$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8cf36280-6b1b-3387-b136-d8d73c6f425c.roa File: 8cf36280-6b1b-3387-b136-d8d73c6f425c.roa (raw, json) Hash identifier: NBO4mugVgjil7Q4Xq+KVcNSLLDBCP+xmsZWQsYPPdOc= Subject key identifier: 50:DC:40:A2:DA:AD:10:C6:13:60:29:1B:81:D6:7D:C4:D3:78:86:85 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA9327A5D924581299D084500 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8cf36280-6b1b-3387-b136-d8d73c6f425c.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 162.158.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:7a:5d:92:45:81:29:9d:08:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=d985c7fc-2f59-46cb-806d-84e886ca12aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d7:5f:4d:ae:44:bf:23:86:63:db:01:d0:b9: 4d:a1:6a:a2:3b:26:37:96:34:22:59:a2:8c:a9:14: 50:28:f3:f2:86:14:9b:fb:8c:87:b4:51:68:bc:22: 0a:1d:24:ba:6d:fd:94:ec:b1:49:6e:ed:33:40:a8: 78:ee:a6:9c:11:b6:7d:41:07:41:b2:b7:66:58:26: 70:b5:36:1b:e9:39:9c:d5:40:92:f9:f7:ca:4d:38: b0:7e:09:41:3d:52:3b:58:48:91:ba:3a:6f:1a:41: 5a:29:70:fb:ba:7c:1b:d4:b2:78:05:42:83:25:ee: b5:80:c2:01:bc:39:c0:70:56:81:38:4e:61:e2:c6: 20:dd:7d:f5:74:93:f5:8f:65:f7:90:53:67:6d:46: f1:9f:b5:0a:a7:a4:f4:5e:d4:66:8b:95:0f:65:4a: 7f:06:a3:1f:c7:85:03:90:10:22:d6:e4:3d:f8:e7: d0:73:ec:4d:ba:67:44:af:b0:b2:9e:68:ab:b0:33: 8c:96:ad:b1:d9:81:39:10:55:a7:89:50:48:0c:8c: 40:bf:e5:28:6e:d3:d2:89:cb:64:09:36:f5:7f:db: b5:d9:c2:70:78:15:a8:68:d2:f7:14:14:9e:e0:7d: 4c:65:10:66:a4:75:40:01:41:f8:61:15:47:78:01: 2a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:DC:40:A2:DA:AD:10:C6:13:60:29:1B:81:D6:7D:C4:D3:78:86:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8cf36280-6b1b-3387-b136-d8d73c6f425c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:51:68:1f:fa:98:4b:42:8d:96:c5:ec:e4:8d:53:5e:61:4d: a4:6e:a9:e0:21:99:aa:a8:18:70:84:a8:ee:51:ad:40:0a:5e: c6:61:d5:48:38:eb:2e:3b:73:f2:d6:60:c3:19:13:56:fb:fc: d7:84:cf:43:9c:ef:2a:66:dd:50:02:50:08:18:2c:06:46:f6: 72:11:34:44:0a:f3:d1:c4:3b:2f:22:21:e7:c4:e8:69:18:d2: c7:7e:f4:95:32:43:a3:4d:a1:c4:ea:99:52:2d:23:ad:0f:db: af:c9:79:56:51:85:52:ff:0d:b1:3d:2c:29:0c:87:2c:73:56: 37:68:e0:8e:7d:da:57:5e:17:f6:3d:61:7f:33:8c:80:cd:d6: ee:ee:e5:68:60:61:21:c3:38:1d:f5:5c:9c:ee:7b:75:56:89: 4e:69:d9:c0:43:70:f7:5e:42:cc:49:cf:6e:67:e5:ba:5c:4f: 25:40:58:af:13:88:85:7e:51:f4:52:92:bc:d0:e5:2e:fc:80: 8e:c0:00:6d:29:84:11:91:56:4b:70:9d:5a:4b:01:4e:f8:10: e7:6d:35:93:57:db:16:f7:ff:65:4f:d6:3b:b5:bd:2f:48:ac: 6e:ef:d6:36:d1:fd:19:a9:35:87:9c:9d:44:f6:80:81:44:50: d8:d6:84:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMnpdkkWBKZ0IRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk ZDk4NWM3ZmMtMmY1OS00NmNiLTgwNmQtODRlODg2Y2ExMmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7tdfTa5EvyOGY9sB0LlNoWqiOyY3ljQiWaKM qRRQKPPyhhSb+4yHtFFovCIKHSS6bf2U7LFJbu0zQKh47qacEbZ9QQdBsrdmWCZw tTYb6Tmc1UCS+ffKTTiwfglBPVI7WEiRujpvGkFaKXD7unwb1LJ4BUKDJe61gMIB vDnAcFaBOE5h4sYg3X31dJP1j2X3kFNnbUbxn7UKp6T0XtRmi5UPZUp/BqMfx4UD kBAi1uQ9+OfQc+xNumdEr7CynmirsDOMlq2x2YE5EFWniVBIDIxAv+UobtPSictk CTb1f9u12cJweBWoaNL3FBSe4H1MZRBmpHVAAUH4YRVHeAEqgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDcQKLarRDGE2ApG4HWfcTTeIaFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGNmMzYyODAtNmIxYi0z Mzg3LWIxMzYtZDhkNzNjNmY0MjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop7PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJRaB/6mEtCjZbF7OSNU15hTaRuqeAhmaqoGHCEqO5RrUAKXsZh1Ug4 6y47c/LWYMMZE1b7/NeEz0Oc7ypm3VACUAgYLAZG9nIRNEQK89HEOy8iIefE6GkY 0sd+9JUyQ6NNocTqmVItI60P26/JeVZRhVL/DbE9LCkMhyxzVjdo4I592ldeF/Y9 YX8zjIDN1u7u5WhgYSHDOB31XJzue3VWiU5p2cBDcPdeQsxJz25n5bpcTyVAWK8T iIV+UfRSkrzQ5S78gI7AAG0phBGRVktwnVpLAU74EOdtNZNX2xb3/2VP1ju1vS9I rG7v1jbR/RmpNYecnUT2gIFEUNjWhEk= -----END CERTIFICATE-----Generated at Sat Nov 1 15:23:39 2025 by rpki-client