$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a8a29797-4ba1-323a-8d94-035c3523d1f7.roa File: a8a29797-4ba1-323a-8d94-035c3523d1f7.roa (raw, json) Hash identifier: j6sU0xHQTvfDRGwx3CKZ7U1myP3dbGVEcv33lnsSkQM= Subject key identifier: F5:8D:D5:53:42:25:92:FA:83:98:03:8B:76:5F:33:A1:56:6B:FE:E9 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D67DFF0CCE15EBE510854E440 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a8a29797-4ba1-323a-8d94-035c3523d1f7.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 13335 IP address blocks: 162.158.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:f0:cc:e1:5e:be:51:08:54:e4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=40be74c9-83e7-40ed-8af9-7aa009d9306e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0d:16:82:ad:68:eb:a2:07:d5:14:f9:c7:bc: 95:d7:55:17:a8:ea:e3:1b:c3:05:1f:52:e1:e8:46: 7f:e3:38:38:47:1a:ad:f4:1b:f9:a8:a2:f9:ef:07: 85:9a:51:24:23:86:66:e0:06:85:29:9c:b5:ff:a3: 1f:de:0d:42:c7:3a:6d:1e:4a:b1:9b:3c:fc:34:64: 6a:f7:cd:e2:01:1c:f2:57:1f:d9:50:ca:4b:43:fe: 78:63:17:9d:c6:6e:d0:1f:4c:b8:ce:93:f5:91:5c: b9:28:11:41:86:bf:17:b1:5e:71:aa:18:a8:d6:27: 87:b3:f0:03:85:bb:55:f1:e3:14:33:83:94:77:fe: 1d:45:19:80:8a:04:6a:60:58:d3:48:a3:50:7e:5a: 88:ca:7e:43:0d:6f:22:75:c8:29:ff:87:9e:93:f2: 0b:d2:61:80:a8:28:54:43:b0:15:20:40:b8:59:c5: d2:b9:af:02:dc:e9:a6:95:9d:a0:f0:2a:d9:ab:54: 36:93:92:bd:bf:8d:fb:ed:d7:89:08:49:6d:85:fa: 41:bb:81:bb:38:bb:f4:15:e3:cc:74:9c:e7:6e:6c: 55:f9:a7:65:ea:68:ab:30:dc:24:ec:d1:da:c3:b5: 70:bb:09:f7:85:64:b6:96:e6:ea:d0:d1:c0:b9:b0: bf:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:8D:D5:53:42:25:92:FA:83:98:03:8B:76:5F:33:A1:56:6B:FE:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a8a29797-4ba1-323a-8d94-035c3523d1f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:aa:d7:49:a6:34:3b:e6:5a:0a:6f:07:7d:76:41:a1:1a:3f: b7:6d:f0:5d:8c:1b:02:e4:bd:da:14:d8:c1:c3:91:b8:12:d1: 9f:8c:d5:28:8a:d3:55:ad:28:48:ac:49:0f:cf:f6:d7:e8:ef: 64:35:ae:76:52:49:e6:be:e2:5c:07:80:43:2b:99:6f:3b:56: 95:01:9d:6e:00:9c:e4:22:bf:ea:2b:b5:f8:c9:79:6e:0c:d5: 9f:6f:d4:24:ad:e7:c2:4e:aa:50:40:c8:f8:0d:ab:ea:11:30: db:14:77:74:80:9f:e6:b2:5e:15:1f:17:dd:4f:55:07:88:ff: 83:93:12:55:c4:f4:ea:8b:ac:56:16:a1:5e:6e:dc:85:bb:aa: 46:59:fb:fc:37:b3:96:54:e8:f6:56:8d:ed:cf:5b:66:36:b5: ef:60:02:ba:c0:74:d5:be:da:c2:80:e8:d0:5f:20:53:42:94: 15:fa:3f:74:10:12:60:52:7a:97:6b:e0:06:98:ba:24:2f:e5: a6:71:18:40:2c:80:77:e0:a5:fa:02:24:5e:98:b5:81:8a:e4: 51:a1:8b:64:ab:a1:95:18:da:d2:60:61:77:47:57:88:c0:f5: 65:e4:04:05:39:46:e1:02:9f:d9:40:b8:6c:71:74:a1:2b:d8: 6a:a9:51:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n3/DM4V6+UQhU5EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk NDBiZTc0YzktODNlNy00MGVkLThhZjktN2FhMDA5ZDkzMDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnw0Wgq1o66IH1RT5x7yV11UXqOrjG8MFH1Lh 6EZ/4zg4Rxqt9Bv5qKL57weFmlEkI4Zm4AaFKZy1/6Mf3g1CxzptHkqxmzz8NGRq 983iARzyVx/ZUMpLQ/54Yxedxm7QH0y4zpP1kVy5KBFBhr8XsV5xqhio1ieHs/AD hbtV8eMUM4OUd/4dRRmAigRqYFjTSKNQflqIyn5DDW8idcgp/4eek/IL0mGAqChU Q7AVIEC4WcXSua8C3OmmlZ2g8CrZq1Q2k5K9v4377deJCElthfpBu4G7OLv0FePM dJznbmxV+adl6mirMNwk7NHaw7Vwuwn3hWS2lubq0NHAubC/oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWN1VNCJZL6g5gDi3ZfM6FWa/7pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYThhMjk3OTctNGJhMS0z MjNhLThkOTQtMDM1YzM1MjNkMWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop6ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqq10mmNDvmWgpvB312QaEaP7dt8F2MGwLkvdoU2MHDkbgS0Z+M1SiK 01WtKEisSQ/P9tfo72Q1rnZSSea+4lwHgEMrmW87VpUBnW4AnOQiv+ortfjJeW4M 1Z9v1CSt58JOqlBAyPgNq+oRMNsUd3SAn+ayXhUfF91PVQeI/4OTElXE9OqLrFYW oV5u3IW7qkZZ+/w3s5ZU6PZWje3PW2Y2te9gArrAdNW+2sKA6NBfIFNClBX6P3QQ EmBSepdr4AaYuiQv5aZxGEAsgHfgpfoCJF6YtYGK5FGhi2SroZUY2tJgYXdHV4jA 9WXkBAU5RuECn9lAuGxxdKEr2GqpUUU= -----END CERTIFICATE-----Generated at Fri Apr 17 18:40:05 2026 by rpki-client