$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8f828895-8770-30d0-a73c-138eff4e0c30.roa File: 8f828895-8770-30d0-a73c-138eff4e0c30.roa (raw, json) Hash identifier: s6u/CwxyLAFn+swkwOOP44UrwfmeplyUYmHcvI1S8B4= Subject key identifier: 7F:50:49:7A:38:AF:CE:FE:BC:59:EC:60:F8:45:15:24:41:2E:05:E3 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D5B4FA2621D2A59AB7494EB80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8f828895-8770-30d0-a73c-138eff4e0c30.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 13335 IP address blocks: 162.159.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:a2:62:1d:2a:59:ab:74:94:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=91e614c4-524b-4b5c-8394-2b3b59092afe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b3:8e:a2:b4:e9:f0:20:f8:c2:e9:3d:2a:1f: c4:fb:44:12:68:4c:e2:fd:32:d6:ab:77:39:1a:af: f9:76:4a:bf:95:72:85:de:ae:64:22:ab:59:34:e5: 34:4e:97:07:a3:77:92:6d:71:56:b0:fc:6e:33:f1: dc:bb:cd:5f:90:ca:08:c3:a4:e7:c5:76:72:40:a2: d8:38:5d:10:18:ef:de:df:9e:46:8e:10:bc:2b:fa: fb:36:dd:c8:eb:30:11:22:e3:db:61:d5:5e:f1:fe: 62:9d:84:fe:0a:1a:34:8e:99:5f:44:c7:84:c5:cf: 22:4d:09:1e:17:62:37:19:01:88:6f:70:9e:15:37: e6:c8:1b:dd:53:88:d5:55:68:08:15:17:c7:1e:f2: 03:48:22:bf:79:ad:5b:34:51:82:75:2c:bc:c9:4c: 58:8f:74:ed:86:09:9e:05:af:8c:a2:a0:97:04:08: 85:c7:8b:78:4a:fc:e6:1f:85:02:e5:ef:0b:e9:88: 87:f1:b5:15:f5:e1:63:7f:f1:8e:26:ef:34:44:18: d0:2d:4d:2a:32:e7:5f:f0:27:8a:53:15:27:67:0a: af:b5:2b:75:14:92:38:64:8c:62:a6:10:ce:62:4d: 8f:2f:2f:08:9b:0c:fe:bc:e6:21:d8:cc:72:7f:71: 99:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:50:49:7A:38:AF:CE:FE:BC:59:EC:60:F8:45:15:24:41:2E:05:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8f828895-8770-30d0-a73c-138eff4e0c30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.159.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:4b:7e:3c:1e:22:fa:52:a2:1f:93:f1:90:0e:74:13:2c:d0: 38:f7:13:23:21:37:41:d2:7d:74:73:da:32:05:f7:90:39:58: ca:8b:7f:14:13:73:76:34:7e:4e:ec:2c:5b:4d:3d:97:a3:36: 39:79:62:b0:cf:f1:3e:0e:e7:26:c3:04:1e:3b:d9:b8:21:a1: b2:4c:c3:6f:31:99:9f:2e:e8:55:dd:aa:62:61:2e:fb:14:7f: 91:34:6f:34:64:28:50:78:2c:46:eb:7f:0b:1f:c2:ca:7d:60: 8f:92:ae:cc:96:d8:e1:f4:6d:ad:ae:91:15:c2:5f:6e:b6:73: d1:4a:88:67:8d:15:88:57:27:ff:69:d0:88:53:59:17:c6:f5: 73:2b:80:98:cf:97:92:5d:24:c3:a3:13:1b:c9:87:2d:fa:68: 70:af:20:eb:64:f4:70:01:81:b5:ac:3a:d4:15:d7:9a:5f:7d: d9:32:b1:14:fb:75:21:05:e8:d6:5a:a0:60:26:c9:88:ab:e3: 80:25:aa:c7:99:22:02:fe:b2:09:67:7d:9f:e2:96:b5:2c:34: a9:6d:58:91:67:a0:24:70:49:8a:02:8d:65:34:1c:83:cb:2c: dc:51:49:33:b3:57:89:38:88:dc:db:9a:c6:0a:04:dc:db:e4: 2a:7e:4a:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT6JiHSpZq3SU64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk OTFlNjE0YzQtNTI0Yi00YjVjLTgzOTQtMmIzYjU5MDkyYWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobOOorTp8CD4wuk9Kh/E+0QSaEzi/TLWq3c5 Gq/5dkq/lXKF3q5kIqtZNOU0TpcHo3eSbXFWsPxuM/Hcu81fkMoIw6TnxXZyQKLY OF0QGO/e355GjhC8K/r7Nt3I6zARIuPbYdVe8f5inYT+Cho0jplfRMeExc8iTQke F2I3GQGIb3CeFTfmyBvdU4jVVWgIFRfHHvIDSCK/ea1bNFGCdSy8yUxYj3Tthgme Ba+MoqCXBAiFx4t4SvzmH4UC5e8L6YiH8bUV9eFjf/GOJu80RBjQLU0qMudf8CeK UxUnZwqvtSt1FJI4ZIxiphDOYk2PLy8Imwz+vOYh2Mxyf3GZ0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH9QSXo4r87+vFnsYPhFFSRBLgXjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGY4Mjg4OTUtODc3MC0z MGQwLWE3M2MtMTM4ZWZmNGUwYzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEop/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5LfjweIvpSoh+T8ZAOdBMs0Dj3EyMhN0HSfXRz2jIF95A5WMqLfxQT c3Y0fk7sLFtNPZejNjl5YrDP8T4O5ybDBB472bghobJMw28xmZ8u6FXdqmJhLvsU f5E0bzRkKFB4LEbrfwsfwsp9YI+SrsyW2OH0ba2ukRXCX262c9FKiGeNFYhXJ/9p 0IhTWRfG9XMrgJjPl5JdJMOjExvJhy36aHCvIOtk9HABgbWsOtQV15pffdkysRT7 dSEF6NZaoGAmyYir44AlqseZIgL+sglnfZ/ilrUsNKltWJFnoCRwSYoCjWU0HIPL LNxRSTOzV4k4iNzbmsYKBNzb5Cp+Sgg= -----END CERTIFICATE-----Generated at Fri Apr 17 16:26:06 2026 by rpki-client