$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2da9af95-009b-37c1-b96c-68f6a4f79a14.roa File: 2da9af95-009b-37c1-b96c-68f6a4f79a14.roa (raw, json) Hash identifier: E1CNv8n1BBM8qO9ubFj3pT3zKcsG/26+cvi0adJ9V0U= Subject key identifier: DC:C0:A5:C8:89:C0:4C:2D:48:FE:C2:7F:E6:46:66:44:A5:19:2C:49 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEA8784A03E61159587B6E480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2da9af95-009b-37c1-b96c-68f6a4f79a14.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 108.162.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:84:a0:3e:61:15:95:87:b6:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=d026c14c-b6bb-4f9f-82d6-f3d5808502a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:07:a0:f4:7a:4d:8f:40:83:5c:12:5e:55:46: 2e:8a:99:c6:3b:76:ce:81:56:3e:a7:aa:8e:80:26: 3a:3a:01:ec:ea:11:49:ba:34:7c:b1:b0:1e:ef:71: 3d:6d:c9:f2:1c:62:d1:20:7e:67:a9:ff:6f:0b:4b: 72:d1:66:99:dd:ef:6d:9d:e7:11:60:2c:04:de:36: fd:45:b1:fc:3c:13:35:b7:90:0c:43:9c:4c:b4:07: 84:59:be:c5:a0:63:c5:7b:fd:20:3b:ce:13:77:4e: 06:c5:3e:61:18:87:32:f3:72:a0:5f:27:eb:50:62: f7:c9:df:80:39:01:61:e8:b9:03:04:5c:4f:87:be: 74:ec:83:4b:58:1c:c4:05:c3:22:40:ae:04:df:b8: ab:e1:ce:03:99:ca:00:45:43:8b:73:09:81:99:00: e3:e8:66:0e:1e:db:9b:5a:44:7f:c6:ad:cd:23:69: 5b:2b:21:f3:e8:fe:f7:e1:6e:b8:b0:8b:17:2d:d6: 11:4d:84:2c:49:24:a9:a4:f1:11:c9:a6:37:ed:9c: 3b:df:0b:bf:a4:c9:80:f2:e1:f2:bf:cb:31:50:75: 43:30:47:ae:7a:14:bb:f8:ac:ec:3f:94:60:02:53: 81:1b:c6:10:58:5c:49:53:62:5c:1a:52:5e:66:e2: 7c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C0:A5:C8:89:C0:4C:2D:48:FE:C2:7F:E6:46:66:44:A5:19:2C:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2da9af95-009b-37c1-b96c-68f6a4f79a14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 108.162.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:55:96:60:fa:41:c6:2d:df:4a:56:02:32:18:6b:a4:37:ac: 1b:c5:b0:0a:2c:27:2f:e3:28:c4:0d:f7:a8:8c:cb:99:e6:c5: 48:64:6a:22:d9:f5:6e:0b:2d:56:b7:38:1a:c1:6f:c2:40:38: 80:f9:ab:85:e3:a6:f6:eb:4b:08:5e:c5:57:29:56:f0:59:9a: 65:36:79:2d:20:56:3d:37:59:cb:89:54:14:03:10:89:3c:c1: 98:7b:e7:c5:8d:b4:70:24:7b:ed:ab:e5:b8:f9:12:c1:45:6a: ef:4c:a8:63:e0:71:a4:85:8e:0b:11:fd:10:94:fb:35:c3:4a: 42:a4:15:29:78:77:9e:ce:6d:a0:48:23:29:53:38:28:cb:35: 82:78:5b:52:3c:c0:4d:ba:02:03:82:6d:26:51:cc:a5:a7:ab: 3c:c2:97:0e:9e:21:da:2c:ed:b2:9d:21:fa:02:9d:3d:d0:ec: 04:24:14:45:d6:b9:94:cd:d0:42:80:be:be:59:92:c4:41:24: df:35:72:78:26:c0:57:f2:cc:c3:2e:da:bb:3b:b6:75:e0:e5: fa:ad:92:df:8f:53:35:fd:e6:e7:eb:e4:fc:f2:1d:5a:2b:67: 8d:ab:74:7a:1b:af:cd:63:2b:40:b2:cc:fb:f4:22:eb:fb:6f: 0c:96:02:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh4SgPmEVlYe25IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk ZDAyNmMxNGMtYjZiYi00ZjlmLTgyZDYtZjNkNTgwODUwMmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQeg9HpNj0CDXBJeVUYuipnGO3bOgVY+p6qO gCY6OgHs6hFJujR8sbAe73E9bcnyHGLRIH5nqf9vC0ty0WaZ3e9tnecRYCwE3jb9 RbH8PBM1t5AMQ5xMtAeEWb7FoGPFe/0gO84Td04GxT5hGIcy83KgXyfrUGL3yd+A OQFh6LkDBFxPh7507INLWBzEBcMiQK4E37ir4c4DmcoARUOLcwmBmQDj6GYOHtub WkR/xq3NI2lbKyHz6P734W64sIsXLdYRTYQsSSSppPERyaY37Zw73wu/pMmA8uHy v8sxUHVDMEeuehS7+KzsP5RgAlOBG8YQWFxJU2JcGlJeZuJ8eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNzApciJwEwtSP7Cf+ZGZkSlGSxJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmRhOWFmOTUtMDA5Yi0z N2MxLWI5NmMtNjhmNmE0Zjc5YTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKLEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALRVlmD6QcYt30pWAjIYa6Q3rBvFsAosJy/jKMQN96iMy5nmxUhkaiLZ 9W4LLVa3OBrBb8JAOID5q4XjpvbrSwhexVcpVvBZmmU2eS0gVj03WcuJVBQDEIk8 wZh758WNtHAke+2r5bj5EsFFau9MqGPgcaSFjgsR/RCU+zXDSkKkFSl4d57ObaBI IylTOCjLNYJ4W1I8wE26AgOCbSZRzKWnqzzClw6eIdos7bKdIfoCnT3Q7AQkFEXW uZTN0EKAvr5ZksRBJN81cngmwFfyzMMu2rs7tnXg5fqtkt+PUzX95ufr5PzyHVor Z42rdHobr81jK0CyzPv0Iuv7bwyWAis= -----END CERTIFICATE-----Generated at Tue Sep 22 11:32:48 2026 by rpki-client