$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c39d1a8f-c720-39df-a632-0715be7fdcc5.roa File: c39d1a8f-c720-39df-a632-0715be7fdcc5.roa (raw, json) Hash identifier: 4JQfJVn69K3qgMaoRkA6B/LYRQhkWGt2+Bj+jkoIv0g= Subject key identifier: 4D:E5:45:BD:41:7A:4D:11:3F:4F:E7:83:DD:6F:52:D3:B6:BC:26:0B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D6AAA9258F7790B4DFAC72600 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c39d1a8f-c720-39df-a632-0715be7fdcc5.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 13335 IP address blocks: 162.158.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:92:58:f7:79:0b:4d:fa:c7:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=485c3891-8430-4fc6-8937-e32ad5a63106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:20:16:cf:5f:d1:a3:b3:c8:3f:a9:0a:a4:33: d7:6a:32:26:96:0f:84:b8:65:34:f5:9e:87:5b:df: 30:87:fc:94:d0:d4:2e:81:42:50:6e:cd:1e:b2:dd: 2c:37:ef:d9:77:9b:70:66:03:7b:8b:5b:f3:c9:4c: 98:6a:90:0a:e5:e3:29:eb:70:6f:30:73:73:79:c4: c2:35:d1:3f:45:a1:b9:80:70:ca:3d:c2:76:76:20: 53:29:4a:84:9c:6c:29:7f:6c:ea:e4:90:b2:fb:37: bc:1c:c4:98:00:97:4d:d9:40:13:76:a2:d3:23:a3: 39:1e:24:01:1a:08:78:d1:11:3d:5c:e7:22:c0:88: 17:ca:52:ee:bc:06:31:3d:7f:88:66:e1:60:ef:b9: f8:05:1f:f0:0c:0e:45:86:a3:b7:99:49:03:7e:22: 2e:c2:f4:5b:f2:8e:01:d5:31:49:61:62:fb:6e:d5: 56:dd:f5:fe:38:61:d7:24:a2:a7:8e:fc:b1:aa:90: 76:92:3a:2c:51:ed:cd:7b:62:2d:b4:1a:86:c9:7d: db:b5:b0:c8:1c:77:75:d2:28:c0:2d:0f:2a:d1:5a: 2f:de:34:8c:b5:8b:6d:2d:35:bc:4e:dc:19:ba:5e: 3f:23:21:ba:8b:cf:12:9c:b6:7c:61:a8:6f:75:fe: 16:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E5:45:BD:41:7A:4D:11:3F:4F:E7:83:DD:6F:52:D3:B6:BC:26:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c39d1a8f-c720-39df-a632-0715be7fdcc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:b1:6b:18:de:76:7e:d3:47:61:6f:f5:a7:8c:fb:96:da:9a: 60:e0:2f:3f:c7:f8:ce:77:48:73:72:69:44:cd:10:38:3e:f8: a2:65:be:8c:e0:f7:eb:81:58:d6:dc:bf:a5:d0:dc:7b:09:57: ce:67:c9:60:1e:d6:d6:80:a9:00:03:f1:cf:51:45:1b:36:84: 72:c9:3a:70:49:8b:7c:b8:38:2e:30:a5:8c:22:57:79:9d:82: 40:ff:c7:78:41:3b:ed:67:60:22:59:21:fa:1d:08:9a:62:47: 65:76:2d:f3:0d:c3:97:3b:79:f1:99:dc:48:05:5f:aa:4f:e0: e5:68:ac:58:36:40:eb:97:a2:b4:8a:26:20:22:ca:a5:78:ef: 00:0a:86:08:8c:1f:15:47:6d:07:6c:21:09:27:2b:56:3d:40: 76:6f:f0:b7:68:2f:da:c1:90:be:4d:f9:53:f8:83:59:14:0e: 8d:d7:b9:03:d2:e5:5b:42:63:c7:28:dc:b9:98:38:58:b0:ff: b0:4c:42:6f:1e:08:a4:e4:9e:e9:45:c3:89:0b:10:d6:02:17: a7:3f:5b:f4:ea:28:ca:66:3f:cf:be:0a:08:37:7a:3c:58:6d: bb:8a:38:0a:f7:42:be:37:5e:a9:d9:fc:70:7c:b3:cf:22:4a: 2e:5f:bc:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqpJY93kLTfrHJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk NDg1YzM4OTEtODQzMC00ZmM2LTg5MzctZTMyYWQ1YTYzMTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SAWz1/Ro7PIP6kKpDPXajImlg+EuGU09Z6H W98wh/yU0NQugUJQbs0est0sN+/Zd5twZgN7i1vzyUyYapAK5eMp63BvMHNzecTC NdE/RaG5gHDKPcJ2diBTKUqEnGwpf2zq5JCy+ze8HMSYAJdN2UATdqLTI6M5HiQB Ggh40RE9XOciwIgXylLuvAYxPX+IZuFg77n4BR/wDA5FhqO3mUkDfiIuwvRb8o4B 1TFJYWL7btVW3fX+OGHXJKKnjvyxqpB2kjosUe3Ne2IttBqGyX3btbDIHHd10ijA LQ8q0Vov3jSMtYttLTW8TtwZul4/IyG6i88SnLZ8Yahvdf4WqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3lRb1Bek0RP0/ng91vUtO2vCYLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzM5ZDFhOGYtYzcyMC0z OWRmLWE2MzItMDcxNWJlN2ZkY2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop6lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaxaxjedn7TR2Fv9aeM+5bammDgLz/H+M53SHNyaUTNEDg++KJlvozg 9+uBWNbcv6XQ3HsJV85nyWAe1taAqQAD8c9RRRs2hHLJOnBJi3y4OC4wpYwiV3md gkD/x3hBO+1nYCJZIfodCJpiR2V2LfMNw5c7efGZ3EgFX6pP4OVorFg2QOuXorSK JiAiyqV47wAKhgiMHxVHbQdsIQknK1Y9QHZv8LdoL9rBkL5N+VP4g1kUDo3XuQPS 5VtCY8co3LmYOFiw/7BMQm8eCKTknulFw4kLENYCF6c/W/TqKMpmP8++Cgg3ejxY bbuKOAr3Qr43XqnZ/HB8s88iSi5fvBY= -----END CERTIFICATE-----Generated at Fri Apr 17 18:05:25 2026 by rpki-client