$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/35f79580-d3ff-3cf0-8b42-9379ea42f0e4.roa File: 35f79580-d3ff-3cf0-8b42-9379ea42f0e4.roa (raw, json) Hash identifier: yty2VvwHRtPC6HIJ0u6R3fdikw+qlp4O5ymeZZ7sErI= Subject key identifier: DA:B7:2A:D7:52:60:CD:04:B1:27:81:BE:6C:27:AA:08:BA:D3:DA:A4 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D19B4D9BDBD0E3E87EF199480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/35f79580-d3ff-3cf0-8b42-9379ea42f0e4.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 13335 IP address blocks: 162.159.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:d9:bd:bd:0e:3e:87:ef:19:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=ea7e0086-2b3b-4212-8a56-64f9b685cc34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:86:de:1b:d4:ab:f0:5f:36:c5:a9:99:c6:32: 0d:eb:d7:ea:7b:69:4e:00:c4:7e:32:86:91:52:20: de:cb:87:03:fb:20:fc:f9:0d:f7:61:fc:0d:96:e8: 2f:10:87:79:b6:d4:99:bf:bc:3c:af:15:1a:23:09: b1:64:ec:78:09:ef:a2:78:11:58:d7:77:18:50:ad: da:d6:53:d8:a0:5e:dc:6b:3f:30:80:ae:40:e2:a0: b7:82:9c:3c:8c:9c:61:f6:0a:49:75:0d:58:b4:0d: 7a:fb:b8:e5:59:21:9a:f9:21:f6:4a:ca:63:d3:aa: f9:b2:42:39:e2:0c:36:29:7f:1e:0b:61:47:2e:c3: e8:3f:23:75:0f:d0:32:22:c7:7f:93:7a:a1:26:74: 78:b4:05:22:0c:95:d1:01:a6:cc:28:dd:c3:d4:d9: 19:0d:fe:66:5d:ae:62:81:09:20:be:6f:83:6c:4b: 88:ae:0c:47:25:e9:f7:04:da:80:64:6a:a0:5c:0b: d5:ee:95:2d:aa:e4:8e:49:fc:eb:57:f8:c9:3c:35: ab:0c:0a:dc:33:20:c5:82:e6:83:53:3c:11:4a:c7: 53:6d:88:f9:68:20:d0:a6:3c:c3:c4:ba:87:8a:23: 0e:07:8c:37:97:1f:e0:3b:20:8c:f7:8c:6e:5b:d4: d9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B7:2A:D7:52:60:CD:04:B1:27:81:BE:6C:27:AA:08:BA:D3:DA:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/35f79580-d3ff-3cf0-8b42-9379ea42f0e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.159.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:df:47:b9:23:5b:45:26:eb:3e:79:71:29:c3:08:e2:f0:bc: 1c:fa:94:c8:b0:65:02:b2:b6:ec:6a:0e:67:49:06:29:7e:96: b2:f3:fb:9c:82:00:06:7a:3c:38:c4:c2:5b:67:6c:2a:42:f8: 96:57:64:b9:22:d6:4c:07:a7:e5:98:01:5a:4b:fc:ac:6b:6a: d2:2e:59:52:c2:e2:11:02:dc:c9:b7:c6:49:cf:38:50:d1:e6: 93:b3:e9:c8:c2:63:fc:6e:39:3f:a0:83:3e:c4:19:e8:32:d9: 1c:b6:a0:3c:eb:fb:b1:9c:30:b8:9a:be:60:05:1b:95:60:df: 8f:64:bb:68:73:ed:62:11:c2:4a:3f:14:ab:8b:24:ae:99:4c: 56:e2:60:14:a2:ee:83:35:fb:28:1a:96:7e:09:65:8d:cb:89: d4:a5:32:71:9e:11:1f:64:3e:8a:23:0b:60:e7:37:c1:eb:8d: f2:71:36:53:40:85:c2:33:14:23:a6:46:78:62:9c:e8:30:2f: 8e:50:88:7b:c4:44:09:e4:9e:4b:50:b2:b7:e1:7d:d8:a1:cd: 6e:b0:ac:57:da:2e:0d:28:07:01:d3:2d:38:76:e7:15:87:60: a1:3d:68:78:a5:ca:32:68:bb:eb:3f:ae:e7:fe:3c:75:e4:e5: 30:a9:27:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtNm9vQ4+h+8ZlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk ZWE3ZTAwODYtMmIzYi00MjEyLThhNTYtNjRmOWI2ODVjYzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIbeG9Sr8F82xamZxjIN69fqe2lOAMR+MoaR UiDey4cD+yD8+Q33YfwNlugvEId5ttSZv7w8rxUaIwmxZOx4Ce+ieBFY13cYUK3a 1lPYoF7caz8wgK5A4qC3gpw8jJxh9gpJdQ1YtA16+7jlWSGa+SH2Sspj06r5skI5 4gw2KX8eC2FHLsPoPyN1D9AyIsd/k3qhJnR4tAUiDJXRAabMKN3D1NkZDf5mXa5i gQkgvm+DbEuIrgxHJen3BNqAZGqgXAvV7pUtquSOSfzrV/jJPDWrDArcMyDFguaD UzwRSsdTbYj5aCDQpjzDxLqHiiMOB4w3lx/gOyCM94xuW9TZlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNq3KtdSYM0EsSeBvmwnqgi609qkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzVmNzk1ODAtZDNmZi0z Y2YwLThiNDItOTM3OWVhNDJmMGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop91MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLfR7kjW0Um6z55cSnDCOLwvBz6lMiwZQKytuxqDmdJBil+lrLz+5yC AAZ6PDjEwltnbCpC+JZXZLki1kwHp+WYAVpL/KxratIuWVLC4hEC3Mm3xknPOFDR 5pOz6cjCY/xuOT+ggz7EGegy2Ry2oDzr+7GcMLiavmAFG5Vg349ku2hz7WIRwko/ FKuLJK6ZTFbiYBSi7oM1+ygaln4JZY3LidSlMnGeER9kPoojC2DnN8HrjfJxNlNA hcIzFCOmRnhinOgwL45QiHvERAnknktQsrfhfdihzW6wrFfaLg0oBwHTLTh25xWH YKE9aHilyjJou+s/ruf+PHXk5TCpJ4g= -----END CERTIFICATE-----Generated at Thu Mar 26 15:53:43 2026 by rpki-client