$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b29d4758-7c2f-3ad3-8d62-829448f5b19e.roa File: b29d4758-7c2f-3ad3-8d62-829448f5b19e.roa (raw, json) Hash identifier: v3Ivb7t4u7wEG6C/tjL83sDgCdvC1g7VMTzXzEAOYjM= Subject key identifier: 10:61:4B:21:34:32:47:41:DA:BD:90:9C:C3:C9:3F:6C:48:1C:A3:AB Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584DAAE02F77EF2E47E029958980 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b29d4758-7c2f-3ad3-8d62-829448f5b19e.roa Signing time: Wed 29 Apr 2026 13:00:31 +0000 ROA not before: Wed 29 Apr 2026 13:00:31 +0000 ROA not after: Tue 28 Jul 2026 13:00:31 +0000 asID: 13335 IP address blocks: 162.159.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:e0:2f:77:ef:2e:47:e0:29:95:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 29 13:00:31 2026 GMT Not After : Jul 28 13:00:31 2026 GMT Subject: CN=a5cea342-660d-4935-8d9b-a92704bcbdd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:eb:e4:ff:8c:38:3f:84:a4:98:f8:4a:fc:3d: eb:e9:6c:bc:06:38:c2:b2:53:8b:5a:b9:fb:9b:e8: 04:bc:a3:5c:d6:08:cd:1d:1f:47:d4:31:0e:c8:9e: e4:e1:90:4a:e0:ab:00:77:1f:0f:d2:8e:11:90:9a: e1:68:db:14:44:09:48:86:2c:b5:0f:f4:60:eb:e8: 1c:9d:a4:26:f0:9e:01:8a:fe:f5:f7:0a:8c:dd:48: d6:4a:d0:dc:68:5f:2f:cb:80:49:b4:9c:c2:6c:ec: a4:ad:23:10:7b:86:c3:cf:30:85:48:9c:d6:0a:ea: 8b:3e:31:e3:79:a7:1a:a1:80:02:86:39:c0:1d:88: 30:f1:de:58:31:25:9a:9e:2e:3a:87:4d:33:f8:b9: 67:63:35:bb:2f:de:7c:0e:74:19:af:99:13:a1:97: 4a:f1:48:17:61:e0:ef:5c:21:dd:1e:ba:a0:c6:9f: 5a:70:e2:65:4e:9a:45:4f:23:80:74:ba:bf:f3:36: 8b:07:8c:a5:7b:6a:06:30:7d:3a:60:db:62:4f:40: a4:75:97:22:ce:ee:a9:78:11:43:05:80:53:5d:01: 63:4e:03:75:28:d8:bb:db:4e:36:aa:0c:3f:2f:8d: d3:74:65:0b:38:b9:cb:f2:99:0a:1e:70:80:56:c6: 5e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:61:4B:21:34:32:47:41:DA:BD:90:9C:C3:C9:3F:6C:48:1C:A3:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b29d4758-7c2f-3ad3-8d62-829448f5b19e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.159.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:8f:94:ab:c1:7f:6d:8b:52:00:e6:1c:8d:e6:09:d2:26:bf: 8a:01:90:e1:38:ee:b5:98:d7:c4:09:89:89:1b:04:a4:b4:19: ef:6e:94:d9:28:1f:40:d1:7c:31:3f:89:3f:81:0b:70:34:db: 3c:45:14:13:95:2d:e1:48:be:de:a0:f3:80:48:85:5a:65:6a: 14:d6:9b:e3:7c:a3:48:70:02:48:4e:3f:af:f1:11:8a:d2:07: 7d:71:3a:6e:55:27:8a:c4:89:b6:8d:fe:57:f9:85:25:b7:f8: 12:60:26:c4:6a:cc:18:ad:19:ca:4a:94:fc:b0:3b:12:1f:a9: 57:dd:a9:e5:67:72:61:e5:75:3d:4f:f0:3f:2d:9a:c1:c6:30: 03:3a:39:bf:ae:f5:a4:f1:27:6a:56:a9:f9:cd:f0:09:65:78: 5b:a8:40:9b:5c:68:a2:c2:77:4e:29:f3:d0:a4:e2:1e:28:c5: 51:32:86:b4:65:42:7f:e9:14:0c:2c:ee:38:ce:44:a1:09:d0: 0b:03:f0:71:62:f7:1d:8f:d9:50:c7:fd:41:dc:b4:84:51:e4: a0:db:f4:59:fe:44:ed:0e:24:16:89:90:83:4a:44:cb:bb:f3: dc:63:a4:48:9d:1f:ae:e4:09:eb:a2:d1:0f:69:85:d7:59:b3: 28:b1:2c:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2q4C937y5H4CmViYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk YTVjZWEzNDItNjYwZC00OTM1LThkOWItYTkyNzA0YmNiZGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+vk/4w4P4SkmPhK/D3r6Wy8BjjCslOLWrn7 m+gEvKNc1gjNHR9H1DEOyJ7k4ZBK4KsAdx8P0o4RkJrhaNsURAlIhiy1D/Rg6+gc naQm8J4Biv719wqM3UjWStDcaF8vy4BJtJzCbOykrSMQe4bDzzCFSJzWCuqLPjHj eacaoYAChjnAHYgw8d5YMSWani46h00z+LlnYzW7L958DnQZr5kToZdK8UgXYeDv XCHdHrqgxp9acOJlTppFTyOAdLq/8zaLB4yle2oGMH06YNtiT0CkdZcizu6peBFD BYBTXQFjTgN1KNi72042qgw/L43TdGULOLnL8pkKHnCAVsZeAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBhSyE0MkdB2r2QnMPJP2xIHKOrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjI5ZDQ3NTgtN2MyZi0z YWQzLThkNjItODI5NDQ4ZjViMTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop/pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaPlKvBf22LUgDmHI3mCdImv4oBkOE47rWY18QJiYkbBKS0Ge9ulNko H0DRfDE/iT+BC3A02zxFFBOVLeFIvt6g84BIhVplahTWm+N8o0hwAkhOP6/xEYrS B31xOm5VJ4rEibaN/lf5hSW3+BJgJsRqzBitGcpKlPywOxIfqVfdqeVncmHldT1P 8D8tmsHGMAM6Ob+u9aTxJ2pWqfnN8AlleFuoQJtcaKLCd04p89Ck4h4oxVEyhrRl Qn/pFAws7jjORKEJ0AsD8HFi9x2P2VDH/UHctIRR5KDb9Fn+RO0OJBaJkINKRMu7 89xjpEidH67kCeui0Q9phddZsyixLIU= -----END CERTIFICATE-----Generated at Wed May 13 11:44:44 2026 by rpki-client