$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a8fcf0bd-92ec-3fd7-9fa0-e5b02bbf84a7.roa File: a8fcf0bd-92ec-3fd7-9fa0-e5b02bbf84a7.roa (raw, json) Hash identifier: bRkWrS+Dbb10kFADACbJhjg/N+Srz5nNzKayTnikkIA= Subject key identifier: B3:21:0E:8C:E3:6B:C2:0D:A2:5C:22:46:C7:53:2D:7E:0E:91:43:3E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D59EA61D37A3128C988B5D8E0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a8fcf0bd-92ec-3fd7-9fa0-e5b02bbf84a7.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 13335 IP address blocks: 162.159.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:61:d3:7a:31:28:c9:88:b5:d8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=76915d68-1ae8-424f-bf22-cb506b8a1633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7c:7e:f7:f9:27:eb:36:62:b7:70:7f:b7:49: 43:9c:c0:c7:58:ea:be:d8:93:83:96:80:e0:b4:41: ee:c6:dc:bf:4a:10:61:0b:ae:96:f6:e4:1c:f7:7e: 89:d4:1e:ad:13:8b:22:fc:c1:90:be:1e:79:d3:fc: 12:87:e0:89:bd:4b:e6:44:9e:39:0a:31:de:3a:f6: ef:18:ec:ed:4a:9b:81:0e:c3:7f:b7:1f:ad:74:f8: fb:46:56:dc:e5:a0:39:c1:52:5c:95:8f:0f:5f:21: 1c:cf:58:9f:46:97:cf:4a:19:54:c0:cf:50:38:76: e7:37:2b:e7:14:90:2c:dc:49:fc:2a:fa:6b:e3:ef: ef:22:03:59:14:6b:d8:09:5c:dd:87:68:9b:eb:97: f5:d7:a1:e1:81:80:fa:56:93:c3:a0:a0:f3:a8:82: af:f2:9b:e5:21:d2:95:be:67:c8:68:b8:46:b8:28: a9:ed:90:8e:5a:38:37:5e:c2:ae:ac:3a:c8:e7:d8: bb:5e:4c:a1:8d:d0:85:3d:0c:3a:3f:8f:e8:34:2a: 73:69:2f:ff:72:df:a4:73:46:d3:b4:f9:45:9a:39: 67:76:cb:43:0f:66:62:74:1c:cb:3f:53:d0:5a:f2: 53:c7:ff:f8:00:cd:77:31:80:22:17:ce:7a:7f:46: 67:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:21:0E:8C:E3:6B:C2:0D:A2:5C:22:46:C7:53:2D:7E:0E:91:43:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a8fcf0bd-92ec-3fd7-9fa0-e5b02bbf84a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.159.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:66:af:fb:86:50:e8:e3:d5:12:f7:90:ed:48:71:b7:a5:2d: 69:04:5e:74:8c:86:82:8e:fb:98:26:4a:2c:91:62:0a:53:2e: f5:75:01:99:97:25:11:a3:9d:9e:d5:fd:12:eb:71:3f:e9:b4: 42:88:c6:41:66:f4:74:0a:a2:96:e3:91:a0:e0:77:6b:02:64: 8b:d0:c2:7b:1e:ec:f3:08:2d:99:a6:7e:41:f5:42:ab:44:86: 81:30:b8:c9:02:f5:29:fe:ea:30:51:7a:d1:8a:c7:38:28:ed: 4d:63:4b:55:17:70:a6:67:a6:bd:ae:90:4a:c4:c4:ed:13:19: f5:a2:7f:70:28:70:2d:3e:79:a5:c5:1e:cd:3c:3b:6f:df:c8: 54:cb:ee:35:22:9b:58:d4:e7:3e:a2:58:11:38:71:f3:09:20: d2:d7:34:fe:20:b1:6b:9f:1d:54:12:d2:a8:17:86:44:86:a8: 43:8c:3f:98:e5:30:7f:a6:78:f8:12:4d:78:c5:73:ca:ec:44: 64:7e:1d:f3:1f:c2:e5:61:17:58:e8:11:d9:5a:98:fe:67:ec: 12:5d:36:2c:e0:af:7d:41:d9:43:96:e2:66:f3:12:43:62:af: d6:ab:b2:03:d3:61:26:7b:0f:4e:a4:29:d0:c4:8c:26:52:93: a0:c5:1f:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6mHTejEoyYi12OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk NzY5MTVkNjgtMWFlOC00MjRmLWJmMjItY2I1MDZiOGExNjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3x+9/kn6zZit3B/t0lDnMDHWOq+2JODloDg tEHuxty/ShBhC66W9uQc936J1B6tE4si/MGQvh550/wSh+CJvUvmRJ45CjHeOvbv GOztSpuBDsN/tx+tdPj7Rlbc5aA5wVJclY8PXyEcz1ifRpfPShlUwM9QOHbnNyvn FJAs3En8Kvpr4+/vIgNZFGvYCVzdh2ib65f116HhgYD6VpPDoKDzqIKv8pvlIdKV vmfIaLhGuCip7ZCOWjg3XsKurDrI59i7XkyhjdCFPQw6P4/oNCpzaS//ct+kc0bT tPlFmjlndstDD2ZidBzLP1PQWvJTx//4AM13MYAiF856f0ZnCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMhDozja8INolwiRsdTLX4OkUM+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYThmY2YwYmQtOTJlYy0z ZmQ3LTlmYTAtZTViMDJiYmY4NGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop97MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZmr/uGUOjj1RL3kO1IcbelLWkEXnSMhoKO+5gmSiyRYgpTLvV1AZmX JRGjnZ7V/RLrcT/ptEKIxkFm9HQKopbjkaDgd2sCZIvQwnse7PMILZmmfkH1QqtE hoEwuMkC9Sn+6jBRetGKxzgo7U1jS1UXcKZnpr2ukErExO0TGfWif3AocC0+eaXF Hs08O2/fyFTL7jUim1jU5z6iWBE4cfMJINLXNP4gsWufHVQS0qgXhkSGqEOMP5jl MH+mePgSTXjFc8rsRGR+HfMfwuVhF1joEdlamP5n7BJdNizgr31B2UOW4mbzEkNi r9arsgPTYSZ7D06kKdDEjCZSk6DFH+w= -----END CERTIFICATE-----Generated at Fri Apr 17 11:13:08 2026 by rpki-client