$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dd2f8f1e-4f87-3845-8180-1cf640cccbe3.roa File: dd2f8f1e-4f87-3845-8180-1cf640cccbe3.roa (raw, json) Hash identifier: JXi7PZcC6LvkxMh2awlgLIQ+GeOei9NtBoKRZ/4IZcw= Subject key identifier: 1C:4F:D4:9A:B9:95:90:DC:35:E5:C1:F4:0C:C0:7C:14:4E:C9:28:D2 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEA877E15B1F242ED99F9F100 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dd2f8f1e-4f87-3845-8180-1cf640cccbe3.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 162.158.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:7e:15:b1:f2:42:ed:99:f9:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=deb95eeb-d464-4d2f-90fe-428913cad8eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:02:9c:13:0b:fb:e9:a8:fd:f4:9f:62:06:7e: 47:9d:89:74:bc:80:de:88:f1:8f:51:11:69:81:b5: 35:3f:ae:b7:72:58:f8:35:26:d0:5d:36:2e:06:0b: 2a:0e:2b:ff:de:14:16:24:a7:cc:a4:76:06:17:bf: a5:5c:ed:fe:ce:b1:b7:f9:9f:a9:d4:ba:b2:e6:44: 48:4b:6b:ca:33:77:24:f6:88:bb:2c:75:39:98:d9: 98:c1:59:9c:05:61:af:50:51:8d:56:c2:40:00:40: 38:67:71:9e:f5:d6:da:cd:e1:94:b8:d3:32:ab:c0: 7c:aa:d4:8f:f9:56:f4:5c:51:0d:84:18:78:34:87: 85:79:12:ad:11:0d:e3:65:0d:41:25:62:c1:82:08: c9:fe:40:cb:0b:64:c8:97:5a:02:86:0f:79:dc:6e: d8:2f:7c:1e:96:97:33:ca:e3:95:43:5b:7f:ba:7c: d3:09:e2:c3:c9:0a:52:5b:4c:ac:a4:f7:92:0b:ad: 9a:57:24:f6:8b:ce:55:5b:b0:50:c6:38:a7:8b:c7: 4a:60:a7:09:77:66:7f:4a:87:e6:16:f3:f3:f4:0f: db:cc:a2:73:0b:90:cc:80:4e:d7:52:a9:f3:f9:34: c6:1b:86:cb:a9:9e:7e:31:26:91:c7:66:69:45:14: 74:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:4F:D4:9A:B9:95:90:DC:35:E5:C1:F4:0C:C0:7C:14:4E:C9:28:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dd2f8f1e-4f87-3845-8180-1cf640cccbe3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:26:4b:d1:ff:fd:c1:ad:cf:6f:f1:d1:c2:c8:25:02:da:e0: 8c:94:e0:41:31:5d:95:3c:f4:75:11:1f:f4:f8:63:32:d3:8d: bc:fa:60:c7:21:19:e5:f9:a1:3d:4d:ed:3a:e1:72:33:5e:6b: 2b:e8:e0:ff:f3:cc:7c:82:7f:fa:e6:bb:9b:e6:a2:23:4e:ea: d3:d3:d4:61:4d:f5:11:b1:5b:69:01:bb:05:d5:57:47:bf:a5: a9:d0:29:e9:98:a6:47:e2:14:8c:4c:1d:66:46:1b:6d:af:81: 49:15:ac:5c:07:d5:4f:a6:64:95:7b:91:80:71:d1:08:a7:81: 01:ed:9f:b8:e1:4b:1a:f9:24:51:90:7b:27:ba:5c:50:30:a5: 18:4d:7a:9a:62:22:67:e3:e3:6a:90:23:b9:5c:bd:b7:14:34: 60:aa:e3:65:ce:34:d1:27:4b:1a:d8:83:65:2f:1e:b9:ac:23: 9c:89:9f:7a:68:55:0a:09:89:ee:13:6d:e0:53:2f:03:77:07: e1:fb:c3:97:58:b6:70:1f:9e:f0:4a:f5:6a:a1:7d:b5:e4:63: 6d:bb:56:16:18:24:c4:ad:b3:d2:41:62:66:0d:01:e7:f3:91: 1c:9a:58:50:6b:0a:b4:99:30:7a:79:68:6d:1c:52:25:03:a4: 65:35:a9:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh34VsfJC7Zn58QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk ZGViOTVlZWItZDQ2NC00ZDJmLTkwZmUtNDI4OTEzY2FkOGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQKcEwv76aj99J9iBn5HnYl0vIDeiPGPURFp gbU1P663clj4NSbQXTYuBgsqDiv/3hQWJKfMpHYGF7+lXO3+zrG3+Z+p1Lqy5kRI S2vKM3ck9oi7LHU5mNmYwVmcBWGvUFGNVsJAAEA4Z3Ge9dbazeGUuNMyq8B8qtSP +Vb0XFENhBh4NIeFeRKtEQ3jZQ1BJWLBggjJ/kDLC2TIl1oChg953G7YL3welpcz yuOVQ1t/unzTCeLDyQpSW0yspPeSC62aVyT2i85VW7BQxjini8dKYKcJd2Z/Sofm FvPz9A/bzKJzC5DMgE7XUqnz+TTGG4bLqZ5+MSaRx2ZpRRR0xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxP1Jq5lZDcNeXB9AzAfBROySjSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGQyZjhmMWUtNGY4Ny0z ODQ1LTgxODAtMWNmNjQwY2NjYmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop69MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK4mS9H//cGtz2/x0cLIJQLa4IyU4EExXZU89HURH/T4YzLTjbz6YMch GeX5oT1N7TrhcjNeayvo4P/zzHyCf/rmu5vmoiNO6tPT1GFN9RGxW2kBuwXVV0e/ panQKemYpkfiFIxMHWZGG22vgUkVrFwH1U+mZJV7kYBx0QingQHtn7jhSxr5JFGQ eye6XFAwpRhNeppiImfj42qQI7lcvbcUNGCq42XONNEnSxrYg2UvHrmsI5yJn3po VQoJie4TbeBTLwN3B+H7w5dYtnAfnvBK9WqhfbXkY227VhYYJMSts9JBYmYNAefz kRyaWFBrCrSZMHp5aG0cUiUDpGU1qWc= -----END CERTIFICATE-----Generated at Tue Sep 1 01:57:30 2026 by rpki-client