$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5a88a032-e76e-3d0f-82c3-a1caf6aa6105.roa File: 5a88a032-e76e-3d0f-82c3-a1caf6aa6105.roa (raw, json) Hash identifier: eYTwPCgE8zNYOEViNxMnUhZgExocuyzEQtWTEj09XG0= Subject key identifier: A4:03:A1:11:A1:A3:60:30:3B:4A:48:B3:D3:3A:F7:83:55:F9:8E:58 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEA8774EAEEEB93B3CF173E80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5a88a032-e76e-3d0f-82c3-a1caf6aa6105.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 162.158.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:74:ea:ee:eb:93:b3:cf:17:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=7cea198b-c076-492a-9099-3d29cbd3245b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:27:41:25:ee:33:03:6b:f5:2c:ce:ef:33:48: b1:74:5e:bc:5d:e2:67:bb:83:cf:df:bd:03:a5:9e: cd:fd:61:09:f4:f8:00:7e:66:03:bf:43:c2:37:f0: 8e:b1:70:54:1c:85:be:2e:f6:b1:54:e4:0d:16:39: 1d:0b:8e:82:4d:15:4a:ba:ac:14:08:13:3e:4e:2a: a5:5d:97:e6:87:f7:8b:7d:8a:e5:2e:ff:25:7a:e9: 24:2e:6d:57:71:d8:0e:f5:34:5f:ad:57:44:7a:51: b1:70:fe:a0:68:17:fb:6d:55:96:ec:b0:a8:16:58: 5e:93:87:8d:b1:16:21:30:ca:fb:09:d7:ed:e9:f4: 93:bf:4e:0e:76:ed:3f:70:e5:f4:06:bc:de:ae:bb: 9a:62:9d:bf:58:b9:25:35:26:bd:28:85:ab:13:21: 0a:c8:6d:f8:ee:1c:f2:03:38:67:23:69:03:ac:c8: e6:3f:15:1d:1a:cd:e5:2c:de:50:e9:af:e1:e0:3d: a6:d7:a6:b6:f4:2b:20:54:40:03:73:b9:01:70:19: e6:92:ab:db:17:56:1e:bb:c6:0d:f7:1d:16:f9:fb: 62:d2:43:df:6d:43:4c:76:06:5d:e8:7f:0d:f4:85: e4:eb:e6:84:e1:7f:81:df:29:a1:8f:b9:f5:15:49: bf:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:03:A1:11:A1:A3:60:30:3B:4A:48:B3:D3:3A:F7:83:55:F9:8E:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5a88a032-e76e-3d0f-82c3-a1caf6aa6105.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:b6:6f:88:c4:94:15:09:20:2e:5d:4e:24:b0:1d:03:4e:26: 5a:90:88:44:99:84:b1:39:24:ca:e1:11:70:ab:de:15:b7:90: a4:7e:12:51:1a:b9:a1:17:aa:a8:95:41:2d:6c:7b:48:44:ec: 64:8a:78:78:02:27:f8:b9:c0:3e:2f:d4:e2:46:78:2a:7d:4e: 77:41:bc:8b:9b:1e:33:dd:d3:f5:9b:a3:f1:8a:01:0c:d5:ef: 0f:0f:0a:4e:52:cb:48:af:b7:c2:f0:6d:b6:80:52:1d:1b:5a: 78:65:70:83:34:9a:2e:3d:0d:b4:76:13:96:e8:1e:49:59:07: 06:56:a8:b3:62:e5:55:44:f2:89:62:11:b6:d8:c0:b4:4b:54: 97:9f:17:b0:61:cb:60:b0:28:95:99:f7:c9:64:06:9b:81:81: 0b:c4:43:60:aa:7b:b7:8c:15:63:09:98:49:51:18:45:7f:ae: 75:51:87:94:70:fa:0b:9b:6e:44:a8:05:c7:06:cd:80:aa:2c: 76:58:5e:c1:bc:02:b9:64:8d:3a:4b:b3:a9:ca:2d:c5:9d:6d: 00:a4:e3:4c:82:1c:aa:dc:84:ad:3e:35:48:77:d8:b5:f8:de: 37:33:53:53:83:4b:78:3e:35:86:e0:dd:75:8a:f7:82:7d:06: d3:f3:63:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh3Tq7uuTs88XPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk N2NlYTE5OGItYzA3Ni00OTJhLTkwOTktM2QyOWNiZDMyNDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSdBJe4zA2v1LM7vM0ixdF68XeJnu4PP370D pZ7N/WEJ9PgAfmYDv0PCN/COsXBUHIW+LvaxVOQNFjkdC46CTRVKuqwUCBM+Tiql XZfmh/eLfYrlLv8leukkLm1XcdgO9TRfrVdEelGxcP6gaBf7bVWW7LCoFlhek4eN sRYhMMr7Cdft6fSTv04Odu0/cOX0BrzerruaYp2/WLklNSa9KIWrEyEKyG347hzy AzhnI2kDrMjmPxUdGs3lLN5Q6a/h4D2m16a29CsgVEADc7kBcBnmkqvbF1Yeu8YN 9x0W+fti0kPfbUNMdgZd6H8N9IXk6+aE4X+B3ymhj7n1FUm/fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQDoRGho2AwO0pIs9M694NV+Y5YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWE4OGEwMzItZTc2ZS0z ZDBmLTgyYzMtYTFjYWY2YWE2MTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop4iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALC2b4jElBUJIC5dTiSwHQNOJlqQiESZhLE5JMrhEXCr3hW3kKR+ElEa uaEXqqiVQS1se0hE7GSKeHgCJ/i5wD4v1OJGeCp9TndBvIubHjPd0/Wbo/GKAQzV 7w8PCk5Sy0ivt8LwbbaAUh0bWnhlcIM0mi49DbR2E5boHklZBwZWqLNi5VVE8oli EbbYwLRLVJefF7Bhy2CwKJWZ98lkBpuBgQvEQ2Cqe7eMFWMJmElRGEV/rnVRh5Rw +gubbkSoBccGzYCqLHZYXsG8ArlkjTpLs6nKLcWdbQCk40yCHKrchK0+NUh32LX4 3jczU1ODS3g+NYbg3XWK94J9BtPzY5Q= -----END CERTIFICATE-----Generated at Tue Sep 1 03:15:36 2026 by rpki-client