$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bdf477c9-4b93-365a-9021-63d4a1a00934.roa File: bdf477c9-4b93-365a-9021-63d4a1a00934.roa (raw, json) Hash identifier: UD0klOlovsi+ZYaZJZGT+nSNwd2AVbwF/nadN/mmUnI= Subject key identifier: 51:02:40:B2:20:5E:A0:78:A6:B5:D9:BB:52:74:92:A0:57:28:88:40 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB88D5234CD693F2F71A37800 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bdf477c9-4b93-365a-9021-63d4a1a00934.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 132892 IP address blocks: 198.41.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:52:34:cd:69:3f:2f:71:a3:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=f40cfd8d-5d4a-4e0d-82b8-71807c307ef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:54:6c:cd:62:c0:76:52:56:46:0f:f9:dd:f6: 67:37:ff:df:af:f5:e2:1e:ab:4c:5a:11:ad:3c:20: eb:02:4c:d6:40:f5:02:92:89:f0:0e:8e:bf:24:ad: d8:6b:b3:a7:1b:2a:f5:c3:65:9f:71:ed:1a:d6:60: 15:6d:12:d2:73:a5:92:ce:12:ba:1b:b4:32:3a:c3: d6:7e:96:7b:68:70:e9:f9:08:34:56:04:74:f5:ed: de:1e:43:da:12:f3:fb:6b:1f:4a:bd:1a:88:f1:c5: 49:37:7a:26:d7:f3:37:90:27:3c:4a:8b:d7:7b:45: e7:f9:42:a0:82:5e:96:ad:30:32:80:03:03:03:f5: 50:01:75:c0:74:9f:c8:f8:e5:04:2f:12:ef:b0:1a: c9:0e:f5:2b:1e:ba:28:64:d1:3b:ca:4e:db:46:eb: 96:8d:c2:a6:42:e8:0a:29:92:a0:b6:54:f1:b7:c5: d3:5b:20:33:2c:a8:ec:40:c8:3b:7a:dd:25:f3:52: a2:e1:be:df:83:91:26:91:eb:85:b8:f7:b0:0a:1f: d0:d7:86:f1:66:36:7d:87:c5:c0:ca:b3:3a:ee:c2: 6f:15:39:a1:2a:9b:58:97:06:4e:6b:af:90:3b:a1: bd:fa:04:47:e9:83:4a:92:73:42:cf:0a:12:ab:75: ed:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:02:40:B2:20:5E:A0:78:A6:B5:D9:BB:52:74:92:A0:57:28:88:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bdf477c9-4b93-365a-9021-63d4a1a00934.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:20:07:8b:31:3b:76:72:15:01:74:aa:af:55:3f:b8:d3:0f: ca:49:e2:03:25:fe:b9:75:9f:67:a6:87:93:f1:20:47:9d:2f: 8b:49:c3:d1:32:6f:91:24:18:91:94:cf:30:57:11:fb:23:ab: 02:88:c9:39:a8:c1:f1:83:5a:a2:39:a7:9a:04:fb:5f:b5:d0: 7d:0d:b4:18:60:80:95:1c:99:4a:e1:46:7a:00:4f:bb:38:e4: de:19:04:67:b3:64:9b:b8:28:6b:e1:7f:12:d1:06:eb:0f:a4: 1c:0d:52:5d:f8:ca:75:13:f9:2f:3f:a8:c1:18:cb:d7:5f:bb: c6:8c:9c:d2:a2:b5:fe:21:be:6e:f2:57:09:92:5f:5b:f6:56: 62:a8:77:11:77:43:78:3c:a0:88:ef:46:d8:dc:b8:04:65:02: 21:b0:7e:f0:bd:a3:27:d7:7f:7f:38:48:84:86:eb:f2:26:69: 51:57:ef:23:4e:24:b6:a9:bb:40:1b:db:af:35:9f:b4:41:45: 3e:d1:60:a5:e1:15:d3:dd:16:99:e0:13:d1:02:fc:b2:95:02: 01:97:27:90:62:a4:8d:5d:3f:30:c1:16:6b:30:97:cd:27:91: 1d:67:29:75:81:62:25:0b:42:14:31:9d:a8:11:14:3f:0c:bc: 27:02:9e:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jVI0zWk/L3GjeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZjQwY2ZkOGQtNWQ0YS00ZTBkLTgyYjgtNzE4MDdjMzA3ZWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFRszWLAdlJWRg/53fZnN//fr/XiHqtMWhGt PCDrAkzWQPUCkonwDo6/JK3Ya7OnGyr1w2Wfce0a1mAVbRLSc6WSzhK6G7QyOsPW fpZ7aHDp+Qg0VgR09e3eHkPaEvP7ax9KvRqI8cVJN3om1/M3kCc8SovXe0Xn+UKg gl6WrTAygAMDA/VQAXXAdJ/I+OUELxLvsBrJDvUrHrooZNE7yk7bRuuWjcKmQugK KZKgtlTxt8XTWyAzLKjsQMg7et0l81Ki4b7fg5EmkeuFuPewCh/Q14bxZjZ9h8XA yrM67sJvFTmhKptYlwZOa6+QO6G9+gRH6YNKknNCzwoSq3XtLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFECQLIgXqB4prXZu1J0kqBXKIhAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmRmNDc3YzktNGI5My0z NjVhLTkwMjEtNjNkNGExYTAwOTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxin4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYgB4sxO3ZyFQF0qq9VP7jTD8pJ4gMl/rl1n2emh5PxIEedL4tJw9Ey b5EkGJGUzzBXEfsjqwKIyTmowfGDWqI5p5oE+1+10H0NtBhggJUcmUrhRnoAT7s4 5N4ZBGezZJu4KGvhfxLRBusPpBwNUl34ynUT+S8/qMEYy9dfu8aMnNKitf4hvm7y VwmSX1v2VmKodxF3Q3g8oIjvRtjcuARlAiGwfvC9oyfXf384SISG6/ImaVFX7yNO JLapu0Ab2681n7RBRT7RYKXhFdPdFpngE9EC/LKVAgGXJ5BipI1dPzDBFmswl80n kR1nKXWBYiULQhQxnagRFD8MvCcCnjg= -----END CERTIFICATE-----Generated at Wed Nov 5 11:34:36 2025 by rpki-client