$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/652bff35-0a34-313b-a92e-312c2b40f28d.roa File: 652bff35-0a34-313b-a92e-312c2b40f28d.roa (raw, json) Hash identifier: l7q077mjXtSArVssYG7P/UaXwxvBvUdIGhTBD4Wx7nQ= Subject key identifier: 87:4B:10:39:F4:7C:E2:23:BE:76:9F:F4:9C:47:07:A0:8A:0B:E2:36 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D32D4CC8CE0E3D3A1E6996700 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/652bff35-0a34-313b-a92e-312c2b40f28d.roa Signing time: Tue 17 Mar 2026 13:00:41 +0000 ROA not before: Tue 17 Mar 2026 13:00:41 +0000 ROA not after: Mon 15 Jun 2026 13:00:41 +0000 asID: 395747 IP address blocks: 162.158.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:d4:cc:8c:e0:e3:d3:a1:e6:99:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 17 13:00:41 2026 GMT Not After : Jun 15 13:00:41 2026 GMT Subject: CN=34801cd2-bf9a-47b6-a017-06202444dafc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c5:08:5d:e9:31:a5:44:81:74:96:d9:04:89: fc:bb:11:d2:de:53:d1:32:c5:d7:f6:e8:30:c4:31: 60:90:c4:81:ce:a0:33:40:4d:66:92:d9:5c:6b:e7: 02:75:25:07:bf:b0:e0:4a:14:2f:33:29:88:55:48: e0:63:fa:d0:df:61:e0:45:3d:cf:7f:7d:a6:a9:96: 8a:1f:06:a4:17:2c:79:7f:3c:28:89:e2:01:19:9d: 26:da:11:00:bd:8f:50:3c:9f:d0:1f:e4:25:ab:5f: 64:0e:7c:07:8e:14:76:68:14:4d:45:56:79:8e:6a: c5:54:b8:64:73:8f:a6:37:97:a1:19:57:44:41:22: 89:a5:d6:98:7f:46:a7:24:82:f7:71:cf:db:e2:b4: 22:a9:84:3a:10:0c:47:54:82:59:5f:3d:6d:d5:3a: f6:2b:bc:14:ce:fc:68:ea:b7:cd:07:bb:4d:50:61: 44:14:dd:c2:59:0c:a4:7c:24:76:5b:b4:0b:1b:b0: 4e:14:97:31:08:fc:5f:65:d6:7f:03:05:91:6a:19: 5e:eb:ba:cc:d8:7a:f4:76:be:da:5d:ba:f9:32:dd: 42:45:4e:3a:e1:13:0b:de:f8:63:94:a4:fb:f7:9c: 95:75:cc:36:4c:63:68:76:8c:2c:e8:ef:8d:ab:26: f8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:4B:10:39:F4:7C:E2:23:BE:76:9F:F4:9C:47:07:A0:8A:0B:E2:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/652bff35-0a34-313b-a92e-312c2b40f28d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:87:23:58:47:36:d0:12:1d:53:ca:63:f7:63:e0:02:82:99: 83:ac:6d:3b:ce:dd:a0:7d:6a:b5:82:20:92:c7:d8:b9:ad:e8: 8b:b6:65:6c:ea:e4:c2:f9:43:ff:15:e6:6b:33:39:4f:f3:bf: a5:2e:39:f3:a2:1c:dc:33:90:ae:4b:14:f9:81:56:bb:55:3d: b3:64:fa:e6:7b:d8:50:25:83:99:a0:5f:fd:5e:b5:b7:37:6b: fd:d8:98:f7:38:a3:78:7c:59:e9:43:d9:fc:eb:78:7c:41:e5: b0:19:58:df:60:93:04:9c:61:89:50:ad:23:38:db:9d:1b:88: 4e:30:a2:fe:de:ba:e4:82:c4:05:b4:89:bd:50:3d:6f:9d:31: d7:67:83:c8:3c:3c:48:5c:2d:1a:b7:de:59:8e:4f:1d:7f:2a: 78:be:f6:58:ca:32:ef:89:e1:c1:5c:41:d5:ea:73:f9:a5:7f: 9f:1b:7e:d2:b9:ba:7b:d9:31:09:5a:d7:4a:e9:13:ef:8e:af: e2:fb:50:e1:9b:ea:a6:8f:6e:ed:74:26:db:99:82:22:a0:3b: 14:c9:96:85:25:fb:8f:d2:da:b0:1c:e8:25:89:5b:4c:a0:5f: 25:76:0f:85:f4:4c:d3:e7:ae:a6:a9:9e:3c:e6:df:d9:0e:27: e9:5c:15:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0y1MyM4OPToeaZZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDMxNzEzMDA0MVoXDTI2MDYxNTEzMDA0MVowLzEtMCsGA1UEAxMk MzQ4MDFjZDItYmY5YS00N2I2LWEwMTctMDYyMDI0NDRkYWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MUIXekxpUSBdJbZBIn8uxHS3lPRMsXX9ugw xDFgkMSBzqAzQE1mktlca+cCdSUHv7DgShQvMymIVUjgY/rQ32HgRT3Pf32mqZaK HwakFyx5fzwoieIBGZ0m2hEAvY9QPJ/QH+Qlq19kDnwHjhR2aBRNRVZ5jmrFVLhk c4+mN5ehGVdEQSKJpdaYf0anJIL3cc/b4rQiqYQ6EAxHVIJZXz1t1Tr2K7wUzvxo 6rfNB7tNUGFEFN3CWQykfCR2W7QLG7BOFJcxCPxfZdZ/AwWRahle67rM2Hr0dr7a Xbr5Mt1CRU464RML3vhjlKT795yVdcw2TGNodows6O+Nqyb4AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdLEDn0fOIjvnaf9JxHB6CKC+I2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjUyYmZmMzUtMGEzNC0z MTNiLWE5MmUtMzEyYzJiNDBmMjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIaHI1hHNtASHVPKY/dj4AKCmYOsbTvO3aB9arWCIJLH2Lmt6Iu2ZWzq 5ML5Q/8V5mszOU/zv6UuOfOiHNwzkK5LFPmBVrtVPbNk+uZ72FAlg5mgX/1etbc3 a/3YmPc4o3h8WelD2fzreHxB5bAZWN9gkwScYYlQrSM4250biE4wov7euuSCxAW0 ib1QPW+dMddng8g8PEhcLRq33lmOTx1/Kni+9ljKMu+J4cFcQdXqc/mlf58bftK5 unvZMQla10rpE++Or+L7UOGb6qaPbu10JtuZgiKgOxTJloUl+4/S2rAc6CWJW0yg XyV2D4X0TNPnrqapnjzm39kOJ+lcFTw= -----END CERTIFICATE-----Generated at Tue Mar 24 16:49:14 2026 by rpki-client