$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/512b75b3-85f9-31bf-9bc8-fbcae6ec1605.roa File: 512b75b3-85f9-31bf-9bc8-fbcae6ec1605.roa (raw, json) Hash identifier: Ib12fdG4wwdDq8laUagEPtCekSRc4fmpqgtReUb+a0k= Subject key identifier: 28:0F:80:86:A0:2A:38:DE:55:FC:16:19:AF:7C:7C:E9:6D:31:3B:87 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD08261A96113E74C12160 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/512b75b3-85f9-31bf-9bc8-fbcae6ec1605.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 162.158.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:08:26:1a:96:11:3e:74:c1:21:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=ca8a3b64-f3f4-454d-a273-91e4493341f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3b:c1:62:54:d2:49:9e:2c:10:e0:3e:a3:a3: 26:7a:31:66:a7:4d:06:09:a3:97:ff:88:de:19:ab: 0f:44:04:c5:74:67:5d:48:6e:37:b8:65:9a:2a:7b: 79:43:9b:79:77:24:ab:7f:ab:07:ec:e2:d3:2e:3a: 61:c6:7c:ec:92:21:a7:b0:48:d0:5e:20:da:c5:71: 7d:df:eb:d2:63:d9:f2:77:bf:fb:05:10:07:54:2c: 3e:1f:20:da:0f:8e:11:99:90:38:62:74:1b:fd:e4: 51:aa:9d:cb:7f:b8:83:18:45:f6:e7:21:e0:09:5a: 9a:df:06:86:72:66:4c:ce:d8:84:b5:84:ad:30:30: 90:f3:fe:7e:1e:b4:e2:16:09:f1:61:96:44:07:2c: 1d:c0:98:ab:40:46:7d:c8:fb:c7:b4:1a:84:42:34: 03:e3:a1:a9:2a:c8:70:15:6e:dd:f4:8e:0c:14:48: 9c:70:ff:c9:a0:4f:09:94:96:b7:04:21:ea:4c:a8: 73:e7:1b:af:12:ad:a3:09:7a:9c:4a:8e:81:9f:fe: 03:60:09:e6:d2:15:3b:a5:fe:c9:2b:7b:36:04:12: 13:9a:13:d2:cc:7b:23:6e:31:d1:a8:e3:54:3f:9c: 63:c9:01:80:4d:04:0e:51:e3:13:3f:89:ba:aa:82: 69:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:0F:80:86:A0:2A:38:DE:55:FC:16:19:AF:7C:7C:E9:6D:31:3B:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/512b75b3-85f9-31bf-9bc8-fbcae6ec1605.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:65:39:aa:e7:34:06:fb:17:38:77:d5:f5:45:60:02:a7:9a: cd:39:58:80:1d:3b:1f:22:c6:e1:a0:c8:93:8d:13:7e:79:76: 01:3b:7c:06:c2:80:31:ee:6c:a2:36:ed:2b:df:5a:7f:b7:ec: 81:e3:29:a2:1c:03:08:b7:22:88:80:f3:11:fe:5d:16:a0:a1: 84:d1:cc:96:78:46:6d:f2:41:73:9b:bc:98:fd:57:10:7e:49: ae:f1:7d:5a:17:ce:97:19:5c:e7:6d:c2:cf:af:08:6c:0c:b6: 0a:1c:22:75:20:1f:24:b3:13:ac:ee:a9:d4:bd:14:d0:77:08: 50:f9:99:7c:a1:a1:e8:e2:0c:44:7d:8f:e3:f8:fa:8f:18:da: ba:7b:e3:3e:de:0a:40:d2:2b:66:f9:52:e7:fb:0d:77:87:ef: 6a:6a:40:5f:fa:ca:a2:ee:34:7f:15:f6:0f:57:c9:91:44:9e: a0:53:dd:81:0c:38:f4:ca:7c:ac:8d:fc:7e:ab:87:18:ea:2c: 39:e1:c5:84:f3:06:0b:85:a4:be:98:4a:08:52:dd:b4:fa:e2: 86:86:17:b1:3a:a7:43:e5:57:c6:dc:43:db:2f:9c:5a:2c:9c: 5b:88:d7:fd:9e:94:78:bd:62:a9:4e:fc:e3:00:a9:34:80:24: 4d:a1:dd:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzQgmGpYRPnTBIWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk Y2E4YTNiNjQtZjNmNC00NTRkLWEyNzMtOTFlNDQ5MzM0MWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDvBYlTSSZ4sEOA+o6MmejFmp00GCaOX/4je GasPRATFdGddSG43uGWaKnt5Q5t5dySrf6sH7OLTLjphxnzskiGnsEjQXiDaxXF9 3+vSY9nyd7/7BRAHVCw+HyDaD44RmZA4YnQb/eRRqp3Lf7iDGEX25yHgCVqa3waG cmZMztiEtYStMDCQ8/5+HrTiFgnxYZZEBywdwJirQEZ9yPvHtBqEQjQD46GpKshw FW7d9I4MFEiccP/JoE8JlJa3BCHqTKhz5xuvEq2jCXqcSo6Bn/4DYAnm0hU7pf7J K3s2BBITmhPSzHsjbjHRqONUP5xjyQGATQQOUeMTP4m6qoJpbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgPgIagKjjeVfwWGa98fOltMTuHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTEyYjc1YjMtODVmOS0z MWJmLTliYzgtZmJjYWU2ZWMxNjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop5fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKxlOarnNAb7Fzh31fVFYAKnms05WIAdOx8ixuGgyJONE355dgE7fAbC gDHubKI27SvfWn+37IHjKaIcAwi3IoiA8xH+XRagoYTRzJZ4Rm3yQXObvJj9VxB+ Sa7xfVoXzpcZXOdtws+vCGwMtgocInUgHySzE6zuqdS9FNB3CFD5mXyhoejiDER9 j+P4+o8Y2rp74z7eCkDSK2b5Uuf7DXeH72pqQF/6yqLuNH8V9g9XyZFEnqBT3YEM OPTKfKyN/H6rhxjqLDnhxYTzBguFpL6YSghS3bT64oaGF7E6p0PlV8bcQ9svnFos nFuI1/2elHi9YqlO/OMAqTSAJE2h3Wo= -----END CERTIFICATE-----Generated at Sat Nov 1 10:03:04 2025 by rpki-client