$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ca654ba8-15ea-3372-8d68-9faef7d19f58.roa File: ca654ba8-15ea-3372-8d68-9faef7d19f58.roa (raw, json) Hash identifier: 2ESiWA+/EKtetrVVu4TX+oqEZQ7E0s0sTUgE1ElKVgA= Subject key identifier: A6:B7:01:11:1D:5C:54:A9:7E:3C:49:86:80:15:9F:EC:93:44:B1:FA Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEA87746C9E387FED0E30B792 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ca654ba8-15ea-3372-8d68-9faef7d19f58.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 162.158.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:74:6c:9e:38:7f:ed:0e:30:b7:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=bdaf9b2f-b1b2-49fd-bbdd-f21fb0f5f409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ee:2b:b0:b9:f4:00:3d:d2:40:42:06:4c:df: 09:68:50:34:57:cd:bf:48:42:0b:ee:ad:28:58:f7: 7d:51:03:dd:dd:2f:58:05:f3:7e:02:7b:bc:ad:e0: 11:03:c8:dc:e0:e2:87:ee:98:79:ba:65:02:d8:68: 58:0a:04:a0:33:65:6a:0f:dd:71:23:00:4e:da:59: 98:4d:46:36:12:ec:62:a0:48:95:ae:c4:25:b4:27: bc:dd:48:dd:e9:cb:42:f0:21:4e:de:d7:7d:16:69: 5a:68:f6:70:3f:b0:6d:c0:8d:32:40:e2:44:d5:bf: 39:2c:5b:25:26:85:d3:43:d4:89:7d:f4:5e:85:42: ee:c3:5c:4a:04:2b:6c:e3:79:2f:53:c6:c5:67:12: b0:d9:18:d4:f4:96:f3:69:b4:e7:7c:94:b1:10:ca: bd:6d:b1:1d:af:bb:d0:d7:58:bf:b0:f2:6c:12:e5: b2:05:3d:ce:0f:a5:0b:21:66:33:24:fa:c7:f1:87: f2:2b:39:88:af:e9:34:ee:9e:94:c1:34:d8:11:e9: d2:1a:99:4f:f8:c1:de:65:8d:11:5e:55:41:a3:b8: 8b:0e:03:4e:fc:4b:84:3a:0d:8c:fe:c2:d0:1e:64: 8a:d3:3a:42:d7:07:49:e2:3d:2b:52:b9:6b:eb:d8: 1b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:B7:01:11:1D:5C:54:A9:7E:3C:49:86:80:15:9F:EC:93:44:B1:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ca654ba8-15ea-3372-8d68-9faef7d19f58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:b0:ba:a5:12:1a:87:0d:a7:88:99:1d:44:d4:81:6c:8c:fc: d1:ce:3c:85:f0:29:aa:a4:d2:f5:a2:eb:c1:e0:9d:78:51:a7: 02:34:8a:03:18:f3:6b:97:52:38:93:3f:d2:27:68:5f:a1:60: 5f:f7:36:ac:74:35:85:50:a5:f1:43:51:3a:af:bb:c4:15:c4: 8a:2a:27:fc:7a:73:5e:8a:36:11:b2:cc:a8:2a:38:20:40:41: 95:c2:ab:1f:8d:2f:6e:6f:56:55:90:bc:09:b8:e6:cf:7c:f3: 2d:ac:81:fe:f2:ae:68:6e:15:00:f4:d9:4d:5c:da:84:ea:22: c7:8d:4a:91:c3:d1:12:e6:48:40:0b:b0:d6:69:b4:73:dc:79: de:26:1f:1c:a3:cd:92:27:9b:5e:6d:4c:fb:c2:8d:17:b5:31: 4a:0b:30:fd:0d:04:28:8a:33:0a:27:cd:ff:d4:4f:6a:a9:66: 23:b0:f9:24:9e:e9:b3:8d:95:20:6d:d2:8f:e5:af:e6:56:12: 1a:89:84:d9:06:3b:11:66:a3:38:28:14:8d:c5:53:39:54:af: 99:ef:5e:bd:b5:dd:35:05:9d:f3:d7:9f:c9:09:9b:40:27:f2: f0:22:f0:24:a7:f2:3d:03:69:d1:78:f5:a6:2a:3b:48:4b:28: a4:cb:e2:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh3Rsnjh/7Q4wt5IwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk YmRhZjliMmYtYjFiMi00OWZkLWJiZGQtZjIxZmIwZjVmNDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjO4rsLn0AD3SQEIGTN8JaFA0V82/SEIL7q0o WPd9UQPd3S9YBfN+Anu8reARA8jc4OKH7ph5umUC2GhYCgSgM2VqD91xIwBO2lmY TUY2EuxioEiVrsQltCe83Ujd6ctC8CFO3td9FmlaaPZwP7BtwI0yQOJE1b85LFsl JoXTQ9SJffRehULuw1xKBCts43kvU8bFZxKw2RjU9JbzabTnfJSxEMq9bbEdr7vQ 11i/sPJsEuWyBT3OD6ULIWYzJPrH8YfyKzmIr+k07p6UwTTYEenSGplP+MHeZY0R XlVBo7iLDgNO/EuEOg2M/sLQHmSK0zpC1wdJ4j0rUrlr69gbzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKa3AREdXFSpfjxJhoAVn+yTRLH6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2E2NTRiYTgtMTVlYS0z MzcyLThkNjgtOWZhZWY3ZDE5ZjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop4OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuwuqUSGocNp4iZHUTUgWyM/NHOPIXwKaqk0vWi68HgnXhRpwI0igMY 82uXUjiTP9InaF+hYF/3Nqx0NYVQpfFDUTqvu8QVxIoqJ/x6c16KNhGyzKgqOCBA QZXCqx+NL25vVlWQvAm45s988y2sgf7yrmhuFQD02U1c2oTqIseNSpHD0RLmSEAL sNZptHPced4mHxyjzZInm15tTPvCjRe1MUoLMP0NBCiKMwonzf/UT2qpZiOw+SSe 6bONlSBt0o/lr+ZWEhqJhNkGOxFmozgoFI3FUzlUr5nvXr213TUFnfPXn8kJm0An 8vAi8CSn8j0DadF49aYqO0hLKKTL4q0= -----END CERTIFICATE-----Generated at Tue Sep 1 01:44:59 2026 by rpki-client