$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e3781a0c-5c0b-3bd2-a9e3-52bf22764942.roa File: e3781a0c-5c0b-3bd2-a9e3-52bf22764942.roa (raw, json) Hash identifier: Sgn/iHH5rKSp30PqTzM+QlsTb+G1A6Vaw3WNWb/Syi8= Subject key identifier: AC:2F:4F:21:14:70:7A:2B:1A:71:FB:44:69:B1:C7:9C:8D:82:1E:E1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D6AAA914E37A3F7F4B08D2940 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e3781a0c-5c0b-3bd2-a9e3-52bf22764942.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 13335 IP address blocks: 162.158.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:91:4e:37:a3:f7:f4:b0:8d:29:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=cdae8f21-405b-427e-925c-de58c7a29c7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:80:65:ea:d8:79:1b:e2:0d:19:0c:12:d1:f7: cb:63:0b:1a:12:c4:e3:79:74:ad:6c:4c:34:08:9a: cc:31:b2:b9:c7:e4:aa:0a:5d:07:bb:1d:cf:40:32: f8:f1:69:b9:a0:c7:91:f6:d2:88:06:86:8d:2e:bd: bf:2c:ea:de:04:b2:ed:a0:f0:76:b7:d6:6d:02:19: 60:05:9a:69:6d:a7:28:44:30:97:b0:9f:b4:9c:4b: 6f:51:d1:1c:8a:30:be:d8:2f:14:c7:c6:65:83:d2: 75:c1:7b:3b:14:55:3a:7f:80:00:84:35:dd:6b:d3: b2:c6:fc:53:02:b7:5c:0a:cf:8c:1a:10:2e:7e:a0: a5:65:84:f4:1b:36:1d:3e:eb:36:83:46:c1:42:87: 95:e1:21:0f:15:f7:40:ce:5b:75:d1:7d:03:53:b9: 6e:b3:4e:e7:54:20:b8:74:77:98:c4:e7:e7:e7:a4: 87:4e:fa:70:91:6d:8a:93:8f:fd:3a:61:35:9a:53: f1:fd:28:c0:07:39:8c:f7:66:3f:fc:bd:5d:e4:cd: dc:e6:8f:73:1b:2a:2d:67:23:0b:5f:d4:f6:75:b3: 7a:9b:0c:2e:6f:6f:31:50:a3:e7:aa:02:e7:e5:67: 54:73:b8:9e:03:1e:50:b4:00:40:fd:db:9e:7c:cc: 53:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:2F:4F:21:14:70:7A:2B:1A:71:FB:44:69:B1:C7:9C:8D:82:1E:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e3781a0c-5c0b-3bd2-a9e3-52bf22764942.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:38:88:85:f7:b5:51:9e:8c:1d:af:fd:5f:22:ca:7d:b4:57: c0:94:82:ff:57:ce:f0:6c:26:37:af:8b:63:8b:d6:da:46:4e: 2a:73:2b:24:46:b8:62:56:55:d1:4e:b4:83:d6:54:8b:09:63: 9d:2b:8b:81:58:90:19:9a:35:9f:8e:3c:bb:bd:75:be:f7:f4: 96:cb:28:14:ec:d5:02:2e:25:31:98:f9:3e:84:5f:3e:1e:19: e1:67:59:4d:e8:7f:97:1a:b4:da:46:2b:c0:b0:a0:3b:0f:23: eb:1b:96:55:36:04:c5:01:22:87:21:b0:60:0f:5c:66:74:5c: 9e:58:eb:26:b5:92:1e:6b:ec:96:23:40:e6:f2:0d:ff:6b:47: 9d:5c:6c:d7:61:a5:6d:8d:97:1f:ba:9c:90:5e:e7:e6:35:90: 7c:85:16:17:45:37:61:9f:e2:a9:2a:cb:f9:3d:74:14:38:ac: 5a:cc:13:4d:cb:ea:86:90:11:7c:d8:cc:86:96:e1:01:12:93: 32:ce:1f:bf:5e:b3:f8:ef:2c:2d:64:97:53:17:2e:e8:8d:c0: 33:30:71:fd:30:c6:5a:5a:d5:43:19:05:84:52:94:f0:78:5b: 9a:bb:32:6a:bf:47:92:3d:51:4d:79:f6:02:48:3e:87:20:53: f7:3e:f5:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqpFON6P39LCNKUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk Y2RhZThmMjEtNDA1Yi00MjdlLTkyNWMtZGU1OGM3YTI5YzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4Bl6th5G+INGQwS0ffLYwsaEsTjeXStbEw0 CJrMMbK5x+SqCl0Hux3PQDL48Wm5oMeR9tKIBoaNLr2/LOreBLLtoPB2t9ZtAhlg BZppbacoRDCXsJ+0nEtvUdEcijC+2C8Ux8Zlg9J1wXs7FFU6f4AAhDXda9OyxvxT ArdcCs+MGhAufqClZYT0GzYdPus2g0bBQoeV4SEPFfdAzlt10X0DU7lus07nVCC4 dHeYxOfn56SHTvpwkW2Kk4/9OmE1mlPx/SjABzmM92Y//L1d5M3c5o9zGyotZyML X9T2dbN6mwwub28xUKPnqgLn5WdUc7ieAx5QtABA/duefMxTtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwvTyEUcHorGnH7RGmxx5yNgh7hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZTM3ODFhMGMtNWMwYi0z YmQyLWE5ZTMtNTJiZjIyNzY0OTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop6EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAs4iIX3tVGejB2v/V8iyn20V8CUgv9XzvBsJjevi2OL1tpGTipzKyRG uGJWVdFOtIPWVIsJY50ri4FYkBmaNZ+OPLu9db739JbLKBTs1QIuJTGY+T6EXz4e GeFnWU3of5catNpGK8CwoDsPI+sbllU2BMUBIochsGAPXGZ0XJ5Y6ya1kh5r7JYj QObyDf9rR51cbNdhpW2Nlx+6nJBe5+Y1kHyFFhdFN2Gf4qkqy/k9dBQ4rFrME03L 6oaQEXzYzIaW4QESkzLOH79es/jvLC1kl1MXLuiNwDMwcf0wxlpa1UMZBYRSlPB4 W5q7Mmq/R5I9UU159gJIPocgU/c+9UM= -----END CERTIFICATE-----Generated at Fri Apr 17 17:16:40 2026 by rpki-client