$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/388e0a17-41a0-3d83-81a2-e73bf3c7531e.roa File: 388e0a17-41a0-3d83-81a2-e73bf3c7531e.roa (raw, json) Hash identifier: b0dTUUErYkDhomf238PLXscYv9lOYhQkSsF9ZcUdmLc= Subject key identifier: 95:B1:E6:F6:B7:69:5A:75:2B:B5:06:CD:50:38:F2:31:08:A0:3F:C2 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D71A522FACDC014B67628D780 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/388e0a17-41a0-3d83-81a2-e73bf3c7531e.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 198.41.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:22:fa:cd:c0:14:b6:76:28:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=43d29a91-6b6b-4211-b6c1-2a181c85121b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:29:35:9c:57:96:69:94:65:e4:60:f1:8d:79: 7b:22:69:a4:d9:9a:c8:bd:de:1b:ba:0b:c4:9b:02: c4:c4:fb:03:bb:fa:c6:c8:64:f9:ea:20:45:2a:0d: ea:46:64:99:80:68:8a:00:35:e6:2c:37:85:87:95: a5:fe:32:26:24:6c:85:61:f4:9b:e6:c4:f4:c0:59: 19:7f:8c:18:6e:f1:9b:09:f0:97:86:80:49:f6:24: 47:4e:23:22:99:08:2d:b2:92:d1:95:2d:28:ce:33: dc:a4:40:ca:13:c7:16:87:33:45:97:b6:21:1e:b6: b5:8e:7a:14:1d:4d:49:b8:e4:f6:ef:d6:88:b7:97: 6f:3d:d0:5c:dd:e8:96:e4:5c:5e:0d:dc:df:dd:cf: d0:0c:ad:a1:54:87:d9:dc:11:3e:35:3b:7c:d0:92: 3e:66:84:0a:cf:e8:a1:7c:7a:86:0c:b6:f2:9e:47: e7:e6:b6:c3:c7:2e:be:b2:1c:ee:bf:7a:d5:f6:8c: 4c:2c:27:bc:f9:67:cf:b1:b3:0c:61:e7:d0:09:5a: a8:2c:d4:d0:a5:5a:50:da:3b:83:dd:a5:f1:17:9f: 1e:77:0f:ce:bb:1e:3a:a1:77:e1:4d:4a:02:ed:31: 8d:26:3f:59:08:fc:f0:cd:3f:f0:32:0e:42:48:ff: 06:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B1:E6:F6:B7:69:5A:75:2B:B5:06:CD:50:38:F2:31:08:A0:3F:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/388e0a17-41a0-3d83-81a2-e73bf3c7531e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:0f:3c:bf:2d:10:9e:40:6c:f4:65:2b:dc:3b:71:a1:1d:fb: a6:4a:67:01:cf:29:2d:da:16:1d:88:4d:ef:68:5d:93:4d:43: ea:e1:e4:8c:e6:37:f0:04:2e:f8:df:7b:81:7f:6d:96:6b:84: f0:a2:84:13:7c:14:bf:e1:74:7c:b0:c7:03:8b:65:f2:08:66: 9d:c4:19:a7:e8:bc:90:66:22:d7:b3:09:29:be:44:f1:a7:32: 07:2c:73:bc:88:93:4c:f3:e1:82:63:c7:fc:0a:12:37:56:85: a4:80:59:9f:f2:fe:4c:aa:01:4f:19:f5:60:4e:85:0e:6d:17: 55:e1:ae:e5:ea:78:14:37:6b:29:1b:a8:9d:2e:52:13:fa:44: 73:0c:50:6b:58:a9:6a:f5:8b:6a:26:05:b7:fb:60:e2:ae:8d: 0f:ca:3e:aa:f0:b1:dc:dc:8b:01:95:c4:cf:ee:6b:d2:16:e8: 80:34:8f:dc:a4:00:51:93:01:eb:80:f9:d4:b4:5b:97:8c:a3: 86:86:0e:d3:fd:10:3d:b4:30:07:b5:96:c2:9b:50:53:a4:02: 49:7d:ac:b3:cd:b1:2e:eb:cc:c8:d9:32:f4:82:1a:7f:f2:6b: 2f:88:0b:5c:5b:45:a3:5f:b8:3b:e2:66:d0:ca:4e:73:3a:af: 46:fe:64:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpSL6zcAUtnYo14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk NDNkMjlhOTEtNmI2Yi00MjExLWI2YzEtMmExODFjODUxMjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSk1nFeWaZRl5GDxjXl7Immk2ZrIvd4bugvE mwLExPsDu/rGyGT56iBFKg3qRmSZgGiKADXmLDeFh5Wl/jImJGyFYfSb5sT0wFkZ f4wYbvGbCfCXhoBJ9iRHTiMimQgtspLRlS0ozjPcpEDKE8cWhzNFl7YhHra1jnoU HU1JuOT279aIt5dvPdBc3eiW5FxeDdzf3c/QDK2hVIfZ3BE+NTt80JI+ZoQKz+ih fHqGDLbynkfn5rbDxy6+shzuv3rV9oxMLCe8+WfPsbMMYefQCVqoLNTQpVpQ2juD 3aXxF58edw/Oux46oXfhTUoC7TGNJj9ZCPzwzT/wMg5CSP8G5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWx5va3aVp1K7UGzVA48jEIoD/CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzg4ZTBhMTctNDFhMC0z ZDgzLTgxYTItZTczYmYzYzc1MzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxinWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwPPL8tEJ5AbPRlK9w7caEd+6ZKZwHPKS3aFh2ITe9oXZNNQ+rh5Izm N/AELvjfe4F/bZZrhPCihBN8FL/hdHywxwOLZfIIZp3EGafovJBmItezCSm+RPGn Mgcsc7yIk0zz4YJjx/wKEjdWhaSAWZ/y/kyqAU8Z9WBOhQ5tF1XhruXqeBQ3aykb qJ0uUhP6RHMMUGtYqWr1i2omBbf7YOKujQ/KPqrwsdzciwGVxM/ua9IW6IA0j9yk AFGTAeuA+dS0W5eMo4aGDtP9ED20MAe1lsKbUFOkAkl9rLPNsS7rzMjZMvSCGn/y ay+IC1xbRaNfuDviZtDKTnM6r0b+ZLg= -----END CERTIFICATE-----Generated at Fri Apr 17 12:24:45 2026 by rpki-client