$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8f6e0f7e-fb27-3793-9b5e-88f156878013.roa File: 8f6e0f7e-fb27-3793-9b5e-88f156878013.roa (raw, json) Hash identifier: TolxCN64Mju4DZlBsBpSdZ3012/oIaxbdZNlM7O843w= Subject key identifier: 25:DE:13:9B:A7:13:14:3F:D3:52:37:EE:CB:82:1A:0F:09:D2:20:17 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA9327BDE73DCC8C7AB9B7680 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8f6e0f7e-fb27-3793-9b5e-88f156878013.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 162.158.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:7b:de:73:dc:c8:c7:ab:9b:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=e64af88b-23bb-44b1-80c3-50d30f503281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4c:a0:f4:15:5d:7f:e5:ed:90:71:52:1a:9d: 88:3e:46:88:91:e4:45:03:d0:6c:06:57:3b:f9:b0: ad:1f:fa:72:51:c1:e1:69:89:5f:58:b7:e7:9c:a6: 50:88:23:79:ae:88:39:7e:89:6a:74:13:18:b9:07: a8:18:f4:65:6c:8d:07:c2:cd:e9:61:8a:a9:30:7c: 23:bf:b9:e3:aa:9c:fc:c6:83:95:d8:17:ee:32:bb: 7f:68:8e:85:91:ef:72:70:a9:7b:bb:80:fe:7f:d1: fa:c0:03:11:54:a1:89:3a:6a:0d:e9:b8:7c:08:72: f5:76:58:47:da:17:2f:a9:d6:a6:f5:38:98:d6:04: 75:1f:ca:0d:4c:a7:78:89:ca:79:1b:2d:c7:55:17: 89:71:4e:fe:cc:cc:09:ce:b8:45:01:fe:4f:3b:06: 86:1d:ba:7a:7d:87:2f:a0:57:c7:c1:38:f2:c2:aa: 0d:ba:a4:8b:91:c1:aa:da:82:32:46:4e:3c:32:93: 5a:f3:9a:5a:48:b4:2e:bf:e3:37:3a:17:6b:ab:02: 7a:e1:ce:57:11:30:78:02:90:4a:c3:72:0a:6e:aa: cb:fd:60:5d:d5:0a:06:00:8b:34:9e:e7:40:96:ab: 30:14:a0:31:b2:da:8e:5f:36:f5:85:22:86:a5:bc: bc:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:DE:13:9B:A7:13:14:3F:D3:52:37:EE:CB:82:1A:0F:09:D2:20:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8f6e0f7e-fb27-3793-9b5e-88f156878013.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:f2:6a:7f:9c:42:9e:a4:aa:d1:f0:d2:0c:8a:c6:3e:70:52: 0a:8b:ff:89:b1:0f:0f:fc:0a:0b:92:82:c0:c7:24:b9:33:a7: 1a:1c:d2:0e:67:4a:57:b2:9d:1d:0a:1b:7d:f5:09:7b:19:ec: e3:57:9a:99:09:fc:cb:33:8e:c3:77:3a:fb:36:69:ee:94:74: 4d:c5:e5:d6:95:45:71:2f:50:3c:21:9b:47:bf:c3:1e:45:eb: 72:29:58:fb:4d:3d:e5:64:94:82:0c:7c:58:e5:6f:a4:65:ee: 34:7b:f5:87:ac:85:e5:ee:e0:67:8c:d9:f0:76:8c:47:02:93: 74:71:17:f4:56:8f:88:6c:47:d4:84:40:4f:e8:37:ef:d2:13: c5:6e:b3:d7:98:ba:7a:39:47:ac:48:a7:10:9c:4e:7c:5f:a1: a2:94:9b:0f:8d:6e:b3:d8:b0:00:c2:fa:7b:52:30:bb:74:8f: 16:41:91:8e:b5:6b:e0:75:eb:59:bf:b0:e4:df:3c:cc:4b:cd: e3:e4:fd:10:f3:6f:7f:df:01:52:9c:db:ee:95:96:29:c1:1d: 5a:89:05:f4:6e:f4:3e:55:b9:4e:8a:77:1b:dc:b3:fa:a2:82: b5:60:d0:d9:54:e5:2a:03:bd:49:1a:8f:16:ac:1a:f3:19:78: b0:96:53:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMnvec9zIx6ubdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk ZTY0YWY4OGItMjNiYi00NGIxLTgwYzMtNTBkMzBmNTAzMjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEyg9BVdf+XtkHFSGp2IPkaIkeRFA9BsBlc7 +bCtH/pyUcHhaYlfWLfnnKZQiCN5rog5folqdBMYuQeoGPRlbI0Hws3pYYqpMHwj v7njqpz8xoOV2BfuMrt/aI6Fke9ycKl7u4D+f9H6wAMRVKGJOmoN6bh8CHL1dlhH 2hcvqdam9TiY1gR1H8oNTKd4icp5Gy3HVReJcU7+zMwJzrhFAf5POwaGHbp6fYcv oFfHwTjywqoNuqSLkcGq2oIyRk48MpNa85paSLQuv+M3OhdrqwJ64c5XETB4ApBK w3IKbqrL/WBd1QoGAIs0nudAlqswFKAxstqOXzb1hSKGpby8gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCXeE5unExQ/01I37suCGg8J0iAXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGY2ZTBmN2UtZmIyNy0z NzkzLTliNWUtODhmMTU2ODc4MDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop7/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjyan+cQp6kqtHw0gyKxj5wUgqL/4mxDw/8CguSgsDHJLkzpxoc0g5n SleynR0KG331CXsZ7ONXmpkJ/MszjsN3Ovs2ae6UdE3F5daVRXEvUDwhm0e/wx5F 63IpWPtNPeVklIIMfFjlb6Rl7jR79YesheXu4GeM2fB2jEcCk3RxF/RWj4hsR9SE QE/oN+/SE8Vus9eYuno5R6xIpxCcTnxfoaKUmw+NbrPYsADC+ntSMLt0jxZBkY61 a+B161m/sOTfPMxLzePk/RDzb3/fAVKc2+6VlinBHVqJBfRu9D5VuU6Kdxvcs/qi grVg0NlU5SoDvUkajxasGvMZeLCWU5E= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:57 2025 by rpki-client