$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b7144f9c-7aa1-30e8-94b0-837239b33723.roa File: b7144f9c-7aa1-30e8-94b0-837239b33723.roa (raw, json) Hash identifier: UenJLBxWSvck+uG0VZ/t89Yhw77PzcL/6sZbRYf4l14= Subject key identifier: 2A:6A:22:0F:46:0F:5B:07:04:65:C3:EB:94:6B:93:ED:39:99:C5:4E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEA8772831BD475307EC52E40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b7144f9c-7aa1-30e8-94b0-837239b33723.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 108.162.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:72:83:1b:d4:75:30:7e:c5:2e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=04f91cf8-4dcb-40e5-ba3b-262322e7eb39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b8:bf:a5:4a:16:2b:f6:df:6a:9b:23:af:8f: ea:af:20:6c:ad:d3:6c:fd:6b:de:5e:42:60:83:47: 4f:d0:f6:de:42:80:1a:9e:ee:36:33:2f:d1:79:69: 73:3d:44:39:94:1e:a1:72:cf:62:22:af:2e:a0:38: 39:c8:8b:40:20:15:8e:48:7a:ff:04:ba:e9:1b:77: 5f:d0:46:29:5e:10:6e:04:66:23:f5:50:d5:63:34: fa:78:29:b2:90:db:88:94:cd:b7:4d:23:19:22:aa: c1:77:c4:a0:e9:4e:6a:f0:75:37:ba:ce:86:e8:19: 4c:9a:32:a6:b3:59:46:1e:b6:cc:52:4e:74:85:02: ca:2f:fc:ca:37:21:e1:f8:92:ea:60:f1:92:e9:82: 7c:9a:ed:cf:be:2c:d8:a3:e1:95:2f:dc:da:14:50: 88:06:cd:a7:c2:13:44:16:b2:80:06:3f:b1:07:16: 0a:df:2d:19:d2:76:8c:86:4b:00:0b:8c:a5:c2:68: 78:84:14:37:ad:03:18:9e:c2:be:2b:31:ab:8f:ac: 1c:a1:81:77:ce:9f:85:25:b4:c3:33:8f:a7:0a:55: 52:4d:3c:78:0e:bb:86:2c:9e:8d:5f:2a:9d:58:43: 3b:1b:c0:da:a5:70:af:ad:fa:fd:86:98:e1:11:d4: 24:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:6A:22:0F:46:0F:5B:07:04:65:C3:EB:94:6B:93:ED:39:99:C5:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b7144f9c-7aa1-30e8-94b0-837239b33723.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 108.162.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:0f:0b:a6:30:a3:b2:7b:e0:73:30:f1:21:e2:a6:fa:a1:88: a1:ac:95:77:da:35:bd:5f:6f:7f:a3:77:61:44:3b:05:cc:f5: 64:04:6e:db:d5:31:70:3b:98:bb:5f:9d:e5:4c:9a:16:b2:c9: 66:88:32:66:2f:54:15:67:f7:4c:7c:de:16:54:c6:92:da:9b: 87:8a:cb:3b:c5:1d:2f:3f:e7:de:f3:54:7f:05:98:9d:08:90: 75:5c:07:c9:ff:f0:b5:60:ab:ab:27:57:41:af:70:bb:7f:87: 8a:5b:31:26:46:5b:28:c8:39:0c:7d:57:61:ea:85:d8:46:26: 9a:5d:1f:6d:9f:6c:2d:b7:93:50:b6:d5:7d:63:7a:7d:65:d1: ac:73:66:9c:80:49:4b:ff:eb:3d:91:f6:06:ab:42:8d:15:34: 3e:35:c9:c9:14:11:e8:8f:ad:f4:e7:c5:c7:1e:f5:ec:d2:27: af:51:6f:fa:82:a8:87:a9:72:88:38:19:6a:4f:f9:a2:11:9a: 0c:00:76:7c:58:65:9c:c2:5e:31:fc:e1:e0:41:24:d2:b9:41: 6a:2a:9b:16:e6:4f:03:bf:49:09:67:cd:5e:cd:58:ed:f3:68: b0:6f:13:37:f5:c9:f1:ab:9b:ad:9c:07:da:c4:75:05:39:4f: 87:df:88:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh3KDG9R1MH7FLkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk MDRmOTFjZjgtNGRjYi00MGU1LWJhM2ItMjYyMzIyZTdlYjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7i/pUoWK/bfapsjr4/qryBsrdNs/WveXkJg g0dP0PbeQoAanu42My/ReWlzPUQ5lB6hcs9iIq8uoDg5yItAIBWOSHr/BLrpG3df 0EYpXhBuBGYj9VDVYzT6eCmykNuIlM23TSMZIqrBd8Sg6U5q8HU3us6G6BlMmjKm s1lGHrbMUk50hQLKL/zKNyHh+JLqYPGS6YJ8mu3PvizYo+GVL9zaFFCIBs2nwhNE FrKABj+xBxYK3y0Z0naMhksAC4ylwmh4hBQ3rQMYnsK+KzGrj6wcoYF3zp+FJbTD M4+nClVSTTx4DruGLJ6NXyqdWEM7G8DapXCvrfr9hpjhEdQkJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpqIg9GD1sHBGXD65Rrk+05mcVOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjcxNDRmOWMtN2FhMS0z MGU4LTk0YjAtODM3MjM5YjMzNzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKLTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALkPC6Ywo7J74HMw8SHipvqhiKGslXfaNb1fb3+jd2FEOwXM9WQEbtvV MXA7mLtfneVMmhayyWaIMmYvVBVn90x83hZUxpLam4eKyzvFHS8/597zVH8FmJ0I kHVcB8n/8LVgq6snV0GvcLt/h4pbMSZGWyjIOQx9V2HqhdhGJppdH22fbC23k1C2 1X1jen1l0axzZpyASUv/6z2R9garQo0VND41yckUEeiPrfTnxcce9ezSJ69Rb/qC qIepcog4GWpP+aIRmgwAdnxYZZzCXjH84eBBJNK5QWoqmxbmTwO/SQlnzV7NWO3z aLBvEzf1yfGrm62cB9rEdQU5T4ffiKM= -----END CERTIFICATE-----Generated at Tue Sep 22 10:04:50 2026 by rpki-client