$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b4f0dc91-2af4-320c-8c65-a25d373d5b2c.roa File: b4f0dc91-2af4-320c-8c65-a25d373d5b2c.roa (raw, json) Hash identifier: uBqFQJGtYeJM7RfJBHZufXaqoeP9vzDFmZxSwsd+s30= Subject key identifier: 20:33:68:91:E3:E2:3E:65:6D:E1:68:E1:D5:7F:A4:4C:7B:B7:9F:7E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584CCBA73E2DFD24F1BE69531100 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b4f0dc91-2af4-320c-8c65-a25d373d5b2c.roa Signing time: Sun 08 Feb 2026 14:00:41 +0000 ROA not before: Sun 08 Feb 2026 14:00:41 +0000 ROA not after: Sat 09 May 2026 13:00:41 +0000 asID: 13335 IP address blocks: 162.159.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cb:a7:3e:2d:fd:24:f1:be:69:53:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 8 14:00:41 2026 GMT Not After : May 9 13:00:41 2026 GMT Subject: CN=be92942a-4bf4-4ef9-9cf9-02484da911c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b4:7d:69:ab:cf:42:8e:1b:53:dc:a0:07:b7: a6:9b:b5:f0:a6:eb:25:e2:1f:d6:78:cf:89:0c:46: ac:7c:24:1b:af:35:42:4d:68:88:b4:75:8b:f5:0a: 75:f3:ef:8c:18:7b:c2:6b:22:8d:b0:a0:e9:bd:7b: 83:96:6e:9f:b9:45:48:95:7e:d1:34:e6:d4:0d:c8: 0b:86:28:e2:d1:1e:46:b8:86:87:60:30:1d:71:83: a4:1e:05:56:91:c3:a9:41:43:5a:2f:9c:7e:b8:e3: f9:9d:81:d1:d1:57:f4:24:5c:fe:91:0e:17:d9:05: a4:f6:a0:37:53:7a:fe:61:b3:0b:0d:3c:0e:6a:81: 20:85:c1:88:20:b4:e1:3a:87:13:ac:b9:f5:78:c2: 33:97:05:c0:e7:2a:c1:8d:10:77:5c:cd:2e:c3:03: 8b:5f:5f:81:31:db:b2:84:ff:cb:f1:22:9e:2e:53: 3f:a1:13:11:77:e3:51:1f:3f:c4:f7:a9:c2:cb:a3: b1:fb:e3:23:eb:71:82:38:0e:6e:08:eb:cd:af:a7: 11:5a:54:fc:cd:83:23:9c:5d:44:9b:c3:ad:7b:d8: f0:71:c8:ae:b7:5d:fc:90:cb:6c:6b:e1:23:3f:c9: 56:1f:1d:35:f2:97:77:37:98:c2:dc:11:c8:84:bc: a3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:33:68:91:E3:E2:3E:65:6D:E1:68:E1:D5:7F:A4:4C:7B:B7:9F:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b4f0dc91-2af4-320c-8c65-a25d373d5b2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.159.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:99:14:6d:26:0c:32:e6:6e:25:ac:1f:f1:db:cd:bc:89:9e: 77:ec:5f:04:77:24:bd:a0:d0:9e:ab:67:ca:14:20:10:3f:4e: 6d:44:28:1e:72:f1:de:e6:e1:5b:eb:50:61:3a:b1:ce:04:86: af:c7:8f:b2:68:8f:ee:8b:e6:1e:f5:f1:4f:4d:f5:71:32:00: f4:c4:ec:bb:a0:65:63:23:92:1a:3f:fa:73:77:9a:b8:10:28: 6f:d9:01:89:d3:55:22:c0:da:ca:18:88:28:b7:ee:54:1c:f6: 43:1b:7d:23:34:f3:3c:44:e1:fa:f0:5e:c6:19:03:f7:df:96: 49:ee:1f:20:56:92:85:93:b4:75:c2:d5:eb:28:cf:0a:13:36: 7a:73:0f:89:d0:1f:b9:d9:e4:92:61:b7:0c:e6:85:e0:24:07: be:1c:d1:0c:83:fc:30:78:86:79:ea:ce:26:d9:ea:c3:f0:28: 28:d7:a0:ca:26:bc:ae:d2:2e:ad:59:8a:88:2c:b5:81:dd:31: 08:63:ff:70:2c:fc:a6:74:b7:42:7f:cd:7a:e5:8e:1c:d1:c4: d2:a3:bf:de:7e:b6:56:c6:43:67:40:1e:7e:09:0c:3e:ca:b4: d0:60:e8:d1:2d:a8:37:51:be:9d:63:77:65:23:e7:f0:9e:c6: 4b:3a:3e:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzLpz4t/STxvmlTEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDIwODE0MDA0MVoXDTI2MDUwOTEzMDA0MVowLzEtMCsGA1UEAxMk YmU5Mjk0MmEtNGJmNC00ZWY5LTljZjktMDI0ODRkYTkxMWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLR9aavPQo4bU9ygB7emm7Xwpusl4h/WeM+J DEasfCQbrzVCTWiItHWL9Qp18++MGHvCayKNsKDpvXuDlm6fuUVIlX7RNObUDcgL hiji0R5GuIaHYDAdcYOkHgVWkcOpQUNaL5x+uOP5nYHR0Vf0JFz+kQ4X2QWk9qA3 U3r+YbMLDTwOaoEghcGIILThOocTrLn1eMIzlwXA5yrBjRB3XM0uwwOLX1+BMduy hP/L8SKeLlM/oRMRd+NRHz/E96nCy6Ox++Mj63GCOA5uCOvNr6cRWlT8zYMjnF1E m8Ote9jwcciut138kMtsa+EjP8lWHx018pd3N5jC3BHIhLyjuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAzaJHj4j5lbeFo4dV/pEx7t59+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjRmMGRjOTEtMmFmNC0z MjBjLThjNjUtYTI1ZDM3M2Q1YjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop9fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALmZFG0mDDLmbiWsH/HbzbyJnnfsXwR3JL2g0J6rZ8oUIBA/Tm1EKB5y 8d7m4VvrUGE6sc4Ehq/Hj7Joj+6L5h718U9N9XEyAPTE7LugZWMjkho/+nN3mrgQ KG/ZAYnTVSLA2soYiCi37lQc9kMbfSM08zxE4frwXsYZA/fflknuHyBWkoWTtHXC 1esozwoTNnpzD4nQH7nZ5JJhtwzmheAkB74c0QyD/DB4hnnqzibZ6sPwKCjXoMom vK7SLq1ZiogstYHdMQhj/3As/KZ0t0J/zXrljhzRxNKjv95+tlbGQ2dAHn4JDD7K tNBg6NEtqDdRvp1jd2Uj5/Cexks6PtE= -----END CERTIFICATE-----Generated at Sun Mar 1 20:56:33 2026 by rpki-client