$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cb3609ed-de1e-3e8d-9cde-308ba4bce004.roa File: cb3609ed-de1e-3e8d-9cde-308ba4bce004.roa (raw, json) Hash identifier: EjwNjVFQPiB0Wseo4aBRe058j1uIEbe5rIiDUG1lr58= Subject key identifier: D0:B0:22:B7:47:C6:3B:ED:A1:0D:F0:FA:2B:CD:BA:23:04:40:F6:07 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EED5228939F08575A42230380 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cb3609ed-de1e-3e8d-9cde-308ba4bce004.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 162.159.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:28:93:9f:08:57:5a:42:23:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=6a1937d1-4f3e-4130-8f32-fcd57aa0b93f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:34:4a:cf:e7:fa:0a:f0:7f:21:28:16:b5:23: c0:d5:50:44:c1:de:77:15:0c:ff:6e:92:53:0a:22: 37:b7:36:6b:78:99:27:6c:20:61:b4:78:f3:11:c4: 25:e7:97:d3:d4:1e:e7:89:49:79:8e:20:29:89:af: 42:ef:b9:3e:e8:d3:2a:25:f6:ee:e3:60:f6:b2:aa: 53:1b:0e:15:ca:28:d4:1c:54:9d:8d:a9:80:f3:51: 16:a3:e5:ce:24:71:63:69:f4:57:27:7d:b2:ab:4b: 58:c6:a2:87:ff:09:5a:38:ab:d2:2f:09:7e:b7:c8: 22:a7:0a:9e:7f:4a:dc:4a:2d:2e:07:e3:1c:cb:f0: 61:87:45:5d:e0:0c:b4:ce:5a:fd:2e:3c:3d:d9:be: e0:3b:36:92:ca:a3:a4:e1:bc:fd:a4:a7:b2:94:72: 2f:77:fc:96:b0:e7:e2:0b:87:f8:09:cd:b1:85:c5: c2:c0:4c:1b:8a:68:3e:3b:2d:5f:d7:41:4d:98:b0: 52:19:28:1c:3d:c6:b8:1d:0c:39:19:30:fb:5d:99: 4d:05:42:56:85:4d:a6:de:f1:27:1b:84:7f:5e:ea: 49:c5:90:2b:cf:a4:ef:42:d7:16:34:e5:dd:66:8a: 84:6d:23:f9:68:de:4e:c6:bb:59:78:eb:ed:40:5c: 2a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:B0:22:B7:47:C6:3B:ED:A1:0D:F0:FA:2B:CD:BA:23:04:40:F6:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cb3609ed-de1e-3e8d-9cde-308ba4bce004.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.159.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:f1:9f:00:17:05:0f:bc:b7:3e:5c:0d:ad:c3:d7:4e:04:e9: 4b:d1:1c:94:38:a6:25:6b:d5:84:bb:d0:73:c8:65:1a:63:75: 8e:12:63:1e:60:77:12:70:98:a6:d7:b0:73:53:ac:e8:64:b4: 49:d2:db:65:88:ce:50:3d:1c:25:94:c3:69:33:87:8d:15:6a: a1:23:34:54:b4:cc:39:95:25:92:94:4a:ba:d5:4d:b3:ad:8a: 70:92:61:dd:04:28:9d:08:a7:5a:0e:07:32:4e:1f:3b:97:f0: 0e:fe:58:32:c2:65:ba:cf:b5:38:74:bf:f5:d0:6d:da:17:1c: 49:95:f0:18:ae:52:1d:f3:bc:b1:36:61:a0:64:98:53:a5:84: 0c:4a:3f:c4:a1:17:63:9b:80:3f:dc:3e:20:92:9b:56:21:6e: f3:0c:d7:57:57:3e:93:02:af:cf:e0:6e:15:9a:29:6c:80:cc: a7:59:ef:64:83:3a:2f:43:2a:6b:d9:69:9d:54:b1:d1:82:e6: e3:ba:1f:f5:3d:b5:e3:f0:10:ac:4f:65:b0:da:62:3b:49:2d: 84:9c:43:9f:2e:cf:8a:32:ee:dc:87:dc:d5:6f:c4:e2:4a:8f: 4d:35:bd:25:4e:3e:30:d5:29:db:1b:6c:90:90:84:45:c8:b4: 57:cf:a3:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUiiTnwhXWkIjA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk NmExOTM3ZDEtNGYzZS00MTMwLThmMzItZmNkNTdhYTBiOTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTRKz+f6CvB/ISgWtSPA1VBEwd53FQz/bpJT CiI3tzZreJknbCBhtHjzEcQl55fT1B7niUl5jiApia9C77k+6NMqJfbu42D2sqpT Gw4VyijUHFSdjamA81EWo+XOJHFjafRXJ32yq0tYxqKH/wlaOKvSLwl+t8gipwqe f0rcSi0uB+Mcy/Bhh0Vd4Ay0zlr9Ljw92b7gOzaSyqOk4bz9pKeylHIvd/yWsOfi C4f4Cc2xhcXCwEwbimg+Oy1f10FNmLBSGSgcPca4HQw5GTD7XZlNBUJWhU2m3vEn G4R/XupJxZArz6TvQtcWNOXdZoqEbSP5aN5OxrtZeOvtQFwqJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCwIrdHxjvtoQ3w+ivNuiMEQPYHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2IzNjA5ZWQtZGUxZS0z ZThkLTljZGUtMzA4YmE0YmNlMDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop8KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/xnwAXBQ+8tz5cDa3D104E6UvRHJQ4piVr1YS70HPIZRpjdY4SYx5g dxJwmKbXsHNTrOhktEnS22WIzlA9HCWUw2kzh40VaqEjNFS0zDmVJZKUSrrVTbOt inCSYd0EKJ0Ip1oOBzJOHzuX8A7+WDLCZbrPtTh0v/XQbdoXHEmV8BiuUh3zvLE2 YaBkmFOlhAxKP8ShF2ObgD/cPiCSm1YhbvMM11dXPpMCr8/gbhWaKWyAzKdZ72SD Oi9DKmvZaZ1UsdGC5uO6H/U9tePwEKxPZbDaYjtJLYScQ58uz4oy7tyH3NVvxOJK j001vSVOPjDVKdsbbJCQhEXItFfPo/s= -----END CERTIFICATE-----Generated at Tue Sep 1 01:43:31 2026 by rpki-client