$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7d61e42a-80d4-3c5b-8eda-a773c348adac.roa File: 7d61e42a-80d4-3c5b-8eda-a773c348adac.roa (raw, json) Hash identifier: 5DGFKGqgkl9BxUv5dqd3Nwf6kCOIRmJn5NaPQvhsd5c= Subject key identifier: B2:75:5D:83:66:F4:E6:4B:7A:29:EA:F0:E6:68:FC:AE:84:08:A1:C7 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D5CB4F2ED0B63E10211FE7560 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7d61e42a-80d4-3c5b-8eda-a773c348adac.roa Signing time: Wed 01 Apr 2026 13:00:30 +0000 ROA not before: Wed 01 Apr 2026 13:00:30 +0000 ROA not after: Tue 30 Jun 2026 13:00:30 +0000 asID: 13335 IP address blocks: 162.159.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5c:b4:f2:ed:0b:63:e1:02:11:fe:75:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 1 13:00:30 2026 GMT Not After : Jun 30 13:00:30 2026 GMT Subject: CN=d0facaff-4072-4eaf-9bff-f7ff3e023bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e7:08:35:f6:55:75:7a:27:3d:d0:7a:cb:49: 45:c7:82:8c:20:44:aa:dc:53:e8:93:b7:70:24:70: 91:1c:72:d5:dd:42:18:59:d4:81:09:e8:5a:88:4d: fe:10:05:c8:66:3f:13:10:eb:a8:27:63:c7:12:b2: 27:49:df:64:df:23:56:4d:85:fb:2e:38:2a:b1:9b: f9:e4:a5:df:4a:4f:b5:17:43:68:2f:1a:54:df:d1: 77:f6:ba:cb:d4:4f:b0:8d:59:01:40:b9:85:0f:e1: b1:14:c9:b3:a2:c9:4d:7f:99:25:29:a9:59:f0:a6: 12:ed:de:c0:ec:bc:a7:82:8d:d2:76:5e:4b:e4:e0: 6f:b0:0a:39:82:59:dd:e3:d1:98:e3:e1:e0:ee:9f: 36:6d:c8:73:ba:53:5b:0b:ee:a0:b8:ed:f1:bc:7b: ff:14:b0:b3:ab:74:91:4f:04:e8:96:36:cd:d1:44: df:52:5f:8c:b0:7e:ec:4b:ec:1d:6b:b2:0a:dd:25: 90:65:d2:86:d1:39:e8:07:19:9a:cd:e4:8d:89:31: 60:78:08:bb:dd:6b:4c:8f:6d:ce:44:4f:1b:df:c9: c0:a3:e3:f1:4c:93:9d:47:3e:33:b3:4c:c7:f8:e6: 9d:e8:c3:72:92:86:f3:f8:9a:ad:96:18:34:65:5c: 3c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:75:5D:83:66:F4:E6:4B:7A:29:EA:F0:E6:68:FC:AE:84:08:A1:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7d61e42a-80d4-3c5b-8eda-a773c348adac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.159.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:1e:81:4f:63:03:63:5e:7e:4a:b7:b2:04:b5:2b:c8:ed:ff: a4:98:b2:54:ce:8f:e5:2a:0d:86:c8:43:70:e6:42:8c:47:cf: 67:b5:cf:ee:53:a7:fc:98:75:db:f2:b7:0c:66:d1:a4:89:71: 74:ef:15:d2:2c:6c:14:ac:f2:ed:1e:7c:f6:8a:11:d3:08:0c: 41:26:3d:b1:f3:0d:c0:f2:d3:a1:de:f8:c3:9c:14:c7:4e:df: 84:b3:d1:89:a3:7d:22:e7:c0:3c:5d:f0:84:33:ab:92:e6:d1: 51:46:22:00:99:55:15:48:5a:7d:a2:ea:a2:15:17:9d:c2:48: 7e:b2:83:f2:9f:18:13:7c:64:0c:64:c4:48:c2:42:8c:cc:2f: 9f:0e:e1:c8:51:38:4c:4e:17:89:43:8b:6f:dd:7d:c0:59:a8: 61:6b:7d:9d:27:32:ce:f8:38:77:6a:bb:2b:a0:6c:20:6c:84: 71:b1:11:e1:61:df:2e:b4:b9:f2:83:b6:5e:22:ed:10:d2:17: 00:ff:66:86:95:78:1f:cc:8d:75:00:38:5f:7e:1c:81:41:47: 47:b4:3d:ff:06:7b:48:3e:b9:7b:d5:25:29:3c:f4:8b:b5:c7: ef:d6:5f:fe:3f:c0:f4:ab:47:57:ce:8b:92:00:89:8f:6d:b8: 0a:ec:c9:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1ctPLtC2PhAhH+dWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwMTEzMDAzMFoXDTI2MDYzMDEzMDAzMFowLzEtMCsGA1UEAxMk ZDBmYWNhZmYtNDA3Mi00ZWFmLTliZmYtZjdmZjNlMDIzYmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOcINfZVdXonPdB6y0lFx4KMIESq3FPok7dw JHCRHHLV3UIYWdSBCehaiE3+EAXIZj8TEOuoJ2PHErInSd9k3yNWTYX7LjgqsZv5 5KXfSk+1F0NoLxpU39F39rrL1E+wjVkBQLmFD+GxFMmzoslNf5klKalZ8KYS7d7A 7Lyngo3Sdl5L5OBvsAo5glnd49GY4+Hg7p82bchzulNbC+6guO3xvHv/FLCzq3SR TwToljbN0UTfUl+MsH7sS+wda7IK3SWQZdKG0TnoBxmazeSNiTFgeAi73WtMj23O RE8b38nAo+PxTJOdRz4zs0zH+Oad6MNykobz+Jqtlhg0ZVw8lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJ1XYNm9OZLeinq8OZo/K6ECKHHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvN2Q2MWU0MmEtODBkNC0z YzViLThlZGEtYTc3M2MzNDhhZGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop95MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMegU9jA2Nefkq3sgS1K8jt/6SYslTOj+UqDYbIQ3DmQoxHz2e1z+5T p/yYddvytwxm0aSJcXTvFdIsbBSs8u0efPaKEdMIDEEmPbHzDcDy06He+MOcFMdO 34Sz0YmjfSLnwDxd8IQzq5Lm0VFGIgCZVRVIWn2i6qIVF53CSH6yg/KfGBN8ZAxk xEjCQozML58O4chROExOF4lDi2/dfcBZqGFrfZ0nMs74OHdquyugbCBshHGxEeFh 3y60ufKDtl4i7RDSFwD/ZoaVeB/MjXUAOF9+HIFBR0e0Pf8Ge0g+uXvVJSk89Iu1 x+/WX/4/wPSrR1fOi5IAiY9tuArsydk= -----END CERTIFICATE-----Generated at Fri Apr 17 16:08:38 2026 by rpki-client