$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/823621b8-924d-3a4b-af59-2b62b286cb50.roa File: 823621b8-924d-3a4b-af59-2b62b286cb50.roa (raw, json) Hash identifier: zu70ReFH9ygah3PrwazeXCFCj/5bQRq1g9EYOgbS4ws= Subject key identifier: 4C:9E:23:2E:C2:19:F4:93:F4:C3:71:9B:FD:61:0D:82:6C:2F:1C:D7 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB88D5256E7E16F6DB73793B0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/823621b8-924d-3a4b-af59-2b62b286cb50.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 132892 IP address blocks: 198.41.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:52:56:e7:e1:6f:6d:b7:37:93:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=640b0ae7-822b-46a5-b75e-2b57bf95a24b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9f:f1:63:14:63:74:af:b8:13:57:3b:8f:2c: 53:c2:6b:32:84:a3:ee:e5:83:98:8a:fc:83:dc:c9: 00:07:f7:35:82:69:34:05:50:3d:b4:0e:5f:58:0d: 77:c7:8a:f2:b1:7c:f8:bb:78:60:c9:64:df:11:b6: 72:2d:0e:01:69:00:05:cf:0e:ab:e7:fb:60:b0:1e: 54:5a:34:69:61:2c:4c:97:9a:4e:cb:ec:4f:f3:c1: 56:e9:20:99:e2:66:93:4d:e6:bd:f8:12:b8:28:3b: d8:6b:22:88:38:ea:bd:42:01:32:89:49:37:82:98: 79:d1:04:27:a9:13:df:c4:88:22:87:92:ab:22:a3: 06:f8:a3:99:35:5c:5a:52:1f:1f:26:d2:6a:b3:d5: 7a:9d:24:42:16:4e:4f:71:0d:b8:e2:3c:3f:23:93: 0a:26:00:60:0e:f3:40:b4:b7:71:c7:6a:e7:b7:d2: d5:00:ab:b1:54:e3:13:12:0d:09:95:a1:9b:ad:d3: b7:0c:b2:c8:84:bd:3b:63:cc:84:c4:b1:bb:e8:6b: 0d:eb:6f:5f:bf:8f:9c:ce:3c:74:d1:74:26:ce:bd: 3b:9e:0b:af:b8:1e:f3:02:b5:36:3b:cf:b0:d8:84: 74:f1:59:08:19:0d:4d:d9:1d:b5:d6:34:76:25:df: 7c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:9E:23:2E:C2:19:F4:93:F4:C3:71:9B:FD:61:0D:82:6C:2F:1C:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/823621b8-924d-3a4b-af59-2b62b286cb50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:54:60:68:11:c2:b3:f5:0c:dd:5d:30:ba:de:37:ff:c7:53: dc:7f:b8:e5:27:2b:2d:98:83:39:47:62:15:9d:05:d2:f5:ab: 26:ea:82:40:96:7e:cb:30:72:c6:83:d3:34:91:26:f3:d7:49: ad:b5:91:97:49:51:72:57:fa:8f:8a:ab:11:06:7b:04:eb:5b: b7:a7:d5:68:8d:ff:aa:85:d0:29:1d:8b:b4:1a:31:b8:cb:18: 39:39:21:f9:40:cc:77:f4:ff:cd:7a:c6:e8:aa:08:49:c1:d5: 50:ed:ac:41:48:ea:53:5a:bc:f9:50:dd:47:fa:1d:85:df:90: ba:d8:0b:8f:68:90:c9:32:ff:f2:88:b0:d3:81:d7:76:d6:6d: 88:4c:7b:bf:ea:9d:6f:bc:32:58:43:92:8d:f1:7e:a6:34:bc: 54:6d:e4:3a:29:b6:b3:ad:87:3c:fc:8d:40:f2:7f:01:16:46: b5:e5:72:90:ed:e1:16:ee:96:c9:58:3f:3c:f5:a2:8b:e8:a3: 45:e7:3c:70:95:14:bc:d1:85:0e:bd:52:68:ba:47:c6:d6:6d: db:6a:d8:5c:94:8d:fe:80:2f:c2:1b:4a:9d:32:da:99:f1:30: f2:00:3f:61:64:3b:ef:d6:2c:ff:28:c5:12:f8:09:32:84:42: 74:f8:be:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jVJW5+Fvbbc3k7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NjQwYjBhZTctODIyYi00NmE1LWI3NWUtMmI1N2JmOTVhMjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZ/xYxRjdK+4E1c7jyxTwmsyhKPu5YOYivyD 3MkAB/c1gmk0BVA9tA5fWA13x4rysXz4u3hgyWTfEbZyLQ4BaQAFzw6r5/tgsB5U WjRpYSxMl5pOy+xP88FW6SCZ4maTTea9+BK4KDvYayKIOOq9QgEyiUk3gph50QQn qRPfxIgih5KrIqMG+KOZNVxaUh8fJtJqs9V6nSRCFk5PcQ244jw/I5MKJgBgDvNA tLdxx2rnt9LVAKuxVOMTEg0JlaGbrdO3DLLIhL07Y8yExLG76GsN629fv4+czjx0 0XQmzr07nguvuB7zArU2O8+w2IR08VkIGQ1N2R211jR2Jd98dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyeIy7CGfST9MNxm/1hDYJsLxzXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODIzNjIxYjgtOTI0ZC0z YTRiLWFmNTktMmI2MmIyODZjYjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxin+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlUYGgRwrP1DN1dMLreN//HU9x/uOUnKy2YgzlHYhWdBdL1qybqgkCW fsswcsaD0zSRJvPXSa21kZdJUXJX+o+KqxEGewTrW7en1WiN/6qF0Ckdi7QaMbjL GDk5IflAzHf0/816xuiqCEnB1VDtrEFI6lNavPlQ3Uf6HYXfkLrYC49okMky//KI sNOB13bWbYhMe7/qnW+8MlhDko3xfqY0vFRt5DoptrOthzz8jUDyfwEWRrXlcpDt 4RbulslYPzz1oovoo0XnPHCVFLzRhQ69Umi6R8bWbdtq2FyUjf6AL8IbSp0y2pnx MPIAP2FkO+/WLP8oxRL4CTKEQnT4vm8= -----END CERTIFICATE-----Generated at Wed Nov 5 10:57:01 2025 by rpki-client