$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2acf0419-32e5-3dc1-a81a-0dcaa7db850c.roa File: 2acf0419-32e5-3dc1-a81a-0dcaa7db850c.roa (raw, json) Hash identifier: E9P3qXw565FxGfF7ugLmdrY9fSKdJ6JSSOAYvW/UlWU= Subject key identifier: 98:33:DC:3D:D3:96:54:D9:6D:DF:C0:7F:57:3C:C0:5E:8B:A5:54:AD Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D67DFDE2245455371291F5200 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2acf0419-32e5-3dc1-a81a-0dcaa7db850c.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 13335 IP address blocks: 162.158.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:de:22:45:45:53:71:29:1f:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=46a70c4c-647c-4857-960a-600ec9aee300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f7:a6:22:e1:52:c1:7a:36:ee:ae:66:59:6a: f3:bb:c6:4f:bf:5e:c9:3d:82:74:91:dd:62:ed:77: 32:39:f2:37:23:7e:67:8f:4d:3d:3c:f6:1a:c6:d0: b3:50:22:f3:fc:aa:1f:58:4d:06:8d:ca:87:69:80: f1:01:cd:d5:93:24:82:f0:84:78:8b:3f:24:ba:d7: f9:66:c0:01:ac:d6:48:11:fe:80:2a:91:62:5d:9d: 67:0e:b3:02:8b:84:cb:cb:58:0d:ee:b7:37:36:74: 11:3d:7b:94:65:b4:6b:f6:3d:bf:a6:e5:d6:f2:94: 2e:f3:a7:88:df:21:96:ae:4c:34:12:a3:25:21:7f: 12:ac:c3:5b:fe:a1:4e:05:9c:c3:09:99:0c:e5:81: 8f:f2:80:6e:98:d0:9f:ca:04:c6:c5:5a:61:f7:d0: 98:51:89:44:89:00:8b:78:71:f7:44:4d:59:0f:1f: 43:20:18:1e:5c:b1:50:d2:13:0d:bf:65:ed:ea:5f: 4d:ba:f5:49:8e:85:7b:ce:c2:ed:5a:a7:96:93:71: 7f:cf:e7:61:b0:27:06:6b:f8:52:af:bb:09:c8:ae: 53:09:a4:3f:13:fc:1f:2b:ae:19:77:ac:f2:17:3f: 1a:df:66:4f:2b:1d:18:b8:b3:35:b4:8e:c9:2d:fe: 91:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:33:DC:3D:D3:96:54:D9:6D:DF:C0:7F:57:3C:C0:5E:8B:A5:54:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2acf0419-32e5-3dc1-a81a-0dcaa7db850c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:37:18:10:36:cd:95:82:1d:92:7b:6f:a9:73:ea:91:a7:0d: 61:71:a1:35:0e:e2:f4:6d:b2:18:6c:5f:22:71:14:9e:a6:6d: cf:df:46:2e:3a:13:29:f9:f9:f0:6d:40:14:08:45:a0:ef:a8: 2c:4b:c1:2e:98:d7:c7:c9:15:5d:88:85:f6:f6:96:3d:b9:d9: 3d:a7:2c:08:6d:19:80:81:a7:38:5f:cf:9a:60:d6:ce:9a:96: e2:8b:54:a5:d6:a6:13:f5:f1:63:65:b9:a4:0f:f2:8e:57:2e: b2:13:78:88:52:4f:19:fc:4b:c7:4e:22:4a:dd:08:bf:8f:e3: 47:fe:57:20:91:ce:64:c5:7a:bf:0e:65:2f:b4:61:06:34:ee: 62:78:23:54:a7:9c:7f:36:47:0f:aa:47:d6:c5:9a:22:06:6d: e8:1d:11:fc:b0:e1:64:1a:4f:10:21:be:64:74:e3:44:96:fe: 16:3d:d1:d0:8d:c4:c5:b9:5f:2a:4a:27:3f:b6:cb:ea:0e:92: 65:93:9e:d4:bc:a5:a7:86:b9:d8:a4:d5:ef:7a:8f:c8:c0:10: af:80:54:f6:77:e7:e9:c0:cd:b9:39:f4:62:d6:3f:cd:59:0b: 5b:1b:66:15:4f:6e:7f:ac:d5:ea:9b:1c:27:89:00:eb:a1:51: a4:1d:d2:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n394iRUVTcSkfUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk NDZhNzBjNGMtNjQ3Yy00ODU3LTk2MGEtNjAwZWM5YWVlMzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPemIuFSwXo27q5mWWrzu8ZPv17JPYJ0kd1i 7XcyOfI3I35nj009PPYaxtCzUCLz/KofWE0GjcqHaYDxAc3VkySC8IR4iz8kutf5 ZsABrNZIEf6AKpFiXZ1nDrMCi4TLy1gN7rc3NnQRPXuUZbRr9j2/puXW8pQu86eI 3yGWrkw0EqMlIX8SrMNb/qFOBZzDCZkM5YGP8oBumNCfygTGxVph99CYUYlEiQCL eHH3RE1ZDx9DIBgeXLFQ0hMNv2Xt6l9NuvVJjoV7zsLtWqeWk3F/z+dhsCcGa/hS r7sJyK5TCaQ/E/wfK64Zd6zyFz8a32ZPKx0YuLM1tI7JLf6RJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgz3D3TllTZbd/Af1c8wF6LpVStMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmFjZjA0MTktMzJlNS0z ZGMxLWE4MWEtMGRjYWE3ZGI4NTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop6bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABo3GBA2zZWCHZJ7b6lz6pGnDWFxoTUO4vRtshhsXyJxFJ6mbc/fRi46 Eyn5+fBtQBQIRaDvqCxLwS6Y18fJFV2Ihfb2lj252T2nLAhtGYCBpzhfz5pg1s6a luKLVKXWphP18WNluaQP8o5XLrITeIhSTxn8S8dOIkrdCL+P40f+VyCRzmTFer8O ZS+0YQY07mJ4I1SnnH82Rw+qR9bFmiIGbegdEfyw4WQaTxAhvmR040SW/hY90dCN xMW5XypKJz+2y+oOkmWTntS8paeGudik1e96j8jAEK+AVPZ35+nAzbk59GLWP81Z C1sbZhVPbn+s1eqbHCeJAOuhUaQd0ko= -----END CERTIFICATE-----Generated at Fri Apr 17 14:00:46 2026 by rpki-client