$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0eb10505-ab03-30ef-b4f8-29c3f0bea726.roa File: 0eb10505-ab03-30ef-b4f8-29c3f0bea726.roa (raw, json) Hash identifier: oBZ0Q4Q26cNXGt6x8rPo2kRgGrwRgDB4dTO77WelscY= Subject key identifier: 40:53:BD:65:FE:BD:68:12:3F:04:E7:04:F0:8D:33:40:C0:66:0E:E5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EE4234BA1AA9A6C3D7834EE80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0eb10505-ab03-30ef-b4f8-29c3f0bea726.roa Signing time: Wed 19 Aug 2026 18:03:56 +0000 ROA not before: Wed 19 Aug 2026 18:03:56 +0000 ROA not after: Sat 09 Oct 2027 04:00:00 +0000 asID: 13335 IP address blocks: 162.159.201.0/24 maxlen: 24 2606:4700:f2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:4b:a1:aa:9a:6c:3d:78:34:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 19 18:03:56 2026 GMT Not After : Oct 9 04:00:00 2027 GMT Subject: CN=d9533b25-63f8-48a7-9413-c4f67584eb8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:79:b9:99:89:23:e7:3c:fd:07:88:fc:63:90: dd:d9:b5:8b:9f:2d:13:00:1d:4c:6c:e3:f5:0a:f5: bf:de:d8:f3:2f:a7:50:fc:ee:55:54:0a:e1:27:8c: e5:d6:3f:e5:7b:02:e5:ca:e9:24:c5:6c:19:53:e7: 6f:37:48:c7:80:38:9b:a3:e1:a9:df:b9:c4:d3:de: 95:0d:15:02:81:9b:6d:3b:96:5a:b9:1a:ef:f4:59: f1:12:d7:53:92:01:1d:b8:25:9f:ff:cb:b0:91:60: 78:2c:6c:24:5e:62:fa:56:39:68:c5:de:c9:d0:0f: a5:fc:68:81:32:7c:ad:26:05:cd:86:9f:f5:b9:c0: 81:d8:30:2a:e3:aa:21:48:84:6c:2c:06:1b:08:79: d3:4a:1a:62:c7:d5:52:52:5e:fc:94:ec:1f:92:97: d6:91:2a:3d:c8:fe:b8:06:52:b3:6b:22:4d:95:fd: f9:2b:5f:91:11:1f:8e:9e:b8:27:31:08:66:c2:15: c3:6b:71:b2:30:07:55:a0:99:f3:65:c4:41:0b:ec: 89:bf:31:f8:02:8a:63:f7:ce:36:54:5f:a5:c4:d8: b8:d7:ec:ef:84:bf:cf:fb:a2:2b:b0:a2:0a:d0:70: bd:50:4a:09:35:4c:4d:88:d1:e8:f7:aa:3b:57:f2: fc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:53:BD:65:FE:BD:68:12:3F:04:E7:04:F0:8D:33:40:C0:66:0E:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0eb10505-ab03-30ef-b4f8-29c3f0bea726.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.159.201.0/24 IPv6: 2606:4700:f2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:cf:62:1e:94:96:86:68:0b:a6:1f:a2:c3:2f:7c:b1:d7:a0: 64:9d:60:fd:f0:03:b0:b7:cc:92:85:31:ec:57:7d:77:10:f6: ba:6c:f2:5f:92:5d:ea:50:94:e9:06:0e:76:57:aa:bb:b5:87: 2e:cf:e9:5a:30:89:66:71:e1:b0:10:60:7d:4b:bf:0c:f0:86: e3:8b:0e:87:bc:9a:63:4c:41:33:9d:95:90:05:02:8b:7a:4c: 3b:4b:cd:8b:5a:07:12:f8:49:ed:a4:18:1d:15:d1:9e:d6:42: 12:89:e6:24:93:67:cb:5d:e6:37:ca:0d:24:42:06:2c:a5:33: a7:b1:84:c1:66:00:7d:8b:f3:d0:a8:79:ae:17:0b:27:46:00: c1:80:af:b2:5e:c2:90:9e:da:25:98:84:c6:46:02:53:3b:db: fd:41:80:b8:c8:41:11:7d:4f:fb:15:5d:6a:24:61:28:bc:7a: 69:ac:a8:96:b4:f5:5c:80:64:28:91:29:2f:64:2b:58:88:bc: 0d:9a:52:e4:ae:19:a2:6b:e7:e8:b7:28:d8:a2:4e:78:cb:28: 83:bd:8f:cf:86:5e:4f:b3:1e:b3:58:82:79:c2:b3:a3:7d:a2: 22:9e:81:e5:9c:62:8a:9c:fc:ed:23:46:db:1b:b7:77:14:63: c8:cb:d0:0e -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE7kI0uhqppsPXg07oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgxOTE4MDM1NloXDTI3MTAwOTA0MDAwMFowLzEtMCsGA1UEAxMk ZDk1MzNiMjUtNjNmOC00OGE3LTk0MTMtYzRmNjc1ODRlYjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXm5mYkj5zz9B4j8Y5Dd2bWLny0TAB1MbOP1 CvW/3tjzL6dQ/O5VVArhJ4zl1j/lewLlyukkxWwZU+dvN0jHgDibo+Gp37nE096V DRUCgZttO5ZauRrv9FnxEtdTkgEduCWf/8uwkWB4LGwkXmL6Vjloxd7J0A+l/GiB MnytJgXNhp/1ucCB2DAq46ohSIRsLAYbCHnTShpix9VSUl78lOwfkpfWkSo9yP64 BlKzayJNlf35K1+RER+OnrgnMQhmwhXDa3GyMAdVoJnzZcRBC+yJvzH4Aopj9842 VF+lxNi41+zvhL/P+6IrsKIK0HC9UEoJNUxNiNHo96o7V/L8cQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFEBTvWX+vWgSPwTnBPCNM0DAZg7lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGViMTA1MDUtYWIwMy0z MGVmLWI0ZjgtMjljM2YwYmVhNzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAop/JMA8E AgACMAkDBwAmBkcAAPIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAXM9iHpSWhmgLph+iwy98sdegZJ1g/fAD sLfMkoUx7Fd9dxD2umzyX5Jd6lCU6QYOdlequ7WHLs/pWjCJZnHhsBBgfUu/DPCG 44sOh7yaY0xBM52VkAUCi3pMO0vNi1oHEvhJ7aQYHRXRntZCEonmJJNny13mN8oN JEIGLKUzp7GEwWYAfYvz0Kh5rhcLJ0YAwYCvsl7CkJ7aJZiExkYCUzvb/UGAuMhB EX1P+xVdaiRhKLx6aayolrT1XIBkKJEpL2QrWIi8DZpS5K4Zomvn6Lco2KJOeMso g72Pz4ZeT7Mes1iCecKzo32iIp6B5Zxiipz87SNG2xu3dxRjyMvQDg== -----END CERTIFICATE-----Generated at Tue Sep 22 09:34:05 2026 by rpki-client