$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2bfc4e39-8bfb-3563-a5d4-d48194d274ec.roa File: 2bfc4e39-8bfb-3563-a5d4-d48194d274ec.roa (raw, json) Hash identifier: C0SmF5KgrEObxtPAxhKnFC/mVNacwIsptqgh8furoYo= Subject key identifier: 95:14:1C:B6:42:D8:7D:5D:56:C7:13:B5:78:D7:5F:CC:53:4E:A7:4B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA9327D6CE2BBFAA10DAFC000 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2bfc4e39-8bfb-3563-a5d4-d48194d274ec.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 162.159.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:7d:6c:e2:bb:fa:a1:0d:af:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=7fe4801f-26ad-475f-8c14-3cccec7b81af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9e:38:93:04:9e:13:af:e5:ee:4b:49:40:ff: f1:87:6d:39:d2:4e:09:ae:2c:ce:9e:13:9a:96:7f: b6:5d:ed:b3:d4:63:4b:14:9c:50:71:fc:e6:db:07: 8f:67:b5:1e:81:c5:42:e8:03:4c:83:d6:1d:07:9c: 91:4b:11:dd:ad:5c:be:a2:cf:37:ff:75:aa:6c:e7: f6:8c:66:54:80:3e:f9:8f:ce:31:5f:20:35:64:90: 75:ea:e9:92:db:a6:3b:f8:fb:11:e6:20:e8:ec:46: 9c:cb:f6:d4:d8:b6:49:2b:60:5c:95:ea:4a:43:b8: 2b:32:29:48:a1:84:09:fa:63:70:9a:97:84:9d:39: 8a:c3:2e:21:d7:73:cd:c6:e3:31:21:4b:9d:16:28: c2:67:87:81:91:83:36:ee:dd:07:86:34:98:17:19: 38:3f:08:83:81:46:42:48:9e:34:5b:c1:40:0e:63: b7:d9:94:76:35:49:61:b6:77:79:8c:a6:28:8b:22: 42:6c:7c:cc:01:73:38:5d:4d:b1:73:39:6e:17:8d: 92:4e:b2:b8:66:e1:5b:22:32:14:f1:fd:a8:d8:2a: 6b:d3:41:ad:92:b0:c0:58:b2:a4:c3:a5:7f:9b:9b: 27:73:8c:17:c7:03:80:0a:33:a4:be:a3:90:c0:ca: ec:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:14:1C:B6:42:D8:7D:5D:56:C7:13:B5:78:D7:5F:CC:53:4E:A7:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2bfc4e39-8bfb-3563-a5d4-d48194d274ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.159.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:5f:44:71:64:de:fe:c9:8f:5b:f2:20:1a:b1:3f:64:7b:05: 06:55:21:be:ed:79:c1:a7:eb:66:41:23:75:64:fb:e5:1b:51: 5e:a8:78:72:8f:3f:46:d2:86:22:60:b7:fa:95:fe:63:4b:a2: 17:c1:12:72:92:f0:42:5b:f2:f6:89:2f:a2:1e:a1:82:a9:da: 98:09:77:e5:3c:3b:f4:64:f7:8a:ca:bd:43:82:2a:97:52:01: 2b:d7:e9:b3:10:55:fa:8a:b7:b1:2e:2b:54:dc:fe:ea:c4:6a: 5c:d7:31:36:a4:82:35:8d:c8:e0:96:24:ac:2a:7b:f4:19:68: b6:ca:63:dc:85:c8:fd:cb:e4:be:88:ac:fe:d6:41:45:68:4d: 73:e4:5e:e5:22:65:5c:ca:2f:11:d6:3d:60:c8:1d:b7:2a:6b: 69:da:0d:11:30:12:f0:78:b5:19:03:c0:82:90:04:72:11:15: 98:b1:7f:bd:ba:47:78:16:74:36:21:ae:87:ee:24:8e:ac:57: 79:82:2f:ab:d6:ca:02:c5:5b:f8:00:65:1b:0f:d4:2d:48:3b: ea:b4:79:99:60:08:18:bc:db:55:48:ad:b6:60:fd:a5:19:02: d0:79:43:4b:38:ed:07:49:69:e2:b4:34:20:70:30:85:db:3b: 94:26:da:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMn1s4rv6oQ2vwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk N2ZlNDgwMWYtMjZhZC00NzVmLThjMTQtM2NjY2VjN2I4MWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjp44kwSeE6/l7ktJQP/xh2050k4JrizOnhOa ln+2Xe2z1GNLFJxQcfzm2wePZ7UegcVC6ANMg9YdB5yRSxHdrVy+os83/3WqbOf2 jGZUgD75j84xXyA1ZJB16umS26Y7+PsR5iDo7Eacy/bU2LZJK2BclepKQ7grMilI oYQJ+mNwmpeEnTmKwy4h13PNxuMxIUudFijCZ4eBkYM27t0HhjSYFxk4PwiDgUZC SJ40W8FADmO32ZR2NUlhtnd5jKYoiyJCbHzMAXM4XU2xczluF42STrK4ZuFbIjIU 8f2o2Cpr00GtkrDAWLKkw6V/m5snc4wXxwOACjOkvqOQwMrs/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUUHLZC2H1dVscTtXjXX8xTTqdLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmJmYzRlMzktOGJmYi0z NTYzLWE1ZDQtZDQ4MTk0ZDI3NGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop/GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxfRHFk3v7Jj1vyIBqxP2R7BQZVIb7tecGn62ZBI3Vk++UbUV6oeHKP P0bShiJgt/qV/mNLohfBEnKS8EJb8vaJL6IeoYKp2pgJd+U8O/Rk94rKvUOCKpdS ASvX6bMQVfqKt7EuK1Tc/urEalzXMTakgjWNyOCWJKwqe/QZaLbKY9yFyP3L5L6I rP7WQUVoTXPkXuUiZVzKLxHWPWDIHbcqa2naDREwEvB4tRkDwIKQBHIRFZixf726 R3gWdDYhrofuJI6sV3mCL6vWygLFW/gAZRsP1C1IO+q0eZlgCBi821VIrbZg/aUZ AtB5Q0s47QdJaeK0NCBwMIXbO5Qm2ig= -----END CERTIFICATE-----Generated at Sat Nov 1 10:00:45 2025 by rpki-client