$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dbc43273-d575-3ab7-abe1-e5a54a96d902.roa File: dbc43273-d575-3ab7-abe1-e5a54a96d902.roa (raw, json) Hash identifier: DyaF1deoqn4Seyyo+Pxxzn2SCr9H9kLfaAfDsfh5bLQ= Subject key identifier: 37:DF:C5:DA:F0:9A:98:BD:5A:74:60:19:85:6F:45:A2:16:50:2F:B8 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D55BA41BB5AD1AA00F3DE4F80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dbc43273-d575-3ab7-abe1-e5a54a96d902.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 13335 IP address blocks: 162.158.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:41:bb:5a:d1:aa:00:f3:de:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=fb44510f-6a85-456a-9d54-80101647fdb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:8f:df:8c:e5:23:19:02:2d:3d:36:34:0a:c7: c8:fe:5b:f2:ee:65:e2:0a:65:77:d4:5f:ca:5d:74: 1f:e4:90:9a:3c:be:a4:42:f9:f1:9c:33:9a:98:69: 1f:f5:98:d5:37:ce:63:13:14:d1:28:d6:ec:f3:40: 69:98:bb:7a:a9:7f:ae:fa:e4:fe:a0:c0:dd:cf:45: ce:33:d8:d4:7a:5d:78:cc:02:27:94:05:ad:38:da: 87:48:5b:92:53:9d:74:a9:28:4f:2d:bd:08:9d:aa: 53:cf:d3:b0:5c:1e:cc:bc:d9:45:d7:27:98:21:c3: d1:60:e7:7c:d5:3e:f0:75:77:52:9b:f1:07:1f:f3: fb:6b:60:84:df:15:5e:76:ae:35:43:15:7c:32:cb: 2d:d5:6b:0d:b1:bd:44:ac:ad:48:83:c9:a5:54:11: 87:80:24:70:28:03:fc:c8:85:90:9b:53:49:24:75: 80:9d:92:e7:ec:d9:54:45:71:80:8f:5d:df:93:f1: 6a:66:ec:c1:40:66:ac:b2:c4:e5:0f:9a:7f:57:9a: cd:44:93:29:ae:29:58:bd:6e:2d:fd:96:f5:8a:0d: d8:94:a1:e5:28:5f:51:72:aa:bc:59:43:fa:61:c8: c1:51:d8:5c:e5:83:61:84:76:3b:47:c2:2b:57:09: ca:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:DF:C5:DA:F0:9A:98:BD:5A:74:60:19:85:6F:45:A2:16:50:2F:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dbc43273-d575-3ab7-abe1-e5a54a96d902.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:45:de:1f:91:fd:b6:a6:20:8c:10:05:e2:98:5b:2a:6a:d4: 87:0f:2a:79:b8:a2:8a:c8:81:8b:53:ef:0e:c0:e1:d6:2a:60: c1:ac:b6:22:c2:1c:b6:1d:92:bb:1b:d0:0a:8e:0d:b4:77:ee: a6:6f:3e:08:5f:63:0e:f7:47:15:d8:05:dc:40:6f:aa:2d:3f: 7b:d6:96:cf:99:9a:88:26:64:87:6e:b7:c4:e4:ec:58:89:28: f2:14:37:29:6c:dc:2b:05:4b:93:c1:a7:ea:e1:bf:fa:e3:05: 2a:7b:5c:5a:f2:e8:0f:51:fb:f9:07:0d:a1:19:31:fb:9a:bd: cc:4a:67:e3:52:53:fb:84:98:29:b5:45:fd:0b:0f:7b:0a:59: 1d:1c:18:93:92:f9:e9:2a:b4:14:91:ca:72:78:30:dc:f2:34: 5b:db:88:73:51:a9:97:ab:0c:6b:c0:1b:d3:f2:bd:1b:0b:6d: 6e:3f:8e:20:e9:5e:9b:ab:a8:27:f3:cc:46:71:64:28:50:46: bc:dc:03:db:e3:fd:cc:47:04:85:35:19:7b:49:87:4a:b8:c2: 08:d1:2e:5e:29:e8:35:5f:3f:23:99:3f:af:3d:66:2c:ec:0d: 5d:17:24:ce:7b:da:a1:d9:07:e6:60:56:90:1f:29:3f:9b:41: 70:49:22:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VukG7WtGqAPPeT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ZmI0NDUxMGYtNmE4NS00NTZhLTlkNTQtODAxMDE2NDdmZGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkI/fjOUjGQItPTY0CsfI/lvy7mXiCmV31F/K XXQf5JCaPL6kQvnxnDOamGkf9ZjVN85jExTRKNbs80BpmLt6qX+u+uT+oMDdz0XO M9jUel14zAInlAWtONqHSFuSU510qShPLb0InapTz9OwXB7MvNlF1yeYIcPRYOd8 1T7wdXdSm/EHH/P7a2CE3xVedq41QxV8Msst1WsNsb1ErK1Ig8mlVBGHgCRwKAP8 yIWQm1NJJHWAnZLn7NlURXGAj13fk/FqZuzBQGasssTlD5p/V5rNRJMprilYvW4t /Zb1ig3YlKHlKF9Rcqq8WUP6YcjBUdhc5YNhhHY7R8IrVwnKKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDffxdrwmpi9WnRgGYVvRaIWUC+4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGJjNDMyNzMtZDU3NS0z YWI3LWFiZTEtZTVhNTRhOTZkOTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop59MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdF3h+R/bamIIwQBeKYWypq1IcPKnm4oorIgYtT7w7A4dYqYMGstiLC HLYdkrsb0AqODbR37qZvPghfYw73RxXYBdxAb6otP3vWls+ZmogmZIdut8Tk7FiJ KPIUNyls3CsFS5PBp+rhv/rjBSp7XFry6A9R+/kHDaEZMfuavcxKZ+NSU/uEmCm1 Rf0LD3sKWR0cGJOS+ekqtBSRynJ4MNzyNFvbiHNRqZerDGvAG9PyvRsLbW4/jiDp XpurqCfzzEZxZChQRrzcA9vj/cxHBIU1GXtJh0q4wgjRLl4p6DVfPyOZP689Zizs DV0XJM572qHZB+ZgVpAfKT+bQXBJIsA= -----END CERTIFICATE-----Generated at Fri Apr 17 19:04:06 2026 by rpki-client