$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/09baa7be-9ccb-321e-a5dc-4ca7fd01b1be.roa File: 09baa7be-9ccb-321e-a5dc-4ca7fd01b1be.roa (raw, json) Hash identifier: Ilx0+yZZNwyTWgszIT0+j2JXGS36x183V8su7Ikdb78= Subject key identifier: 70:F3:53:FD:B2:11:C8:B1:F9:34:00:E9:69:B6:7B:1B:B0:58:EE:82 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA93285F13DFD66DB1999C200 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/09baa7be-9ccb-321e-a5dc-4ca7fd01b1be.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 162.158.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:85:f1:3d:fd:66:db:19:99:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=8b9f1574-6b98-4cb2-b504-fdacb745cbc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d9:58:ad:11:23:63:de:da:e7:be:09:55:30: 38:9c:97:4a:b0:70:78:63:ec:2c:d6:0b:c8:0a:8a: a3:5a:4c:1c:75:04:2c:81:08:fb:8e:e2:b1:45:fe: 49:f4:ea:73:64:fa:7c:41:cb:f5:d7:46:95:2f:b1: c4:bc:8d:9d:a2:9e:e6:03:ff:c8:06:cd:14:5b:86: 23:0e:19:ff:7c:28:b3:02:25:cd:4e:4f:05:f0:35: de:9d:03:b9:59:34:61:df:0a:90:b3:f7:03:0f:92: 15:75:29:05:53:cd:7f:ef:78:c1:e9:2d:46:8c:74: a5:a2:f2:7b:02:d5:4c:21:f9:32:36:ae:23:de:87: d9:2a:aa:81:28:f9:f9:ea:85:c8:f4:17:32:d4:46: ff:17:94:41:fc:5a:cb:df:5e:ff:c8:a9:2c:2d:b8: 58:38:42:b5:ad:e7:57:04:9e:0c:e5:7a:22:a1:09: eb:3f:b6:ff:54:4c:4f:58:d4:7a:aa:b2:a3:1b:8e: 86:4d:68:56:95:bf:63:ca:c6:aa:bc:77:49:2a:b5: 74:fe:89:a9:33:8b:5f:b8:b7:04:0c:e2:e8:ce:c5: 17:a6:60:2e:65:87:c5:fc:f0:49:e9:d2:13:ae:77: 48:38:fe:f7:5f:de:b4:cc:2c:70:d4:38:51:6a:93: 62:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F3:53:FD:B2:11:C8:B1:F9:34:00:E9:69:B6:7B:1B:B0:58:EE:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/09baa7be-9ccb-321e-a5dc-4ca7fd01b1be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:26:4c:ae:09:12:df:be:de:74:66:9a:42:c7:02:28:a2:c0: 64:aa:59:c2:45:cc:12:62:98:b5:e7:ae:79:13:ca:6a:ed:40: 75:5e:cb:47:4b:08:46:8b:3f:22:d0:6a:80:fa:9b:87:93:b9: c3:ec:08:6e:f1:15:de:68:6b:04:de:0a:8b:c3:24:b1:91:5b: c7:4f:f5:33:55:ab:26:35:8b:98:a6:7d:86:e0:a8:a6:b8:84: 39:4f:e9:0f:ed:5a:74:5e:10:8e:e8:fd:10:f4:1e:11:ac:cd: c9:e6:f8:85:c8:c9:ae:3a:dc:85:bf:61:97:1f:b7:24:f4:bb: 7f:bf:00:0c:d3:a6:fa:a9:53:38:d1:32:fc:02:3d:6b:1b:1a: ff:08:2e:27:a1:a8:9f:36:95:57:01:a4:d8:d2:b7:51:c2:77: c2:cf:c2:5a:03:2e:5f:22:ae:59:5d:c2:ee:7a:c5:9d:45:79: 56:15:f8:12:e2:3d:6a:5f:28:97:9b:de:32:19:2d:76:6c:88: 0c:b8:ee:6b:08:73:55:bc:9e:98:83:a0:c2:c2:3f:ff:bb:07: fc:5a:f2:37:76:f4:f5:5c:7a:a5:09:3d:60:96:58:d5:29:79: 8e:91:89:27:5c:fb:60:b5:5e:30:55:9f:25:76:91:f0:b6:cd: a0:de:bb:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMoXxPf1m2xmZwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk OGI5ZjE1NzQtNmI5OC00Y2IyLWI1MDQtZmRhY2I3NDVjYmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodlYrREjY97a574JVTA4nJdKsHB4Y+ws1gvI CoqjWkwcdQQsgQj7juKxRf5J9OpzZPp8Qcv110aVL7HEvI2dop7mA//IBs0UW4Yj Dhn/fCizAiXNTk8F8DXenQO5WTRh3wqQs/cDD5IVdSkFU81/73jB6S1GjHSlovJ7 AtVMIfkyNq4j3ofZKqqBKPn56oXI9Bcy1Eb/F5RB/FrL317/yKksLbhYOEK1redX BJ4M5XoioQnrP7b/VExPWNR6qrKjG46GTWhWlb9jysaqvHdJKrV0/ompM4tfuLcE DOLozsUXpmAuZYfF/PBJ6dITrndIOP73X960zCxw1DhRapNi3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDzU/2yEcix+TQA6Wm2exuwWO6CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDliYWE3YmUtOWNjYi0z MjFlLWE1ZGMtNGNhN2ZkMDFiMWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop6JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEmTK4JEt++3nRmmkLHAiiiwGSqWcJFzBJimLXnrnkTymrtQHVey0dL CEaLPyLQaoD6m4eTucPsCG7xFd5oawTeCovDJLGRW8dP9TNVqyY1i5imfYbgqKa4 hDlP6Q/tWnReEI7o/RD0HhGszcnm+IXIya463IW/YZcftyT0u3+/AAzTpvqpUzjR MvwCPWsbGv8ILiehqJ82lVcBpNjSt1HCd8LPwloDLl8irlldwu56xZ1FeVYV+BLi PWpfKJeb3jIZLXZsiAy47msIc1W8npiDoMLCP/+7B/xa8jd29PVceqUJPWCWWNUp eY6RiSdc+2C1XjBVnyV2kfC2zaDeu+g= -----END CERTIFICATE-----Generated at Sat Nov 1 10:02:49 2025 by rpki-client