$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/87a76333-bca2-38e4-be3b-a52aea1f805a.roa File: 87a76333-bca2-38e4-be3b-a52aea1f805a.roa (raw, json) Hash identifier: 8CcnLwWObNPjxiRkBFT3IHnq586It0/aVMRn0QASMWQ= Subject key identifier: CF:B4:E2:20:1A:60:F6:24:34:8B:26:05:66:08:FC:B7:E0:73:D1:77 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD04DB21F7D0EA324FD640 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/87a76333-bca2-38e4-be3b-a52aea1f805a.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 162.158.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:04:db:21:f7:d0:ea:32:4f:d6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=53a3ac7d-379f-4b18-8481-aa1c6d9dae2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5a:f8:05:af:81:88:8f:bc:be:11:ae:66:f3: 26:07:90:33:0a:cc:40:e3:ff:40:06:d8:2e:43:49: 40:6c:8b:28:f9:c2:d9:23:51:d9:fe:21:89:65:33: f0:3c:b4:99:b7:cc:f2:09:f9:c1:09:5c:67:2a:ee: d1:22:df:d7:cd:5b:98:d2:5f:0b:08:9d:26:b1:67: 32:85:08:82:56:b8:a9:42:bc:ea:2f:a9:c3:78:b3: 69:88:c3:65:98:2d:73:4d:dd:14:d9:95:34:2e:1c: a7:04:8a:2a:4c:67:65:29:91:b9:f0:26:23:3b:cf: 47:7b:9f:43:ba:63:ef:ef:43:fd:fe:26:41:02:4a: 5f:81:d5:f5:b3:50:92:1e:fc:4d:25:f2:d9:b0:0c: 46:af:c4:49:d7:df:3e:96:13:34:75:16:27:65:32: 1a:23:36:1d:b5:c1:b9:2b:6c:54:51:5f:b7:30:ba: b6:47:49:0f:1f:a1:d7:51:07:f4:4c:c3:d5:92:0e: 4e:54:f5:3e:98:59:31:26:f4:79:41:0e:d6:cc:3a: e9:c4:28:b8:62:ae:fc:76:3f:34:70:c6:8c:6b:f2: be:4e:1b:f6:7f:20:ea:80:1b:e5:28:2d:ea:62:67: 0e:64:0a:41:98:61:c4:0d:2f:3d:6d:eb:7a:00:6e: 57:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B4:E2:20:1A:60:F6:24:34:8B:26:05:66:08:FC:B7:E0:73:D1:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/87a76333-bca2-38e4-be3b-a52aea1f805a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:47:f9:23:88:6b:02:34:82:e3:c4:1f:ac:34:f9:5d:3d:53: 06:96:54:61:d4:f1:31:9f:c6:34:1c:8e:1e:9f:b9:b0:18:6d: fb:d7:d1:d7:3d:82:e7:28:df:ab:0b:06:85:f0:14:fe:a3:6f: 3f:e6:16:39:a9:7c:e5:6d:9f:33:4e:88:4c:45:f5:16:c5:7b: 15:a5:bc:6e:9b:9d:78:8f:3c:27:07:06:14:bd:49:1f:31:51: cc:81:15:3f:70:e7:c5:e6:46:b0:02:8d:38:ea:63:00:9b:c8: 20:d3:00:5a:ac:62:47:50:62:44:cf:8f:d4:f7:f1:24:4a:12: fc:05:4d:2e:2f:56:ff:1a:3a:2e:65:dc:09:84:7b:e7:66:6d: ae:2c:33:47:ef:75:81:8e:88:8a:6a:10:c3:1d:89:24:b9:7e: 0d:a6:6d:7a:22:9d:80:09:91:87:34:66:4b:bc:3c:74:72:c9: 6e:f9:16:54:21:c2:d9:54:3e:47:d7:26:b4:1a:76:a6:16:f0: 6c:db:88:65:46:13:74:61:f7:8d:0e:18:3f:98:38:44:0a:95: c6:57:6b:c4:d8:09:90:fc:85:f0:cf:66:82:ce:cc:92:ea:4f: ff:72:d9:52:1b:24:bb:b4:46:bb:75:33:1a:9f:ea:21:e3:d5: 3c:91:c5:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzQTbIffQ6jJP1kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk NTNhM2FjN2QtMzc5Zi00YjE4LTg0ODEtYWExYzZkOWRhZTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFr4Ba+BiI+8vhGuZvMmB5AzCsxA4/9ABtgu Q0lAbIso+cLZI1HZ/iGJZTPwPLSZt8zyCfnBCVxnKu7RIt/XzVuY0l8LCJ0msWcy hQiCVripQrzqL6nDeLNpiMNlmC1zTd0U2ZU0LhynBIoqTGdlKZG58CYjO89He59D umPv70P9/iZBAkpfgdX1s1CSHvxNJfLZsAxGr8RJ198+lhM0dRYnZTIaIzYdtcG5 K2xUUV+3MLq2R0kPH6HXUQf0TMPVkg5OVPU+mFkxJvR5QQ7WzDrpxCi4Yq78dj80 cMaMa/K+Thv2fyDqgBvlKC3qYmcOZApBmGHEDS89bet6AG5XTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+04iAaYPYkNIsmBWYI/Lfgc9F3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODdhNzYzMzMtYmNhMi0z OGU0LWJlM2ItYTUyYWVhMWY4MDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop4VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1H+SOIawI0guPEH6w0+V09UwaWVGHU8TGfxjQcjh6fubAYbfvX0dc9 guco36sLBoXwFP6jbz/mFjmpfOVtnzNOiExF9RbFexWlvG6bnXiPPCcHBhS9SR8x UcyBFT9w58XmRrACjTjqYwCbyCDTAFqsYkdQYkTPj9T38SRKEvwFTS4vVv8aOi5l 3AmEe+dmba4sM0fvdYGOiIpqEMMdiSS5fg2mbXoinYAJkYc0Zku8PHRyyW75FlQh wtlUPkfXJrQadqYW8GzbiGVGE3Rh940OGD+YOEQKlcZXa8TYCZD8hfDPZoLOzJLq T/9y2VIbJLu0Rrt1Mxqf6iHj1TyRxcM= -----END CERTIFICATE-----Generated at Sat Nov 1 12:32:32 2025 by rpki-client