$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b490e33-950c-3b95-b438-f40c17a6b821.roa File: 9b490e33-950c-3b95-b438-f40c17a6b821.roa (raw, json) Hash identifier: PekAAMzlFnVAhs/TnuJPaoSrnWzEzOa8Q1k/yvDHCj4= Subject key identifier: 4E:95:F9:00:07:F7:C4:64:CD:A4:4B:29:08:26:FF:62:F2:23:B5:82 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D71A5196058AD4E8B5ABC2780 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b490e33-950c-3b95-b438-f40c17a6b821.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 198.41.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:19:60:58:ad:4e:8b:5a:bc:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=e6a915ec-7730-44de-953e-6c096a16603c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:53:ce:f0:1b:72:5c:75:02:5e:e0:e1:09:02: a6:f6:e5:46:85:50:5b:35:31:85:b5:10:03:05:41: 41:70:c9:c8:d5:91:5a:71:56:ad:99:79:a6:27:8e: 0b:e3:96:b9:b4:af:0f:fc:71:da:ae:f1:4d:09:ae: 58:f0:05:f3:a6:38:85:7c:45:56:62:18:d3:24:94: 34:10:b0:59:2a:ae:1b:a7:d2:b2:3d:75:90:75:d5: d9:f3:56:1f:82:88:26:f7:61:9a:b9:61:94:08:ef: 40:37:9d:90:cf:a8:a2:05:78:f2:44:82:cb:1f:df: 80:72:55:4b:68:f3:07:5a:a2:b9:29:aa:73:77:14: d0:40:ca:41:0f:d5:15:a1:2c:ec:de:c9:d2:ca:b9: 1b:9e:01:b3:5d:8f:8c:c9:9c:87:3f:c0:db:2b:9d: 56:4d:d6:41:54:90:75:79:0e:0d:1d:f3:e1:e1:e4: f4:a4:48:d0:09:46:2d:c7:10:5b:93:e9:a0:65:51: 32:7c:b8:e3:10:c9:b3:66:9a:e7:45:0d:a7:df:39: 08:7f:d9:a0:b4:91:37:4a:db:9a:0e:e6:3a:b1:d6: 1b:aa:85:e8:d1:69:83:99:31:62:da:21:61:6e:78: 5f:dd:21:6a:a3:e7:8d:24:ee:d2:9c:98:f8:bf:e2: 0e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:95:F9:00:07:F7:C4:64:CD:A4:4B:29:08:26:FF:62:F2:23:B5:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b490e33-950c-3b95-b438-f40c17a6b821.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:3e:26:94:3a:49:91:df:f0:bd:13:d3:a1:00:68:bc:5f:bf: c9:26:e3:22:df:39:e6:92:32:2f:79:1d:17:a7:dd:45:d3:f2: a5:36:28:69:a0:4c:65:8d:09:33:16:de:e4:66:bc:aa:6e:e6: 79:75:07:2c:44:e6:ac:ae:c6:ab:20:c5:31:83:67:00:6e:09: 9e:d0:d3:00:83:a9:fd:90:f1:12:e0:a6:77:29:0d:e9:d7:17: 69:1b:33:76:a8:e9:6f:1b:86:94:a1:76:c3:e1:43:4e:dc:45: 2e:f7:37:55:4c:77:4e:3a:bc:47:47:7f:77:23:4a:d2:d2:86: a0:ba:7c:c2:a7:14:f8:0e:24:29:1e:42:07:77:9b:7a:47:6d: 35:05:76:cc:77:fc:8d:40:17:f9:83:ee:f2:5a:61:67:15:e4: c1:f1:78:e4:4e:75:03:20:90:25:f1:50:a9:e7:01:ce:3c:ea: 5b:a5:93:0e:a3:9e:43:ea:49:04:e3:63:b6:aa:ab:b5:33:6b: 49:f7:d5:8f:ab:ab:42:d8:01:2d:3a:5d:3e:f8:45:6d:37:3c: 4a:b2:60:40:39:11:9b:be:9a:c6:77:ce:46:10:65:c0:58:62: bd:9a:d6:c6:e5:d1:18:32:c9:c4:f6:d8:ce:11:6c:8a:2b:3d: 9d:0f:25:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpRlgWK1Oi1q8J4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk ZTZhOTE1ZWMtNzczMC00NGRlLTk1M2UtNmMwOTZhMTY2MDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1PO8BtyXHUCXuDhCQKm9uVGhVBbNTGFtRAD BUFBcMnI1ZFacVatmXmmJ44L45a5tK8P/HHarvFNCa5Y8AXzpjiFfEVWYhjTJJQ0 ELBZKq4bp9KyPXWQddXZ81Yfgogm92GauWGUCO9AN52Qz6iiBXjyRILLH9+AclVL aPMHWqK5KapzdxTQQMpBD9UVoSzs3snSyrkbngGzXY+MyZyHP8DbK51WTdZBVJB1 eQ4NHfPh4eT0pEjQCUYtxxBbk+mgZVEyfLjjEMmzZprnRQ2n3zkIf9mgtJE3Stua DuY6sdYbqoXo0WmDmTFi2iFhbnhf3SFqo+eNJO7SnJj4v+IOfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6V+QAH98RkzaRLKQgm/2LyI7WCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWI0OTBlMzMtOTUwYy0z Yjk1LWI0MzgtZjQwYzE3YTZiODIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAximAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8+JpQ6SZHf8L0T06EAaLxfv8km4yLfOeaSMi95HRen3UXT8qU2KGmg TGWNCTMW3uRmvKpu5nl1ByxE5qyuxqsgxTGDZwBuCZ7Q0wCDqf2Q8RLgpncpDenX F2kbM3ao6W8bhpShdsPhQ07cRS73N1VMd046vEdHf3cjStLShqC6fMKnFPgOJCke Qgd3m3pHbTUFdsx3/I1AF/mD7vJaYWcV5MHxeOROdQMgkCXxUKnnAc486lulkw6j nkPqSQTjY7aqq7Uza0n31Y+rq0LYAS06XT74RW03PEqyYEA5EZu+msZ3zkYQZcBY Yr2a1sbl0RgyycT22M4RbIorPZ0PJaM= -----END CERTIFICATE-----Generated at Fri Apr 17 20:36:12 2026 by rpki-client