$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0a3aa7b6-fb49-312e-95bd-50709ef39e9e.roa File: 0a3aa7b6-fb49-312e-95bd-50709ef39e9e.roa (raw, json) Hash identifier: gnYBoYlE8GjUrfUBWT7RJ9uMh4a1sdS2BHoRF3wezN4= Subject key identifier: B9:12:55:50:2B:AC:FD:01:83:10:EF:65:64:65:5A:EE:81:B6:52:19 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EED5225A331F3FBC3D336F180 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0a3aa7b6-fb49-312e-95bd-50709ef39e9e.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 162.158.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:25:a3:31:f3:fb:c3:d3:36:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=cc8d1666-7579-4d8c-aeb9-1c0df429d89c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1e:ad:52:1f:0d:7c:bc:a8:22:0f:a0:c2:33: ad:25:b9:dd:45:83:ae:e1:8b:84:5a:36:d7:ac:65: e9:5d:91:6f:46:70:74:da:ed:a7:2e:ab:c2:17:5d: a5:d7:8a:8d:36:42:ec:c3:cd:07:15:08:17:34:b1: 7f:99:6c:e1:b8:0b:2d:41:54:1e:c4:42:70:c9:b6: e6:01:52:e2:2e:c7:02:dc:3b:32:6a:fc:c6:86:15: b3:70:e2:1a:ce:4d:8b:90:c0:39:87:18:30:e8:8d: cf:be:a7:c4:d7:54:3c:bc:da:c7:f9:b6:23:dd:61: 9a:f9:57:3d:b7:9b:0c:d9:a5:19:91:d5:ce:ab:bf: 1b:af:6f:55:1e:aa:27:36:31:b4:a0:05:1e:82:38: cd:9e:d4:67:ce:38:57:4f:63:9a:c0:cb:37:f5:46: a1:21:d0:c5:2c:a6:97:51:6b:c9:7d:3d:ed:4a:7d: 41:b4:3b:ab:d4:98:cb:c4:c7:c6:e9:f0:4d:45:dd: 92:3e:c7:1e:42:44:72:ca:79:9a:ea:fe:2e:84:2f: 90:4a:c7:74:e8:dc:8e:e7:1a:ba:cf:d2:32:c8:de: e0:fd:a1:94:b8:5f:5e:a5:66:bf:81:6f:a2:c5:68: 00:f3:cb:c4:21:a9:eb:dc:0c:88:ad:bf:7a:a8:23: f8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:12:55:50:2B:AC:FD:01:83:10:EF:65:64:65:5A:EE:81:B6:52:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0a3aa7b6-fb49-312e-95bd-50709ef39e9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:b3:49:ef:9b:b8:e4:28:d9:d3:48:6b:65:35:c8:a7:6f:2a: c8:d5:1b:ed:a8:83:1c:78:57:be:bd:bb:7c:06:a8:92:91:f1: 3f:1b:97:a3:dd:b2:1d:b3:42:30:25:dd:a2:6c:0d:50:ca:49: e9:5e:bb:e3:1c:b4:7c:04:42:95:57:36:27:9b:9e:b2:cd:e2: bf:cc:77:44:00:8f:6f:e5:20:bf:55:12:a3:50:a7:d1:b7:ee: 1b:a6:4c:42:52:b4:83:70:37:f4:cb:24:88:37:ce:df:06:42: 09:53:ba:f3:7b:56:94:9c:d6:7c:f6:85:24:b2:7d:08:14:f4: f9:a6:f7:58:d2:f0:79:bc:7a:60:b5:4e:9d:c5:34:d2:c7:0f: 1a:e6:a1:6c:94:d4:92:ac:fe:24:0c:3d:1d:29:5e:e6:1d:fa: ca:09:ee:ea:12:20:3b:8a:f8:c8:fd:47:d4:61:28:43:ce:2e: 78:de:f4:34:47:33:5d:c0:aa:61:53:9e:b1:66:c4:c2:88:2f: 2d:3e:2a:d7:9a:57:82:ef:12:c1:de:6e:15:b0:22:c1:8a:fe: e3:66:88:46:47:b5:71:d6:db:91:ba:a2:42:09:f9:21:0b:c5: 55:a6:61:07:39:9e:5c:a1:73:56:5f:ed:9a:82:54:f9:92:78: b2:b4:b1:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUiWjMfP7w9M28YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk Y2M4ZDE2NjYtNzU3OS00ZDhjLWFlYjktMWMwZGY0MjlkODljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3R6tUh8NfLyoIg+gwjOtJbndRYOu4YuEWjbX rGXpXZFvRnB02u2nLqvCF12l14qNNkLsw80HFQgXNLF/mWzhuAstQVQexEJwybbm AVLiLscC3DsyavzGhhWzcOIazk2LkMA5hxgw6I3PvqfE11Q8vNrH+bYj3WGa+Vc9 t5sM2aUZkdXOq78br29VHqonNjG0oAUegjjNntRnzjhXT2OawMs39UahIdDFLKaX UWvJfT3tSn1BtDur1JjLxMfG6fBNRd2SPsceQkRyynma6v4uhC+QSsd06NyO5xq6 z9IyyN7g/aGUuF9epWa/gW+ixWgA88vEIanr3AyIrb96qCP4wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkSVVArrP0BgxDvZWRlWu6BtlIZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGEzYWE3YjYtZmI0OS0z MTJlLTk1YmQtNTA3MDllZjM5ZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop7EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEazSe+buOQo2dNIa2U1yKdvKsjVG+2ogxx4V769u3wGqJKR8T8bl6Pd sh2zQjAl3aJsDVDKSeleu+MctHwEQpVXNiebnrLN4r/Md0QAj2/lIL9VEqNQp9G3 7humTEJStINwN/TLJIg3zt8GQglTuvN7VpSc1nz2hSSyfQgU9Pmm91jS8Hm8emC1 Tp3FNNLHDxrmoWyU1JKs/iQMPR0pXuYd+soJ7uoSIDuK+Mj9R9RhKEPOLnje9DRH M13AqmFTnrFmxMKILy0+KteaV4LvEsHebhWwIsGK/uNmiEZHtXHW25G6okIJ+SEL xVWmYQc5nlyhc1Zf7ZqCVPmSeLK0sb0= -----END CERTIFICATE-----Generated at Tue Sep 22 07:08:04 2026 by rpki-client