$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b490e33-950c-3b95-b438-f40c17a6b821.roa File: 9b490e33-950c-3b95-b438-f40c17a6b821.roa (raw, json) Hash identifier: wbJePaJhusf0Sfv1J6ldTFz3JV3Mxq0nAymVaNKKdro= Subject key identifier: 6D:17:5E:A3:FF:19:8A:C1:61:65:A8:35:02:37:81:C2:06:75:77:C6 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584C9106F612FBEDC3552F0BF680 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b490e33-950c-3b95-b438-f40c17a6b821.roa Signing time: Sun 18 Jan 2026 14:00:39 +0000 ROA not before: Sun 18 Jan 2026 14:00:39 +0000 ROA not after: Sat 18 Apr 2026 13:00:39 +0000 asID: 13335 IP address blocks: 198.41.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:91:06:f6:12:fb:ed:c3:55:2f:0b:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jan 18 14:00:39 2026 GMT Not After : Apr 18 13:00:39 2026 GMT Subject: CN=168585e2-6c6d-4405-864c-7ae7b6beba76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d6:4b:74:3b:d5:67:0c:3c:2f:aa:3d:6a:ad: 0f:3f:5b:08:bc:e0:77:58:13:87:ce:c3:9d:5c:aa: 4d:e8:68:2e:0a:cb:a2:c3:f9:ea:e4:6b:e7:6c:b7: 3e:d1:e6:ce:73:ea:51:80:ac:3e:7b:a1:a3:a8:b9: e8:ce:b0:69:0b:ab:81:f0:b5:08:a5:69:ba:2d:86: e3:1f:e4:37:f0:ad:1a:7a:14:22:9c:4c:58:cd:85: 25:de:e4:00:6f:3b:a7:87:66:41:8e:e6:b7:56:8b: 1f:1f:40:a9:80:bc:ae:70:44:86:1b:9f:5c:e5:8e: 74:f3:2e:33:9c:3d:db:af:cd:52:f9:b2:be:90:9b: 95:e8:44:60:57:a6:77:21:bc:b8:5c:46:6a:5f:81: db:31:55:d9:ad:34:1e:51:46:84:0c:29:0e:3b:79: f1:29:f3:ab:8e:30:cf:12:ef:b6:12:82:71:b8:85: a8:df:4a:a7:d0:ff:ee:e2:a3:67:7e:d8:96:68:1a: 3f:45:7d:f5:da:80:aa:5c:80:34:cf:7b:ce:00:ec: be:3f:c1:64:be:a1:3f:df:58:f0:94:77:de:e8:29: bd:95:1f:33:15:e6:1b:ac:2b:fa:67:06:3a:88:15: 87:34:5f:05:a6:e0:85:41:3d:84:14:6b:85:d1:f7: c2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:17:5E:A3:FF:19:8A:C1:61:65:A8:35:02:37:81:C2:06:75:77:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b490e33-950c-3b95-b438-f40c17a6b821.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:7f:f8:e5:c7:16:ef:ed:74:7c:5e:85:c7:0e:a4:ae:74:4b: d4:df:04:ac:f6:d9:d8:59:08:46:f7:c8:a3:10:c5:1b:3f:28: a6:e5:67:96:df:bc:cd:8f:a5:80:be:43:8c:43:2b:b1:54:c9: 4a:2f:0f:71:71:7e:90:d7:9e:38:e3:00:e8:e2:12:7e:b2:a7: 18:9d:ac:a9:73:86:a6:ec:bb:30:ae:08:d2:09:a9:90:3a:32: 36:ec:49:90:fc:95:0a:23:f8:6a:14:88:34:d3:b4:23:32:cc: 56:eb:7a:35:30:3c:a8:00:28:23:ce:3d:72:e2:6e:bc:88:25: f2:b4:6c:4b:81:15:5c:03:89:d5:93:d4:41:7f:c7:a9:7f:f0: c8:80:1e:31:5d:ca:1c:a7:dc:dd:17:f2:c8:e2:2a:99:61:e7: 1c:ef:bd:80:77:dc:b1:9b:33:d3:09:27:fa:91:85:1f:12:9c: a9:2d:cb:d0:42:16:65:9e:f1:85:c3:20:ec:38:ce:b3:cb:4c: 2d:21:3b:3b:4a:0a:3a:19:38:3f:81:87:eb:67:0e:28:26:ce: 63:f2:37:79:1a:7e:7a:8b:6e:4b:94:f5:6a:11:47:18:0d:95: 61:03:d9:1d:5c:2d:ea:58:72:47:e7:c8:9f:af:52:e5:44:36: b9:25:f9:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyRBvYS++3DVS8L9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDExODE0MDAzOVoXDTI2MDQxODEzMDAzOVowLzEtMCsGA1UEAxMk MTY4NTg1ZTItNmM2ZC00NDA1LTg2NGMtN2FlN2I2YmViYTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtZLdDvVZww8L6o9aq0PP1sIvOB3WBOHzsOd XKpN6GguCsuiw/nq5GvnbLc+0ebOc+pRgKw+e6GjqLnozrBpC6uB8LUIpWm6LYbj H+Q38K0aehQinExYzYUl3uQAbzunh2ZBjua3VosfH0CpgLyucESGG59c5Y508y4z nD3br81S+bK+kJuV6ERgV6Z3Iby4XEZqX4HbMVXZrTQeUUaEDCkOO3nxKfOrjjDP Eu+2EoJxuIWo30qn0P/u4qNnftiWaBo/RX312oCqXIA0z3vOAOy+P8FkvqE/31jw lHfe6Cm9lR8zFeYbrCv6ZwY6iBWHNF8FpuCFQT2EFGuF0ffCXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0XXqP/GYrBYWWoNQI3gcIGdXfGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWI0OTBlMzMtOTUwYy0z Yjk1LWI0MzgtZjQwYzE3YTZiODIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAximAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALV/+OXHFu/tdHxehccOpK50S9TfBKz22dhZCEb3yKMQxRs/KKblZ5bf vM2PpYC+Q4xDK7FUyUovD3FxfpDXnjjjAOjiEn6ypxidrKlzhqbsuzCuCNIJqZA6 MjbsSZD8lQoj+GoUiDTTtCMyzFbrejUwPKgAKCPOPXLibryIJfK0bEuBFVwDidWT 1EF/x6l/8MiAHjFdyhyn3N0X8sjiKplh5xzvvYB33LGbM9MJJ/qRhR8SnKkty9BC FmWe8YXDIOw4zrPLTC0hOztKCjoZOD+Bh+tnDigmzmPyN3kafnqLbkuU9WoRRxgN lWED2R1cLepYckfnyJ+vUuVENrkl+UA= -----END CERTIFICATE-----Generated at Sun Mar 1 19:24:31 2026 by rpki-client