$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ab1fa162-144b-3e0e-a82b-86083baf3661.roa File: ab1fa162-144b-3e0e-a82b-86083baf3661.roa (raw, json) Hash identifier: tM6zy113tVPnoCYFmeg0Xe1ykeNFdciJWu940X0tjN0= Subject key identifier: 6F:07:08:E3:9A:F8:6E:CD:8B:5D:F5:DB:AB:70:BA:1D:5C:7A:FC:13 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D6AAA9D92A6EC71F7FFB83500 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ab1fa162-144b-3e0e-a82b-86083baf3661.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 13335 IP address blocks: 162.158.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:9d:92:a6:ec:71:f7:ff:b8:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=1ab7901a-23f8-4c78-a65b-4200f16c3d88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3c:1d:6a:9b:17:35:c5:a8:44:99:15:ff:a7: 3c:23:eb:6d:22:00:d3:4c:5c:32:84:81:a0:9d:76: a7:12:45:5f:81:8f:a3:f7:3f:ba:ec:80:9a:d8:a7: d5:4d:56:bb:67:8e:77:83:ee:57:bc:33:40:40:44: 4f:22:f4:e7:f6:e1:88:7a:0a:1b:fb:e8:0c:cd:5f: 07:63:1e:f7:97:3a:ac:84:0d:e7:05:cd:0e:27:8d: 6f:2a:cc:81:19:e1:28:8d:5b:79:68:a6:02:a8:47: d1:03:5e:af:d1:38:11:93:77:58:ee:56:4d:fe:7d: 6e:e9:29:a7:aa:a8:71:d7:44:ae:42:a7:ed:dd:7d: 23:f1:d9:28:9a:55:5b:b5:1a:13:c9:76:76:b9:d4: 2c:1e:e4:69:cb:c0:28:bc:d0:ac:8d:cc:dd:5b:64: db:f8:fb:48:86:b3:f7:68:be:3e:4e:8e:35:49:07: 54:5d:4e:2d:50:78:7b:ad:d1:bc:05:34:6e:98:48: 1a:33:2e:49:fc:e7:f6:bb:5c:04:1f:c6:20:f4:84: 2e:34:c7:6b:af:61:b7:63:8e:18:c4:fa:5f:54:bc: 1c:b9:1d:c7:64:80:1a:62:74:c8:3e:bf:bb:7a:37: ae:82:2b:27:a5:e3:e2:6a:5d:4b:0f:21:16:76:52: 74:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:07:08:E3:9A:F8:6E:CD:8B:5D:F5:DB:AB:70:BA:1D:5C:7A:FC:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ab1fa162-144b-3e0e-a82b-86083baf3661.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:23:32:2f:9d:8a:34:71:a3:9d:6d:78:17:42:61:1b:fb:6a: c4:70:dd:4b:2f:66:8c:e7:b1:99:93:83:ec:de:25:74:fd:7f: a8:db:81:ea:65:df:cf:ce:2f:a6:93:cc:d8:a5:22:0e:e1:9a: dd:27:17:cc:51:7f:76:82:1b:c0:00:66:83:5e:50:34:18:e4: 18:c9:72:a5:93:1b:7b:e9:b7:6f:b3:22:ba:01:ca:e9:71:14: c2:1e:51:9d:27:72:78:1b:e8:9c:82:76:37:85:87:46:be:22: 4b:50:9e:5e:2a:64:83:30:7f:b3:3c:b7:05:16:28:c3:d8:b5: 77:6f:af:c3:2b:e3:ce:17:07:de:60:ec:49:8f:0d:21:57:fb: 21:88:a1:11:3f:3e:ab:9d:d2:ba:6c:83:22:2d:f1:e0:55:da: f2:50:a5:68:ec:d7:a5:5e:e2:a9:5e:a1:73:fe:de:5c:68:25: 00:33:45:4a:80:88:46:16:f2:9e:2e:0e:8f:81:b7:74:94:4f: 2e:68:87:f8:c7:73:64:95:a4:53:16:2c:b5:5a:78:03:c9:df: 9e:52:34:f5:35:dc:c0:1d:8c:96:65:c1:55:41:16:7c:93:78: be:bc:7f:85:a3:9a:56:8d:04:c2:91:80:54:28:a7:6c:65:6f: b6:d7:fc:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqp2Spuxx9/+4NQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk MWFiNzkwMWEtMjNmOC00Yzc4LWE2NWItNDIwMGYxNmMzZDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTwdapsXNcWoRJkV/6c8I+ttIgDTTFwyhIGg nXanEkVfgY+j9z+67ICa2KfVTVa7Z453g+5XvDNAQERPIvTn9uGIegob++gMzV8H Yx73lzqshA3nBc0OJ41vKsyBGeEojVt5aKYCqEfRA16v0TgRk3dY7lZN/n1u6Smn qqhx10SuQqft3X0j8dkomlVbtRoTyXZ2udQsHuRpy8AovNCsjczdW2Tb+PtIhrP3 aL4+To41SQdUXU4tUHh7rdG8BTRumEgaMy5J/Of2u1wEH8Yg9IQuNMdrr2G3Y44Y xPpfVLwcuR3HZIAaYnTIPr+7ejeugisnpePial1LDyEWdlJ0cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8HCOOa+G7Ni13126twuh1cevwTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWIxZmExNjItMTQ0Yi0z ZTBlLWE4MmItODYwODNiYWYzNjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop57MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgjMi+dijRxo51teBdCYRv7asRw3UsvZoznsZmTg+zeJXT9f6jbgepl 38/OL6aTzNilIg7hmt0nF8xRf3aCG8AAZoNeUDQY5BjJcqWTG3vpt2+zIroByulx FMIeUZ0ncngb6JyCdjeFh0a+IktQnl4qZIMwf7M8twUWKMPYtXdvr8Mr484XB95g 7EmPDSFX+yGIoRE/Pqud0rpsgyIt8eBV2vJQpWjs16Ve4qleoXP+3lxoJQAzRUqA iEYW8p4uDo+Bt3SUTy5oh/jHc2SVpFMWLLVaeAPJ355SNPU13MAdjJZlwVVBFnyT eL68f4WjmlaNBMKRgFQop2xlb7bX/DQ= -----END CERTIFICATE-----Generated at Fri Apr 17 18:09:39 2026 by rpki-client