$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/12dcc1a0-0575-3221-92eb-413f6f6f2106.roa File: 12dcc1a0-0575-3221-92eb-413f6f6f2106.roa (raw, json) Hash identifier: FAU8xnQgEbL0AysNGP+OupTpuGyvDKdgt1BDtLQGgXY= Subject key identifier: F4:76:63:2C:C2:7E:BE:7C:54:D2:83:8C:8E:42:80:3E:AB:1E:1E:D1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EED5228E461EE523D2E162880 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/12dcc1a0-0575-3221-92eb-413f6f6f2106.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 162.159.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:28:e4:61:ee:52:3d:2e:16:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=df39d6b8-a9f3-4a0d-87a7-b147e8b74d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6c:23:ed:fb:6b:9f:a9:48:ea:61:01:c2:de: d4:fb:f2:4a:af:db:27:a8:71:86:c7:4d:1a:8b:eb: 1e:e1:37:8d:1f:2f:92:e0:9b:dd:4e:72:8b:8e:de: 50:87:33:07:1d:01:64:2e:46:1a:0e:39:a2:60:14: ac:21:09:bb:48:c9:dd:98:07:f7:9b:b8:7c:8d:4a: c2:21:ff:0c:12:3e:98:3a:ae:95:23:58:2d:5f:4c: 40:94:18:de:07:17:1b:9a:ec:0d:7f:d8:74:0f:9b: 04:5b:5b:ae:6d:0d:a4:b3:22:24:ab:8f:7e:12:55: 3a:c7:47:bb:81:cb:eb:ba:20:2e:50:e1:d1:62:14: 42:e2:3a:6a:04:14:f7:84:8e:66:4a:e9:a9:73:8f: d0:be:f9:d4:34:47:aa:27:dc:9d:92:4a:7d:fe:3f: c2:98:cc:f4:bc:b1:ae:29:f6:f8:07:d1:d2:3d:42: 2a:99:08:eb:ac:8a:78:22:26:54:85:71:66:e8:3c: de:30:36:51:08:b0:64:e8:f7:c8:9f:6b:37:ee:67: 6e:36:ff:8c:4c:ee:da:f8:c8:5c:54:53:1d:fe:59: 59:af:f6:0f:75:29:91:e4:5f:a2:f9:73:a8:f4:8f: 23:b3:26:10:45:0e:89:e2:ba:6a:9b:ae:f2:05:c1: 94:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:76:63:2C:C2:7E:BE:7C:54:D2:83:8C:8E:42:80:3E:AB:1E:1E:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/12dcc1a0-0575-3221-92eb-413f6f6f2106.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.159.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:a9:7f:09:ae:fb:96:c5:b1:91:bc:a7:70:77:13:53:0f:ca: aa:9b:e5:c1:4d:28:3d:0d:67:bf:2f:f1:46:3d:4d:19:39:c3: 33:38:4c:f2:9f:c3:cb:94:33:fb:62:86:ac:d7:56:80:91:3f: d1:4d:89:fb:09:eb:ec:83:e1:f4:a4:f3:a6:4e:9e:96:58:66: 4e:bf:c4:9c:92:f6:e8:db:14:56:20:2f:5c:9a:48:0d:a9:df: 77:d5:36:d0:35:ca:52:df:ed:6b:51:4f:52:ab:2c:b9:b3:65: 87:43:bd:9a:dc:16:64:be:2e:c0:93:64:e8:e2:51:ce:c4:1d: 20:ec:cb:89:0e:02:53:f8:44:5f:9f:13:31:c1:53:45:79:39: cd:68:bc:bf:0e:e2:82:05:39:95:40:a3:8f:6c:f8:28:b6:37: 6d:da:3f:4c:6e:0b:0e:7b:91:c4:89:77:b6:4f:76:1b:d9:7e: 99:25:24:50:10:6e:9f:cb:3c:7c:13:5f:23:ac:b4:88:e0:b2: 6a:e2:49:e3:c4:ad:73:f6:73:7a:28:7c:a7:93:e9:45:0a:15: 81:4c:79:b0:d2:71:f8:38:89:78:12:b7:3b:09:bc:c5:a8:c2: b8:da:23:e1:3f:2a:31:a4:e6:99:2c:64:34:3d:73:65:55:18: cc:bf:08:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUijkYe5SPS4WKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk ZGYzOWQ2YjgtYTlmMy00YTBkLTg3YTctYjE0N2U4Yjc0ZDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGwj7ftrn6lI6mEBwt7U+/JKr9snqHGGx00a i+se4TeNHy+S4JvdTnKLjt5QhzMHHQFkLkYaDjmiYBSsIQm7SMndmAf3m7h8jUrC If8MEj6YOq6VI1gtX0xAlBjeBxcbmuwNf9h0D5sEW1uubQ2ksyIkq49+ElU6x0e7 gcvruiAuUOHRYhRC4jpqBBT3hI5mSumpc4/QvvnUNEeqJ9ydkkp9/j/CmMz0vLGu Kfb4B9HSPUIqmQjrrIp4IiZUhXFm6DzeMDZRCLBk6PfIn2s37mduNv+MTO7a+Mhc VFMd/llZr/YPdSmR5F+i+XOo9I8jsyYQRQ6J4rpqm67yBcGUEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPR2YyzCfr58VNKDjI5CgD6rHh7RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTJkY2MxYTAtMDU3NS0z MjIxLTkyZWItNDEzZjZmNmYyMTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEop8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+pfwmu+5bFsZG8p3B3E1MPyqqb5cFNKD0NZ78v8UY9TRk5wzM4TPKf w8uUM/tihqzXVoCRP9FNifsJ6+yD4fSk86ZOnpZYZk6/xJyS9ujbFFYgL1yaSA2p 33fVNtA1ylLf7WtRT1KrLLmzZYdDvZrcFmS+LsCTZOjiUc7EHSDsy4kOAlP4RF+f EzHBU0V5Oc1ovL8O4oIFOZVAo49s+Ci2N23aP0xuCw57kcSJd7ZPdhvZfpklJFAQ bp/LPHwTXyOstIjgsmriSePErXP2c3oofKeT6UUKFYFMebDScfg4iXgStzsJvMWo wrjaI+E/KjGk5pksZDQ9c2VVGMy/CPk= -----END CERTIFICATE-----Generated at Tue Sep 1 02:10:26 2026 by rpki-client