$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4b64bea7-db39-30eb-b714-064408c0fbf9.roa File: 4b64bea7-db39-30eb-b714-064408c0fbf9.roa (raw, json) Hash identifier: 9LtF3Q/yl2JsqCtiYuN1PxaFrd6ZS3CXVMQNOrzgJNg= Subject key identifier: 65:BC:D0:81:C2:FE:C1:07:33:73:E4:83:62:CE:0C:B0:9E:E3:58:8A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA93279C53CDA597B30C4D980 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4b64bea7-db39-30eb-b714-064408c0fbf9.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 162.158.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:79:c5:3c:da:59:7b:30:c4:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=bd42f9cf-fb6d-4d11-a0e0-676c44545455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:1b:7f:06:31:29:53:69:24:5c:06:18:e4:f2: 97:47:80:99:c9:72:cc:6d:30:fc:1d:a6:52:12:0f: 6c:02:09:d4:88:37:9a:9f:22:6d:8c:54:07:46:f0: bf:96:14:45:bd:cd:94:59:de:21:3d:06:c6:e1:fd: 3a:07:bc:e7:81:df:7b:b0:e3:ce:b2:09:f8:8f:d3: 12:9b:93:7d:3a:58:be:67:eb:5c:b0:a6:13:79:ab: ce:81:66:6e:b2:4e:4e:29:92:ea:9b:b5:c7:71:20: 27:93:5c:13:99:14:c3:88:45:fc:ea:78:55:27:4f: 89:6c:3e:5e:be:e8:02:f2:29:a5:69:9f:a2:de:31: ad:66:f4:ff:f0:ec:03:ff:50:c4:b6:d7:97:d6:1f: 11:fa:bb:92:3e:32:58:66:0f:16:ab:d3:1b:78:db: 33:6d:74:3b:e3:1f:40:b1:88:b1:f5:9f:84:f1:77: 86:17:c8:0a:b9:df:e9:bb:80:09:0e:b3:46:74:6a: 30:10:37:96:86:a2:35:d7:e8:58:33:df:db:88:a7: eb:65:1a:0f:9a:31:b1:d0:d9:a0:0b:f4:78:03:e7: a7:21:00:ba:69:5c:a4:4f:8f:61:3a:1e:59:f9:8b: a7:79:c6:e1:bc:3d:78:53:4c:b1:7b:c8:a6:cc:93: 1a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:BC:D0:81:C2:FE:C1:07:33:73:E4:83:62:CE:0C:B0:9E:E3:58:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4b64bea7-db39-30eb-b714-064408c0fbf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:b8:00:49:c5:6f:40:1d:a8:41:e6:34:6c:99:0c:c5:2e:61: 4e:62:de:6b:fc:3f:0c:d8:1c:29:58:95:cd:db:01:fe:05:94: d8:73:91:f1:bc:71:91:44:89:32:65:ab:6d:0e:50:51:01:a7: 0e:6d:36:3c:b0:8f:d8:79:5d:44:b4:2f:67:9a:67:38:86:c2: 1a:b7:ec:f8:a7:96:ca:ff:df:49:08:a3:00:0d:44:af:8f:17: 9d:00:ab:7c:08:c4:61:4a:25:ba:37:be:c5:b6:3a:31:98:49: 51:d7:37:46:7b:03:78:6e:13:6b:46:a9:50:a0:db:e0:2b:76: 46:c3:d6:6c:2c:86:f5:7a:c6:0f:bf:2e:b2:b2:66:d6:a9:07: 7b:f8:b8:62:8e:34:75:7e:1f:48:71:94:35:04:3e:bb:ad:e6: dd:29:6c:f1:1c:25:24:14:be:55:c6:cf:5d:d3:3c:6f:dd:4e: 38:2c:ee:a1:cf:99:d0:98:1a:db:18:0a:2a:c1:13:5b:76:2e: 01:c3:9f:77:08:79:bc:aa:67:1f:b1:3c:88:0b:20:61:0f:3e: f5:ac:0d:a9:b6:97:13:42:e1:1c:22:83:a5:45:2d:f0:bd:4f: 72:a5:3c:cc:c6:af:5b:3a:76:11:90:ee:65:cc:88:e6:9e:05: 24:d2:0e:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMnnFPNpZezDE2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk YmQ0MmY5Y2YtZmI2ZC00ZDExLWEwZTAtNjc2YzQ0NTQ1NDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ht/BjEpU2kkXAYY5PKXR4CZyXLMbTD8HaZS Eg9sAgnUiDeanyJtjFQHRvC/lhRFvc2UWd4hPQbG4f06B7zngd97sOPOsgn4j9MS m5N9Oli+Z+tcsKYTeavOgWZusk5OKZLqm7XHcSAnk1wTmRTDiEX86nhVJ0+JbD5e vugC8imlaZ+i3jGtZvT/8OwD/1DEtteX1h8R+ruSPjJYZg8Wq9MbeNszbXQ74x9A sYix9Z+E8XeGF8gKud/pu4AJDrNGdGowEDeWhqI11+hYM9/biKfrZRoPmjGx0Nmg C/R4A+enIQC6aVykT49hOh5Z+YunecbhvD14U0yxe8imzJMa+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGW80IHC/sEHM3Pkg2LODLCe41iKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNGI2NGJlYTctZGIzOS0z MGViLWI3MTQtMDY0NDA4YzBmYmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop6oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJu4AEnFb0AdqEHmNGyZDMUuYU5i3mv8PwzYHClYlc3bAf4FlNhzkfG8 cZFEiTJlq20OUFEBpw5tNjywj9h5XUS0L2eaZziGwhq37Pinlsr/30kIowANRK+P F50Aq3wIxGFKJbo3vsW2OjGYSVHXN0Z7A3huE2tGqVCg2+ArdkbD1mwshvV6xg+/ LrKyZtapB3v4uGKONHV+H0hxlDUEPrut5t0pbPEcJSQUvlXGz13TPG/dTjgs7qHP mdCYGtsYCirBE1t2LgHDn3cIebyqZx+xPIgLIGEPPvWsDam2lxNC4Rwig6VFLfC9 T3KlPMzGr1s6dhGQ7mXMiOaeBSTSDuA= -----END CERTIFICATE-----Generated at Sat Nov 1 12:36:47 2025 by rpki-client