$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7122f783-9099-3968-bf80-9ed4eef50c2c.roa File: 7122f783-9099-3968-bf80-9ed4eef50c2c.roa (raw, json) Hash identifier: H00kMl8l+4a4qjnca9C6lvlOMX3XqPvPuh4UtCTb8zc= Subject key identifier: DA:A4:50:79:CF:AC:E9:5A:1C:1B:14:E6:21:FB:A5:F0:B8:00:38:7A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA93285BFE5DE5BB0B6C90900 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7122f783-9099-3968-bf80-9ed4eef50c2c.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 162.158.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:85:bf:e5:de:5b:b0:b6:c9:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=452329d7-45a9-416d-b12c-1bc67419c78b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:df:52:91:45:1c:f9:68:73:de:62:3f:e9:8f: 28:42:16:85:bf:e6:07:86:e3:7d:35:6b:a1:bc:f9: 3b:d3:54:5e:51:ae:56:11:21:e2:a3:52:87:1c:f7: 71:6b:2a:a7:81:c6:50:df:b4:2c:aa:4e:12:6a:b9: 78:ee:30:98:a8:72:d5:3a:b5:71:bf:bb:81:78:20: ae:5b:57:e8:e3:95:91:75:e8:8d:23:a3:bd:77:42: b8:38:ce:ac:18:02:2b:d6:54:69:38:7b:e7:82:90: fd:e8:ec:43:df:8e:cb:a1:c5:70:8c:2f:5f:b2:9c: c7:22:ed:46:b4:cf:08:8a:1b:2b:44:cb:96:82:ae: 19:ac:43:f6:d8:18:4f:a3:dc:b9:3f:f9:2a:e6:84: 57:82:8b:22:ab:8a:75:71:e5:5b:94:fe:b3:c7:c0: 10:02:e2:d4:b2:d6:f4:27:b8:a6:2b:d6:06:17:62: 6a:0c:b8:ea:1c:2d:cd:47:ec:71:7f:d0:32:f3:ba: d9:5e:ef:c2:46:69:c6:d1:52:9d:06:a8:23:88:97: 19:a1:3f:43:dd:dc:01:15:c1:de:64:3b:6c:8b:25: be:5b:d3:e9:f9:b8:2a:43:52:46:fa:ab:6d:c6:f3: 14:e3:33:25:d7:94:85:b6:bb:2b:64:52:cc:68:73: d1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A4:50:79:CF:AC:E9:5A:1C:1B:14:E6:21:FB:A5:F0:B8:00:38:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7122f783-9099-3968-bf80-9ed4eef50c2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:3b:ca:9f:af:a5:05:b0:e4:ce:f7:d8:71:e6:f1:d2:cf:1a: fa:b3:c5:e7:0f:ea:b6:6f:be:92:59:ac:f5:a1:8f:47:7c:1d: 8b:c2:a5:53:51:35:b3:df:57:49:b4:73:11:3c:5b:16:37:3d: f0:e8:c1:7f:3a:2c:96:8d:fc:45:1f:f5:71:c0:fe:cf:6c:69: 1e:9b:ce:88:47:06:be:26:47:aa:fc:fc:ad:1c:c2:79:5f:10: 2d:db:9f:a8:ac:32:65:0d:c8:5f:f5:f3:c4:6b:9d:92:f7:e2: 36:b5:ef:c7:9a:84:cf:f8:b2:59:f6:7e:91:24:d2:f0:3e:88: b0:fd:16:3a:e5:82:08:49:93:66:0c:6f:83:3d:4c:d1:2b:8d: 8c:25:4b:da:98:c4:a3:fb:70:c8:e9:ae:b4:8c:08:f5:28:b6: f1:15:f4:4e:f8:10:43:53:c3:46:35:9e:5b:84:64:6a:a5:98: c7:e6:13:80:ec:b2:76:1f:3b:75:88:f4:01:95:ba:5d:e6:62: be:68:b4:06:3a:e0:53:ea:56:53:c8:6a:88:69:25:15:c2:8b: 7a:f6:d0:20:77:31:da:79:07:19:c1:f8:f4:ad:f0:69:e8:90: d1:d3:32:97:10:86:d4:15:fa:8d:84:29:a9:e1:bd:31:ab:5b: 75:29:8a:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMoW/5d5bsLbJCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk NDUyMzI5ZDctNDVhOS00MTZkLWIxMmMtMWJjNjc0MTljNzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjN9SkUUc+Whz3mI/6Y8oQhaFv+YHhuN9NWuh vPk701ReUa5WESHio1KHHPdxayqngcZQ37Qsqk4Sarl47jCYqHLVOrVxv7uBeCCu W1fo45WRdeiNI6O9d0K4OM6sGAIr1lRpOHvngpD96OxD347LocVwjC9fspzHIu1G tM8IihsrRMuWgq4ZrEP22BhPo9y5P/kq5oRXgosiq4p1ceVblP6zx8AQAuLUstb0 J7imK9YGF2JqDLjqHC3NR+xxf9Ay87rZXu/CRmnG0VKdBqgjiJcZoT9D3dwBFcHe ZDtsiyW+W9Pp+bgqQ1JG+qttxvMU4zMl15SFtrsrZFLMaHPRYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNqkUHnPrOlaHBsU5iH7pfC4ADh6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzEyMmY3ODMtOTA5OS0z OTY4LWJmODAtOWVkNGVlZjUwYzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop6HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIA7yp+vpQWw5M732HHm8dLPGvqzxecP6rZvvpJZrPWhj0d8HYvCpVNR NbPfV0m0cxE8WxY3PfDowX86LJaN/EUf9XHA/s9saR6bzohHBr4mR6r8/K0cwnlf EC3bn6isMmUNyF/188RrnZL34ja178eahM/4sln2fpEk0vA+iLD9FjrlgghJk2YM b4M9TNErjYwlS9qYxKP7cMjprrSMCPUotvEV9E74EENTw0Y1nluEZGqlmMfmE4Ds snYfO3WI9AGVul3mYr5otAY64FPqVlPIaohpJRXCi3r20CB3Mdp5BxnB+PSt8Gno kNHTMpcQhtQV+o2EKanhvTGrW3Upils= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:24 2025 by rpki-client