$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0d2981bb-d6a7-3230-8854-cfc34d7a42b6.roa File: 0d2981bb-d6a7-3230-8854-cfc34d7a42b6.roa (raw, json) Hash identifier: rsQZtTLjEMPNK9m9+NM7ld6JjTMGFc7sp/KbkVmwAm8= Subject key identifier: 7B:C4:AA:2C:17:10:3E:9F:90:42:DA:D7:78:F7:10:CC:C6:43:B2:5A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F0C07870F2C8ECBB1EF50EE40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0d2981bb-d6a7-3230-8854-cfc34d7a42b6.roa Signing time: Thu 03 Sep 2026 01:00:12 +0000 ROA not before: Thu 03 Sep 2026 01:00:12 +0000 ROA not after: Wed 02 Dec 2026 02:00:12 +0000 asID: 13335 IP address blocks: 162.159.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0c:07:87:0f:2c:8e:cb:b1:ef:50:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 3 01:00:12 2026 GMT Not After : Dec 2 02:00:12 2026 GMT Subject: CN=27a359fe-5050-411f-962c-317d5e76379f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1a:b2:ae:f0:8d:ae:e3:0f:95:f1:74:b5:1e: b3:4a:45:17:5e:da:17:84:da:8b:76:d9:a1:8e:ed: 3a:c1:9f:92:5f:35:8e:bd:9c:d0:45:d1:f8:7b:d7: 2d:b4:82:c9:17:03:6a:93:63:08:de:71:b5:6f:cc: 6d:0b:1a:dd:89:d3:8e:a3:c8:4e:c8:1a:01:1c:fc: a5:26:e0:01:a5:fd:70:18:ba:db:78:59:b8:af:11: 6e:d7:3d:b5:99:28:30:58:50:45:81:04:be:51:ed: 64:61:40:b1:96:4f:a1:4c:7c:7c:d1:8d:c0:d8:7e: 67:7c:58:ec:9a:a3:73:12:1b:3b:97:65:2c:5d:e4: 0a:43:83:75:fa:ae:cc:c8:e5:7a:76:81:7f:db:ea: cd:af:21:e5:0c:7f:08:eb:2b:14:ec:56:13:df:22: 94:9d:b1:39:2a:43:8e:08:ba:74:f1:3d:2f:2f:a0: 03:a7:3d:f2:68:11:be:4b:40:48:f7:2f:a1:6c:ad: 22:d3:d1:b8:50:f8:4d:96:4d:0c:ea:92:bb:88:4a: 1c:08:7f:87:10:b8:13:8c:69:1c:12:ba:42:ae:3f: 94:ce:68:e7:3a:30:cb:76:8b:dd:32:24:1b:63:eb: 8f:17:51:8d:ca:6e:81:b1:0c:e2:92:c3:74:bf:d7: 84:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C4:AA:2C:17:10:3E:9F:90:42:DA:D7:78:F7:10:CC:C6:43:B2:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0d2981bb-d6a7-3230-8854-cfc34d7a42b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.159.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:62:4f:da:78:5a:90:4d:b6:d6:30:74:06:c3:a0:9f:46:fe: e9:7b:90:2a:f1:ec:e8:57:43:43:bb:29:cd:06:3a:ae:47:65: 0d:d6:32:9a:31:14:f0:52:29:79:29:28:8b:12:05:35:c8:18: a5:28:11:56:8d:14:5b:c8:5d:7e:96:99:42:e7:80:76:71:64: 3c:29:4c:4d:ee:03:00:05:0e:d6:e5:73:fe:90:9e:55:26:39: dd:8c:05:69:e8:53:15:3f:37:c6:e7:e8:62:45:c6:e3:d8:ba: 08:21:ea:38:83:dd:b6:2c:1e:6d:6f:95:2d:6e:9e:18:28:21: c6:82:7b:9e:55:98:a5:65:5c:5f:dc:f1:e1:45:23:39:2f:9a: f5:81:b7:e2:d6:44:0c:23:4e:b2:ac:97:d3:47:e8:16:03:1a: dc:06:9d:dd:09:ed:4b:37:02:ba:b2:df:05:0f:84:56:4c:a4: 94:c3:72:69:01:51:47:44:d0:56:b4:73:2f:9d:53:32:f7:38: cd:3a:14:71:a4:b7:4a:a1:d5:b8:10:40:36:93:63:5e:57:1b: a9:f8:5b:bc:80:de:d2:93:e8:f1:42:e1:c7:32:2f:0a:9f:b3: 21:c3:57:b0:46:4c:ba:68:30:1a:2d:9a:81:61:ff:ec:9a:57: 4d:fe:41:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8MB4cPLI7Lse9Q7kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkwMzAxMDAxMloXDTI2MTIwMjAyMDAxMlowLzEtMCsGA1UEAxMk MjdhMzU5ZmUtNTA1MC00MTFmLTk2MmMtMzE3ZDVlNzYzNzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxqyrvCNruMPlfF0tR6zSkUXXtoXhNqLdtmh ju06wZ+SXzWOvZzQRdH4e9cttILJFwNqk2MI3nG1b8xtCxrdidOOo8hOyBoBHPyl JuABpf1wGLrbeFm4rxFu1z21mSgwWFBFgQS+Ue1kYUCxlk+hTHx80Y3A2H5nfFjs mqNzEhs7l2UsXeQKQ4N1+q7MyOV6doF/2+rNryHlDH8I6ysU7FYT3yKUnbE5KkOO CLp08T0vL6ADpz3yaBG+S0BI9y+hbK0i09G4UPhNlk0M6pK7iEocCH+HELgTjGkc ErpCrj+UzmjnOjDLdovdMiQbY+uPF1GNym6BsQziksN0v9eEtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHvEqiwXED6fkELa13j3EMzGQ7JaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGQyOTgxYmItZDZhNy0z MjMwLTg4NTQtY2ZjMzRkN2E0MmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop9+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALxiT9p4WpBNttYwdAbDoJ9G/ul7kCrx7OhXQ0O7Kc0GOq5HZQ3WMpox FPBSKXkpKIsSBTXIGKUoEVaNFFvIXX6WmULngHZxZDwpTE3uAwAFDtblc/6QnlUm Od2MBWnoUxU/N8bn6GJFxuPYuggh6jiD3bYsHm1vlS1unhgoIcaCe55VmKVlXF/c 8eFFIzkvmvWBt+LWRAwjTrKsl9NH6BYDGtwGnd0J7Us3Arqy3wUPhFZMpJTDcmkB UUdE0Fa0cy+dUzL3OM06FHGkt0qh1bgQQDaTY15XG6n4W7yA3tKT6PFC4ccyLwqf syHDV7BGTLpoMBotmoFh/+yaV03+QWQ= -----END CERTIFICATE-----Generated at Tue Sep 22 08:05:24 2026 by rpki-client