$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/429610a9-a093-3d95-a9be-d74c4cf75aec.roa File: 429610a9-a093-3d95-a9be-d74c4cf75aec.roa (raw, json) Hash identifier: pBvt2MzMSOSHkm96dezE/+O+COVBIBpNPvWCe5w6YC0= Subject key identifier: 49:E2:3C:33:C7:66:A8:72:CF:8C:0C:DB:F0:2C:54:2E:2B:1F:68:1A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA9327D2E89A4B28D95AA15C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/429610a9-a093-3d95-a9be-d74c4cf75aec.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 162.159.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:7d:2e:89:a4:b2:8d:95:aa:15:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=9c675bfa-6e31-40e1-bd98-8a9924290312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e9:0d:5c:73:77:81:6a:9b:30:da:b5:99:b7: a1:2a:a0:9b:0d:08:0e:fb:6c:28:dd:d8:b5:d4:b2: 47:d4:b9:26:15:02:ae:a3:9d:55:1a:36:49:45:a0: a9:17:7b:f1:9b:06:5f:01:de:e1:bb:52:d4:7f:07: 91:76:64:78:ff:1b:2b:ac:ed:ed:84:f5:22:b8:35: 48:5b:84:bd:80:b6:5a:d0:ff:06:50:cb:13:9d:57: 1f:3e:84:4c:78:f9:53:e7:ff:5e:a7:43:65:07:3f: f2:3d:94:f1:eb:77:a6:50:a9:bc:1e:ea:80:70:3d: 6d:da:9e:59:0f:b0:b9:26:02:4c:c0:38:da:15:56: 85:b6:25:0a:a6:7f:40:14:00:10:21:43:da:0a:1c: b4:83:7e:cd:a5:dc:be:8b:87:ea:b3:a3:3e:e9:f8: 33:69:76:47:27:a2:7f:e3:09:f2:be:0a:b3:e4:32: f2:b3:89:fe:6e:3a:b4:f0:32:8d:04:e6:fd:a3:83: e1:d2:2b:4c:8a:64:3f:99:51:28:a0:7d:af:57:59: bb:81:5e:03:80:65:b7:66:ba:65:b9:19:7d:c1:87: 4a:26:51:0e:11:8f:d9:79:25:65:d0:59:05:a5:eb: 45:2f:91:b6:54:d9:31:7a:fa:b0:bc:a4:43:a9:50: c9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E2:3C:33:C7:66:A8:72:CF:8C:0C:DB:F0:2C:54:2E:2B:1F:68:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/429610a9-a093-3d95-a9be-d74c4cf75aec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.159.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:44:5f:78:a9:98:4a:c1:5e:57:46:ac:5c:47:bd:59:02:b3: 3e:aa:ba:8a:c4:84:50:2f:08:01:3a:ec:93:61:f2:c2:da:76: 0a:97:b7:b5:8b:98:00:48:2e:d9:22:2f:ea:74:3b:7b:b2:c9: ae:26:bd:bf:20:a8:3e:71:ab:25:7b:de:a0:05:87:72:ef:65: 96:96:ca:07:77:14:fb:b6:e2:01:92:06:0e:bf:b4:5d:75:cb: f8:87:ad:ad:2e:d3:75:fe:b4:e7:ef:eb:e7:76:bf:00:af:44: 74:2b:7f:09:46:59:c1:63:1e:7d:f4:4c:11:35:30:b1:fd:43: 0a:77:b0:aa:9c:52:15:b3:f3:e0:6a:96:79:52:83:b0:fc:f8: 79:3c:05:5a:c9:16:78:27:f1:7e:02:08:1f:cc:93:e0:d0:84: 45:22:e4:d4:39:9a:b6:09:f4:f7:33:10:9e:67:5f:b3:16:a3: 5e:0c:ce:b8:03:9c:de:02:40:f6:dd:8f:9d:de:b6:29:bd:2a: db:4d:46:76:57:a2:7d:1e:79:f1:ce:cc:e1:53:53:ce:ae:85: 6f:43:63:aa:e9:8b:39:a1:52:56:86:9f:00:0a:ac:e7:9f:0e: ee:14:7b:b4:38:fe:08:7c:73:8d:56:1f:3c:31:7b:7a:20:0c: a1:3f:7d:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMn0uiaSyjZWqFcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk OWM2NzViZmEtNmUzMS00MGUxLWJkOTgtOGE5OTI0MjkwMzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+kNXHN3gWqbMNq1mbehKqCbDQgO+2wo3di1 1LJH1LkmFQKuo51VGjZJRaCpF3vxmwZfAd7hu1LUfweRdmR4/xsrrO3thPUiuDVI W4S9gLZa0P8GUMsTnVcfPoRMePlT5/9ep0NlBz/yPZTx63emUKm8HuqAcD1t2p5Z D7C5JgJMwDjaFVaFtiUKpn9AFAAQIUPaChy0g37Npdy+i4fqs6M+6fgzaXZHJ6J/ 4wnyvgqz5DLys4n+bjq08DKNBOb9o4Ph0itMimQ/mVEooH2vV1m7gV4DgGW3Zrpl uRl9wYdKJlEOEY/ZeSVl0FkFpetFL5G2VNkxevqwvKRDqVDJZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEniPDPHZqhyz4wM2/AsVC4rH2gaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDI5NjEwYTktYTA5My0z ZDk1LWE5YmUtZDc0YzRjZjc1YWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop/DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhEX3ipmErBXldGrFxHvVkCsz6quorEhFAvCAE67JNh8sLadgqXt7WL mABILtkiL+p0O3uyya4mvb8gqD5xqyV73qAFh3LvZZaWygd3FPu24gGSBg6/tF11 y/iHra0u03X+tOfv6+d2vwCvRHQrfwlGWcFjHn30TBE1MLH9Qwp3sKqcUhWz8+Bq lnlSg7D8+Hk8BVrJFngn8X4CCB/Mk+DQhEUi5NQ5mrYJ9PczEJ5nX7MWo14MzrgD nN4CQPbdj53etim9KttNRnZXon0eefHOzOFTU86uhW9DY6rpizmhUlaGnwAKrOef Du4Ue7Q4/gh8c41WHzwxe3ogDKE/fZM= -----END CERTIFICATE-----Generated at Sat Nov 1 10:02:36 2025 by rpki-client