$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/458b765b-027c-35e5-a5c0-dc8c8ea47a93.roa File: 458b765b-027c-35e5-a5c0-dc8c8ea47a93.roa (raw, json) Hash identifier: n/NbGKMnc/uG/9EadazGgr4IhZ8NWFjiEjVgyxh4XNQ= Subject key identifier: C0:A4:BB:C2:85:B7:D8:65:47:30:4D:C0:E8:79:9C:E2:64:82:39:22 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584C910703A661EE6ACE12C86B80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/458b765b-027c-35e5-a5c0-dc8c8ea47a93.roa Signing time: Sun 18 Jan 2026 14:00:39 +0000 ROA not before: Sun 18 Jan 2026 14:00:39 +0000 ROA not after: Sat 18 Apr 2026 13:00:39 +0000 asID: 13335 IP address blocks: 198.41.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:91:07:03:a6:61:ee:6a:ce:12:c8:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jan 18 14:00:39 2026 GMT Not After : Apr 18 13:00:39 2026 GMT Subject: CN=c8a6578b-45c8-4dba-8643-4395dbcf18dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:60:ea:f3:99:db:6a:ef:39:f2:20:70:08:c9: 53:01:bc:e5:bc:86:e6:1f:e2:45:1f:31:96:55:67: 00:b4:f6:e0:ca:f8:a0:34:80:39:99:a5:ad:ba:16: cb:23:fa:cd:0c:d1:08:68:bf:5d:e8:d0:12:15:63: f1:51:c2:10:d8:df:59:c1:6b:c8:7a:0c:b9:cf:7c: 9a:da:a5:fd:da:d2:29:77:7b:ec:3b:98:27:ff:45: 1a:dd:e6:5c:7f:44:55:3f:52:2a:96:f7:66:bd:74: 31:61:58:f0:3d:b5:d9:32:b2:25:5d:a9:8f:0c:ad: 4b:9f:f7:d6:7f:6b:c7:27:42:6b:ea:16:af:87:c3: 14:fe:6d:80:0d:f5:4a:4a:d0:6b:a0:70:56:8c:44: 1b:a0:0b:f6:3a:0a:22:c6:bf:6d:4a:1a:db:a6:9c: 3d:c3:9a:33:6c:c2:f3:86:11:40:1d:55:6b:80:d8: ad:9a:19:a7:aa:1d:6d:87:12:d3:bb:f6:42:53:42: 9b:34:dc:79:a6:8f:8e:a5:60:44:9b:2c:37:54:8b: c4:de:af:e9:e9:9b:f2:e6:01:05:3c:ba:8f:c6:80: a2:3e:8f:7c:17:d4:7d:55:ca:29:5a:22:24:72:f2: d4:e8:d3:e0:56:a0:39:4b:6d:7d:c8:3b:25:ab:14: d1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A4:BB:C2:85:B7:D8:65:47:30:4D:C0:E8:79:9C:E2:64:82:39:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/458b765b-027c-35e5-a5c0-dc8c8ea47a93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:e5:9a:ae:1e:8a:84:41:e4:f2:98:2f:44:5f:c7:cc:58:4d: 11:01:b3:ce:cc:b2:e2:a1:7a:62:5e:dc:04:f4:46:0f:fc:e6: 0d:54:04:0d:c9:b3:23:c3:5a:25:44:b5:eb:e5:7a:a5:d7:37: 61:a1:bc:b1:e3:c9:0b:4c:76:cb:35:e9:67:71:89:22:d0:1f: 1c:f5:39:c0:6a:d7:04:d1:bd:bb:f5:05:8d:f3:d2:54:53:a3: 0a:17:21:20:1b:71:86:02:2e:2a:78:bd:af:7f:81:ac:b8:6d: 44:64:c1:40:09:41:ff:6c:52:3b:63:fc:cc:3a:dd:d2:4b:a1: 47:61:02:d0:80:35:69:c1:5a:ca:de:b4:8f:c3:3b:6b:4f:00: 85:72:5b:a8:ae:46:a5:99:fa:a2:67:45:46:e0:54:e3:b6:9b: ed:8a:f7:44:76:dc:e8:78:f4:70:f9:f3:49:43:42:39:11:5b: 73:82:0c:df:6b:66:ec:ad:53:0f:8f:5c:79:44:d5:72:da:8d: 9c:e4:f2:e2:34:97:28:db:bd:78:2e:0b:60:c5:a9:56:e1:fb: 97:b3:ca:ad:dc:1d:bc:56:18:24:1a:d4:e6:d9:ec:9a:ac:bd: 5d:70:9f:20:9f:95:df:73:17:ab:cc:a8:b7:97:b3:1c:ec:1a: 3c:21:53:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyRBwOmYe5qzhLIa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDExODE0MDAzOVoXDTI2MDQxODEzMDAzOVowLzEtMCsGA1UEAxMk YzhhNjU3OGItNDVjOC00ZGJhLTg2NDMtNDM5NWRiY2YxOGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mDq85nbau858iBwCMlTAbzlvIbmH+JFHzGW VWcAtPbgyvigNIA5maWtuhbLI/rNDNEIaL9d6NASFWPxUcIQ2N9ZwWvIegy5z3ya 2qX92tIpd3vsO5gn/0Ua3eZcf0RVP1IqlvdmvXQxYVjwPbXZMrIlXamPDK1Ln/fW f2vHJ0Jr6havh8MU/m2ADfVKStBroHBWjEQboAv2Ogoixr9tShrbppw9w5ozbMLz hhFAHVVrgNitmhmnqh1thxLTu/ZCU0KbNNx5po+OpWBEmyw3VIvE3q/p6Zvy5gEF PLqPxoCiPo98F9R9VcopWiIkcvLU6NPgVqA5S219yDslqxTRVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCku8KFt9hlRzBNwOh5nOJkgjkiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDU4Yjc2NWItMDI3Yy0z NWU1LWE1YzAtZGM4YzhlYTQ3YTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxinZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/lmq4eioRB5PKYL0Rfx8xYTREBs87MsuKhemJe3AT0Rg/85g1UBA3J syPDWiVEtevleqXXN2GhvLHjyQtMdss16WdxiSLQHxz1OcBq1wTRvbv1BY3z0lRT owoXISAbcYYCLip4va9/gay4bURkwUAJQf9sUjtj/Mw63dJLoUdhAtCANWnBWsre tI/DO2tPAIVyW6iuRqWZ+qJnRUbgVOO2m+2K90R23Oh49HD580lDQjkRW3OCDN9r ZuytUw+PXHlE1XLajZzk8uI0lyjbvXguC2DFqVbh+5ezyq3cHbxWGCQa1ObZ7Jqs vV1wnyCfld9zF6vMqLeXsxzsGjwhU8U= -----END CERTIFICATE-----Generated at Mon Mar 2 18:50:18 2026 by rpki-client