$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a7f10e38-41db-39e7-9dd2-6470003e2f8d.roa File: a7f10e38-41db-39e7-9dd2-6470003e2f8d.roa (raw, json) Hash identifier: v66Vsmqaj6PQfFkP7tZ8fV2KZED8Hi3xLMgZFqFyEg4= Subject key identifier: 89:A6:08:D5:ED:15:17:FB:79:C5:12:7A:21:70:CD:3A:78:88:DA:A9 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEA8775E565CC4D4C1BC4D600 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a7f10e38-41db-39e7-9dd2-6470003e2f8d.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 162.158.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:75:e5:65:cc:4d:4c:1b:c4:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=878a5372-a499-480a-9e4e-747808c27c4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:28:93:26:b6:59:ba:94:72:88:98:f1:c8:a0: ab:c8:ef:da:1a:1e:f4:73:4a:ef:68:bc:16:1d:e4: c9:01:6d:54:60:29:9f:d1:b3:c2:14:f7:13:6e:57: e1:5e:83:cc:86:99:f9:5c:43:e3:87:68:7d:b4:71: ad:85:1b:e5:0f:ed:64:b2:21:35:2b:e0:6a:f5:7c: b5:55:ff:e7:66:86:7d:58:7b:76:84:f0:61:7d:bf: 92:6a:88:ed:e5:78:80:4f:d8:9c:53:58:b2:a5:90: a0:b1:42:20:20:71:17:56:0f:dc:bd:10:08:43:27: 20:c7:95:91:17:f9:ed:a6:3a:7e:fb:13:ea:9d:48: ab:b8:08:4e:06:c6:26:92:9c:a5:82:b6:a6:93:39: 73:28:d2:2a:eb:a8:80:b7:e6:7d:31:c2:68:f3:a6: 8c:99:82:de:7b:ff:4b:ef:c8:6a:7b:cc:d0:97:95: 0b:ae:00:e9:ea:72:76:d2:41:a6:14:4b:78:ec:24: 8e:2b:e7:ef:31:be:01:76:58:52:de:96:bf:c4:cf: e2:f6:09:3d:e0:f5:fd:1a:61:4e:d1:8f:48:a0:f8: 5c:d7:ba:74:8a:94:bf:f9:76:6b:41:53:78:25:8e: dd:df:ac:c4:4c:d4:8c:0c:e5:67:06:f4:f0:a6:f2: 2a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A6:08:D5:ED:15:17:FB:79:C5:12:7A:21:70:CD:3A:78:88:DA:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a7f10e38-41db-39e7-9dd2-6470003e2f8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:6b:0d:e1:ae:17:86:ab:58:60:22:c6:6b:74:67:a3:c6:a2: ae:8f:fd:dd:5b:d5:e0:9d:48:31:b4:96:db:83:4a:43:65:fd: 24:43:db:c6:35:9d:4e:ac:37:e7:61:67:67:95:a9:cc:a7:e1: 4a:8f:6c:cb:8c:c3:64:63:43:93:c4:ea:9b:9a:fc:ee:6e:a0: f0:9e:02:4e:7e:1f:a1:33:5a:b3:66:49:80:68:6a:26:ee:11: 78:8a:31:e7:3c:28:ed:90:b3:11:d4:df:10:2f:7b:fc:87:a2: d9:c6:f4:c1:33:dc:d2:5a:60:35:66:75:f6:ee:9c:55:4c:3c: c9:0b:e8:13:67:a5:a7:dd:36:98:18:76:5e:86:73:e1:bc:48: d8:7d:21:02:d7:dc:df:c3:71:66:b9:99:c9:5f:16:50:b3:32: a8:a4:b8:b9:1d:e3:9e:70:9a:89:72:51:4e:94:df:34:ae:64: ef:0e:07:93:b2:5b:72:2c:75:05:77:f5:0c:e5:70:04:2c:81: 00:85:4f:3f:e7:74:16:44:2a:06:43:0e:f9:02:a7:e1:ec:79: 1f:28:b1:9c:26:b6:a6:7c:17:43:8a:74:83:1c:4b:8d:40:3e: 24:59:38:83:8e:54:29:25:79:70:98:70:81:04:8e:a7:33:45: a2:7c:97:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh3XlZcxNTBvE1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk ODc4YTUzNzItYTQ5OS00ODBhLTllNGUtNzQ3ODA4YzI3YzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSiTJrZZupRyiJjxyKCryO/aGh70c0rvaLwW HeTJAW1UYCmf0bPCFPcTblfhXoPMhpn5XEPjh2h9tHGthRvlD+1ksiE1K+Bq9Xy1 Vf/nZoZ9WHt2hPBhfb+Saojt5XiAT9icU1iypZCgsUIgIHEXVg/cvRAIQycgx5WR F/ntpjp++xPqnUiruAhOBsYmkpylgramkzlzKNIq66iAt+Z9McJo86aMmYLee/9L 78hqe8zQl5ULrgDp6nJ20kGmFEt47CSOK+fvMb4BdlhS3pa/xM/i9gk94PX9GmFO 0Y9IoPhc17p0ipS/+XZrQVN4JY7d36zETNSMDOVnBvTwpvIqgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImmCNXtFRf7ecUSeiFwzTp4iNqpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTdmMTBlMzgtNDFkYi0z OWU3LTlkZDItNjQ3MDAwM2UyZjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop5MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABrDeGuF4arWGAixmt0Z6PGoq6P/d1b1eCdSDG0ltuDSkNl/SRD28Y1 nU6sN+dhZ2eVqcyn4UqPbMuMw2RjQ5PE6pua/O5uoPCeAk5+H6EzWrNmSYBoaibu EXiKMec8KO2QsxHU3xAve/yHotnG9MEz3NJaYDVmdfbunFVMPMkL6BNnpafdNpgY dl6Gc+G8SNh9IQLX3N/DcWa5mclfFlCzMqikuLkd455wmolyUU6U3zSuZO8OB5Oy W3IsdQV39QzlcAQsgQCFTz/ndBZEKgZDDvkCp+HseR8osZwmtqZ8F0OKdIMcS41A PiRZOIOOVCkleXCYcIEEjqczRaJ8l1o= -----END CERTIFICATE-----Generated at Tue Sep 1 01:43:33 2026 by rpki-client