$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8c43847a-437e-3536-8a40-3c39eda254d9.roa File: 8c43847a-437e-3536-8a40-3c39eda254d9.roa (raw, json) Hash identifier: mC42aYnSM2Qd9yBzSYVr2LZGvpMRR+KuT+B3gJp4CT0= Subject key identifier: E8:E3:69:A2:2D:EA:F4:3E:2F:EF:7A:F7:0B:3E:DD:B7:16:6F:14:C8 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667C89F7C519C544A07DFE0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8c43847a-437e-3536-8a40-3c39eda254d9.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 162.158.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:c8:9f:7c:51:9c:54:4a:07:df:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=93901d05-12a2-43d1-b657-c3b44709a5aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ec:38:5d:57:46:7d:21:0d:b3:d3:38:53:82: 1b:b4:d7:dd:69:48:59:10:e3:5e:a8:94:93:f8:4d: fb:bf:5a:71:1f:a7:0d:70:a0:1d:a6:81:c2:56:a2: 3b:ba:ad:3e:2f:fd:5d:32:9d:5d:20:68:82:2c:9b: 24:47:a3:5d:ae:c1:3c:0c:7f:1c:9f:29:d7:70:de: 58:d9:81:19:67:fa:a1:25:c8:10:fd:39:45:c1:06: 30:96:eb:30:38:07:37:ab:10:fd:5a:f4:95:e7:e1: a8:9e:82:56:f7:b0:90:07:a4:01:03:c1:7f:b0:cb: 36:cf:8c:53:f5:94:6e:65:68:72:ac:89:e8:ac:3f: f4:0a:14:e4:8f:d0:fc:9c:db:7c:96:f0:ea:f3:f1: 7a:a3:02:e4:02:ab:fb:d0:4a:0a:11:77:c1:20:61: 4a:fb:7b:79:20:57:e0:52:8a:e0:e4:cf:d7:81:1e: 37:a6:a5:f2:05:ff:47:e5:2a:ef:c7:29:90:5b:25: 5c:48:37:0c:e3:74:e9:19:2c:d3:8b:73:82:a2:9a: 73:74:d6:60:97:b3:a1:8b:ab:99:65:75:50:b2:f9: c2:27:f0:4c:d7:08:99:1c:19:31:f6:15:5e:73:44: 3b:ba:53:d2:c4:34:bd:46:56:03:b9:f6:a7:16:62: d8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E3:69:A2:2D:EA:F4:3E:2F:EF:7A:F7:0B:3E:DD:B7:16:6F:14:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8c43847a-437e-3536-8a40-3c39eda254d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:0a:d0:b7:b7:88:b0:97:8e:e2:b6:e6:4d:59:53:2d:84:0e: 84:f9:bd:90:11:96:7b:39:8a:8a:da:08:f6:bd:64:b5:05:64: bf:1a:70:ee:16:e1:3a:1d:65:f4:02:28:0f:07:6b:d4:95:d6: b1:1b:2a:ee:d2:0e:18:cb:ac:a3:c9:84:d3:8a:b2:7f:c5:7f: e9:b4:b0:9d:65:ee:13:f0:89:7e:ac:97:e8:a3:2e:a0:d2:80: 14:eb:c8:1b:e8:81:24:4a:93:da:d4:93:7c:5c:fa:0f:99:c7: 15:ba:f1:65:0d:da:ad:54:f9:d2:af:5a:06:e3:70:3b:7b:c7: 8e:4b:aa:be:7f:c1:fa:56:44:01:c9:a6:98:32:83:59:9a:de: 43:80:ac:90:1f:de:19:f6:a4:96:9b:00:90:13:ca:1a:63:51: f8:3b:4f:23:68:11:e1:14:f2:9d:de:e8:fc:66:23:68:25:00: ce:58:63:cd:0b:a4:f9:3c:1b:67:39:84:d7:dd:3c:84:12:83: a9:bb:df:e2:03:d6:9b:cc:28:c7:91:e9:77:39:6c:ea:6a:d6: c6:e8:74:45:0a:82:e9:f7:81:40:88:1e:b0:54:ea:12:f0:5e: 42:d7:a7:65:0d:4e:97:c5:ef:40:97:e7:5c:52:db:6c:c4:fa: 85:30:80:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ8iffFGcVEoH3+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk OTM5MDFkMDUtMTJhMi00M2QxLWI2NTctYzNiNDQ3MDlhNWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoew4XVdGfSENs9M4U4IbtNfdaUhZEONeqJST +E37v1pxH6cNcKAdpoHCVqI7uq0+L/1dMp1dIGiCLJskR6NdrsE8DH8cnynXcN5Y 2YEZZ/qhJcgQ/TlFwQYwluswOAc3qxD9WvSV5+GonoJW97CQB6QBA8F/sMs2z4xT 9ZRuZWhyrInorD/0ChTkj9D8nNt8lvDq8/F6owLkAqv70EoKEXfBIGFK+3t5IFfg Uorg5M/XgR43pqXyBf9H5SrvxymQWyVcSDcM43TpGSzTi3OCoppzdNZgl7Ohi6uZ ZXVQsvnCJ/BM1wiZHBkx9hVec0Q7ulPSxDS9RlYDufanFmLY5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOjjaaIt6vQ+L+969ws+3bcWbxTIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGM0Mzg0N2EtNDM3ZS0z NTM2LThhNDAtM2MzOWVkYTI1NGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop5IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIK0Le3iLCXjuK25k1ZUy2EDoT5vZARlns5ioraCPa9ZLUFZL8acO4W 4TodZfQCKA8Ha9SV1rEbKu7SDhjLrKPJhNOKsn/Ff+m0sJ1l7hPwiX6sl+ijLqDS gBTryBvogSRKk9rUk3xc+g+ZxxW68WUN2q1U+dKvWgbjcDt7x45Lqr5/wfpWRAHJ ppgyg1ma3kOArJAf3hn2pJabAJATyhpjUfg7TyNoEeEU8p3e6PxmI2glAM5YY80L pPk8G2c5hNfdPIQSg6m73+ID1pvMKMeR6Xc5bOpq1sbodEUKgun3gUCIHrBU6hLw XkLXp2UNTpfF70CX51xS22zE+oUwgF8= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:44 2025 by rpki-client