$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/144cb2af-4d6a-340e-8c0c-b3625a4d9a7c.roa File: 144cb2af-4d6a-340e-8c0c-b3625a4d9a7c.roa (raw, json) Hash identifier: jEEziK3SCc6p2TBnbNAPY9AUwz6lxB8NCJNTYLqseT4= Subject key identifier: 65:BE:6E:5C:CA:38:37:84:B6:CD:71:C7:42:00:5C:0B:01:5F:72:85 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D7CCFE26BDF41F62F5D4F3E80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/144cb2af-4d6a-340e-8c0c-b3625a4d9a7c.roa Signing time: Mon 13 Apr 2026 01:00:24 +0000 ROA not before: Mon 13 Apr 2026 01:00:24 +0000 ROA not after: Sun 12 Jul 2026 01:00:24 +0000 asID: 13335 IP address blocks: 162.159.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7c:cf:e2:6b:df:41:f6:2f:5d:4f:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 13 01:00:24 2026 GMT Not After : Jul 12 01:00:24 2026 GMT Subject: CN=eef77f1c-bb1c-4701-98d2-98a744bf468a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f7:a0:a2:41:e0:0c:f1:17:7c:98:91:84:9f: 0b:f7:7b:82:5f:01:ad:e0:2c:9b:21:ab:f7:1a:d3: b0:b2:b8:c7:9f:84:82:b6:51:80:7e:4d:32:9e:2a: e0:52:42:d7:12:3c:9b:03:ef:6a:e3:fc:c3:13:4b: 8b:33:fd:6c:e6:62:37:49:13:f0:8a:1b:57:61:97: e8:ad:57:7c:9c:10:8c:13:b3:29:7e:d0:51:84:49: 55:db:66:e5:4c:5c:83:d3:62:da:0a:46:3b:f3:71: 17:8f:b3:1c:8d:31:7a:c3:46:6f:b9:98:db:6e:b1: d4:73:72:c2:0e:9c:e3:52:d9:92:6f:42:fd:86:34: c4:53:ca:08:df:6b:c8:c8:ff:59:d0:63:f8:37:84: 32:b8:ac:5d:8a:93:ac:3a:01:16:24:d4:d2:46:59: be:d5:64:4c:e1:f4:02:59:03:0d:60:0f:06:73:3c: 9f:b4:a3:08:95:29:62:da:62:71:32:68:13:40:bb: 60:66:e7:4e:ab:96:32:2a:ff:df:a4:59:6a:fc:93: 84:fc:8e:17:29:98:a6:85:cd:92:04:f7:91:b0:01: bb:47:72:9f:c2:61:f6:72:76:ef:de:02:d4:6e:2a: c9:26:c4:c6:98:7f:2a:e9:14:66:00:38:61:7e:68: 8a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:BE:6E:5C:CA:38:37:84:B6:CD:71:C7:42:00:5C:0B:01:5F:72:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/144cb2af-4d6a-340e-8c0c-b3625a4d9a7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.159.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:a3:60:f5:3c:17:99:7f:ab:e2:f7:60:6e:fd:e6:b8:09:99: e4:26:ec:df:20:95:c5:b9:1b:b4:35:91:5b:4d:b3:e9:d6:db: 6b:d4:a0:e2:8e:f6:07:24:c2:8c:08:ed:83:c1:b9:cf:7c:f3: 2c:7c:bf:8f:c5:43:85:95:45:8c:74:d8:0e:7b:be:13:3f:ac: 09:a0:cf:b3:b9:a0:87:79:6c:5b:8e:58:42:2c:bb:8c:c2:b0: a1:8b:93:65:38:07:49:45:68:f3:de:0f:a9:13:da:38:e5:af: 54:32:5a:db:13:05:d5:67:2a:7e:ca:eb:6d:dd:40:e6:e3:bb: 32:a8:1c:f9:a0:48:f3:7c:16:26:c8:39:48:00:2c:fd:60:50: a4:46:f7:b9:71:42:a5:a1:2c:06:7d:77:37:96:ed:7b:1b:fe: 91:cd:b4:60:0f:48:cb:10:92:a4:76:6f:9a:f5:a4:08:99:52: 69:9e:26:c5:99:f9:75:a5:2a:3a:ad:4a:96:7e:1c:96:fc:92: 99:0c:8b:31:33:76:29:6e:22:84:f8:5b:cb:19:50:e4:cc:d4: 26:59:76:ca:91:8c:ed:49:7c:b6:75:ab:ed:d5:5e:99:3e:b9: 14:9f:91:f3:71:a8:23:7c:cd:25:25:08:40:67:7b:67:62:b0: 2c:31:76:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE18z+Jr30H2L11PPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQxMzAxMDAyNFoXDTI2MDcxMjAxMDAyNFowLzEtMCsGA1UEAxMk ZWVmNzdmMWMtYmIxYy00NzAxLTk4ZDItOThhNzQ0YmY0NjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvegokHgDPEXfJiRhJ8L93uCXwGt4CybIav3 GtOwsrjHn4SCtlGAfk0ynirgUkLXEjybA+9q4/zDE0uLM/1s5mI3SRPwihtXYZfo rVd8nBCME7MpftBRhElV22blTFyD02LaCkY783EXj7McjTF6w0ZvuZjbbrHUc3LC DpzjUtmSb0L9hjTEU8oI32vIyP9Z0GP4N4QyuKxdipOsOgEWJNTSRlm+1WRM4fQC WQMNYA8GczyftKMIlSli2mJxMmgTQLtgZudOq5YyKv/fpFlq/JOE/I4XKZimhc2S BPeRsAG7R3KfwmH2cnbv3gLUbirJJsTGmH8q6RRmADhhfmiK5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGW+blzKODeEts1xx0IAXAsBX3KFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTQ0Y2IyYWYtNGQ2YS0z NDBlLThjMGMtYjM2MjVhNGQ5YTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop9tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKajYPU8F5l/q+L3YG795rgJmeQm7N8glcW5G7Q1kVtNs+nW22vUoOKO 9gckwowI7YPBuc988yx8v4/FQ4WVRYx02A57vhM/rAmgz7O5oId5bFuOWEIsu4zC sKGLk2U4B0lFaPPeD6kT2jjlr1QyWtsTBdVnKn7K623dQObjuzKoHPmgSPN8FibI OUgALP1gUKRG97lxQqWhLAZ9dzeW7Xsb/pHNtGAPSMsQkqR2b5r1pAiZUmmeJsWZ +XWlKjqtSpZ+HJb8kpkMizEzdiluIoT4W8sZUOTM1CZZdsqRjO1JfLZ1q+3VXpk+ uRSfkfNxqCN8zSUlCEBne2disCwxdgg= -----END CERTIFICATE-----Generated at Fri Apr 17 19:04:40 2026 by rpki-client