$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6af7c841-cedd-3769-9e2c-da25b214f3d1.roa File: 6af7c841-cedd-3769-9e2c-da25b214f3d1.roa (raw, json) Hash identifier: +Oc+NOmPChcLQ/UgC8U+dmNGYP8JYkFj1UsjI2Wvck8= Subject key identifier: 6E:93:AF:EE:FA:2A:AE:7C:E7:C8:4E:28:6E:EC:CB:DF:D0:C1:7A:A4 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA9327C8569B3DC335AA26080 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6af7c841-cedd-3769-9e2c-da25b214f3d1.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 162.159.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:7c:85:69:b3:dc:33:5a:a2:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=e4ed7860-827a-46d0-a562-a42436fdb650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:68:d7:41:d7:e2:06:97:d5:de:ae:8b:4d:58: 87:32:2e:5d:1c:6f:86:5f:a4:f1:c9:83:3c:de:1c: b7:a6:2e:0a:70:7e:ce:7a:a4:74:87:ff:94:32:7c: 1c:55:95:0a:59:cc:87:3e:30:96:55:38:de:21:89: fc:c9:df:60:3e:4d:25:5f:80:67:ac:ec:b6:a3:8e: b0:9a:a1:37:63:1f:5e:f4:b4:a0:0d:b5:d6:a2:9b: 38:80:a4:16:89:24:e8:40:bb:b3:c6:34:03:5c:87: 41:2d:68:ce:17:93:b7:1f:e7:b3:73:2e:be:74:4c: 43:87:95:01:a3:ba:18:2b:87:21:66:30:a4:07:e2: b6:38:3e:e4:96:18:fb:51:3e:88:7f:70:d2:87:da: ba:f5:df:64:77:65:34:b3:a1:ef:64:bd:7b:27:97: c6:08:4b:5c:15:e1:5c:f4:5d:b7:75:cb:cd:c1:82: af:d8:45:79:9d:71:8a:20:c0:e8:cd:91:23:16:c1: 00:91:6e:d6:94:1a:6a:4b:1d:b2:4e:e6:0a:11:56: 7f:34:40:32:f0:a2:f8:7a:26:c3:b2:05:5b:23:30: e0:10:4d:b3:10:05:f9:f3:e5:e0:1f:85:2a:35:c7: fc:60:09:a0:c0:ce:a7:b6:42:86:28:3f:26:bf:e2: 79:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:93:AF:EE:FA:2A:AE:7C:E7:C8:4E:28:6E:EC:CB:DF:D0:C1:7A:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6af7c841-cedd-3769-9e2c-da25b214f3d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.159.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:bd:47:72:96:e8:39:5e:a7:98:d4:ce:8e:12:9e:f7:d2:35: 92:4c:23:b9:5a:b3:6a:a7:39:0f:8c:93:7b:21:72:40:b5:5e: c3:06:3b:f2:e3:9c:63:f9:3b:c7:9b:6e:54:65:26:47:e9:8b: 87:4d:81:59:d2:95:8d:ed:32:29:78:ff:19:02:0c:31:3e:f2: 50:46:46:64:ce:4b:9b:0e:8f:b1:87:2b:da:40:31:5b:fc:5b: d7:1f:4f:fb:bd:a5:20:9b:88:a4:f5:f9:68:56:f1:ae:30:7b: 47:96:a8:d5:71:50:aa:f5:e8:3e:37:b6:84:2c:ff:4d:80:08: 7b:3e:45:10:ac:42:e5:ef:32:2b:29:8e:fe:b8:3a:a6:d8:f6: b1:14:a1:8d:96:91:8b:b9:32:6d:03:67:0e:48:51:ad:18:8d: 43:ac:bb:72:ee:8d:6b:14:f4:d8:6b:ee:11:3f:d0:32:64:fc: d2:1c:34:f7:2c:ec:d9:8b:27:e2:60:27:fb:7b:10:8d:16:73: 24:88:e2:12:25:6f:08:34:c7:15:5b:bf:60:9c:68:0b:bb:4a: 01:77:5e:23:7e:cf:4b:62:c3:ce:3e:a5:81:c0:43:c1:3f:6d: 7e:bc:f0:00:e0:5c:ff:c7:e9:b1:ed:e6:a6:f3:b2:99:26:88: 4b:09:42:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMnyFabPcM1qiYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk ZTRlZDc4NjAtODI3YS00NmQwLWE1NjItYTQyNDM2ZmRiNjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmjXQdfiBpfV3q6LTViHMi5dHG+GX6TxyYM8 3hy3pi4KcH7OeqR0h/+UMnwcVZUKWcyHPjCWVTjeIYn8yd9gPk0lX4BnrOy2o46w mqE3Yx9e9LSgDbXWops4gKQWiSToQLuzxjQDXIdBLWjOF5O3H+ezcy6+dExDh5UB o7oYK4chZjCkB+K2OD7klhj7UT6If3DSh9q69d9kd2U0s6HvZL17J5fGCEtcFeFc 9F23dcvNwYKv2EV5nXGKIMDozZEjFsEAkW7WlBpqSx2yTuYKEVZ/NEAy8KL4eibD sgVbIzDgEE2zEAX58+XgH4UqNcf8YAmgwM6ntkKGKD8mv+J5tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6Tr+76Kq5858hOKG7sy9/QwXqkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNmFmN2M4NDEtY2VkZC0z NzY5LTllMmMtZGEyNWIyMTRmM2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop8SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALu9R3KW6Dlep5jUzo4SnvfSNZJMI7las2qnOQ+Mk3shckC1XsMGO/Lj nGP5O8ebblRlJkfpi4dNgVnSlY3tMil4/xkCDDE+8lBGRmTOS5sOj7GHK9pAMVv8 W9cfT/u9pSCbiKT1+WhW8a4we0eWqNVxUKr16D43toQs/02ACHs+RRCsQuXvMisp jv64OqbY9rEUoY2WkYu5Mm0DZw5IUa0YjUOsu3LujWsU9Nhr7hE/0DJk/NIcNPcs 7NmLJ+JgJ/t7EI0WcySI4hIlbwg0xxVbv2CcaAu7SgF3XiN+z0tiw84+pYHAQ8E/ bX688ADgXP/H6bHt5qbzspkmiEsJQu0= -----END CERTIFICATE-----Generated at Sat Nov 1 10:02:35 2025 by rpki-client