$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/701f97b9-93a3-36da-b55e-c6107be0a2fb.roa File: 701f97b9-93a3-36da-b55e-c6107be0a2fb.roa (raw, json) Hash identifier: 3KU4qgSvMrppA1NDnZi7XZjan8co0sSzIUMdm/HxGs8= Subject key identifier: 6B:85:0B:A6:8D:C0:9D:E1:6E:81:79:E6:8D:F8:8D:E6:0D:C2:2B:79 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584B989B08B866F0DC0427CE4680 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/701f97b9-93a3-36da-b55e-c6107be0a2fb.roa Signing time: Tue 21 Oct 2025 14:22:57 +0000 ROA not before: Tue 21 Oct 2025 14:22:57 +0000 ROA not after: Mon 19 Jan 2026 15:22:57 +0000 asID: 13335 IP address blocks: 162.159.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:9b:08:b8:66:f0:dc:04:27:ce:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 21 14:22:57 2025 GMT Not After : Jan 19 15:22:57 2026 GMT Subject: CN=71a5eaa2-20eb-4a3b-9bfa-59f6f0d4ba61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ac:d5:51:8c:5a:b7:87:37:1d:eb:ed:81:f5: ff:11:d6:33:ed:93:9c:0d:14:9c:16:1a:ee:74:b0: a9:6b:c9:34:8b:b0:72:56:56:1e:64:58:08:aa:72: 4c:2a:00:91:7a:bd:76:12:3c:cc:ee:0c:dd:02:63: 3e:76:2c:91:b8:ea:d2:32:75:a1:33:41:1e:5d:e9: be:d6:0b:db:54:3a:48:db:e1:e3:d9:f0:e4:32:d2: f4:87:b6:70:f7:cd:5d:f7:cd:00:6f:06:59:e0:59: 31:e8:c7:fb:92:fe:67:32:49:8c:1d:84:37:62:93: 08:9c:c2:89:92:a0:db:82:73:c5:9f:29:f7:76:21: a7:83:3c:0f:bf:dc:eb:31:a2:64:7c:88:97:6e:94: 03:1c:69:71:68:fa:28:9a:9b:9c:38:44:17:f2:d4: 33:70:ed:e8:58:df:3c:31:5e:89:aa:8d:d9:2c:ca: 1c:2c:84:85:92:b6:20:61:e3:85:10:7a:93:03:dd: 3a:29:a1:ea:53:a2:7a:ad:99:c0:cf:0e:d6:85:56: 9c:9e:ba:ef:da:67:56:09:99:c2:60:cc:7c:76:1b: cf:c5:e7:ab:94:c5:11:a7:18:c7:aa:09:e4:11:7a: 8c:87:da:ed:5a:59:c6:22:cd:f2:1f:b3:62:44:c4: 31:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:85:0B:A6:8D:C0:9D:E1:6E:81:79:E6:8D:F8:8D:E6:0D:C2:2B:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/701f97b9-93a3-36da-b55e-c6107be0a2fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.159.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:16:69:2a:7f:e7:1b:22:30:be:16:9c:a3:94:b6:f9:f1:a0: 79:36:56:9d:ef:90:18:c8:83:aa:bd:ed:5c:6e:8c:32:92:a7: e8:55:e7:59:82:d0:11:7f:53:09:0d:8e:8a:5e:95:b7:a8:a5: 5f:e0:73:27:cd:60:cf:06:2c:77:06:8e:ec:f9:95:ac:04:d8: a4:6e:b0:9f:84:bd:6c:c4:eb:d4:3b:7b:9a:0c:b2:3f:76:77: 3b:6f:52:76:91:9c:6c:3a:81:e8:fa:47:f6:dc:c4:77:49:69: 18:63:9e:0f:e8:47:05:c6:e2:71:97:8f:94:f0:6d:c7:13:6c: fc:0d:3c:9a:c6:fb:69:41:ae:70:80:ea:fa:0e:97:a5:d4:33: 5b:c2:f2:c0:d8:3f:1d:4e:7c:78:5e:2a:e3:cf:00:35:01:a9: 56:ed:b5:91:7b:b5:5e:e2:09:ae:f1:48:f5:f0:5f:2c:e7:24: 44:10:fd:65:3a:2e:cc:a9:07:ac:74:5a:5c:ca:0a:7b:17:19: 24:78:e4:7a:6b:f2:e9:ea:d5:b0:97:62:18:3a:b3:e2:46:0a: 4f:b0:9a:8d:e3:74:07:6b:b1:26:c3:35:a8:f8:6e:ce:23:31: fe:88:26:54:d8:6b:3d:1e:5b:d2:b3:dd:fc:85:58:59:9b:e1: 8d:d3:6b:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYmwi4ZvDcBCfORoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyMTE0MjI1N1oXDTI2MDExOTE1MjI1N1owLzEtMCsGA1UEAxMk NzFhNWVhYTItMjBlYi00YTNiLTliZmEtNTlmNmYwZDRiYTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6zVUYxat4c3HevtgfX/EdYz7ZOcDRScFhru dLCpa8k0i7ByVlYeZFgIqnJMKgCRer12EjzM7gzdAmM+diyRuOrSMnWhM0EeXem+ 1gvbVDpI2+Hj2fDkMtL0h7Zw981d980AbwZZ4Fkx6Mf7kv5nMkmMHYQ3YpMInMKJ kqDbgnPFnyn3diGngzwPv9zrMaJkfIiXbpQDHGlxaPoompucOEQX8tQzcO3oWN88 MV6Jqo3ZLMocLISFkrYgYeOFEHqTA906KaHqU6J6rZnAzw7WhVacnrrv2mdWCZnC YMx8dhvPxeerlMURpxjHqgnkEXqMh9rtWlnGIs3yH7NiRMQxsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGuFC6aNwJ3hboF55o34jeYNwit5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzAxZjk3YjktOTNhMy0z NmRhLWI1NWUtYzYxMDdiZTBhMmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop96MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEWaSp/5xsiML4WnKOUtvnxoHk2Vp3vkBjIg6q97VxujDKSp+hV51mC 0BF/UwkNjopelbeopV/gcyfNYM8GLHcGjuz5lawE2KRusJ+EvWzE69Q7e5oMsj92 dztvUnaRnGw6gej6R/bcxHdJaRhjng/oRwXG4nGXj5TwbccTbPwNPJrG+2lBrnCA 6voOl6XUM1vC8sDYPx1OfHheKuPPADUBqVbttZF7tV7iCa7xSPXwXyznJEQQ/WU6 LsypB6x0WlzKCnsXGSR45Hpr8unq1bCXYhg6s+JGCk+wmo3jdAdrsSbDNaj4bs4j Mf6IJlTYaz0eW9Kz3fyFWFmb4Y3Ta4o= -----END CERTIFICATE-----Generated at Sat Nov 1 09:59:09 2025 by rpki-client