$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/336add42-6abf-3062-9bd8-14b956f005ef.roa File: 336add42-6abf-3062-9bd8-14b956f005ef.roa (raw, json) Hash identifier: CVgDdOLAeZn/vUlzygIPyEm/LE/KO1AslxZewUrZ+FQ= Subject key identifier: 62:29:A6:15:41:FA:5A:75:86:CC:83:32:16:EE:1C:C0:FD:35:F3:05 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CCFE13E0F3DA39B15FFE00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/336add42-6abf-3062-9bd8-14b956f005ef.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 162.158.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cc:fe:13:e0:f3:da:39:b1:5f:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=20deb85f-e7ac-46d2-bdfd-6e9d846490ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e7:5e:ea:af:47:d3:1d:5a:b0:01:8b:21:90: eb:f9:91:2f:b8:0d:2c:e2:96:9d:4b:12:e8:b5:11: 5a:70:1f:ec:5b:5a:99:06:3b:be:af:4f:61:7d:eb: 40:c9:bc:d6:16:5f:d6:2b:75:07:c0:32:7f:97:47: 80:dc:1c:df:89:74:d9:5e:6f:86:ae:38:1d:89:f4: 2d:a4:72:bc:76:19:5d:22:5c:1a:df:6a:fb:48:ab: ea:eb:32:1c:05:25:fb:64:44:82:6e:34:25:f9:0c: 8d:97:15:ba:7e:8e:30:67:21:60:0c:31:de:35:89: 4a:dd:49:da:54:2a:66:39:1e:60:98:9d:bc:34:e3: 20:3b:6a:5b:2d:4f:39:59:ab:62:10:93:31:3a:1c: 1d:77:2e:29:04:35:03:26:c5:84:8f:2f:9f:5e:99: 99:22:6c:3a:4d:ed:4c:24:58:ab:34:c6:95:f7:92: f2:3c:98:f0:8d:85:26:b5:28:50:c9:97:07:dc:23: 8e:27:8c:37:48:4f:55:46:e6:e6:66:b3:18:5e:29: 43:32:e7:93:be:d7:37:4c:20:27:e7:a0:94:16:6d: f9:ef:10:8a:0c:fc:de:74:1c:bd:a3:3e:9b:27:c5: 8f:66:dd:78:bd:7e:31:2a:cc:dd:d3:3f:1c:bc:1a: a6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:29:A6:15:41:FA:5A:75:86:CC:83:32:16:EE:1C:C0:FD:35:F3:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/336add42-6abf-3062-9bd8-14b956f005ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:2c:62:88:24:b8:21:ae:53:57:59:d0:b2:f8:62:ad:b6:63: b3:e4:57:46:c3:12:5b:a2:77:32:51:e6:ae:93:34:d5:1b:06: 11:8d:57:43:1f:fd:09:45:ae:7e:95:81:fc:40:88:2d:bf:a6: 76:c4:87:3f:a2:38:37:ef:6d:f8:13:fb:c1:77:5f:2f:ea:90: df:3d:25:d1:78:43:26:8f:b2:b6:fb:b0:83:fd:fd:e7:69:2d: 16:ef:88:93:0c:f9:a2:3c:5f:e7:d3:cd:40:7e:a2:4b:70:ad: 45:54:d2:02:9f:a2:e6:57:a9:00:17:fc:22:1c:fe:b3:43:8c: 73:49:8c:ae:ad:d7:63:74:bf:20:09:92:b4:09:5c:8e:e3:48: 98:db:46:99:47:d7:80:37:54:3d:ed:c8:23:b6:6f:e1:bb:85: fc:c9:f9:c4:11:f8:4b:31:97:55:60:99:16:6f:68:31:7c:1b: 18:f0:72:0f:8b:9e:e1:57:73:2d:ad:5d:6b:7d:91:6f:a2:c1: b1:76:1c:3d:31:df:4d:b0:91:2c:2c:79:c8:49:eb:47:21:d6: db:0b:f3:c8:de:a7:41:3f:74:ca:88:f9:8d:c0:4b:5d:03:9b: 70:b9:67:9f:57:ff:00:94:60:f9:2d:6a:12:34:2f:d8:c6:7b: b5:25:4a:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzP4T4PPaObFf/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk MjBkZWI4NWYtZTdhYy00NmQyLWJkZmQtNmU5ZDg0NjQ5MGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzude6q9H0x1asAGLIZDr+ZEvuA0s4padSxLo tRFacB/sW1qZBju+r09hfetAybzWFl/WK3UHwDJ/l0eA3BzfiXTZXm+GrjgdifQt pHK8dhldIlwa32r7SKvq6zIcBSX7ZESCbjQl+QyNlxW6fo4wZyFgDDHeNYlK3Una VCpmOR5gmJ28NOMgO2pbLU85WatiEJMxOhwddy4pBDUDJsWEjy+fXpmZImw6Te1M JFirNMaV95LyPJjwjYUmtShQyZcH3COOJ4w3SE9VRubmZrMYXilDMueTvtc3TCAn 56CUFm357xCKDPzedBy9oz6bJ8WPZt14vX4xKszd0z8cvBqmmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGIpphVB+lp1hsyDMhbuHMD9NfMFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzM2YWRkNDItNmFiZi0z MDYyLTliZDgtMTRiOTU2ZjAwNWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop6YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYsYogkuCGuU1dZ0LL4Yq22Y7PkV0bDEluidzJR5q6TNNUbBhGNV0Mf /QlFrn6VgfxAiC2/pnbEhz+iODfvbfgT+8F3Xy/qkN89JdF4QyaPsrb7sIP9/edp LRbviJMM+aI8X+fTzUB+oktwrUVU0gKfouZXqQAX/CIc/rNDjHNJjK6t12N0vyAJ krQJXI7jSJjbRplH14A3VD3tyCO2b+G7hfzJ+cQR+Esxl1VgmRZvaDF8Gxjwcg+L nuFXcy2tXWt9kW+iwbF2HD0x302wkSwsechJ60ch1tsL88jep0E/dMqI+Y3AS10D m3C5Z59X/wCUYPktahI0L9jGe7UlSrE= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:58 2025 by rpki-client