$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/04a31621-bfe8-3329-8525-e060df72506b.roa File: 04a31621-bfe8-3329-8525-e060df72506b.roa (raw, json) Hash identifier: NFX7/6RPZ0IvWgItNQMpjGoscWbCREFdfEDidDNfQ1s= Subject key identifier: 12:8D:B4:10:AF:F9:AD:4A:2C:7C:43:B3:50:63:71:4D:97:E0:C5:CF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EED5228FBB6AA8D885BABED80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/04a31621-bfe8-3329-8525-e060df72506b.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 162.159.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:28:fb:b6:aa:8d:88:5b:ab:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=21f5031d-9f91-4073-b024-99adffb7ad83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:1d:a3:a8:37:e0:2b:63:8f:de:c4:6e:7c:bc: 39:c7:43:48:de:e0:1b:06:6e:4a:c6:54:2e:11:52: 3f:d9:b4:d6:29:a3:75:e0:97:20:5c:ea:5a:95:b4: e8:6d:60:46:a7:c4:fd:9e:14:3b:f9:56:6b:3e:81: f4:f6:33:a7:ef:82:b7:b6:bd:e9:ac:e8:37:4e:35: 31:a0:97:57:bd:30:0b:35:94:5f:b7:0d:b7:3f:35: 85:08:a2:2f:3c:be:8a:ce:1a:3d:15:72:b2:8b:3d: a9:af:0d:e4:84:01:a3:7a:d9:f9:78:f2:71:6e:86: c4:38:71:4b:b7:2b:be:df:66:9a:71:31:26:e0:db: 85:af:3a:b8:ef:b6:18:d8:e6:16:f0:81:98:12:81: 07:72:5e:0a:d2:a6:74:f4:24:8f:92:ed:2a:3b:60: 3e:f3:32:82:74:f3:bf:9e:46:ca:ee:5c:81:52:b4: 00:de:64:2a:63:b5:38:0e:f8:e7:42:ec:65:1c:51: 19:27:fa:12:62:34:44:e7:c6:a1:1b:e3:23:9f:7c: 30:04:e9:ce:f2:5d:98:80:71:9a:35:0c:08:be:d4: 5c:a3:d1:b4:2e:88:30:ff:84:0a:f7:f2:39:1e:dd: 45:5c:7c:75:56:66:0b:01:23:ac:33:c7:77:22:3e: ea:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:8D:B4:10:AF:F9:AD:4A:2C:7C:43:B3:50:63:71:4D:97:E0:C5:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/04a31621-bfe8-3329-8525-e060df72506b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.159.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:03:01:1d:c0:e4:e3:b5:f8:e6:ec:77:a5:60:27:28:86:ac: c6:aa:9a:b0:df:87:14:04:6b:82:47:56:38:52:16:b0:cc:39: 58:a1:25:d4:47:7a:79:56:96:74:76:a1:5b:66:b5:b5:88:54: 00:e1:80:cb:ec:80:ab:5b:33:4e:e0:2f:b2:e2:c4:aa:37:18: 00:34:b9:5f:cf:ed:8f:32:0b:42:50:66:4e:ef:1e:86:f8:02: 64:56:61:7f:a1:00:9f:20:74:97:d8:1a:92:78:f9:63:2a:7b: 41:3e:e5:7b:71:36:09:bf:79:19:a2:fd:bd:49:79:1a:55:25: 99:d1:70:cc:f1:03:83:f1:f7:69:e8:d3:54:47:43:9a:f2:ff: 99:75:9c:27:27:5c:18:05:37:09:af:bd:e9:24:39:04:75:01: 92:23:ab:cc:16:ee:6a:df:59:3c:9b:25:68:24:ac:b7:a9:e9: e5:e2:ba:88:0f:63:3e:f3:2c:40:30:0c:40:e5:1c:ad:69:d8: 42:35:59:73:0c:26:4e:fa:d4:33:45:36:55:a8:36:9b:e2:99: 49:be:fd:94:55:29:92:82:fc:06:70:58:48:61:d3:4a:c9:9d: bd:9b:b6:59:9a:a4:3e:47:d0:3a:a1:34:9a:64:4f:53:c9:df: a5:fc:0a:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUij7tqqNiFur7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk MjFmNTAzMWQtOWY5MS00MDczLWIwMjQtOTlhZGZmYjdhZDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhR2jqDfgK2OP3sRufLw5x0NI3uAbBm5KxlQu EVI/2bTWKaN14JcgXOpalbTobWBGp8T9nhQ7+VZrPoH09jOn74K3tr3prOg3TjUx oJdXvTALNZRftw23PzWFCKIvPL6Kzho9FXKyiz2prw3khAGjetn5ePJxbobEOHFL tyu+32aacTEm4NuFrzq477YY2OYW8IGYEoEHcl4K0qZ09CSPku0qO2A+8zKCdPO/ nkbK7lyBUrQA3mQqY7U4DvjnQuxlHFEZJ/oSYjRE58ahG+Mjn3wwBOnO8l2YgHGa NQwIvtRco9G0Logw/4QK9/I5Ht1FXHx1VmYLASOsM8d3Ij7qhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKNtBCv+a1KLHxDs1BjcU2X4MXPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDRhMzE2MjEtYmZlOC0z MzI5LTg1MjUtZTA2MGRmNzI1MDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBop8qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALYDAR3A5OO1+Obsd6VgJyiGrMaqmrDfhxQEa4JHVjhSFrDMOVihJdRH enlWlnR2oVtmtbWIVADhgMvsgKtbM07gL7LixKo3GAA0uV/P7Y8yC0JQZk7vHob4 AmRWYX+hAJ8gdJfYGpJ4+WMqe0E+5XtxNgm/eRmi/b1JeRpVJZnRcMzxA4Px92no 01RHQ5ry/5l1nCcnXBgFNwmvvekkOQR1AZIjq8wW7mrfWTybJWgkrLep6eXiuogP Yz7zLEAwDEDlHK1p2EI1WXMMJk761DNFNlWoNpvimUm+/ZRVKZKC/AZwWEhh00rJ nb2btlmapD5H0DqhNJpkT1PJ36X8Cjc= -----END CERTIFICATE-----Generated at Sun Sep 20 19:18:32 2026 by rpki-client