$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bdf477c9-4b93-365a-9021-63d4a1a00934.roa File: bdf477c9-4b93-365a-9021-63d4a1a00934.roa (raw, json) Hash identifier: 5cZVuLOWYDo4pHJlKYkJYaAlJW0pAD8cciZRxcihOWs= Subject key identifier: 85:28:74:66:58:66:D2:B8:4C:53:50:8C:51:06:08:01:C5:CA:7E:EE Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D7A054CB02ADD5B1348999780 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bdf477c9-4b93-365a-9021-63d4a1a00934.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 132892 IP address blocks: 198.41.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:4c:b0:2a:dd:5b:13:48:99:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=e8ae7b1e-9a64-47ed-b642-1aca7f0cdb4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c6:2e:56:66:2a:74:ad:da:36:30:a4:4c:f2: d1:f9:a5:ab:07:9b:ce:5b:b2:f3:f4:41:52:11:cf: 1b:09:01:a9:23:8f:40:7d:02:c8:41:e9:9b:6d:ee: 5c:82:2c:3d:70:d2:f2:c4:e6:5c:6d:eb:f7:c0:5e: b2:8d:17:b4:44:bb:05:06:c1:d2:40:99:28:52:66: 47:74:3c:97:4c:2e:f6:6a:5f:8f:c3:27:42:64:55: 12:55:a8:3e:b5:a0:08:4e:8a:b8:b4:40:c9:80:35: b0:b4:13:ce:f4:fd:5f:93:ec:28:31:ae:ce:b6:6b: ce:bd:90:03:27:93:96:16:0a:8a:88:ce:2a:ec:be: 8c:27:d7:1d:b6:cc:c6:af:12:09:a2:c1:8f:e6:c5: 0e:a9:ba:40:5c:0f:d3:96:01:81:91:ea:0a:9d:ea: ab:43:ee:9a:ce:91:9b:71:7b:a2:f8:47:f6:42:0b: db:0f:2d:db:e1:3c:9d:9d:2a:f1:e5:c2:d5:f4:41: 30:44:e6:03:9e:48:fe:65:2c:1d:6c:43:c2:0e:c1: 1e:3b:0d:12:a1:6a:3d:60:2f:df:3e:51:1d:66:b6: 74:db:4c:af:1d:a6:5b:2f:87:2b:ed:14:6c:4a:d0: e2:d9:cf:63:a7:a7:39:8d:70:d7:63:ac:93:c2:2a: ae:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:28:74:66:58:66:D2:B8:4C:53:50:8C:51:06:08:01:C5:CA:7E:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bdf477c9-4b93-365a-9021-63d4a1a00934.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:bd:4d:5f:1a:72:51:e7:26:55:af:37:5d:ad:04:83:61:49: fa:83:90:c3:f3:9f:79:e7:d0:21:bb:ae:77:c6:d0:0c:23:b3: 15:04:52:e3:6d:1a:3a:a4:30:33:81:e0:0d:5c:e9:9b:87:1b: a2:fb:04:40:da:9a:05:2e:39:fe:fd:73:83:af:61:85:16:23: a0:9b:d3:39:cc:c1:76:b0:e9:dd:e3:b3:79:75:e6:eb:f2:54: 8a:01:0d:a2:74:92:c8:73:76:4c:85:e5:be:db:50:aa:8a:ef: f0:75:00:5e:2d:a0:cf:87:43:74:c5:5b:fb:b0:d5:62:20:af: 5e:6e:40:ef:d2:b3:93:e0:52:d2:8d:69:af:cc:e2:e4:15:b6: e4:0c:8a:c2:bc:40:2b:a4:16:36:40:0a:46:ce:00:4d:84:bc: f9:72:93:05:b5:8f:8b:31:42:8e:b4:d4:ee:21:9e:d9:03:00: c7:9c:2f:e4:b6:89:00:f0:53:83:e7:84:ac:fe:d2:92:81:b2: 18:ed:6c:2e:01:7d:5e:b8:c0:ca:fb:c6:98:d6:97:17:33:69: f6:6b:d6:ff:0d:17:77:58:59:83:fa:0f:8b:f3:5a:23:94:94: cb:05:51:f6:7e:62:f9:ea:c0:de:9c:e7:33:ce:46:18:54:cf: d9:a1:69:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BUywKt1bE0iZl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk ZThhZTdiMWUtOWE2NC00N2VkLWI2NDItMWFjYTdmMGNkYjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8YuVmYqdK3aNjCkTPLR+aWrB5vOW7Lz9EFS Ec8bCQGpI49AfQLIQembbe5cgiw9cNLyxOZcbev3wF6yjRe0RLsFBsHSQJkoUmZH dDyXTC72al+PwydCZFUSVag+taAIToq4tEDJgDWwtBPO9P1fk+woMa7OtmvOvZAD J5OWFgqKiM4q7L6MJ9cdtszGrxIJosGP5sUOqbpAXA/TlgGBkeoKneqrQ+6azpGb cXui+Ef2QgvbDy3b4TydnSrx5cLV9EEwROYDnkj+ZSwdbEPCDsEeOw0SoWo9YC/f PlEdZrZ020yvHaZbL4cr7RRsStDi2c9jp6c5jXDXY6yTwiqueQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIUodGZYZtK4TFNQjFEGCAHFyn7uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmRmNDc3YzktNGI5My0z NjVhLTkwMjEtNjNkNGExYTAwOTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxin4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEK9TV8aclHnJlWvN12tBINhSfqDkMPzn3nn0CG7rnfG0AwjsxUEUuNt GjqkMDOB4A1c6ZuHG6L7BEDamgUuOf79c4OvYYUWI6Cb0znMwXaw6d3js3l15uvy VIoBDaJ0kshzdkyF5b7bUKqK7/B1AF4toM+HQ3TFW/uw1WIgr15uQO/Ss5PgUtKN aa/M4uQVtuQMisK8QCukFjZACkbOAE2EvPlykwW1j4sxQo601O4hntkDAMecL+S2 iQDwU4PnhKz+0pKBshjtbC4BfV64wMr7xpjWlxczafZr1v8NF3dYWYP6D4vzWiOU lMsFUfZ+YvnqwN6c5zPORhhUz9mhaWU= -----END CERTIFICATE-----Generated at Fri Apr 17 18:47:46 2026 by rpki-client