$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/04c158d7-f323-327e-b34c-d4924bc0b2da.roa File: 04c158d7-f323-327e-b34c-d4924bc0b2da.roa (raw, json) Hash identifier: Mi5T8YYltH8K228VwMFHVQ3NTqOAMg2cncGrOYJ+Pco= Subject key identifier: 1A:0A:CD:43:4D:FC:39:F9:E0:8A:3B:7E:1C:9B:40:5F:BE:D9:D3:8E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF44CC73D6C080DF1BF70BA80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/04c158d7-f323-327e-b34c-d4924bc0b2da.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 199.27.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:c7:3d:6c:08:0d:f1:bf:70:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=90404049-f522-41ce-ab32-4f63ebcbc48a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:18:2c:e1:f8:9d:f1:1c:1b:83:7f:05:2d:07: dd:65:ab:e6:9e:57:70:b5:e5:ad:13:5f:9f:ed:e6: 82:84:52:62:fe:8f:8b:31:fb:e8:cc:1f:52:d6:97: c8:33:d8:0e:51:93:23:de:34:49:33:72:34:da:92: 51:4b:1a:f6:d0:d1:8c:c4:5c:b7:08:b4:b1:95:fb: 47:b7:2d:46:55:bb:fc:22:b9:fc:0c:4f:5a:5a:60: 03:63:92:cb:cc:8b:64:0f:40:f6:db:77:0b:b7:60: 83:ea:23:dd:c2:e8:57:49:8b:f2:66:68:46:26:f7: 3b:04:f4:e0:73:0b:70:7b:28:69:a2:1c:94:92:b4: b6:b5:2a:59:31:b3:c5:c5:8d:99:f1:7d:fa:c2:f7: 14:42:77:57:ee:75:d5:4b:0b:55:6f:5e:21:ff:1b: 19:2c:74:ed:f0:47:92:40:22:0b:40:14:d6:e1:38: cc:36:f2:a3:06:2b:1a:c6:dd:0e:1c:dc:c8:a6:1e: 70:89:6b:a8:56:91:86:8e:39:33:d4:53:d3:26:5d: d3:fc:95:26:ce:41:f1:54:b4:35:0f:35:a6:c7:82: b0:cd:e1:46:cb:95:84:8b:5c:ec:7f:ca:c9:59:5e: ab:15:19:a4:89:f6:99:78:07:d2:b2:84:9f:71:06: 48:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:0A:CD:43:4D:FC:39:F9:E0:8A:3B:7E:1C:9B:40:5F:BE:D9:D3:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/04c158d7-f323-327e-b34c-d4924bc0b2da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 199.27.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:af:b6:7e:9e:10:94:1d:a5:a3:1a:50:b8:b2:64:34:27:7a: b5:71:9b:74:9c:0a:51:b2:d3:9d:c0:b3:1d:ca:be:b0:78:85: d1:cd:0b:80:a5:ae:94:1e:85:12:98:08:08:6d:6a:ed:ee:e2: 0e:99:0e:1e:fb:05:d3:d5:33:73:80:a5:77:57:d0:8a:a4:ef: db:22:10:d2:42:e2:a2:bd:64:56:c4:2d:9e:21:a7:37:5f:7e: d1:be:4d:4f:ed:2d:a1:83:87:1d:3f:94:67:2b:48:0c:bb:46: 9e:a9:34:1a:6c:c3:e5:97:e8:43:72:59:6d:fe:78:e4:ea:31: 4f:b3:83:2c:43:e7:9f:89:76:3c:a7:61:b0:f1:dd:99:75:f1: c5:e3:c8:c2:86:c4:cd:cf:ed:8b:fa:ed:fb:90:79:70:a1:b9: 4b:e9:2d:f4:9a:e7:5f:7a:bd:90:32:f2:48:88:7b:cf:52:e0: f8:c0:a0:69:32:58:31:f1:8d:df:ba:a3:79:1c:97:91:4d:e2: 7f:bb:ad:fc:27:4f:0e:40:0b:02:f2:66:98:d3:a1:d7:51:55: 91:8f:cf:82:79:fd:10:1d:fa:bd:4e:68:90:fa:0f:bf:20:fa: 50:61:95:cc:e1:fd:1b:ca:0d:ab:b5:54:57:e3:e1:e5:8c:c9: b2:ba:2c:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TMc9bAgN8b9wuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk OTA0MDQwNDktZjUyMi00MWNlLWFiMzItNGY2M2ViY2JjNDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhgs4fid8Rwbg38FLQfdZavmnldwteWtE1+f 7eaChFJi/o+LMfvozB9S1pfIM9gOUZMj3jRJM3I02pJRSxr20NGMxFy3CLSxlftH ty1GVbv8Irn8DE9aWmADY5LLzItkD0D223cLt2CD6iPdwuhXSYvyZmhGJvc7BPTg cwtweyhpohyUkrS2tSpZMbPFxY2Z8X36wvcUQndX7nXVSwtVb14h/xsZLHTt8EeS QCILQBTW4TjMNvKjBisaxt0OHNzIph5wiWuoVpGGjjkz1FPTJl3T/JUmzkHxVLQ1 DzWmx4KwzeFGy5WEi1zsf8rJWV6rFRmkifaZeAfSsoSfcQZIqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBoKzUNN/Dn54Io7fhybQF++2dOOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDRjMTU4ZDctZjMyMy0z MjdlLWIzNGMtZDQ5MjRiYzBiMmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxxuGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOvtn6eEJQdpaMaULiyZDQnerVxm3ScClGy053Asx3KvrB4hdHNC4Cl rpQehRKYCAhtau3u4g6ZDh77BdPVM3OApXdX0Iqk79siENJC4qK9ZFbELZ4hpzdf ftG+TU/tLaGDhx0/lGcrSAy7Rp6pNBpsw+WX6ENyWW3+eOTqMU+zgyxD55+Jdjyn YbDx3Zl18cXjyMKGxM3P7Yv67fuQeXChuUvpLfSa5196vZAy8kiIe89S4PjAoGky WDHxjd+6o3kcl5FN4n+7rfwnTw5ACwLyZpjToddRVZGPz4J5/RAd+r1OaJD6D78g +lBhlczh/RvKDau1VFfj4eWMybK6LNs= -----END CERTIFICATE-----Generated at Sat Sep 26 15:30:07 2026 by rpki-client