$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/29d8f083-cf1a-3519-9572-c2bbdd556579.roa File: 29d8f083-cf1a-3519-9572-c2bbdd556579.roa (raw, json) Hash identifier: H41YwtckXWiZeGL4XL9Me8S8/ffA3i69FlFZNK5Fkso= Subject key identifier: 27:0B:C3:55:AF:0E:48:DB:B3:B5:6D:1B:9B:01:26:C5:96:EB:57:DE Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD1597E76BFC8198904A60 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/29d8f083-cf1a-3519-9572-c2bbdd556579.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 162.158.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:15:97:e7:6b:fc:81:98:90:4a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=d5a49842-27c8-4e25-9429-9676b8b6354d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:db:52:23:95:b8:21:c4:66:d3:dc:f4:8c:f6: df:39:2d:c1:4d:cd:27:db:6b:96:c5:e0:36:22:b5: 61:81:7a:f4:c2:b2:de:cd:2e:24:56:00:a9:99:93: db:15:c7:b6:93:ef:9d:07:27:da:91:8c:44:c3:df: 76:d7:c4:4c:fa:99:ee:bb:38:7f:54:0e:42:da:58: 77:e6:41:d5:7d:5a:0a:0f:85:67:af:86:44:de:35: cb:72:61:7f:d5:68:b2:93:62:27:3a:11:ed:77:d4: 8f:2f:45:8f:1b:3e:c3:c3:8d:8c:c0:e0:5f:da:49: e7:c0:83:e4:d6:8b:3f:35:e2:79:14:f4:ce:70:97: b7:cb:81:b1:70:89:88:37:9f:c4:1e:a5:04:e0:07: a3:36:15:6c:db:f3:22:d0:05:1f:40:1a:95:a9:6c: 77:42:f8:39:3e:6d:22:40:70:bc:de:cc:e5:21:01: 8f:b7:28:98:1b:23:df:b4:3a:a8:5f:54:ad:e3:53: 61:b4:d3:60:f9:4e:90:8b:5b:22:11:bf:81:52:e2: e5:e4:37:fa:da:fe:5b:c1:8e:8e:24:82:03:57:00: 1f:26:c1:91:80:4e:3f:61:71:18:fe:46:22:59:f5: 0a:6f:74:84:11:b8:41:12:4b:f6:c9:b6:8a:ca:dc: 18:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:0B:C3:55:AF:0E:48:DB:B3:B5:6D:1B:9B:01:26:C5:96:EB:57:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/29d8f083-cf1a-3519-9572-c2bbdd556579.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:f1:44:10:9c:55:1b:8d:ba:e5:95:c6:b5:0d:4f:4a:e3:d3: 88:0a:72:1c:5c:9b:27:b8:1f:c7:94:17:5a:0c:aa:73:64:b4: f2:07:82:6c:5a:18:3a:5e:47:4e:80:c2:88:3e:bb:e3:64:50: 24:09:a6:e0:eb:fe:cb:f0:47:9d:01:6c:db:7e:3a:95:b3:55: 28:af:00:a2:23:45:e1:a7:2f:4c:16:70:22:b4:32:d5:b0:42: da:f2:f4:21:02:c9:3d:c8:dd:7e:81:4b:8b:42:e6:3f:21:4a: ee:df:40:2c:f3:e6:e7:81:83:fa:aa:32:93:0d:35:58:9e:dd: 52:0e:61:a4:29:91:f7:ea:fe:f6:9e:f0:ee:5e:41:e7:9a:b3: 44:62:04:70:10:67:90:d2:c7:f1:63:d4:7b:69:bb:28:2b:05: 96:97:c4:ee:ce:be:80:4e:1e:07:5a:4f:77:e9:77:19:1e:41: ee:2a:bd:98:7b:03:dd:97:9e:c6:2b:16:7f:0b:da:8e:4d:b1: 84:2a:60:3d:31:20:e3:6b:df:1f:87:89:e8:7d:d3:31:4b:06: d9:70:15:36:89:10:2d:c3:bc:99:82:9f:7c:f7:d6:dd:39:73: e7:86:03:89:c1:59:1f:d5:b1:22:be:72:67:98:f2:4f:ef:38: 83:b0:86:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzRWX52v8gZiQSmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk ZDVhNDk4NDItMjdjOC00ZTI1LTk0MjktOTY3NmI4YjYzNTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9tSI5W4IcRm09z0jPbfOS3BTc0n22uWxeA2 IrVhgXr0wrLezS4kVgCpmZPbFce2k++dByfakYxEw99218RM+pnuuzh/VA5C2lh3 5kHVfVoKD4Vnr4ZE3jXLcmF/1Wiyk2InOhHtd9SPL0WPGz7Dw42MwOBf2knnwIPk 1os/NeJ5FPTOcJe3y4GxcImIN5/EHqUE4AejNhVs2/Mi0AUfQBqVqWx3Qvg5Pm0i QHC83szlIQGPtyiYGyPftDqoX1St41NhtNNg+U6Qi1siEb+BUuLl5Df62v5bwY6O JIIDVwAfJsGRgE4/YXEY/kYiWfUKb3SEEbhBEkv2ybaKytwYWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcLw1WvDkjbs7VtG5sBJsWW61feMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjlkOGYwODMtY2YxYS0z NTE5LTk1NzItYzJiYmRkNTU2NTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop66MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjxRBCcVRuNuuWVxrUNT0rj04gKchxcmye4H8eUF1oMqnNktPIHgmxa GDpeR06Awog+u+NkUCQJpuDr/svwR50BbNt+OpWzVSivAKIjReGnL0wWcCK0MtWw Qtry9CECyT3I3X6BS4tC5j8hSu7fQCzz5ueBg/qqMpMNNVie3VIOYaQpkffq/vae 8O5eQeeas0RiBHAQZ5DSx/Fj1HtpuygrBZaXxO7OvoBOHgdaT3fpdxkeQe4qvZh7 A92XnsYrFn8L2o5NsYQqYD0xIONr3x+Hieh90zFLBtlwFTaJEC3DvJmCn3z31t05 c+eGA4nBWR/VsSK+cmeY8k/vOIOwhnA= -----END CERTIFICATE-----Generated at Sat Nov 1 12:32:38 2025 by rpki-client