$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9433d145-6918-30f1-bf09-6fe51b1a4165.roa File: 9433d145-6918-30f1-bf09-6fe51b1a4165.roa (raw, json) Hash identifier: y8KmcwGrNadF599blFcbveGy1Ez+m82pGyp2TNxUt38= Subject key identifier: EF:D3:55:B3:26:F9:E9:3D:6A:53:69:A6:EB:7E:70:9D:FB:A9:50:8F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D6AAA951B484F5DDCF6A686CC Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9433d145-6918-30f1-bf09-6fe51b1a4165.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 13335 IP address blocks: 162.159.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:95:1b:48:4f:5d:dc:f6:a6:86:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=a7e989f4-24c7-40b5-9f1b-1b3deb8f1aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:74:ba:bb:c5:ad:d6:3b:27:56:64:f1:05:60: aa:9c:fc:2a:8b:f1:5b:31:fe:5e:70:28:ba:7b:21: aa:82:54:fe:9f:b6:70:e5:f1:41:a1:8e:8d:d8:15: 75:e5:21:4e:66:55:c2:9b:fd:92:43:c3:b0:57:fc: 63:54:42:b0:76:16:5f:28:92:2d:cc:48:de:15:ec: 1f:1a:62:ac:e2:08:87:60:51:a0:bd:c0:52:49:23: d8:2a:79:5a:37:af:46:9a:6b:2d:fe:1d:86:b8:71: 0a:bb:d7:91:6e:c3:7b:a1:1d:c7:a9:c6:f1:dc:82: d5:e2:13:b9:ad:ee:01:53:22:8c:42:49:3e:91:23: 53:fa:90:f5:61:b0:29:2d:bf:0b:97:14:3f:4e:62: 9f:ae:76:cb:eb:b7:6d:14:f6:71:b8:4e:de:a9:d6: 0f:1d:08:ea:7d:c9:dd:cc:c9:46:3b:d0:17:d7:5c: 20:15:a5:04:8b:25:8b:88:be:79:a1:08:22:32:07: de:a3:9f:5c:39:15:d6:d3:6d:81:b2:94:c9:28:d0: 3b:b6:f8:6c:88:31:44:32:c0:dc:fc:33:c3:f8:5f: e6:05:ac:1b:a0:d8:22:fd:b5:98:f7:5f:f1:ce:43: a0:0b:3c:45:90:ab:60:03:65:a8:3c:67:4a:b2:0e: 2e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D3:55:B3:26:F9:E9:3D:6A:53:69:A6:EB:7E:70:9D:FB:A9:50:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9433d145-6918-30f1-bf09-6fe51b1a4165.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.159.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:f7:4d:15:dd:aa:84:bd:ec:5f:48:10:55:a0:09:c9:33:0e: ed:b7:22:2f:fb:52:42:9f:ee:da:a8:cf:c0:2e:20:4f:98:c9: a5:8c:26:e8:6b:d4:29:75:2e:e3:e4:6f:e8:c6:a4:1d:f7:ca: 22:a0:32:7a:87:dc:2e:31:f9:1d:9c:0a:c2:62:15:21:dc:01: b5:81:b5:81:d7:54:b1:9b:a7:13:d0:53:16:4f:ea:60:aa:b1: 56:d5:8c:7c:41:ce:82:30:90:f8:ba:f0:45:d1:e8:1f:22:cc: a8:ba:1c:ce:65:76:6d:6e:41:f3:ba:d7:c9:5e:14:13:09:c4: 4a:4b:1d:10:cf:a8:25:5f:6b:72:9d:b6:c2:52:3f:e0:68:60: e8:d2:2b:cd:b5:32:3f:7c:16:62:c1:ab:7e:26:2b:86:73:9e: 25:ef:92:3c:99:bd:a1:b5:23:0e:8d:91:83:f7:03:1d:de:f0: 08:ef:c0:4c:e8:7e:4a:f1:e8:22:2d:96:0b:85:58:08:91:49: 38:5c:a9:d1:2c:17:9a:f1:10:6f:29:c5:44:b5:57:3e:5d:c3: f8:23:ae:e5:5a:bb:71:64:7d:22:72:de:fe:73:57:7c:e7:3c: 31:78:5b:a6:b9:d0:09:2f:8e:6c:93:c7:c0:63:6a:e0:a4:d2: 67:f5:21:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqpUbSE9d3PamhswwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk YTdlOTg5ZjQtMjRjNy00MGI1LTlmMWItMWIzZGViOGYxYWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3S6u8Wt1jsnVmTxBWCqnPwqi/FbMf5ecCi6 eyGqglT+n7Zw5fFBoY6N2BV15SFOZlXCm/2SQ8OwV/xjVEKwdhZfKJItzEjeFewf GmKs4giHYFGgvcBSSSPYKnlaN69Gmmst/h2GuHEKu9eRbsN7oR3Hqcbx3ILV4hO5 re4BUyKMQkk+kSNT+pD1YbApLb8LlxQ/TmKfrnbL67dtFPZxuE7eqdYPHQjqfcnd zMlGO9AX11wgFaUEiyWLiL55oQgiMgfeo59cORXW022BspTJKNA7tvhsiDFEMsDc /DPD+F/mBawboNgi/bWY91/xzkOgCzxFkKtgA2WoPGdKsg4uEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/TVbMm+ek9alNpput+cJ37qVCPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTQzM2QxNDUtNjkxOC0z MGYxLWJmMDktNmZlNTFiMWE0MTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop/IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACn3TRXdqoS97F9IEFWgCckzDu23Ii/7UkKf7tqoz8AuIE+YyaWMJuhr 1Cl1LuPkb+jGpB33yiKgMnqH3C4x+R2cCsJiFSHcAbWBtYHXVLGbpxPQUxZP6mCq sVbVjHxBzoIwkPi68EXR6B8izKi6HM5ldm1uQfO618leFBMJxEpLHRDPqCVfa3Kd tsJSP+BoYOjSK821Mj98FmLBq34mK4ZzniXvkjyZvaG1Iw6NkYP3Ax3e8AjvwEzo fkrx6CItlguFWAiRSThcqdEsF5rxEG8pxUS1Vz5dw/gjruVau3FkfSJy3v5zV3zn PDF4W6a50AkvjmyTx8BjauCk0mf1Ifs= -----END CERTIFICATE-----Generated at Sat Apr 18 00:06:47 2026 by rpki-client