$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/27822e64-c2b3-36a0-ae8b-ce1130a700db.roa File: 27822e64-c2b3-36a0-ae8b-ce1130a700db.roa (raw, json) Hash identifier: epM+lx0Aat2ovCFRj7ePPRv5VRC1AxvTnHogwcvbwFM= Subject key identifier: E5:06:9D:7B:5D:C7:5F:07:A2:FD:5A:06:CE:9B:13:32:7D:64:A4:CB Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EED5231CD07B73FA7C33EB580 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/27822e64-c2b3-36a0-ae8b-ce1130a700db.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 162.158.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:31:cd:07:b7:3f:a7:c3:3e:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=d691946a-46df-4ac2-ae71-d702f1d91881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b7:ee:f1:d4:66:6d:68:22:b3:5c:de:02:f0: bb:73:2d:a0:7d:75:1e:19:ee:76:a8:02:e2:de:8c: 58:84:8d:6b:39:42:6a:2b:4b:08:4f:68:a5:7d:0e: 17:e3:e1:5f:b4:68:de:0b:44:cb:ae:f1:7f:30:d0: cf:be:92:18:fc:52:87:15:db:d1:a9:b5:33:fa:10: 43:16:33:36:34:97:9e:82:de:6b:f9:cf:ce:e2:60: e5:f9:35:ac:e7:68:08:cd:16:ec:8c:81:70:17:f3: e9:57:eb:3e:8d:5b:87:a5:da:38:94:a8:e1:99:d5: 4c:24:b7:dc:a7:0c:f9:15:ec:ba:14:16:95:c9:28: a0:99:4c:43:91:98:27:f6:3a:15:22:6f:ac:75:a6: 90:b4:37:2c:f5:1a:b2:49:df:62:a4:9e:73:b7:21: da:9d:73:82:42:e2:21:9a:58:56:ce:9e:d0:e0:0d: 75:43:8b:f0:20:4e:37:24:34:e9:60:c5:d8:b4:29: bf:aa:87:81:1c:b7:f6:3b:44:07:da:cc:1a:13:31: 35:f7:84:d2:02:ca:e5:1e:ba:7f:e8:2e:b5:e4:27: 07:d4:55:7b:c5:d7:bc:ef:c5:86:50:d2:91:4d:9d: 0a:28:33:0d:b4:92:65:d0:b0:8c:ad:fd:26:19:19: 28:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:06:9D:7B:5D:C7:5F:07:A2:FD:5A:06:CE:9B:13:32:7D:64:A4:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/27822e64-c2b3-36a0-ae8b-ce1130a700db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:e4:9c:11:af:87:4d:1f:df:60:ab:2c:25:36:f3:4c:19:a2: dc:1f:59:4c:9c:82:51:41:c7:be:01:2a:05:50:df:c0:d4:ef: 32:67:3f:75:24:fa:f9:1e:54:35:5f:47:ec:04:89:d9:91:1a: 9a:c6:df:c7:20:0e:02:c8:de:ad:21:22:c8:0f:cb:07:6e:f5: 4a:a0:8b:8d:e5:fd:9d:e1:33:40:22:07:12:b7:b6:70:75:00: eb:02:ae:f1:1f:2d:ca:81:fd:d5:68:e1:1e:e9:fc:db:83:5e: e4:04:99:5e:30:bf:c7:93:62:bf:77:f2:29:e5:b0:b7:68:5c: 86:d8:d6:8c:4c:78:25:1e:11:d4:80:9c:36:6e:c9:6a:08:ea: 12:fa:21:53:21:bd:df:ab:4b:0a:4e:c0:fa:6c:98:59:ed:4c: 1b:4e:0d:44:95:4a:b5:56:8a:8e:38:10:c6:a6:a7:88:b9:cf: 10:04:c5:2e:ee:91:eb:27:e1:a0:52:6d:f2:33:7d:7d:bd:21: b1:74:80:44:9d:8d:25:d5:f8:de:07:91:1c:c8:d6:88:d8:c5: 18:82:27:44:e6:bd:5f:b2:3d:78:d5:9c:94:74:7a:94:d0:4a: 20:54:d1:e1:9e:5c:cb:47:ea:00:05:a5:6f:a9:ab:ed:44:66: f2:56:9b:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUjHNB7c/p8M+tYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk ZDY5MTk0NmEtNDZkZi00YWMyLWFlNzEtZDcwMmYxZDkxODgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrfu8dRmbWgis1zeAvC7cy2gfXUeGe52qALi 3oxYhI1rOUJqK0sIT2ilfQ4X4+FftGjeC0TLrvF/MNDPvpIY/FKHFdvRqbUz+hBD FjM2NJeegt5r+c/O4mDl+TWs52gIzRbsjIFwF/PpV+s+jVuHpdo4lKjhmdVMJLfc pwz5Fey6FBaVySigmUxDkZgn9joVIm+sdaaQtDcs9RqySd9ipJ5ztyHanXOCQuIh mlhWzp7Q4A11Q4vwIE43JDTpYMXYtCm/qoeBHLf2O0QH2swaEzE194TSAsrlHrp/ 6C615CcH1FV7xde878WGUNKRTZ0KKDMNtJJl0LCMrf0mGRkogQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUGnXtdx18Hov1aBs6bEzJ9ZKTLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjc4MjJlNjQtYzJiMy0z NmEwLWFlOGItY2UxMTMwYTcwMGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCop6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjknBGvh00f32CrLCU280wZotwfWUycglFBx74BKgVQ38DU7zJnP3Uk +vkeVDVfR+wEidmRGprG38cgDgLI3q0hIsgPywdu9Uqgi43l/Z3hM0AiBxK3tnB1 AOsCrvEfLcqB/dVo4R7p/NuDXuQEmV4wv8eTYr938inlsLdoXIbY1oxMeCUeEdSA nDZuyWoI6hL6IVMhvd+rSwpOwPpsmFntTBtODUSVSrVWio44EMamp4i5zxAExS7u kesn4aBSbfIzfX29IbF0gESdjSXV+N4HkRzI1ojYxRiCJ0TmvV+yPXjVnJR0epTQ SiBU0eGeXMtH6gAFpW+pq+1EZvJWmy8= -----END CERTIFICATE-----Generated at Tue Sep 22 06:17:59 2026 by rpki-client