$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb2e1392-487d-31d6-8486-1a6e9203f95d.roa File: fb2e1392-487d-31d6-8486-1a6e9203f95d.roa (raw, json) Hash identifier: 0UCPNIuk5hzz55zjTlCTVFIqtz4+1MMiquHX2XG6JO4= Subject key identifier: 2A:BE:99:1D:1B:8C:68:AF:9D:A2:88:6D:C2:22:0D:E1:25:7C:7D:18 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584A7A44E785DD1F0138327B6600 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb2e1392-487d-31d6-8486-1a6e9203f95d.roa Signing time: Fri 11 Jul 2025 00:48:13 +0000 ROA not before: Fri 11 Jul 2025 00:48:13 +0000 ROA not after: Thu 09 Oct 2025 00:48:13 +0000 asID: 13335 IP address blocks: 162.159.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:44:e7:85:dd:1f:01:38:32:7b:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jul 11 00:48:13 2025 GMT Not After : Oct 9 00:48:13 2025 GMT Subject: CN=2df5ef81-5d99-4cf1-adb7-31e4a2632793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:8c:07:48:95:94:23:68:56:d3:97:df:4c:4e: 49:93:b8:40:3b:52:83:86:5b:42:a7:8f:a3:e6:b9: 26:ef:ee:78:76:4e:f5:9e:4f:30:c0:e0:d1:24:a7: c7:b6:41:9a:27:15:da:67:79:e4:bb:00:2a:23:f1: 20:59:48:6c:e6:67:21:0c:99:9e:c5:55:12:d9:d4: 2b:13:7b:8e:44:a4:c2:48:dd:ae:ca:5e:7a:c3:d7: 75:43:aa:34:0e:e7:56:cd:a3:1c:0b:f0:cf:33:35: ec:ad:b4:dc:87:1a:50:23:45:f6:6d:8a:cb:2d:d6: 70:0a:3f:12:4d:d7:a5:db:4a:6e:a7:e2:65:01:d4: 8d:3e:58:85:1a:8a:da:ea:62:80:e7:50:c0:f3:e7: cc:3e:dc:b9:ae:07:58:05:29:98:d5:36:43:ea:31: 36:21:70:d4:25:cb:09:2d:7e:b6:05:e9:d2:f6:4b: 68:97:40:0e:86:34:c4:88:1c:61:8b:8d:83:c7:9b: 3c:30:7d:fa:82:1a:24:ad:ec:02:4b:9e:d6:02:4b: f8:2a:ae:b5:1e:64:34:9a:a6:b8:f0:d5:f2:b4:b8: 0f:fd:87:70:60:83:5a:52:5e:30:36:68:9f:27:42: 53:67:42:e7:0c:33:a7:d3:b9:98:37:cf:94:47:a5: da:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:BE:99:1D:1B:8C:68:AF:9D:A2:88:6D:C2:22:0D:E1:25:7C:7D:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb2e1392-487d-31d6-8486-1a6e9203f95d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.159.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:00:a2:ea:81:95:68:a4:c3:2d:36:53:93:ca:41:b5:e6:83: 14:a9:ad:8e:e6:09:9c:e3:d1:53:be:7a:ec:82:43:93:fc:7c: 81:51:1b:45:2d:18:fa:e9:54:1e:6b:c7:58:c7:ab:85:fa:71: 6d:7c:35:41:51:5b:21:8d:3d:c6:9d:8e:84:dc:41:13:9c:1e: 28:a5:50:7c:e2:e9:45:e1:1a:57:f6:a9:d4:7c:b7:bb:e9:29: 20:28:55:be:10:e8:9a:1a:78:63:fc:2c:fb:d3:40:7d:ac:f6: 8e:c5:10:a6:35:ed:3c:63:8f:65:0e:78:22:e1:b8:28:23:49: dc:6f:92:bc:6f:2c:67:c7:3d:e4:49:06:12:bd:90:b3:41:df: 6a:8e:9b:1c:a1:3c:bc:86:be:a2:4c:ae:21:eb:af:98:6d:30: 1b:7a:f1:48:ea:08:cc:a9:2d:e8:98:cd:42:c5:30:69:75:11: 45:89:05:a3:6f:33:82:7c:7c:b3:98:27:7d:48:2e:f5:c4:45: e3:58:3f:66:a1:90:c2:72:f0:6c:9f:4a:62:34:11:54:65:1a: 1b:e0:91:d9:61:8a:cf:69:7f:b6:ad:71:b4:c5:b7:d6:7d:f9: c4:62:8e:e8:ed:d3:8c:c6:29:f0:96:39:79:36:6e:56:8a:85: 75:25:1a:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6ROeF3R8BODJ7ZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDcxMTAwNDgxM1oXDTI1MTAwOTAwNDgxM1owLzEtMCsGA1UEAxMk MmRmNWVmODEtNWQ5OS00Y2YxLWFkYjctMzFlNGEyNjMyNzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIwHSJWUI2hW05ffTE5Jk7hAO1KDhltCp4+j 5rkm7+54dk71nk8wwODRJKfHtkGaJxXaZ3nkuwAqI/EgWUhs5mchDJmexVUS2dQr E3uORKTCSN2uyl56w9d1Q6o0DudWzaMcC/DPMzXsrbTchxpQI0X2bYrLLdZwCj8S Tdel20pup+JlAdSNPliFGora6mKA51DA8+fMPty5rgdYBSmY1TZD6jE2IXDUJcsJ LX62BenS9ktol0AOhjTEiBxhi42Dx5s8MH36ghokrewCS57WAkv4Kq61HmQ0mqa4 8NXytLgP/YdwYINaUl4wNmifJ0JTZ0LnDDOn07mYN8+UR6Xa+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCq+mR0bjGivnaKIbcIiDeElfH0YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmIyZTEzOTItNDg3ZC0z MWQ2LTg0ODYtMWE2ZTkyMDNmOTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop/rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwAouqBlWikwy02U5PKQbXmgxSprY7mCZzj0VO+euyCQ5P8fIFRG0Ut GPrpVB5rx1jHq4X6cW18NUFRWyGNPcadjoTcQROcHiilUHzi6UXhGlf2qdR8t7vp KSAoVb4Q6JoaeGP8LPvTQH2s9o7FEKY17Txjj2UOeCLhuCgjSdxvkrxvLGfHPeRJ BhK9kLNB32qOmxyhPLyGvqJMriHrr5htMBt68UjqCMypLeiYzULFMGl1EUWJBaNv M4J8fLOYJ31ILvXEReNYP2ahkMJy8GyfSmI0EVRlGhvgkdlhis9pf7atcbTFt9Z9 +cRijujt04zGKfCWOXk2blaKhXUlGjM= -----END CERTIFICATE-----Generated at Sun Jul 20 12:56:40 2025 by rpki-client