$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c7d18b9-c77e-34ee-a1b2-9beff23d4350.roa File: 9c7d18b9-c77e-34ee-a1b2-9beff23d4350.roa (raw, json) Hash identifier: g3KsAe41iXwwouXqLASTzpJsEG2HBZ9aG+MWoVDpZ50= Subject key identifier: 77:CA:9A:E6:2C:57:9D:0A:9B:25:97:F6:D0:7C:F8:D0:51:56:82:C1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E5A4A1E8BAD9634AD269E8840 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c7d18b9-c77e-34ee-a1b2-9beff23d4350.roa Signing time: Wed 01 Jul 2026 09:00:12 +0000 ROA not before: Wed 01 Jul 2026 09:00:12 +0000 ROA not after: Tue 29 Sep 2026 09:00:12 +0000 asID: 132892 IP address blocks: 162.158.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:4a:1e:8b:ad:96:34:ad:26:9e:88:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jul 1 09:00:12 2026 GMT Not After : Sep 29 09:00:12 2026 GMT Subject: CN=f91cdc46-705a-45dc-a7e4-ecab612bda4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:aa:41:6d:b2:c2:98:5f:1e:3f:6f:f2:2f:c0: 18:41:1e:54:78:41:6f:fc:0f:b9:9b:1f:04:c7:72: 9a:a3:71:6a:ca:33:06:89:6b:ce:db:20:a6:17:d2: 5a:6a:dd:48:09:9c:fa:99:cf:6a:55:6e:8a:88:5a: 24:30:f1:fc:8a:06:2f:23:4c:0a:2d:06:87:d0:c1: 0b:ef:76:dc:db:0c:1b:74:15:b7:61:72:6f:ff:a4: 8b:91:0f:9d:7f:99:f6:0f:9a:78:4b:5a:25:1a:e8: 62:9d:20:f3:a8:ba:72:17:80:82:3b:3a:a5:07:a0: 2b:c3:b1:00:f0:52:ff:22:ac:d1:cb:fa:8b:57:f7: 69:17:26:6a:98:dd:eb:1f:54:c9:d2:97:b1:13:13: d9:36:0c:10:d5:cb:db:79:d3:6b:52:0b:14:1c:43: a6:63:a0:f9:b9:5d:d6:af:79:10:6d:0c:65:11:78: a9:19:01:78:ab:21:ca:5d:e3:ad:fa:a4:fc:8e:35: 2d:b7:ab:00:6d:c5:4e:6a:da:33:1f:c6:6a:8d:cd: c0:ca:a8:84:5c:4b:6e:2e:04:1e:c3:2b:79:a1:2a: 25:23:9b:99:68:af:cb:e5:b9:dc:c7:1e:37:55:73: e8:08:d5:08:0d:d2:88:69:ae:49:16:d0:fc:9d:ba: 15:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:CA:9A:E6:2C:57:9D:0A:9B:25:97:F6:D0:7C:F8:D0:51:56:82:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c7d18b9-c77e-34ee-a1b2-9beff23d4350.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:83:d9:1e:02:da:2d:7c:6a:f0:44:77:62:67:78:d5:81:3d: ec:4d:43:08:97:21:b9:f8:19:ac:24:1a:b5:2e:fe:32:b4:7f: c9:57:74:d0:64:15:4d:b0:9a:72:34:c6:32:03:3c:97:7d:72: 50:c9:94:73:68:73:66:a4:4c:1c:21:61:32:6c:82:d3:3b:e1: f9:ae:e8:2a:c8:35:d3:e1:af:d4:87:51:cb:bf:ae:c1:b1:c9: 7e:4c:9b:31:4b:73:45:09:90:c9:98:9b:dd:46:34:ba:76:f4: cd:02:8f:94:95:d9:1d:3c:ec:f1:ae:e3:cc:9c:d5:69:27:1b: b7:d7:13:be:7a:23:5f:a0:35:aa:02:dd:cb:b2:98:90:da:9d: 06:f0:59:6e:78:5f:1d:91:3e:08:06:d9:5b:f4:87:c0:56:4a: 8a:bf:3f:a6:4a:11:36:59:64:c9:a5:fe:79:8e:e7:72:48:a8: 14:e9:9f:44:a0:5b:47:cd:12:a2:1c:eb:d3:0d:00:4b:1f:3c: b7:e4:51:64:5d:40:a9:92:2c:b5:55:62:d3:62:67:58:d9:e8: 1b:86:41:ab:3e:36:8b:6a:6f:40:3f:9f:4a:49:48:de:4f:c1: 51:f5:ed:a5:f4:a9:6b:f5:99:b3:d4:09:51:a2:04:38:a3:91: 97:81:22:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aSh6LrZY0rSaeiEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk ZjkxY2RjNDYtNzA1YS00NWRjLWE3ZTQtZWNhYjYxMmJkYTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhapBbbLCmF8eP2/yL8AYQR5UeEFv/A+5mx8E x3Kao3FqyjMGiWvO2yCmF9Jaat1ICZz6mc9qVW6KiFokMPH8igYvI0wKLQaH0MEL 73bc2wwbdBW3YXJv/6SLkQ+df5n2D5p4S1olGuhinSDzqLpyF4CCOzqlB6Arw7EA 8FL/IqzRy/qLV/dpFyZqmN3rH1TJ0pexExPZNgwQ1cvbedNrUgsUHEOmY6D5uV3W r3kQbQxlEXipGQF4qyHKXeOt+qT8jjUtt6sAbcVOatozH8Zqjc3AyqiEXEtuLgQe wyt5oSolI5uZaK/L5bncxx43VXPoCNUIDdKIaa5JFtD8nboV2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHfKmuYsV50KmyWX9tB8+NBRVoLBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWM3ZDE4YjktYzc3ZS0z NGVlLWExYjItOWJlZmYyM2Q0MzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDop5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+D2R4C2i18avBEd2JneNWBPexNQwiXIbn4GawkGrUu/jK0f8lXdNBk FU2wmnI0xjIDPJd9clDJlHNoc2akTBwhYTJsgtM74fmu6CrINdPhr9SHUcu/rsGx yX5MmzFLc0UJkMmYm91GNLp29M0Cj5SV2R087PGu48yc1WknG7fXE756I1+gNaoC 3cuymJDanQbwWW54Xx2RPggG2Vv0h8BWSoq/P6ZKETZZZMml/nmO53JIqBTpn0Sg W0fNEqIc69MNAEsfPLfkUWRdQKmSLLVVYtNiZ1jZ6BuGQas+Notqb0A/n0pJSN5P wVH17aX0qWv1mbPUCVGiBDijkZeBImU= -----END CERTIFICATE-----Generated at Fri Jul 24 09:06:02 2026 by rpki-client