$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ad125d1e-6435-38d8-b804-3eb22cfd0754.roa File: ad125d1e-6435-38d8-b804-3eb22cfd0754.roa (raw, json) Hash identifier: PVDrhemnkwAZOBkbirdbZcbZYx+wbryLhsZ2aqVGc9k= Subject key identifier: BA:62:7A:B4:95:1B:6F:A7:C3:CD:A2:16:96:F2:48:99:7B:9F:4D:0E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EE4233385D222531BB69951A0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ad125d1e-6435-38d8-b804-3eb22cfd0754.roa Signing time: Wed 19 Aug 2026 18:03:45 +0000 ROA not before: Wed 19 Aug 2026 18:03:45 +0000 ROA not after: Sat 27 Nov 2027 05:00:00 +0000 asID: 13335 IP address blocks: 162.158.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:33:85:d2:22:53:1b:b6:99:51:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 19 18:03:45 2026 GMT Not After : Nov 27 05:00:00 2027 GMT Subject: CN=5f91eda7-a2f0-4cc6-b84c-a6bd4cfb43cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6d:b8:ea:27:d8:fe:38:bb:10:58:76:4f:c4: ce:9b:1f:eb:14:c6:97:ea:46:ff:10:9e:9a:20:12: ed:85:d1:07:95:52:27:bb:d6:12:92:6f:4a:a7:84: bb:5c:e5:3c:29:e8:02:4d:5e:c1:aa:32:18:05:af: 9f:48:c3:5d:a5:b5:91:bd:33:8f:e5:69:eb:ac:ce: 3e:99:8c:fa:77:1d:14:e6:77:c9:87:07:8a:b6:d7: 7d:7c:7b:97:cd:9f:43:64:a2:35:b1:b9:65:f8:a9: d4:f5:fd:eb:b8:b3:73:55:8e:05:75:cf:48:57:c0: 8f:ad:90:ad:43:17:a8:b0:21:ca:5e:48:dd:90:bf: d4:2c:19:1b:ba:3a:67:38:e9:55:88:69:f9:b8:1d: db:34:a8:93:ef:32:77:7e:0d:5c:b5:f1:a0:2e:59: 58:6c:d2:41:40:4f:52:8a:54:d2:df:41:94:ea:ae: 7b:00:a1:93:f2:e9:6b:39:b2:19:b0:94:95:86:ad: 82:2d:59:52:45:7c:57:6a:97:48:a6:e3:7a:84:bb: 1f:22:9f:62:75:5f:eb:84:b6:58:9d:77:6f:03:9d: ab:e0:d4:71:fb:5b:12:a1:89:00:a5:bc:47:42:c0: fd:40:dd:cb:08:fa:4b:b5:3c:21:a2:3c:b3:cf:33: 67:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:62:7A:B4:95:1B:6F:A7:C3:CD:A2:16:96:F2:48:99:7B:9F:4D:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ad125d1e-6435-38d8-b804-3eb22cfd0754.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:35:8d:7f:7a:15:9c:9c:4a:6b:cf:f6:98:70:8b:e8:cc:02: 16:72:57:23:95:c2:d4:3f:4b:c0:78:bd:89:e6:8e:83:aa:50: 92:34:cd:22:8b:55:a1:d7:b7:0d:a5:ea:b3:db:16:75:07:9f: a3:50:ce:0f:78:79:b8:f0:2d:25:42:50:d8:4a:d6:f7:bb:4d: 4b:32:af:e4:19:00:8b:f1:68:b8:0e:12:f2:4b:b3:02:53:13: aa:a1:bb:69:37:2c:b6:f7:fd:6c:9b:e6:47:13:79:c0:6e:17: b4:45:79:8f:35:c6:a2:fc:ae:2c:72:7a:cf:5f:5e:10:c3:02: a9:de:ab:a4:69:c6:6a:ca:cc:37:0a:1c:c7:fc:37:a6:73:43: ce:6e:27:cf:3b:a0:39:56:0f:1b:43:b5:8f:e6:6e:bc:dd:9f: 70:f1:e6:28:75:2f:1d:fa:ec:b9:47:a7:51:c7:5f:c0:e9:2c: 6c:00:82:e0:04:b3:6b:2a:45:e2:8f:15:7d:26:c0:54:d3:d7: 11:ee:ce:03:bf:2a:4e:e1:6a:f7:db:2a:92:71:51:a8:b9:2a: 7f:fc:8c:a9:2e:17:1e:65:4d:ef:35:a1:19:ad:28:74:d1:bf: ab:54:60:25:79:32:c8:f9:60:b7:38:ab:fc:83:f1:d7:cb:2f: aa:46:df:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kIzOF0iJTG7aZUaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgxOTE4MDM0NVoXDTI3MTEyNzA1MDAwMFowLzEtMCsGA1UEAxMk NWY5MWVkYTctYTJmMC00Y2M2LWI4NGMtYTZiZDRjZmI0M2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2246ifY/ji7EFh2T8TOmx/rFMaX6kb/EJ6a IBLthdEHlVInu9YSkm9Kp4S7XOU8KegCTV7BqjIYBa+fSMNdpbWRvTOP5WnrrM4+ mYz6dx0U5nfJhweKttd9fHuXzZ9DZKI1sbll+KnU9f3ruLNzVY4Fdc9IV8CPrZCt QxeosCHKXkjdkL/ULBkbujpnOOlViGn5uB3bNKiT7zJ3fg1ctfGgLllYbNJBQE9S ilTS30GU6q57AKGT8ulrObIZsJSVhq2CLVlSRXxXapdIpuN6hLsfIp9idV/rhLZY nXdvA52r4NRx+1sSoYkApbxHQsD9QN3LCPpLtTwhojyzzzNn5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpierSVG2+nw82iFpbySJl7n00OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWQxMjVkMWUtNjQzNS0z OGQ4LWI4MDQtM2ViMjJjZmQwNzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCop7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALA1jX96FZycSmvP9phwi+jMAhZyVyOVwtQ/S8B4vYnmjoOqUJI0zSKL VaHXtw2l6rPbFnUHn6NQzg94ebjwLSVCUNhK1ve7TUsyr+QZAIvxaLgOEvJLswJT E6qhu2k3LLb3/Wyb5kcTecBuF7RFeY81xqL8rixyes9fXhDDAqneq6RpxmrKzDcK HMf8N6ZzQ85uJ887oDlWDxtDtY/mbrzdn3Dx5ih1Lx367LlHp1HHX8DpLGwAguAE s2sqReKPFX0mwFTT1xHuzgO/Kk7havfbKpJxUai5Kn/8jKkuFx5lTe81oRmtKHTR v6tUYCV5Msj5YLc4q/yD8dfLL6pG358= -----END CERTIFICATE-----Generated at Tue Sep 1 01:43:58 2026 by rpki-client