$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1f21211e-27ca-3d2f-85ff-f95d80ff6707.roa File: 1f21211e-27ca-3d2f-85ff-f95d80ff6707.roa (raw, json) Hash identifier: GK1NntbnIMNxrQtBK4baPOPVvFpEbMtN2IP/RTJdV0s= Subject key identifier: 51:D1:26:C5:9A:2B:FE:9D:24:A6:BA:EE:EC:72:B1:7E:2D:F8:56:DF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA932783A0E5F72E6A92EB780 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1f21211e-27ca-3d2f-85ff-f95d80ff6707.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 162.158.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:78:3a:0e:5f:72:e6:a9:2e:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=a641402c-c9ed-42aa-b2c4-1073cea91f44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:21:a3:4e:bc:81:45:f4:2e:ac:14:50:7d:4f: 41:bf:8f:4b:57:70:8d:1e:74:f0:fd:35:75:13:ee: 16:32:59:df:4c:31:d6:74:ed:d6:98:57:70:96:ef: 60:8d:3a:0f:92:57:42:e5:46:37:16:c3:b3:44:d4: 60:8b:a4:d9:f8:97:27:6d:8e:29:7a:31:2d:07:68: 85:1b:05:42:14:38:fd:fb:ab:b6:55:cc:aa:e4:59: 35:0c:19:54:f2:22:d3:ed:73:fe:57:6f:85:c7:ca: 39:b4:3e:05:7f:29:31:f0:87:50:f2:9f:3e:fe:5a: d2:08:aa:ee:92:f8:f8:40:b6:71:39:33:01:f8:75: 1e:6f:32:4a:f9:d4:a5:0a:df:14:d5:57:42:fc:7f: c4:ec:99:89:fc:08:5d:f7:db:01:fb:18:e9:64:cc: c4:8c:9b:05:a4:57:56:d3:d3:1a:0a:9a:34:31:8a: b2:ec:e7:29:1a:6e:ad:91:8e:dc:c9:0b:14:4d:a1: 1b:c3:4d:94:ad:d3:18:b3:29:91:d0:50:6f:09:72: 4f:da:91:a9:8f:29:31:fc:73:26:92:3c:43:8d:d6: ee:23:84:4f:f9:cf:ba:d1:a8:34:fa:c6:3f:28:82: d0:63:22:eb:61:c3:ce:c1:d0:a7:6b:39:39:75:ec: 0d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:D1:26:C5:9A:2B:FE:9D:24:A6:BA:EE:EC:72:B1:7E:2D:F8:56:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1f21211e-27ca-3d2f-85ff-f95d80ff6707.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:76:b6:68:dc:b3:af:e7:81:71:d3:73:64:c0:f7:93:b4:91: b1:2a:29:c6:7f:a9:0e:b4:34:64:7e:10:93:f5:6b:08:5e:e0: 34:35:01:eb:61:61:bd:d9:ea:5d:24:8f:e7:ff:23:1b:3c:15: 0e:9a:12:ea:75:52:64:6b:9a:17:02:bf:a5:c3:8f:c9:fc:8d: 7c:3b:38:7f:9d:ff:2d:df:f8:ef:7c:76:10:78:fa:8b:47:81: 89:3a:f6:83:46:87:fa:26:aa:ab:19:42:be:22:42:cd:ab:51: 11:8e:36:64:03:2d:4d:30:9c:c7:02:bc:e0:02:2c:03:0f:c1: 45:43:e0:18:64:32:61:56:a3:86:c1:47:8b:19:e8:7b:35:b9: 06:46:9f:c4:2a:7a:57:1d:75:76:43:21:2c:56:09:88:52:31: 19:cd:7e:1f:ee:83:2f:60:63:e9:c3:6f:0f:13:b8:43:71:f7: 96:e5:de:78:e1:77:ca:8b:f7:bc:ef:bf:33:84:56:ce:0b:d7: f0:a4:b4:de:57:e9:29:06:33:b7:ea:8c:d9:f0:78:38:95:f0: 26:d4:d0:db:08:6f:d5:9f:00:51:b6:10:e0:14:16:95:31:27: 7d:30:c0:68:d2:45:d1:48:77:50:73:fa:7e:52:c0:d1:c0:09: a3:0f:cc:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMng6Dl9y5qkut4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk YTY0MTQwMmMtYzllZC00MmFhLWIyYzQtMTA3M2NlYTkxZjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCGjTryBRfQurBRQfU9Bv49LV3CNHnTw/TV1 E+4WMlnfTDHWdO3WmFdwlu9gjToPkldC5UY3FsOzRNRgi6TZ+JcnbY4pejEtB2iF GwVCFDj9+6u2Vcyq5Fk1DBlU8iLT7XP+V2+Fx8o5tD4Ffykx8IdQ8p8+/lrSCKru kvj4QLZxOTMB+HUebzJK+dSlCt8U1VdC/H/E7JmJ/Ahd99sB+xjpZMzEjJsFpFdW 09MaCpo0MYqy7OcpGm6tkY7cyQsUTaEbw02UrdMYsymR0FBvCXJP2pGpjykx/HMm kjxDjdbuI4RP+c+60ag0+sY/KILQYyLrYcPOwdCnazk5dewNiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFHRJsWaK/6dJKa67uxysX4t+FbfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWYyMTIxMWUtMjdjYS0z ZDJmLTg1ZmYtZjk1ZDgwZmY2NzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop6GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALJ2tmjcs6/ngXHTc2TA95O0kbEqKcZ/qQ60NGR+EJP1awhe4DQ1Aeth Yb3Z6l0kj+f/Ixs8FQ6aEup1UmRrmhcCv6XDj8n8jXw7OH+d/y3f+O98dhB4+otH gYk69oNGh/omqqsZQr4iQs2rURGONmQDLU0wnMcCvOACLAMPwUVD4BhkMmFWo4bB R4sZ6Hs1uQZGn8QqelcddXZDISxWCYhSMRnNfh/ugy9gY+nDbw8TuENx95bl3njh d8qL97zvvzOEVs4L1/CktN5X6SkGM7fqjNnweDiV8CbU0NsIb9WfAFG2EOAUFpUx J30wwGjSRdFId1Bz+n5SwNHACaMPzKM= -----END CERTIFICATE-----Generated at Sat Nov 1 10:02:51 2025 by rpki-client