$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/950fca56-95bf-36c5-9c8c-9567a98cf566.roa File: 950fca56-95bf-36c5-9c8c-9567a98cf566.roa (raw, json) Hash identifier: 4LULg5RIQwgr2Q8LRXQ/wvJTV7447zwcg72/42MOD4w= Subject key identifier: 41:C7:30:73:B8:DB:AD:68:DC:90:4F:15:CA:78:CA:EE:27:EA:02:24 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA93287333FE358416FECCA80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/950fca56-95bf-36c5-9c8c-9567a98cf566.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 162.158.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:87:33:3f:e3:58:41:6f:ec:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=c10637d6-52f5-4338-b96b-abe864e8dea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:fa:63:c7:3a:6f:37:8e:aa:f2:b7:60:91:6e: 60:c4:2b:f5:65:d8:7a:fb:75:0a:70:48:c7:e2:3b: 77:57:92:8f:99:ae:63:9f:dc:36:f9:f8:f2:fa:fa: c1:b3:62:d8:5f:24:eb:9a:7a:d0:c4:5e:65:e8:a3: 43:9a:ca:d8:75:49:4d:b0:ca:77:c3:bf:1a:ae:d2: eb:49:03:8e:f8:b7:82:e1:d9:ae:ce:d9:2f:3e:57: 14:2c:c7:34:7e:02:ba:7f:f7:2f:6d:a5:a7:76:5a: 5d:33:61:fb:9e:57:ae:86:4c:a5:bb:10:e6:1e:63: fc:70:59:94:55:03:a0:07:ab:a8:58:bb:26:47:ee: fc:78:ee:47:b5:aa:2d:85:17:65:00:ec:94:ef:66: dc:5d:76:18:08:9c:f5:79:19:17:2c:26:c9:1d:2e: 9c:2a:e1:44:34:f8:1a:b2:ba:07:51:c7:e6:a2:d8: e4:48:69:65:46:22:99:5e:d0:ff:ff:e3:71:28:7e: 54:12:eb:f6:26:63:12:55:4d:9f:4c:9f:48:11:5f: ec:18:91:f2:0f:d5:c1:d5:b4:a0:3d:44:ce:21:09: 9d:86:cb:a3:12:c8:25:7d:e0:8a:a0:cc:76:cf:8e: e2:9f:bf:a6:5e:42:e4:ae:c6:49:7b:31:51:2f:8e: ef:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C7:30:73:B8:DB:AD:68:DC:90:4F:15:CA:78:CA:EE:27:EA:02:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/950fca56-95bf-36c5-9c8c-9567a98cf566.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:96:d3:a5:5b:56:40:a3:34:23:9c:0d:bc:86:0d:d0:92:30: 09:9f:db:e7:2e:d0:1e:b0:da:ac:1a:05:7a:93:6b:64:25:f1: 11:ed:fb:4e:30:18:9f:6a:ec:9e:ef:d7:30:48:d9:d0:b2:45: 51:c0:35:bc:45:9c:1e:f6:e5:da:21:25:1e:a1:da:d3:f0:ef: 90:35:2c:eb:9d:76:8e:06:19:b7:55:ba:8d:40:70:bc:cf:1f: 59:36:68:2e:20:d8:94:3a:46:2b:8a:fb:ef:35:4d:50:24:d4: 7e:ed:d1:40:e3:49:d8:bc:2d:d8:21:15:76:8a:10:ce:e0:69: 60:f5:38:cc:b5:d3:d7:f5:27:27:cf:db:83:a3:95:81:b9:11: 60:61:56:e4:e2:b2:f0:d6:fb:11:2b:4e:26:30:66:99:f2:57: 59:27:00:2e:dc:a3:65:fe:12:2c:c6:be:70:e5:ed:6a:21:ec: 21:55:a3:93:c3:c1:e3:5f:8b:43:bf:84:69:ed:d4:ec:f4:c5: 7e:82:da:9a:81:88:18:9c:90:08:45:35:5d:6b:ae:f4:18:02: bf:87:4d:b8:7f:5d:ac:83:b5:22:88:5a:8a:17:f3:5f:fc:9e: 14:e6:ec:df:ac:8f:4c:b5:b2:92:7f:2d:42:ad:5d:58:69:cb: aa:9b:ae:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMoczP+NYQW/syoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk YzEwNjM3ZDYtNTJmNS00MzM4LWI5NmItYWJlODY0ZThkZWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8fpjxzpvN46q8rdgkW5gxCv1Zdh6+3UKcEjH 4jt3V5KPma5jn9w2+fjy+vrBs2LYXyTrmnrQxF5l6KNDmsrYdUlNsMp3w78artLr SQOO+LeC4dmuztkvPlcULMc0fgK6f/cvbaWndlpdM2H7nleuhkyluxDmHmP8cFmU VQOgB6uoWLsmR+78eO5HtaothRdlAOyU72bcXXYYCJz1eRkXLCbJHS6cKuFENPga sroHUcfmotjkSGllRiKZXtD//+NxKH5UEuv2JmMSVU2fTJ9IEV/sGJHyD9XB1bSg PUTOIQmdhsujEsglfeCKoMx2z47in7+mXkLkrsZJezFRL47vzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHHMHO4261o3JBPFcp4yu4n6gIkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTUwZmNhNTYtOTViZi0z NmM1LTljOGMtOTU2N2E5OGNmNTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop7FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKWW06VbVkCjNCOcDbyGDdCSMAmf2+cu0B6w2qwaBXqTa2Ql8RHt+04w GJ9q7J7v1zBI2dCyRVHANbxFnB725dohJR6h2tPw75A1LOuddo4GGbdVuo1AcLzP H1k2aC4g2JQ6RiuK++81TVAk1H7t0UDjSdi8LdghFXaKEM7gaWD1OMy109f1JyfP 24OjlYG5EWBhVuTisvDW+xErTiYwZpnyV1knAC7co2X+EizGvnDl7Woh7CFVo5PD weNfi0O/hGnt1Oz0xX6C2pqBiBickAhFNV1rrvQYAr+HTbh/XayDtSKIWooX81/8 nhTm7N+sj0y1spJ/LUKtXVhpy6qbrl4= -----END CERTIFICATE-----Generated at Sat Nov 1 12:37:01 2025 by rpki-client