$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d21db2b1-6d91-38ba-8b11-45e5e7b7d4aa.roa File: d21db2b1-6d91-38ba-8b11-45e5e7b7d4aa.roa (raw, json) Hash identifier: HKfzhunDvr6Dsck48WizhRl/4yTFIttspkou77Qtwgs= Subject key identifier: 43:2A:AB:B3:47:A1:67:7C:23:14:AA:F3:33:62:CB:E6:D1:B6:36:66 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584C8A0C416B755F20D1E00B0E00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d21db2b1-6d91-38ba-8b11-45e5e7b7d4aa.roa Signing time: Fri 16 Jan 2026 02:00:31 +0000 ROA not before: Fri 16 Jan 2026 02:00:31 +0000 ROA not after: Thu 16 Apr 2026 01:00:31 +0000 asID: 13335 IP address blocks: 162.158.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8a:0c:41:6b:75:5f:20:d1:e0:0b:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jan 16 02:00:31 2026 GMT Not After : Apr 16 01:00:31 2026 GMT Subject: CN=953f2667-4993-40ad-892d-2bfa78de8d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:96:95:8c:25:17:ea:51:8f:5e:57:a4:99:fb: bc:f1:8e:ac:61:28:39:2b:65:15:2a:53:98:1e:eb: a0:68:6f:c2:b3:f8:7b:9e:79:a4:94:f1:48:37:25: ed:c5:6d:22:00:d5:3f:17:14:ed:c6:1a:4b:ce:4b: aa:b5:6f:7c:24:da:ea:45:3a:36:f0:99:6e:4b:89: 90:a2:74:f5:ed:75:1d:42:f2:37:79:bd:bd:93:5d: 7d:6e:a3:9e:ff:eb:32:97:4f:67:78:17:50:2d:7e: cc:a1:8f:25:9f:42:42:ff:70:8d:af:87:ef:fc:55: aa:69:89:d4:ef:34:c6:e0:80:0a:1a:a7:f7:0a:bf: 12:79:c5:8e:d7:15:5b:f4:ee:e0:21:98:62:a0:82: 7c:58:24:17:fd:3e:69:52:ee:dd:8c:74:58:f6:b7: 29:40:81:a5:68:94:00:c6:8b:d7:41:c4:a3:69:0d: c2:b2:c4:30:1b:07:df:db:48:d8:35:0b:af:ff:b8: d5:13:4d:1c:aa:c1:46:56:22:fe:20:d0:3c:13:7c: 07:53:a7:47:32:34:1a:06:8e:8a:28:da:03:c9:ff: 3f:d2:c0:f0:13:60:93:ca:c8:e8:5a:21:a3:7c:1c: 74:37:bd:84:d7:70:bc:64:bd:f9:b6:0f:1c:2c:f8: 1d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:2A:AB:B3:47:A1:67:7C:23:14:AA:F3:33:62:CB:E6:D1:B6:36:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d21db2b1-6d91-38ba-8b11-45e5e7b7d4aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:de:a8:3d:5d:d7:f6:23:3c:8d:15:4e:8a:64:b6:fb:42:f0: a8:df:c9:a5:6b:bc:d3:2c:af:8d:a2:16:fd:12:58:6c:9d:8c: d8:01:08:27:ec:7a:76:e4:1f:a3:6f:9a:4b:51:9c:13:a1:bd: f0:f6:c2:d3:3a:cd:6c:03:63:cb:fa:88:74:f1:77:25:94:34: ab:f0:8f:bb:86:1f:2d:c0:56:83:8b:98:b1:09:22:39:91:a5: 35:24:13:59:63:4e:b2:eb:be:ae:63:5f:ef:24:2a:12:44:8a: fa:63:4f:82:b2:a4:f5:46:74:0c:14:be:a0:3a:9e:14:69:6f: b9:54:27:6f:42:34:57:6f:e6:33:b0:0d:f2:a6:c5:85:94:d6: 6f:5b:ce:15:1e:60:91:34:08:b4:1c:09:3d:2e:4e:f9:70:b4: b1:62:bc:af:02:ab:48:5b:ef:bf:6d:01:05:25:6c:e5:93:44: c1:c0:bc:53:5d:21:a6:b3:38:6e:1b:f8:c0:65:c4:ff:2a:f4: f1:c8:ba:28:1a:46:8e:60:45:3e:56:8d:b7:f9:a3:3d:fc:c4: 71:85:6a:8a:2a:6c:dd:02:99:04:85:ba:16:06:ad:25:25:d0: 28:37:4d:cd:f9:71:32:be:40:dd:f8:19:25:e8:f4:01:b7:8a: 26:fd:4f:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyKDEFrdV8g0eALDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDExNjAyMDAzMVoXDTI2MDQxNjAxMDAzMVowLzEtMCsGA1UEAxMk OTUzZjI2NjctNDk5My00MGFkLTg5MmQtMmJmYTc4ZGU4ZDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5aVjCUX6lGPXlekmfu88Y6sYSg5K2UVKlOY HuugaG/Cs/h7nnmklPFINyXtxW0iANU/FxTtxhpLzkuqtW98JNrqRTo28JluS4mQ onT17XUdQvI3eb29k119bqOe/+syl09neBdQLX7MoY8ln0JC/3CNr4fv/FWqaYnU 7zTG4IAKGqf3Cr8SecWO1xVb9O7gIZhioIJ8WCQX/T5pUu7djHRY9rcpQIGlaJQA xovXQcSjaQ3CssQwGwff20jYNQuv/7jVE00cqsFGViL+INA8E3wHU6dHMjQaBo6K KNoDyf8/0sDwE2CTysjoWiGjfBx0N72E13C8ZL35tg8cLPgdYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMqq7NHoWd8IxSq8zNiy+bRtjZmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDIxZGIyYjEtNmQ5MS0z OGJhLThiMTEtNDVlNWU3YjdkNGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop6MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEreqD1d1/YjPI0VTopktvtC8KjfyaVrvNMsr42iFv0SWGydjNgBCCfs enbkH6NvmktRnBOhvfD2wtM6zWwDY8v6iHTxdyWUNKvwj7uGHy3AVoOLmLEJIjmR pTUkE1ljTrLrvq5jX+8kKhJEivpjT4KypPVGdAwUvqA6nhRpb7lUJ29CNFdv5jOw DfKmxYWU1m9bzhUeYJE0CLQcCT0uTvlwtLFivK8Cq0hb779tAQUlbOWTRMHAvFNd IaazOG4b+MBlxP8q9PHIuigaRo5gRT5Wjbf5oz38xHGFaooqbN0CmQSFuhYGrSUl 0Cg3Tc35cTK+QN34GSXo9AG3iib9T5U= -----END CERTIFICATE-----Generated at Sun Mar 1 18:52:25 2026 by rpki-client