$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9/aff2f39e-faa0-3953-afbf-237b8e2372fa.roa File: aff2f39e-faa0-3953-afbf-237b8e2372fa.roa (raw, json) Hash identifier: 2rUbNkoflTS2mzwsX5ZWtSj3w0sasJxBSmVoMz2fJXQ= Subject key identifier: DB:38:41:1B:77:3E:15:67:EF:C8:92:08:7B:E9:0B:55:6A:78:D9:1E Certificate issuer: /CN=bbece124-3380-4cb4-8651-ad5e1e27f3f9 Certificate serial: 010D0C9F4328584ED432585758DD44781208A380 Authority key identifier: 2F:61:29:72:8E:A3:B0:A9:9A:8E:D4:41:F0:3B:9C:8B:8E:65:12:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9/aff2f39e-faa0-3953-afbf-237b8e2372fa.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 22616 IP address blocks: 162.82.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9/bbece124-3380-4cb4-8651-ad5e1e27f3f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9/bbece124-3380-4cb4-8651-ad5e1e27f3f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:32:58:57:58:dd:44:78:12:08:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbece124-3380-4cb4-8651-ad5e1e27f3f9 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=59189c50-dc55-4196-a046-bbc1537b8114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:45:e5:52:93:d6:20:69:17:a5:7f:23:1d:11: db:a8:98:21:cd:2e:5e:05:49:fb:d2:21:b5:91:f8: a0:44:27:8e:3f:ee:ce:99:5a:0d:de:e3:8a:e1:c6: 8d:70:75:73:2b:59:24:c0:81:fd:b3:3f:ca:7b:6d: ff:f7:22:f5:d6:a5:3a:25:88:a7:df:48:76:57:8f: d0:08:22:0f:a5:e6:8b:2c:37:d0:01:35:15:22:9f: f7:08:71:60:0a:5e:b1:9a:d8:8d:18:94:04:ec:55: 1a:22:74:2d:c0:b5:15:d8:77:25:8d:dc:dd:5b:11: d2:b3:d1:0f:50:65:17:5f:87:9f:bf:03:07:a4:d0: e5:eb:7f:01:3f:a6:36:73:5b:e5:09:17:54:f5:07: 4c:d9:6c:12:86:2e:9a:58:70:61:f4:dc:fc:a6:9b: c0:f6:74:4a:2e:be:ed:78:8e:40:86:d6:3a:76:3f: 0a:18:e8:50:1a:d7:26:bf:eb:20:35:e8:86:a6:59: 62:73:be:06:bb:4f:cc:d5:c5:9c:d7:47:06:77:c5: 92:bb:0e:7c:c5:7c:7c:f9:14:29:3a:62:4a:d1:11: 79:91:8a:bb:b0:01:3f:86:14:38:9b:3b:e4:b8:54: 69:9a:b1:3e:7b:db:88:5f:e6:5e:93:78:08:9f:73: 41:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:38:41:1B:77:3E:15:67:EF:C8:92:08:7B:E9:0B:55:6A:78:D9:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9/aff2f39e-faa0-3953-afbf-237b8e2372fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9/bbece124-3380-4cb4-8651-ad5e1e27f3f9.crl X509v3 Authority Key Identifier: keyid:2F:61:29:72:8E:A3:B0:A9:9A:8E:D4:41:F0:3B:9C:8B:8E:65:12:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9.cer sbgp-ipAddrBlock: critical IPv4: 162.82.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:4b:a3:8d:1d:13:63:9a:74:a0:14:38:69:9e:b9:5e:bd:ad: b0:3a:9e:53:94:fa:d1:fb:c7:c6:b4:69:f7:b8:a1:c9:43:cc: c0:64:61:69:05:f4:66:6a:c1:2b:4c:d5:49:3f:d3:0b:f7:8f: f6:3f:12:a8:2b:8e:82:78:9e:07:97:27:90:78:fe:fa:f9:72: cc:79:13:93:3a:b2:16:ab:71:5e:21:7e:5f:0f:b7:07:79:4e: 10:14:35:4e:f6:eb:42:15:cf:c9:79:50:75:4c:cc:7b:3f:21: b4:e3:14:b7:2c:3f:6f:74:0d:9c:76:7a:98:1b:97:d7:53:b4: b7:0c:ad:cf:85:5b:64:8e:ae:8c:55:32:84:39:58:67:f0:34: 62:f4:7f:8a:3d:54:f7:e5:6e:96:9c:a6:4b:57:b9:52:93:1d: 9f:a1:a3:67:3f:5a:68:4a:3b:c7:48:33:68:67:06:0e:ca:17: 91:94:38:44:d2:07:b0:05:f5:38:e9:7c:71:34:1e:70:1b:d4: 85:14:0e:9d:05:54:02:ad:29:81:26:65:f7:40:43:3e:c6:91: 3c:58:43:1d:0d:e5:e3:83:87:b5:5f:dc:c0:b6:23:ed:f3:4d: 33:06:b3:ce:5a:b2:2d:c6:be:c9:a7:fb:0d:4f:05:b1:b0:e7: 4b:84:d9:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMlhXWN1EeBIIo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmJlY2UxMjQtMzM4MC00Y2I0LTg2NTEtYWQ1ZTFlMjdm M2Y5MB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk NTkxODljNTAtZGM1NS00MTk2LWEwNDYtYmJjMTUzN2I4MTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikXlUpPWIGkXpX8jHRHbqJghzS5eBUn70iG1 kfigRCeOP+7OmVoN3uOK4caNcHVzK1kkwIH9sz/Ke23/9yL11qU6JYin30h2V4/Q CCIPpeaLLDfQATUVIp/3CHFgCl6xmtiNGJQE7FUaInQtwLUV2HcljdzdWxHSs9EP UGUXX4efvwMHpNDl638BP6Y2c1vlCRdU9QdM2WwShi6aWHBh9Nz8ppvA9nRKLr7t eI5AhtY6dj8KGOhQGtcmv+sgNeiGpllic74Gu0/M1cWc10cGd8WSuw58xXx8+RQp OmJK0RF5kYq7sAE/hhQ4mzvkuFRpmrE+e9uIX+Zek3gIn3NB8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNs4QRt3PhVn78iSCHvpC1VqeNkeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iYmVj ZTEyNC0zMzgwLTRjYjQtODY1MS1hZDVlMWUyN2YzZjkvYWZmMmYzOWUtZmFhMC0z OTUzLWFmYmYtMjM3YjhlMjM3MmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYmJlY2UxMjQtMzM4MC00Y2I0LTg2 NTEtYWQ1ZTFlMjdmM2Y5L2JiZWNlMTI0LTMzODAtNGNiNC04NjUxLWFkNWUxZTI3 ZjNmOS5jcmwwHwYDVR0jBBgwFoAUL2Epco6jsKmajtRB8Duci45lErIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iYmVjZTEyNC0zMzgwLTRjYjQtODY1MS1hZDVl MWUyN2YzZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAolL+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdLo40dE2OadKAUOGmeuV69rbA6nlOU+tH7x8a0afe4oclDzMBkYWkF 9GZqwStM1Uk/0wv3j/Y/EqgrjoJ4ngeXJ5B4/vr5csx5E5M6sharcV4hfl8Ptwd5 ThAUNU7260IVz8l5UHVMzHs/IbTjFLcsP290DZx2epgbl9dTtLcMrc+FW2SOroxV MoQ5WGfwNGL0f4o9VPflbpacpktXuVKTHZ+ho2c/WmhKO8dIM2hnBg7KF5GUOETS B7AF9TjpfHE0HnAb1IUUDp0FVAKtKYEmZfdAQz7GkTxYQx0N5eODh7Vf3MC2I+3z TTMGs85asi3Gvsmn+w1PBbGw50uE2co= -----END CERTIFICATE-----Generated at Fri Aug 21 02:03:07 2026 by rpki-client