$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3af3e7b5-1acc-38ec-b667-14532b7b5e10.roa File: 3af3e7b5-1acc-38ec-b667-14532b7b5e10.roa (raw, json) Hash identifier: M327PjeZmtScrDhoG7bB/VwXrDmR2/bKJiqNsja4oQs= Subject key identifier: 82:66:03:49:BD:A2:8B:00:A3:C2:2C:57:E9:E7:35:CE:40:E4:05:AE Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E4AEF61EC1DD2F9CF9901AE80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3af3e7b5-1acc-38ec-b667-14532b7b5e10.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 13335 IP address blocks: 162.158.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:61:ec:1d:d2:f9:cf:99:01:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=b555ab10-3755-4d7b-b6ec-95f2178fa111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:85:e6:55:22:27:35:5f:04:99:04:c9:d3:16: 77:41:93:e6:f3:77:7a:4a:c3:7a:d4:5b:86:61:f5: d1:af:f5:b3:43:4c:57:5b:8b:b1:1b:c1:db:bb:f6: 7c:2e:01:26:13:dd:db:c2:c1:df:2a:41:b3:4e:68: 76:b8:7a:e3:1a:d5:5c:52:a9:71:34:0f:5b:5f:57: 25:aa:3e:3c:53:5d:2c:af:3a:7f:ce:f8:e5:23:cd: 92:62:40:2c:cb:5e:97:bb:49:83:81:41:f1:8c:56: 33:9a:8c:c9:ea:8b:53:d6:1d:2c:d3:6e:3d:1a:28: 6a:6e:74:04:eb:61:4d:80:ab:44:93:37:78:58:90: b1:11:61:46:d3:82:ff:0a:e1:da:ce:18:17:63:19: 36:41:58:c0:89:a3:69:2c:3e:af:ba:e3:a5:3b:3d: 6f:ba:3e:d0:a9:15:cb:73:43:74:fc:14:c4:ed:f6: 74:20:d6:60:ad:88:d0:4d:9d:a5:71:b5:7a:ea:1b: 55:f1:46:fd:13:7b:f5:b7:45:73:57:1f:03:12:a6: 7c:8c:55:a6:c2:3a:5f:fb:59:c4:09:34:df:79:d8: 09:c6:ed:d0:25:69:93:72:8c:3c:56:0c:8e:0c:af: e8:ef:ab:66:d4:91:bd:f3:34:02:b4:52:40:eb:a7: 22:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:66:03:49:BD:A2:8B:00:A3:C2:2C:57:E9:E7:35:CE:40:E4:05:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3af3e7b5-1acc-38ec-b667-14532b7b5e10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:07:e0:f0:c3:03:3c:ee:91:50:64:27:e3:9b:29:90:70:c8: 1d:72:dc:6b:22:99:ee:77:d2:fa:cc:d2:39:9b:1b:b2:d7:f5: bf:0b:31:74:30:18:e4:d7:d9:38:e6:aa:2c:2f:c0:f5:5e:8a: 12:ba:86:2b:7d:75:62:94:4c:35:8d:f1:80:ce:19:cf:81:d0: fb:b0:69:74:ed:34:20:e2:54:f8:13:2c:88:7c:ef:97:28:53: 58:e2:2a:26:e9:20:c0:e7:96:ed:46:a8:a7:89:1d:d7:3d:ac: de:83:9c:f4:c4:75:ad:3b:69:1c:65:cc:a6:5a:d6:d7:ac:18: 1d:da:84:47:4a:cf:c2:04:7d:5f:c2:0d:26:d4:b1:89:ce:f9: e3:f9:64:49:51:82:d3:dc:ea:a6:89:a8:fc:5f:c9:2e:c5:22: 39:af:8c:44:c8:ec:71:3b:d2:98:48:33:97:0b:67:f0:4d:e8: b0:13:20:f5:b1:b3:b5:8f:c4:6a:b6:18:93:8f:f9:46:5f:2e: 5b:ff:2a:b8:bd:bf:e6:12:ac:2c:e1:b4:2e:36:d5:f2:50:13: 27:c8:3e:33:a8:dc:86:3e:cc:d9:30:32:17:07:05:b7:9c:c1: 0b:89:a4:98:37:8c:d9:7e:77:5c:24:21:ee:38:38:34:2b:62: 57:27:7b:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K72HsHdL5z5kBroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk YjU1NWFiMTAtMzc1NS00ZDdiLWI2ZWMtOTVmMjE3OGZhMTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoXmVSInNV8EmQTJ0xZ3QZPm83d6SsN61FuG YfXRr/WzQ0xXW4uxG8Hbu/Z8LgEmE93bwsHfKkGzTmh2uHrjGtVcUqlxNA9bX1cl qj48U10srzp/zvjlI82SYkAsy16Xu0mDgUHxjFYzmozJ6otT1h0s0249GihqbnQE 62FNgKtEkzd4WJCxEWFG04L/CuHazhgXYxk2QVjAiaNpLD6vuuOlOz1vuj7QqRXL c0N0/BTE7fZ0INZgrYjQTZ2lcbV66htV8Ub9E3v1t0VzVx8DEqZ8jFWmwjpf+1nE CTTfedgJxu3QJWmTcow8VgyODK/o76tm1JG98zQCtFJA66ciQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJmA0m9oosAo8IsV+nnNc5A5AWuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2FmM2U3YjUtMWFjYy0z OGVjLWI2NjctMTQ1MzJiN2I1ZTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop7GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAH4PDDAzzukVBkJ+ObKZBwyB1y3Gsime530vrM0jmbG7LX9b8LMXQw GOTX2TjmqiwvwPVeihK6hit9dWKUTDWN8YDOGc+B0PuwaXTtNCDiVPgTLIh875co U1jiKibpIMDnlu1GqKeJHdc9rN6DnPTEda07aRxlzKZa1tesGB3ahEdKz8IEfV/C DSbUsYnO+eP5ZElRgtPc6qaJqPxfyS7FIjmvjETI7HE70phIM5cLZ/BN6LATIPWx s7WPxGq2GJOP+UZfLlv/Kri9v+YSrCzhtC421fJQEyfIPjOo3IY+zNkwMhcHBbec wQuJpJg3jNl+d1wkIe44ODQrYlcne/Y= -----END CERTIFICATE-----Generated at Thu Jul 23 23:29:01 2026 by rpki-client