$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b0e45e07-985d-391a-bbfd-e32b9d04d7cd.roa File: b0e45e07-985d-391a-bbfd-e32b9d04d7cd.roa (raw, json) Hash identifier: ZrO0n1a+Cy6T/f12S5VqjwaKVj0OtjSWCxXlIei3NLs= Subject key identifier: 48:E3:B6:A6:E5:CA:28:A9:B4:C9:3A:78:DA:31:0F:7B:EE:13:B8:AD Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D6AAA9E1F9855B44AC8087180 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b0e45e07-985d-391a-bbfd-e32b9d04d7cd.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 13335 IP address blocks: 162.158.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:9e:1f:98:55:b4:4a:c8:08:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=4756af85-0b7d-45aa-8be1-30d5608a88b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:30:5a:97:c5:b7:09:f3:5b:72:60:65:ec:41: 86:4f:a1:6b:48:49:66:a5:5a:93:a0:fc:b4:75:83: c9:3d:39:e1:e8:b2:97:aa:39:ad:61:13:54:1f:bf: 0e:1e:2d:ff:76:25:33:76:43:89:42:5f:85:95:26: d2:19:1c:eb:fc:0a:fb:cd:8e:b3:0e:60:00:00:0f: db:8f:80:b4:7e:27:11:a0:7e:4b:0e:02:72:f6:7c: 7f:f7:68:f2:d8:3e:e3:65:84:86:d0:a4:d2:72:87: 03:d4:3d:f0:3e:d0:3b:63:38:c9:9e:74:75:25:c6: 67:29:41:23:99:2a:35:31:65:0f:96:32:06:de:31: 37:57:0b:aa:43:e2:fd:13:9e:c9:f7:97:62:06:48: 56:71:0a:1e:20:0c:bd:ff:e6:31:ed:f0:b8:f6:6b: 6b:5f:fa:80:12:d0:d9:3f:c2:17:72:ea:2b:2a:b2: 1b:dd:bb:00:d2:58:68:4c:5c:1d:66:55:cb:b3:68: 6f:6a:79:92:c6:e6:9e:25:16:0b:07:32:59:70:86: 8e:9d:57:61:aa:e2:cc:1b:fe:35:fd:37:51:a5:b1: 2b:69:6e:37:4e:9e:ad:21:5f:b2:81:3a:99:80:73: 11:92:f2:d7:c2:88:b2:f3:34:22:fa:98:96:82:ee: 24:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E3:B6:A6:E5:CA:28:A9:B4:C9:3A:78:DA:31:0F:7B:EE:13:B8:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b0e45e07-985d-391a-bbfd-e32b9d04d7cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:77:77:6c:4d:51:de:ce:e5:b7:ed:f2:02:17:13:0c:f2:a9: 1a:2f:95:57:d1:8d:f8:05:d4:2c:a9:0f:58:df:26:1c:76:2d: 53:65:70:5e:1c:7c:2e:69:34:47:43:ad:30:42:d9:20:9a:13: 91:ea:a6:d4:2b:90:09:b8:19:f7:87:67:9a:51:93:10:92:d3: 66:3f:01:8c:a3:98:2b:8a:eb:ac:24:18:44:26:28:84:73:f3: 70:3e:24:60:99:8a:23:c1:c7:80:ba:b9:5c:94:72:6c:8f:f2: d3:b7:29:dc:5f:ac:9c:5a:a4:1d:0d:51:90:5d:d8:f4:b5:2d: dd:6e:26:85:3a:da:12:7d:7a:e6:27:29:7e:2f:6e:20:c3:e4: a7:1a:f4:f4:11:94:55:68:a3:57:fc:c5:7a:a6:0f:e3:71:43: e2:39:db:86:b7:92:11:87:fa:11:c1:56:cd:28:29:f1:9a:5b: f9:e0:b9:0b:a4:e8:13:a1:f0:f1:b9:a1:40:19:2a:f4:9b:47: 82:5b:a1:5e:3a:5e:36:ff:40:e2:1e:cc:80:a2:61:27:b6:4a: 7f:5c:f4:8e:c6:6a:36:8b:90:ec:4b:dc:86:07:14:c9:04:a6: 8b:97:39:88:21:55:fc:5e:bd:ef:c0:45:27:86:f4:a1:ca:22: d2:6a:cf:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqp4fmFW0SsgIcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk NDc1NmFmODUtMGI3ZC00NWFhLThiZTEtMzBkNTYwOGE4OGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zBal8W3CfNbcmBl7EGGT6FrSElmpVqToPy0 dYPJPTnh6LKXqjmtYRNUH78OHi3/diUzdkOJQl+FlSbSGRzr/Ar7zY6zDmAAAA/b j4C0ficRoH5LDgJy9nx/92jy2D7jZYSG0KTScocD1D3wPtA7YzjJnnR1JcZnKUEj mSo1MWUPljIG3jE3VwuqQ+L9E57J95diBkhWcQoeIAy9/+Yx7fC49mtrX/qAEtDZ P8IXcuorKrIb3bsA0lhoTFwdZlXLs2hvanmSxuaeJRYLBzJZcIaOnVdhquLMG/41 /TdRpbEraW43Tp6tIV+ygTqZgHMRkvLXwoiy8zQi+piWgu4k2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjjtqblyiiptMk6eNoxD3vuE7itMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjBlNDVlMDctOTg1ZC0z OTFhLWJiZmQtZTMyYjlkMDRkN2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop6NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADh3d2xNUd7O5bft8gIXEwzyqRovlVfRjfgF1CypD1jfJhx2LVNlcF4c fC5pNEdDrTBC2SCaE5HqptQrkAm4GfeHZ5pRkxCS02Y/AYyjmCuK66wkGEQmKIRz 83A+JGCZiiPBx4C6uVyUcmyP8tO3KdxfrJxapB0NUZBd2PS1Ld1uJoU62hJ9euYn KX4vbiDD5Kca9PQRlFVoo1f8xXqmD+NxQ+I524a3khGH+hHBVs0oKfGaW/nguQuk 6BOh8PG5oUAZKvSbR4JboV46Xjb/QOIezICiYSe2Sn9c9I7GajaLkOxL3IYHFMkE pouXOYghVfxeve/ARSeG9KHKItJqz74= -----END CERTIFICATE-----Generated at Sun Apr 19 09:46:11 2026 by rpki-client