$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d7a20a8f-f2a3-3500-8657-5af0d6aa0424.roa File: d7a20a8f-f2a3-3500-8657-5af0d6aa0424.roa (raw, json) Hash identifier: M6QRg+oNce/+iUVVMbZFXZWMx2GcDHtSNiMMQFLuXW8= Subject key identifier: 89:C8:E3:30:F0:62:02:75:C8:6A:F1:D9:9D:82:41:24:E4:3E:5D:F3 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F1E2CF74DB4FBF32A24163480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d7a20a8f-f2a3-3500-8657-5af0d6aa0424.roa Signing time: Wed 09 Sep 2026 13:00:11 +0000 ROA not before: Wed 09 Sep 2026 13:00:11 +0000 ROA not after: Tue 08 Dec 2026 14:00:11 +0000 asID: 14789 IP address blocks: 162.158.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1e:2c:f7:4d:b4:fb:f3:2a:24:16:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 9 13:00:11 2026 GMT Not After : Dec 8 14:00:11 2026 GMT Subject: CN=a0adaad8-f339-4292-9255-77e8f0dad2f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:17:53:c1:ee:41:d0:2b:58:a3:0d:98:97:fe: b7:50:86:01:16:72:d8:9e:25:4c:be:15:39:a8:95: ec:22:d3:01:16:72:60:5a:3f:f7:9d:e0:cf:b9:8e: 64:9f:2e:ab:5d:dc:c5:de:67:9d:1c:eb:b1:33:22: 24:0e:b6:1e:83:d4:3b:b0:51:f8:3b:0f:74:4c:84: 20:49:d5:c5:e2:98:24:df:d5:c9:c5:37:9f:69:7f: 16:bd:54:a6:29:0b:f3:74:7e:b0:9a:04:b5:73:6e: 82:f2:9d:e4:79:3a:a6:93:a1:9e:1e:db:50:a3:72: ab:f8:39:23:32:b0:f3:8b:33:6b:62:36:34:ca:fb: 1a:31:57:61:63:c7:7f:5d:b1:22:92:b1:b4:fd:4a: 3a:a7:8e:3d:8b:6a:b1:03:5a:18:d3:2b:93:b5:bb: 0a:98:2e:eb:54:b8:e3:62:2e:23:fa:eb:0d:9f:e7: 63:69:b4:18:ef:da:66:a5:b6:46:03:9b:c0:d6:bc: af:d3:05:4c:06:ff:9a:f6:f0:f1:b8:56:51:0e:f6: a8:fe:78:ed:d7:89:ac:44:5a:50:da:87:36:e2:bb: 01:bb:84:1e:88:23:c3:38:78:28:9e:44:c1:54:34: 4d:88:e7:a1:f6:be:38:16:a8:bc:99:6c:1a:2f:bd: 4f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C8:E3:30:F0:62:02:75:C8:6A:F1:D9:9D:82:41:24:E4:3E:5D:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d7a20a8f-f2a3-3500-8657-5af0d6aa0424.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:26:70:d8:bd:af:21:00:47:a5:b5:34:cd:0f:87:67:a2:bc: ae:40:82:69:10:36:6b:94:ea:4b:92:c1:77:af:7a:83:9a:39: 7d:ad:6f:34:a6:35:b1:69:01:e1:da:ab:7e:39:9b:95:89:32: 1c:4b:b4:d3:df:e1:d1:b8:99:ce:6c:66:07:17:f0:21:d8:ed: 79:92:1e:73:f7:cb:d5:15:9c:d4:b5:a8:9c:31:a8:ef:de:ce: c7:8d:f6:32:4f:c8:82:f7:e2:8c:4a:50:03:4f:87:26:3b:0a: 0e:99:d1:24:a5:58:76:46:cb:18:1d:cb:17:10:9e:7b:83:24: e0:f4:1b:6a:0b:a2:5d:28:b0:09:ac:4c:a1:fa:48:4f:4f:7f: 3d:62:98:7e:da:16:0a:e9:4d:2d:09:d5:0e:e1:cd:d5:e9:6f: bb:36:ce:1c:be:24:0d:22:7e:08:be:d8:d0:2f:00:ab:fe:03: bc:2e:4c:0b:10:7e:1e:2c:63:a8:d4:d0:b7:2b:f8:e5:2a:c7: 2e:b9:58:25:67:66:d6:a7:41:01:d2:ae:af:c3:6f:69:43:1f: b2:30:0d:84:8a:b5:2a:e4:ec:fe:46:73:1e:e0:81:49:f1:c8: 23:8e:f2:07:46:d4:94:c1:eb:bf:52:3f:c0:e6:7b:20:04:fd: 8a:b8:ab:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8eLPdNtPvzKiQWNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkwOTEzMDAxMVoXDTI2MTIwODE0MDAxMVowLzEtMCsGA1UEAxMk YTBhZGFhZDgtZjMzOS00MjkyLTkyNTUtNzdlOGYwZGFkMmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBdTwe5B0CtYow2Yl/63UIYBFnLYniVMvhU5 qJXsItMBFnJgWj/3neDPuY5kny6rXdzF3medHOuxMyIkDrYeg9Q7sFH4Ow90TIQg SdXF4pgk39XJxTefaX8WvVSmKQvzdH6wmgS1c26C8p3keTqmk6GeHttQo3Kr+Dkj MrDzizNrYjY0yvsaMVdhY8d/XbEikrG0/Uo6p449i2qxA1oY0yuTtbsKmC7rVLjj Yi4j+usNn+djabQY79pmpbZGA5vA1ryv0wVMBv+a9vDxuFZRDvao/njt14msRFpQ 2oc24rsBu4QeiCPDOHgonkTBVDRNiOeh9r44Fqi8mWwaL71PywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInI4zDwYgJ1yGrx2Z2CQSTkPl3zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDdhMjBhOGYtZjJhMy0z NTAwLTg2NTctNWFmMGQ2YWEwNDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop5iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUmcNi9ryEAR6W1NM0Ph2eivK5AgmkQNmuU6kuSwXeveoOaOX2tbzSm NbFpAeHaq345m5WJMhxLtNPf4dG4mc5sZgcX8CHY7XmSHnP3y9UVnNS1qJwxqO/e zseN9jJPyIL34oxKUANPhyY7Cg6Z0SSlWHZGyxgdyxcQnnuDJOD0G2oLol0osAms TKH6SE9Pfz1imH7aFgrpTS0J1Q7hzdXpb7s2zhy+JA0ifgi+2NAvAKv+A7wuTAsQ fh4sY6jU0Lcr+OUqxy65WCVnZtanQQHSrq/Db2lDH7IwDYSKtSrk7P5Gcx7ggUnx yCOO8gdG1JTB679SP8DmeyAE/Yq4q8k= -----END CERTIFICATE-----Generated at Sun Sep 20 15:05:46 2026 by rpki-client