$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d72e025c-b211-3e31-98ec-c3c76b5193fd.roa File: d72e025c-b211-3e31-98ec-c3c76b5193fd.roa (raw, json) Hash identifier: 2tZn5m/OwXv33F3wnmYp7yhHWRNu0UscNa38BFlD5Po= Subject key identifier: 47:34:E4:88:84:04:DF:03:37:7B:7A:B5:1E:28:94:7D:53:6B:8B:4E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEA8782A1A02D054E9E872D00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d72e025c-b211-3e31-98ec-c3c76b5193fd.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 162.158.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:82:a1:a0:2d:05:4e:9e:87:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=9b2cc05b-611c-40e0-ba42-40add71ecd14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f6:ff:ae:c1:b2:d2:dd:12:16:13:ed:1c:55: 7f:8e:ed:6e:2d:4a:d3:be:1c:53:44:16:6d:9c:18: 15:e2:d3:09:03:3b:36:cd:f4:07:ad:cf:67:ac:4d: b6:72:cc:67:3d:61:eb:fa:a3:11:c2:31:e8:a8:ed: b8:27:15:61:45:32:65:95:58:9e:22:f4:9f:4c:1c: 1e:06:82:56:28:65:80:e0:c0:fe:fd:91:55:c8:40: 4c:cb:36:81:79:56:73:85:b9:80:88:07:dc:d7:a0: fe:11:06:b1:d3:2f:25:30:0e:ed:bc:7b:39:2b:c1: a7:dc:92:aa:99:a3:26:bb:f5:8d:a1:60:47:73:e2: 94:75:91:bc:ae:10:6f:c0:6b:e7:55:06:eb:92:3b: bb:dc:61:d3:7d:51:ab:e9:06:10:5d:4e:07:6e:ff: 47:41:c6:18:e4:6b:9d:b3:c6:1b:4f:d2:ef:99:76: 12:41:c9:bb:91:4b:f8:d9:76:ce:dc:2e:b0:af:df: 6b:a3:14:26:3a:fd:68:e4:e4:f2:59:fa:1f:3e:1c: 87:21:3e:1c:32:87:04:f3:a9:55:29:2b:40:9a:77: e0:c6:81:02:d2:f0:4f:dc:77:0c:b1:02:19:9f:21: 95:97:bd:ce:81:67:23:60:fb:bf:90:83:c2:9d:54: 83:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:34:E4:88:84:04:DF:03:37:7B:7A:B5:1E:28:94:7D:53:6B:8B:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d72e025c-b211-3e31-98ec-c3c76b5193fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:80:e8:64:88:61:4b:2a:f3:71:72:f1:72:d2:e1:34:30:74: 95:da:da:6f:c2:be:09:5d:ac:68:94:84:d7:db:c0:d3:09:de: 2b:e6:48:f3:fe:ec:25:3d:6d:44:7d:ee:a9:d8:b7:f3:dd:ac: cb:b8:81:58:1e:b0:ea:84:c1:6a:fc:08:61:1f:95:da:4a:0f: 9b:66:35:5e:7b:4f:79:f3:a7:8b:5f:0b:77:ac:58:26:e6:5e: a6:d7:51:44:bf:0f:14:f7:89:92:8d:96:3c:6c:46:6b:b8:74: 17:30:bb:ad:0d:eb:25:c9:0d:d1:10:12:6a:08:e2:d6:68:ed: c4:23:46:ba:fc:2d:97:b3:1a:b7:1e:e4:32:7c:f1:d8:ff:78: 3a:1a:94:49:18:88:8f:6f:43:d0:fe:4c:9c:be:6c:0a:26:c5: cd:61:79:92:86:29:b6:df:18:e5:74:3e:ae:65:4f:36:47:cf: 62:90:04:93:ce:49:06:1e:73:2d:78:e9:80:1a:4b:3f:08:d8: 9f:f3:ed:c0:cd:cd:9b:d4:c5:29:34:69:41:6d:d2:6f:98:20: 31:6a:e1:9a:84:2e:f9:d8:95:c3:ec:a4:e0:48:08:34:11:0f: 88:a1:d7:af:54:2f:3f:a1:21:83:9c:b9:82:29:c2:d6:e8:fe: 8d:03:25:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh4KhoC0FTp6HLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk OWIyY2MwNWItNjExYy00MGUwLWJhNDItNDBhZGQ3MWVjZDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vb/rsGy0t0SFhPtHFV/ju1uLUrTvhxTRBZt nBgV4tMJAzs2zfQHrc9nrE22csxnPWHr+qMRwjHoqO24JxVhRTJllVieIvSfTBwe BoJWKGWA4MD+/ZFVyEBMyzaBeVZzhbmAiAfc16D+EQax0y8lMA7tvHs5K8Gn3JKq maMmu/WNoWBHc+KUdZG8rhBvwGvnVQbrkju73GHTfVGr6QYQXU4Hbv9HQcYY5Gud s8YbT9LvmXYSQcm7kUv42XbO3C6wr99roxQmOv1o5OTyWfofPhyHIT4cMocE86lV KStAmnfgxoEC0vBP3HcMsQIZnyGVl73OgWcjYPu/kIPCnVSDzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEc05IiEBN8DN3t6tR4olH1Ta4tOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDcyZTAyNWMtYjIxMS0z ZTMxLTk4ZWMtYzNjNzZiNTE5M2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop6fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALKA6GSIYUsq83Fy8XLS4TQwdJXa2m/CvgldrGiUhNfbwNMJ3ivmSPP+ 7CU9bUR97qnYt/PdrMu4gVgesOqEwWr8CGEfldpKD5tmNV57T3nzp4tfC3esWCbm XqbXUUS/DxT3iZKNljxsRmu4dBcwu60N6yXJDdEQEmoI4tZo7cQjRrr8LZezGrce 5DJ88dj/eDoalEkYiI9vQ9D+TJy+bAomxc1heZKGKbbfGOV0Pq5lTzZHz2KQBJPO SQYecy146YAaSz8I2J/z7cDNzZvUxSk0aUFt0m+YIDFq4ZqELvnYlcPspOBICDQR D4ih169ULz+hIYOcuYIpwtbo/o0DJTQ= -----END CERTIFICATE-----Generated at Tue Sep 22 06:38:21 2026 by rpki-client