNsixvKRpPh69l2WmrA3+1kAkaGy8JZVqTWdNVI7lcixLnxcMQOFszPYD m/FwnQpn01vB8Sm8l8OT/jqJ+NfN7oY= -----END CERTIFICATE-----Generated at Fri Apr 17 15:35:59 2026 by rpki-client