$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/80bfa81b-dfd9-3877-9b73-962f604ef948.roa File: 80bfa81b-dfd9-3877-9b73-962f604ef948.roa (raw, json) Hash identifier: UAYDQGUFM0HwJ0V/e+hV7HEDWShMIWwAH+bPaFMCOKk= Subject key identifier: 25:7A:47:00:E8:19:39:9F:5F:35:9F:8A:40:A2:C9:BF:1B:2B:91:17 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD12E433020441223BFE80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/80bfa81b-dfd9-3877-9b73-962f604ef948.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 162.158.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:12:e4:33:02:04:41:22:3b:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=81fa02f1-09c3-4a74-bc3d-3b113373a9f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:45:e7:fc:9b:03:52:07:ab:58:fc:7b:cb:96: 21:71:68:24:23:7a:80:38:a4:db:ba:07:c2:ef:37: 64:ae:4d:10:5c:7e:09:dc:7e:0c:ff:c1:9f:f2:da: a9:d9:3f:3e:1e:18:80:2c:ad:96:6c:f3:2e:88:d4: ba:0d:a7:55:93:74:15:98:04:e9:0a:c0:b8:1b:36: ad:f5:87:88:15:1c:43:7c:27:fb:8c:40:75:00:ea: 32:2b:e5:f4:6a:a5:ea:f2:38:28:12:d2:52:60:33: db:f9:6f:91:61:9e:ec:14:ed:ab:ba:3d:a8:43:1b: 5a:dd:9c:38:58:93:78:8c:96:2c:5e:81:bc:62:73: bc:6a:f9:fc:9d:4b:39:4b:17:d0:4c:19:80:92:95: 81:f5:3e:7d:fb:69:50:98:6d:f0:2b:68:16:55:c7: 20:3c:d4:9b:48:75:91:14:39:71:d6:33:7f:81:32: 28:85:27:e2:b3:11:df:49:b9:1d:2d:d6:47:67:98: 6b:58:a6:95:19:b4:56:17:42:ee:cc:b3:0c:4b:a3: d3:d0:dd:e5:d4:c1:cc:7d:83:4e:d1:92:18:e9:bd: f1:c7:08:04:61:a9:c8:de:69:91:f6:4b:ec:75:99: af:91:be:81:80:e4:d0:e5:2e:31:d4:64:b7:f3:5c: 9b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:7A:47:00:E8:19:39:9F:5F:35:9F:8A:40:A2:C9:BF:1B:2B:91:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/80bfa81b-dfd9-3877-9b73-962f604ef948.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:4a:e4:58:6c:ff:a4:91:37:19:e9:ed:46:40:2e:08:d5:eb: 80:0f:d8:23:b6:52:ce:44:49:9b:48:46:d7:c0:c8:84:69:4f: 30:6a:ab:9f:a0:c4:6e:3c:3b:03:41:fa:ae:81:71:dc:1f:be: 4b:47:4c:e7:36:b2:29:99:f9:a0:82:54:40:dd:a3:d4:63:89: 89:be:0d:07:b2:6f:f6:32:f5:81:3e:df:38:ed:3e:d6:17:4b: c3:fd:24:42:13:32:e6:0c:31:fa:3a:8f:1d:c1:41:17:f7:70: b5:3d:98:d3:54:96:ec:95:39:24:84:a0:f1:41:36:3d:ae:a6: 8c:2c:d5:75:46:a1:2f:71:fd:cc:06:7d:0a:a0:34:f6:a3:bf: aa:6d:78:bf:06:4a:ad:6c:71:4b:c1:26:cd:86:51:f8:19:04: 85:93:99:60:04:4c:be:68:9b:b3:01:1e:ba:56:db:d5:5d:9d: aa:a5:21:18:1a:90:aa:1e:0e:7c:a7:86:21:e7:af:9b:3a:f2: 73:8f:9f:a9:a6:f7:fa:4d:f7:9d:c5:5d:96:f9:68:c2:4b:c6: 60:e7:a5:7b:1a:35:a3:60:10:30:6a:eb:76:55:07:08:15:9e: 11:5d:a2:69:52:65:ba:34:e1:9b:fa:c5:27:c4:af:01:da:ce: 40:26:e3:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzRLkMwIEQSI7/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk ODFmYTAyZjEtMDljMy00YTc0LWJjM2QtM2IxMTMzNzNhOWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykXn/JsDUgerWPx7y5YhcWgkI3qAOKTbugfC 7zdkrk0QXH4J3H4M/8Gf8tqp2T8+HhiALK2WbPMuiNS6DadVk3QVmATpCsC4Gzat 9YeIFRxDfCf7jEB1AOoyK+X0aqXq8jgoEtJSYDPb+W+RYZ7sFO2ruj2oQxta3Zw4 WJN4jJYsXoG8YnO8avn8nUs5SxfQTBmAkpWB9T59+2lQmG3wK2gWVccgPNSbSHWR FDlx1jN/gTIohSfisxHfSbkdLdZHZ5hrWKaVGbRWF0LuzLMMS6PT0N3l1MHMfYNO 0ZIY6b3xxwgEYanI3mmR9kvsdZmvkb6BgOTQ5S4x1GS381yb/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCV6RwDoGTmfXzWfikCiyb8bK5EXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODBiZmE4MWItZGZkOS0z ODc3LTliNzMtOTYyZjYwNGVmOTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop4EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdK5Fhs/6SRNxnp7UZALgjV64AP2CO2Us5ESZtIRtfAyIRpTzBqq5+g xG48OwNB+q6BcdwfvktHTOc2simZ+aCCVEDdo9RjiYm+DQeyb/Yy9YE+3zjtPtYX S8P9JEITMuYMMfo6jx3BQRf3cLU9mNNUluyVOSSEoPFBNj2upows1XVGoS9x/cwG fQqgNPajv6pteL8GSq1scUvBJs2GUfgZBIWTmWAETL5om7MBHrpW29VdnaqlIRga kKoeDnynhiHnr5s68nOPn6mm9/pN953FXZb5aMJLxmDnpXsaNaNgEDBq63ZVBwgV nhFdomlSZbo04Zv6xSfErwHazkAm45g= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:59 2025 by rpki-client