$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/85a6094a-4a11-3c96-aa72-c52957b7b244.roa File: 85a6094a-4a11-3c96-aa72-c52957b7b244.roa (raw, json) Hash identifier: MvoMfDvuExATdDnNRemefdDvCfM7ulGs7elgO2CN4Lc= Subject key identifier: A8:95:C0:36:95:8F:A5:C1:1D:DC:F5:CF:F0:93:8A:75:5C:FA:B2:86 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB88D3D1A3832E7D793D28400 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/85a6094a-4a11-3c96-aa72-c52957b7b244.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 395747 IP address blocks: 198.41.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:3d:1a:38:32:e7:d7:93:d2:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=7438364e-2e1a-4a27-b7ba-775de4a5e557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:94:89:75:d5:53:9b:0e:b1:d1:61:be:9e:77: 85:f9:10:4f:8b:6f:f1:27:b9:0a:d3:f0:02:a0:cf: 71:57:d3:fb:1f:85:b7:57:c1:b5:11:87:72:33:d4: 32:c9:6a:39:3b:ec:ec:d0:ba:ff:54:f7:78:53:73: 90:04:64:b0:ff:eb:19:ca:6a:e0:06:65:fc:cd:79: 79:1e:70:e2:75:47:13:06:6a:96:84:44:f2:fd:fa: 38:74:2e:94:c8:43:5e:2b:6d:87:d6:9f:66:45:8b: 90:58:5a:a0:0a:09:95:da:a2:2c:3e:c5:cd:6d:50: 6d:18:73:37:68:c0:95:ed:7c:1d:62:90:6a:ff:9a: 4d:34:74:83:19:6d:fe:b0:00:09:ea:9e:c2:35:ab: f2:e4:9a:f8:6f:0c:48:db:d1:f7:ff:46:e6:e1:30: 0c:71:e0:73:f7:5d:da:3e:f6:42:7a:50:38:a5:93: 2f:d4:79:f0:de:a8:98:b5:bd:b2:b9:e8:be:2f:3d: 1d:79:d5:b0:58:30:7c:1f:8d:1e:21:42:94:b1:c1: 51:a1:6a:94:db:09:8c:1f:60:ea:48:3f:a2:ce:7a: ae:5d:4c:d9:26:f4:d1:77:20:09:f6:25:96:25:47: db:65:05:39:71:04:42:25:36:f5:67:ed:62:d3:df: e8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:95:C0:36:95:8F:A5:C1:1D:DC:F5:CF:F0:93:8A:75:5C:FA:B2:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/85a6094a-4a11-3c96-aa72-c52957b7b244.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:24:a5:e6:06:ec:1c:06:87:1b:8a:79:22:34:db:ee:f9:2a: bb:07:60:84:7b:29:56:2d:91:c8:51:fc:e4:42:05:2a:14:4d: 50:b7:34:8a:dd:f1:00:a1:4c:b7:1b:c7:4f:52:b0:f7:80:e8: d2:73:30:c9:af:be:77:4d:19:1d:95:2d:d9:db:28:03:07:f5: d0:9c:05:58:d4:60:31:51:57:23:f4:52:90:fd:fc:8f:d0:db: a3:91:bd:41:b3:ce:50:c9:89:91:2d:8d:e8:1e:a9:0d:75:b2: 3d:61:f1:6d:19:f2:91:a1:bd:76:8b:fa:16:d7:96:cd:cf:75: 3a:17:a0:ba:0e:e3:a1:5b:0c:90:4e:f8:38:e5:db:b0:73:8f: 38:d2:f5:19:cf:52:4e:47:19:4d:a1:a3:fb:b3:78:e0:67:21: 22:9c:70:8d:9c:ed:35:93:37:08:f4:57:30:0b:06:d3:2b:60: 51:18:a7:6f:de:cc:16:18:79:5a:3f:1c:e3:12:04:db:0e:6d: 0d:23:21:6e:bf:5f:89:b6:80:ed:c6:e6:9f:04:72:eb:11:77: 76:c3:f4:62:ab:24:5c:a5:76:20:70:0c:75:33:8a:7e:35:4c: 61:c9:a4:9a:f4:2c:9e:5f:8f:85:0a:13:01:0c:95:c4:d7:45: c5:b2:02:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jT0aODLn15PShAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NzQzODM2NGUtMmUxYS00YTI3LWI3YmEtNzc1ZGU0YTVlNTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5SJddVTmw6x0WG+nneF+RBPi2/xJ7kK0/AC oM9xV9P7H4W3V8G1EYdyM9QyyWo5O+zs0Lr/VPd4U3OQBGSw/+sZymrgBmX8zXl5 HnDidUcTBmqWhETy/fo4dC6UyENeK22H1p9mRYuQWFqgCgmV2qIsPsXNbVBtGHM3 aMCV7XwdYpBq/5pNNHSDGW3+sAAJ6p7CNavy5Jr4bwxI29H3/0bm4TAMceBz913a PvZCelA4pZMv1Hnw3qiYtb2yuei+Lz0dedWwWDB8H40eIUKUscFRoWqU2wmMH2Dq SD+iznquXUzZJvTRdyAJ9iWWJUfbZQU5cQRCJTb1Z+1i09/oLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKiVwDaVj6XBHdz1z/CTinVc+rKGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODVhNjA5NGEtNGExMS0z Yzk2LWFhNzItYzUyOTU3YjdiMjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCximEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEkpeYG7BwGhxuKeSI02+75KrsHYIR7KVYtkchR/ORCBSoUTVC3NIrd 8QChTLcbx09SsPeA6NJzMMmvvndNGR2VLdnbKAMH9dCcBVjUYDFRVyP0UpD9/I/Q 26ORvUGzzlDJiZEtjegeqQ11sj1h8W0Z8pGhvXaL+hbXls3PdToXoLoO46FbDJBO +Djl27BzjzjS9RnPUk5HGU2ho/uzeOBnISKccI2c7TWTNwj0VzALBtMrYFEYp2/e zBYYeVo/HOMSBNsObQ0jIW6/X4m2gO3G5p8EcusRd3bD9GKrJFyldiBwDHUzin41 TGHJpJr0LJ5fj4UKEwEMlcTXRcWyAsQ= -----END CERTIFICATE-----Generated at Wed Nov 5 09:20:55 2025 by rpki-client