$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def/f7cef808-77ea-3a63-8140-5f1854878c63.roa File: f7cef808-77ea-3a63-8140-5f1854878c63.roa (raw, json) Hash identifier: 8p4mOZlfh2c6vRqI8XUGl2fjihZppvBeXO+vPh0X+N4= Subject key identifier: 9C:7F:C7:22:3C:97:4E:91:F3:DB:22:1F:10:FD:55:05:9F:58:4E:C5 Certificate issuer: /CN=4817ebb3-a4cc-48a9-bf42-01de55a66def Certificate serial: 010D0C9F4328584ED001E489EE37AEBC0309B600 Authority key identifier: 93:D8:D7:6A:D4:0D:56:A6:A5:A7:DE:2D:7D:06:EE:D0:86:74:6B:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def/f7cef808-77ea-3a63-8140-5f1854878c63.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 55251 IP address blocks: 162.211.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def/4817ebb3-a4cc-48a9-bf42-01de55a66def.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def/4817ebb3-a4cc-48a9-bf42-01de55a66def.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 14 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:e4:89:ee:37:ae:bc:03:09:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4817ebb3-a4cc-48a9-bf42-01de55a66def Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=3267b14d-eb90-4a79-a721-4c9a193f99bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:16:c1:f8:18:9c:84:97:fe:9e:33:a4:2a:4b: 2c:df:93:eb:18:0f:d1:26:9d:1d:8f:58:3f:9f:05: 39:22:70:8b:50:e5:63:49:8e:d8:c1:dc:d9:d0:2d: 74:17:46:20:3d:c8:f1:a6:31:d2:8c:97:a6:9d:19: 03:b3:c6:91:ae:2c:7d:cd:62:3b:7c:d5:a1:9b:69: 9d:f5:3a:b1:12:60:91:8e:40:4e:8d:a5:cf:1d:87: 68:a5:07:dc:4b:8b:13:dc:b4:b1:81:c0:40:eb:48: 32:f5:ff:46:5f:95:dc:9d:25:ab:76:11:6e:ee:eb: 9f:f9:cf:4e:16:a4:6f:7c:8e:52:ad:3a:84:7b:13: 14:b3:ea:58:ca:31:34:c2:ea:f1:53:ee:35:a1:8d: 4b:92:5d:94:d9:fc:88:0b:74:6c:0d:07:ef:2a:8d: 87:ee:58:84:46:11:74:70:24:01:61:8b:56:c1:0d: bf:35:4a:1d:e4:27:ba:fc:a3:ae:19:46:42:dc:7f: 1f:8a:f2:f7:d9:1d:08:6f:1f:10:86:3c:f4:d1:76: 17:b7:05:2a:f0:2a:56:c5:b8:df:71:b0:61:93:58: 24:b2:f8:d6:3f:38:6c:6f:57:92:41:c6:12:47:a2: 50:21:7a:57:ed:28:a9:4a:93:60:af:b5:22:6a:02: 73:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:7F:C7:22:3C:97:4E:91:F3:DB:22:1F:10:FD:55:05:9F:58:4E:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def/f7cef808-77ea-3a63-8140-5f1854878c63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def/4817ebb3-a4cc-48a9-bf42-01de55a66def.crl X509v3 Authority Key Identifier: keyid:93:D8:D7:6A:D4:0D:56:A6:A5:A7:DE:2D:7D:06:EE:D0:86:74:6B:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def.cer sbgp-ipAddrBlock: critical IPv4: 162.211.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:5c:97:66:8b:5f:c8:d2:0d:4e:75:d9:65:74:a4:c9:19:4c: 3e:ef:b5:fa:38:b2:1d:03:c4:47:fd:46:08:0a:fa:a8:3d:1d: aa:cf:3f:78:4a:4a:95:b8:5c:09:e0:ac:db:38:9f:7f:48:4a: 25:d6:a9:35:81:26:45:cc:44:c4:74:a2:e7:cb:de:b2:50:19: fd:79:50:ba:4b:1f:74:d7:14:25:86:22:4b:47:23:0a:d9:2f: d7:65:8f:17:5a:b7:1e:ab:3f:16:28:c7:19:df:9f:8d:73:d1: 01:ac:ea:e6:d3:96:67:e9:6e:b5:4b:bc:a4:7b:11:6e:31:66: 12:4f:0c:71:f0:00:ed:89:cf:f5:27:1f:88:2a:56:b0:ae:ea: fb:3c:8f:09:5e:80:7f:8c:76:d3:ad:9d:bd:3b:b9:02:8a:82: 20:33:25:d2:9c:a0:e6:72:72:ac:d6:a5:a8:dd:3a:4a:46:62: 36:1b:32:5f:d7:a6:e5:af:c9:44:73:a3:f0:95:a8:f2:14:ac: 8e:87:ae:d2:aa:fa:c1:33:a4:e1:6e:b1:f1:58:da:3e:72:6d: 48:ce:45:02:ef:1e:dc:85:5b:83:04:77:0a:cc:1d:3c:22:e9: bb:36:03:45:a3:9f:e5:34:e9:37:6b:ce:22:74:33:03:5f:7b: f9:e5:ae:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAeSJ7jeuvAMJtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDgxN2ViYjMtYTRjYy00OGE5LWJmNDItMDFkZTU1YTY2 ZGVmMB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk MzI2N2IxNGQtZWI5MC00YTc5LWE3MjEtNGM5YTE5M2Y5OWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBbB+BichJf+njOkKkss35PrGA/RJp0dj1g/ nwU5InCLUOVjSY7YwdzZ0C10F0YgPcjxpjHSjJemnRkDs8aRrix9zWI7fNWhm2md 9TqxEmCRjkBOjaXPHYdopQfcS4sT3LSxgcBA60gy9f9GX5XcnSWrdhFu7uuf+c9O FqRvfI5SrTqEexMUs+pYyjE0wurxU+41oY1Lkl2U2fyIC3RsDQfvKo2H7liERhF0 cCQBYYtWwQ2/NUod5Ce6/KOuGUZC3H8fivL32R0Ibx8Qhjz00XYXtwUq8CpWxbjf cbBhk1gksvjWPzhsb1eSQcYSR6JQIXpX7SipSpNgr7UiagJzEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJx/xyI8l06R89siHxD9VQWfWE7FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80ODE3 ZWJiMy1hNGNjLTQ4YTktYmY0Mi0wMWRlNTVhNjZkZWYvZjdjZWY4MDgtNzdlYS0z YTYzLTgxNDAtNWYxODU0ODc4YzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDgxN2ViYjMtYTRjYy00OGE5LWJm NDItMDFkZTU1YTY2ZGVmLzQ4MTdlYmIzLWE0Y2MtNDhhOS1iZjQyLTAxZGU1NWE2 NmRlZi5jcmwwHwYDVR0jBBgwFoAUk9jXatQNVqalp94tfQbu0IZ0a+8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80ODE3ZWJiMy1hNGNjLTQ4YTktYmY0Mi0wMWRl NTVhNjZkZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotOcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxcl2aLX8jSDU512WV0pMkZTD7vtfo4sh0DxEf9RggK+qg9HarPP3hK SpW4XAngrNs4n39ISiXWqTWBJkXMRMR0oufL3rJQGf15ULpLH3TXFCWGIktHIwrZ L9dljxdatx6rPxYoxxnfn41z0QGs6ubTlmfpbrVLvKR7EW4xZhJPDHHwAO2Jz/Un H4gqVrCu6vs8jwlegH+MdtOtnb07uQKKgiAzJdKcoOZycqzWpajdOkpGYjYbMl/X puWvyURzo/CVqPIUrI6HrtKq+sEzpOFusfFY2j5ybUjORQLvHtyFW4MEdwrMHTwi 6bs2A0Wjn+U06TdrziJ0MwNfe/nlrvI= -----END CERTIFICATE-----Generated at Thu Aug 13 12:57:29 2026 by rpki-client