$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/714caa91-49c5-306e-9811-154891614d16.roa File: 714caa91-49c5-306e-9811-154891614d16.roa (raw, json) Hash identifier: iF107pdhXtYBrDycrscWs+D4foQPGmBJtcTsbyIumFo= Subject key identifier: 1C:D3:43:F5:37:12:D1:33:00:5F:85:99:57:99:09:59:B9:A5:13:E9 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA93279B5836D7BEE5B165300 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/714caa91-49c5-306e-9811-154891614d16.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 162.158.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:79:b5:83:6d:7b:ee:5b:16:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=1c01f564-45fa-4a9f-9dd0-2a82e1f8725d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d8:18:32:1b:ad:81:49:9d:0a:97:d6:47:39: 4e:16:70:f5:4e:35:56:bf:80:59:ff:fa:c9:15:d3: e2:34:1b:50:2b:3e:3b:29:88:26:01:c6:b3:a1:1b: 67:b2:36:ae:7a:00:51:36:39:17:0e:ec:62:41:de: a2:4d:7c:c8:45:18:6a:f0:9c:a0:40:10:5e:e9:eb: 0f:b2:01:af:90:e1:3e:55:25:80:4a:14:cd:d7:6f: f9:f5:f2:e4:61:0d:9f:50:77:a2:5b:ab:48:39:d3: 3b:c2:87:05:eb:c6:70:62:af:95:0a:6c:84:fa:22: d9:1d:7f:a0:93:8b:fb:14:e3:d0:e4:ef:7e:0a:ff: a8:92:9e:1a:25:df:13:89:51:0d:49:6f:d7:57:a4: 0a:7c:c0:11:f5:60:05:bb:85:ad:9f:f4:d4:66:08: 8e:fc:c8:c0:a5:60:56:b3:6b:ce:89:b7:e1:23:8e: 41:52:99:b9:9f:06:05:f0:c4:7e:6f:5e:b4:0c:1d: 55:5a:16:c6:3c:e1:53:72:56:d7:87:b0:00:10:7e: 43:e7:4e:35:7f:1c:f7:d1:35:86:86:c9:33:c6:25: 88:cc:82:cd:04:04:35:9c:f2:7a:d9:81:62:03:45: 4d:5d:d5:93:e1:6f:d1:f1:16:a2:05:2e:0e:00:e1: 72:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D3:43:F5:37:12:D1:33:00:5F:85:99:57:99:09:59:B9:A5:13:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/714caa91-49c5-306e-9811-154891614d16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:83:8a:60:96:f8:10:c2:2f:d9:e7:75:e9:12:fd:28:05:dc: 89:99:a2:f5:07:5a:e6:36:7e:1d:a3:a7:c8:88:c2:ce:d1:b8: ac:af:74:50:ed:33:66:84:8f:22:eb:7a:47:07:43:0b:dc:fc: 6f:be:6f:3d:9e:c9:8a:2a:60:05:57:03:05:88:6f:c3:db:c0: 8b:5e:bf:53:90:ac:b9:6e:9a:95:57:2d:26:5e:c7:81:68:1a: 01:0c:bc:25:4c:71:77:76:72:f5:14:c7:d2:8f:cb:74:68:78: 62:7b:9c:f5:87:a0:b9:e7:77:a1:89:5a:80:ce:6c:dd:cc:99: 10:c1:af:c3:58:3c:5f:30:aa:40:72:6f:b8:89:b7:6f:bc:53: bb:0d:87:29:b3:bf:25:f2:6e:0d:15:e6:ec:d0:dc:07:d5:ec: 47:10:80:b1:fe:be:b6:2a:58:91:ef:e8:ef:db:fd:57:9a:ae: 56:c0:10:df:48:67:4c:25:81:12:59:19:1b:96:6c:1c:73:c7: 99:cd:fb:51:a9:e6:c9:30:b0:a4:9c:e3:7f:62:35:9a:e2:eb: 41:a5:b8:ef:a8:66:1b:90:6d:fe:f8:55:ae:a0:20:3b:49:e0: 64:77:ff:09:49:49:6e:b5:d8:72:59:e6:2a:1d:ef:ad:5e:31: 88:e9:ae:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMnm1g2177lsWUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk MWMwMWY1NjQtNDVmYS00YTlmLTlkZDAtMmE4MmUxZjg3MjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdgYMhutgUmdCpfWRzlOFnD1TjVWv4BZ//rJ FdPiNBtQKz47KYgmAcazoRtnsjauegBRNjkXDuxiQd6iTXzIRRhq8JygQBBe6esP sgGvkOE+VSWAShTN12/59fLkYQ2fUHeiW6tIOdM7wocF68ZwYq+VCmyE+iLZHX+g k4v7FOPQ5O9+Cv+okp4aJd8TiVENSW/XV6QKfMAR9WAFu4Wtn/TUZgiO/MjApWBW s2vOibfhI45BUpm5nwYF8MR+b160DB1VWhbGPOFTclbXh7AAEH5D5041fxz30TWG hskzxiWIzILNBAQ1nPJ62YFiA0VNXdWT4W/R8RaiBS4OAOFyHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzTQ/U3EtEzAF+FmVeZCVm5pRPpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzE0Y2FhOTEtNDljNS0z MDZlLTk4MTEtMTU0ODkxNjE0ZDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop6nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMaDimCW+BDCL9nndekS/SgF3ImZovUHWuY2fh2jp8iIws7RuKyvdFDt M2aEjyLrekcHQwvc/G++bz2eyYoqYAVXAwWIb8PbwItev1OQrLlumpVXLSZex4Fo GgEMvCVMcXd2cvUUx9KPy3RoeGJ7nPWHoLnnd6GJWoDObN3MmRDBr8NYPF8wqkBy b7iJt2+8U7sNhymzvyXybg0V5uzQ3AfV7EcQgLH+vrYqWJHv6O/b/VearlbAEN9I Z0wlgRJZGRuWbBxzx5nN+1Gp5skwsKSc439iNZri60GluO+oZhuQbf74Va6gIDtJ 4GR3/wlJSW612HJZ5iod761eMYjprsI= -----END CERTIFICATE-----Generated at Sat Nov 1 10:01:40 2025 by rpki-client