$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2da9af95-009b-37c1-b96c-68f6a4f79a14.roa File: 2da9af95-009b-37c1-b96c-68f6a4f79a14.roa (raw, json) Hash identifier: eIoMEsj0VKEOj+ShjaqGId1MvBaHBIAPhCK8Sg6SXfw= Subject key identifier: A3:BE:00:FC:3F:B3:0A:CA:40:4C:56:A9:1F:FD:06:A4:F7:6F:83:7E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D67DFF31AB6059F983198A800 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2da9af95-009b-37c1-b96c-68f6a4f79a14.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 13335 IP address blocks: 108.162.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:f3:1a:b6:05:9f:98:31:98:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=4a3101f1-6b16-43d7-9a70-8583b9356e03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:21:91:e9:8d:02:fc:2e:d6:d1:98:88:87:ab: b8:77:7d:65:a9:ca:c2:bb:90:17:68:fc:fc:ca:49: dd:6c:b5:43:57:13:f3:0f:27:e4:99:70:3c:e9:e9: 25:27:53:5f:05:7a:f2:bb:c2:b2:30:0d:fb:83:c6: 4b:84:ac:ec:0e:4f:6e:19:33:8d:a4:ac:ff:a3:f1: 48:bf:22:6c:4c:fe:89:12:50:45:55:4c:6f:bf:d3: 75:4d:ba:45:a8:a4:3e:5b:6c:91:e4:ce:7c:12:91: 6f:50:26:63:e5:78:b1:07:dc:1f:af:cb:cd:bc:49: 3a:02:49:ab:14:d5:e4:9a:14:38:bd:26:91:57:06: 9d:c3:7b:17:47:dc:00:21:62:af:7d:b5:7b:5c:54: a5:44:e0:95:36:87:cc:06:15:95:69:f6:b1:c0:34: 99:d8:4a:6a:f1:3a:de:6b:b4:68:1f:25:37:cb:f1: 0b:3c:c7:b0:c8:b4:ad:87:db:d5:f2:de:31:16:eb: b9:7c:1f:27:55:86:ab:b6:e7:37:fa:c6:4c:2c:83: b4:79:25:86:51:eb:3d:4c:36:c2:72:16:23:b8:85: 09:de:70:8b:12:d2:4f:02:40:22:d1:14:0b:7a:57: 9f:99:06:00:d6:81:28:f3:6c:46:e0:12:fe:2b:b8: b3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:BE:00:FC:3F:B3:0A:CA:40:4C:56:A9:1F:FD:06:A4:F7:6F:83:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2da9af95-009b-37c1-b96c-68f6a4f79a14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 108.162.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:23:4b:91:80:88:1d:6d:e8:1b:a4:66:e0:97:c2:cc:88:f3: c6:8b:d3:10:13:57:f4:f1:6f:82:2d:90:88:c4:de:1e:40:bd: ba:01:03:73:9b:80:27:23:9e:dd:3e:f3:63:86:ce:17:ef:2a: f6:fe:86:8c:0d:05:c9:8e:ed:eb:93:57:28:a4:1f:e7:65:86: 3c:47:b4:bb:e9:40:ad:3a:89:16:a1:4a:b4:1c:ca:9e:77:8c: 29:83:57:0e:98:5b:bb:66:5f:0a:c9:c6:57:da:48:3f:aa:93: 2f:3e:22:3d:38:e5:38:c3:37:04:e4:35:87:88:be:2e:f3:5b: 2e:fa:8c:71:14:36:4f:bf:b3:25:5e:e4:52:d2:35:02:81:76: fd:73:e7:59:cc:b7:cc:c0:60:8b:ef:b0:35:76:c3:b8:b6:2f: 55:87:db:c6:f2:9e:e0:3d:7c:2f:98:97:68:2b:14:ac:73:06: e0:7c:e3:5a:ff:8b:ac:23:f0:7a:70:4f:28:31:50:ac:88:49: 97:d6:06:c9:b8:a1:78:04:7e:17:84:c8:e5:00:62:19:98:d1: 45:cd:91:b7:08:79:7d:b7:9a:27:31:46:29:02:44:fa:39:45: 9b:a9:5c:bd:4f:74:4f:56:8a:8d:7d:8c:62:25:91:23:02:19: 62:9c:e5:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n3/MatgWfmDGYqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk NGEzMTAxZjEtNmIxNi00M2Q3LTlhNzAtODU4M2I5MzU2ZTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCGR6Y0C/C7W0ZiIh6u4d31lqcrCu5AXaPz8 ykndbLVDVxPzDyfkmXA86eklJ1NfBXryu8KyMA37g8ZLhKzsDk9uGTONpKz/o/FI vyJsTP6JElBFVUxvv9N1TbpFqKQ+W2yR5M58EpFvUCZj5XixB9wfr8vNvEk6Akmr FNXkmhQ4vSaRVwadw3sXR9wAIWKvfbV7XFSlROCVNofMBhWVafaxwDSZ2Epq8Tre a7RoHyU3y/ELPMewyLSth9vV8t4xFuu5fB8nVYartuc3+sZMLIO0eSWGUes9TDbC chYjuIUJ3nCLEtJPAkAi0RQLelefmQYA1oEo82xG4BL+K7iz9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKO+APw/swrKQExWqR/9BqT3b4N+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmRhOWFmOTUtMDA5Yi0z N2MxLWI5NmMtNjhmNmE0Zjc5YTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKLEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwjS5GAiB1t6BukZuCXwsyI88aL0xATV/Txb4ItkIjE3h5AvboBA3Ob gCcjnt0+82OGzhfvKvb+howNBcmO7euTVyikH+dlhjxHtLvpQK06iRahSrQcyp53 jCmDVw6YW7tmXwrJxlfaSD+qky8+Ij045TjDNwTkNYeIvi7zWy76jHEUNk+/syVe 5FLSNQKBdv1z51nMt8zAYIvvsDV2w7i2L1WH28bynuA9fC+Yl2grFKxzBuB841r/ i6wj8HpwTygxUKyISZfWBsm4oXgEfheEyOUAYhmY0UXNkbcIeX23micxRikCRPo5 RZupXL1PdE9Wio19jGIlkSMCGWKc5SE= -----END CERTIFICATE-----Generated at Fri Apr 17 19:28:03 2026 by rpki-client