$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/996e5e92-df4a-31c3-b37d-8b65af97cbc1.roa File: 996e5e92-df4a-31c3-b37d-8b65af97cbc1.roa (raw, json) Hash identifier: CwIOe3iFUPGYcAU8MI9upFxgibECsM43pephcp6inzI= Subject key identifier: 56:72:32:F9:C7:39:AD:63:1D:41:D4:FC:25:28:86:A1:AA:D2:D7:43 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F07D77754687ADABF4E0F7C80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/996e5e92-df4a-31c3-b37d-8b65af97cbc1.roa Signing time: Tue 01 Sep 2026 13:00:12 +0000 ROA not before: Tue 01 Sep 2026 13:00:12 +0000 ROA not after: Mon 30 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 162.159.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:07:d7:77:54:68:7a:da:bf:4e:0f:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 1 13:00:12 2026 GMT Not After : Nov 30 14:00:12 2026 GMT Subject: CN=8c2432f1-5406-46f9-b7cc-6bd9a72f12fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2f:3f:45:6f:b1:48:e6:93:96:5f:17:ca:97: 49:8e:55:2a:c7:2c:8c:d6:7d:ee:0c:49:9d:66:2c: e2:9f:97:79:f9:61:7a:b1:8b:02:e7:03:42:bc:67: d4:51:5c:79:6a:71:88:00:e3:74:55:fe:18:cd:f2: b1:35:f1:3c:62:9b:96:81:18:5d:df:1b:b4:5e:d7: e7:df:b0:b5:36:a5:a3:2a:d3:48:1b:a0:0f:52:03: 69:51:fc:10:de:75:0d:b9:4c:3d:e7:e6:c2:b4:5e: b3:ee:b3:8e:18:b8:d3:73:8d:66:66:0a:39:6b:21: 6c:5a:6d:c3:84:40:85:6b:8c:df:44:62:5c:83:9c: b4:a0:26:79:ac:dd:8f:81:b9:12:b8:a5:e3:ee:20: ea:a3:e6:2c:cb:80:64:1e:0a:b2:c1:38:09:70:08: 1a:af:9d:b7:45:88:34:30:5a:9a:d8:15:cd:a1:3b: c9:34:85:64:e3:32:25:e8:c3:6d:49:e1:6e:81:21: 64:85:85:de:12:eb:41:e7:08:ae:c2:a9:8b:14:b4: ca:ae:68:bf:64:59:53:91:41:ff:2a:1d:0c:8e:c7: d7:70:57:5d:8f:31:d0:5d:03:bf:07:7d:9a:ca:e6: 7c:b2:ce:06:88:b2:1d:8a:9b:b1:78:96:8b:2d:a1: 5e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:72:32:F9:C7:39:AD:63:1D:41:D4:FC:25:28:86:A1:AA:D2:D7:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/996e5e92-df4a-31c3-b37d-8b65af97cbc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.159.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:a2:10:c7:28:1d:73:aa:4d:6e:ef:d7:ef:b5:5a:e9:f6:b0: b8:54:ec:65:5e:5b:60:e6:52:f4:b7:81:e5:52:fd:62:ed:51: 3c:cc:9a:92:82:4f:8f:2e:ec:c0:b3:57:51:85:f0:fe:67:60: 08:30:de:b5:52:43:43:de:ab:6c:d5:f4:b4:7e:fa:28:f7:18: ca:7d:72:ce:39:63:85:16:88:5a:a2:c7:ec:c5:2a:dc:74:0c: b2:f0:3f:1c:43:6c:5d:fc:26:8b:0b:5b:80:72:06:1f:0b:10: 96:69:c2:2e:1b:44:ea:e3:dd:d4:a8:d7:79:41:42:59:75:13: 7d:c7:76:d5:61:93:4e:9f:01:c3:c7:76:85:42:5b:57:67:16: 1a:2b:ac:30:a3:f8:c6:4c:76:10:23:96:a8:53:8b:e4:a7:7a: b5:8f:3b:ae:2f:7c:2e:53:cd:96:56:7e:9b:37:a2:06:59:8f: 57:f9:d1:eb:6e:3a:80:b8:43:7a:0a:c6:f6:ec:73:c3:0f:3a: 83:8d:86:f8:36:d9:a0:3f:5a:9c:29:1f:10:e2:82:ac:08:d3: 76:66:ce:01:e7:f1:67:32:01:3a:bd:5d:3e:9b:7d:43:9a:13: 57:76:dd:72:9c:07:97:cc:7b:55:c5:22:40:52:d3:8b:4c:75: 08:7d:b2:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8H13dUaHrav04PfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkwMTEzMDAxMloXDTI2MTEzMDE0MDAxMlowLzEtMCsGA1UEAxMk OGMyNDMyZjEtNTQwNi00NmY5LWI3Y2MtNmJkOWE3MmYxMmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyC8/RW+xSOaTll8XypdJjlUqxyyM1n3uDEmd Zizin5d5+WF6sYsC5wNCvGfUUVx5anGIAON0Vf4YzfKxNfE8YpuWgRhd3xu0Xtfn 37C1NqWjKtNIG6APUgNpUfwQ3nUNuUw95+bCtF6z7rOOGLjTc41mZgo5ayFsWm3D hECFa4zfRGJcg5y0oCZ5rN2PgbkSuKXj7iDqo+Ysy4BkHgqywTgJcAgar523RYg0 MFqa2BXNoTvJNIVk4zIl6MNtSeFugSFkhYXeEutB5wiuwqmLFLTKrmi/ZFlTkUH/ Kh0MjsfXcFddjzHQXQO/B32ayuZ8ss4GiLIdipuxeJaLLaFekQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZyMvnHOa1jHUHU/CUohqGq0tdDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTk2ZTVlOTItZGY0YS0z MWMzLWIzN2QtOGI2NWFmOTdjYmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop92MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyiEMcoHXOqTW7v1++1Wun2sLhU7GVeW2DmUvS3geVS/WLtUTzMmpKC T48u7MCzV1GF8P5nYAgw3rVSQ0Peq2zV9LR++ij3GMp9cs45Y4UWiFqix+zFKtx0 DLLwPxxDbF38JosLW4ByBh8LEJZpwi4bROrj3dSo13lBQll1E33HdtVhk06fAcPH doVCW1dnFhorrDCj+MZMdhAjlqhTi+SnerWPO64vfC5TzZZWfps3ogZZj1f50etu OoC4Q3oKxvbsc8MPOoONhvg22aA/WpwpHxDigqwI03ZmzgHn8WcyATq9XT6bfUOa E1d23XKcB5fMe1XFIkBS04tMdQh9sqY= -----END CERTIFICATE-----Generated at Sun Sep 27 04:49:33 2026 by rpki-client