$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9553f915-37d0-3807-984b-c446d4cb4509.roa File: 9553f915-37d0-3807-984b-c446d4cb4509.roa (raw, json) Hash identifier: 36rN740Tv5N+xQDzIuM7TRvmXKg+w4mTkDrXZ7bVgo4= Subject key identifier: 2D:D6:43:86:B7:7D:ED:F7:C8:C5:AF:D4:54:4B:31:F2:95:31:91:F5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA9327A4C30E9D8042E0B7640 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9553f915-37d0-3807-984b-c446d4cb4509.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 162.158.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:7a:4c:30:e9:d8:04:2e:0b:76:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=84a5c6f5-a91f-4c5b-b64b-83523bc69f85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b1:0d:a7:a2:e7:85:31:70:06:06:aa:13:00: 36:24:43:0c:3e:fb:f2:83:13:7c:ee:ab:b6:be:20: a1:ae:79:51:45:8b:50:c1:30:07:30:e1:b0:90:39: 1b:82:c3:2d:b6:42:bd:25:40:ba:f0:d7:b1:99:d9: 94:b4:2f:23:81:ae:e6:46:b4:30:34:33:3f:03:df: 1f:f0:e9:a9:09:2a:44:24:b8:e3:37:a7:76:d2:07: e7:93:19:ed:f9:e2:df:27:e8:fe:09:13:0c:aa:6e: aa:e0:00:0f:b3:c7:8d:42:03:ab:28:7d:b8:bb:cf: 86:f1:76:50:c0:c4:04:02:3b:23:50:86:e1:ff:ff: 1b:57:ae:b8:42:3e:ab:57:4a:a6:be:e1:f4:ff:a3: 91:6a:a5:32:ec:13:9e:fb:dc:bf:e0:b5:23:39:1a: ad:c4:28:e8:92:e8:6b:92:c4:37:f4:61:14:ab:b1: 81:ab:e5:05:09:b9:90:ed:a9:50:b3:70:4a:a1:45: fe:11:ab:c9:f5:cc:9b:da:ac:b0:ed:7f:34:d1:22: 41:44:47:ca:6a:83:9b:60:e8:5a:08:43:1b:36:5c: 6d:64:e1:29:c3:8b:6c:c1:f5:9c:34:d0:f9:cf:6d: 2d:32:a1:fd:b2:30:e5:1c:0e:2d:d0:27:33:97:e7: 93:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D6:43:86:B7:7D:ED:F7:C8:C5:AF:D4:54:4B:31:F2:95:31:91:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9553f915-37d0-3807-984b-c446d4cb4509.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:1d:30:a8:24:3a:de:62:67:e2:92:eb:d2:d0:2c:ed:97:a0: 87:80:83:99:77:6a:66:bb:87:a1:d5:ad:c0:36:56:8c:01:56: 47:e3:a4:2e:e2:da:b2:de:6e:d9:24:50:85:c1:5a:97:8d:db: 02:67:31:5f:68:ff:d6:00:9e:07:55:a6:13:8b:50:4a:3f:18: 02:77:52:f2:fd:aa:28:e2:87:37:55:02:1e:c7:18:35:5c:e4: 8c:cf:d4:a9:cd:6c:4f:94:5d:d9:11:b8:3b:81:9c:bc:05:1c: d7:25:6b:27:54:5a:d4:49:b9:75:a9:93:34:ce:2f:e4:ec:ec: da:ad:c5:0e:b4:86:17:03:31:ba:e9:04:09:ee:df:8c:ab:1f: fc:9e:ef:70:c7:0e:ce:54:5e:71:8a:a7:5b:79:78:fe:53:e9: 77:3b:92:e1:04:89:be:ff:cb:a7:09:1c:de:69:46:0e:00:a8: b0:bc:7f:e5:93:27:9e:dc:e0:7a:c9:e6:2a:81:4b:c1:47:8b: f2:2b:7b:78:df:27:c3:0f:36:cc:0b:9c:45:35:e1:e9:ac:99: dc:da:5f:4e:fb:cb:21:a7:55:2f:4f:ea:59:c9:6b:a3:b3:db: e2:b3:24:43:b6:c8:ac:fb:43:83:00:3b:61:87:16:37:fb:7e: a1:24:50:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMnpMMOnYBC4LdkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk ODRhNWM2ZjUtYTkxZi00YzViLWI2NGItODM1MjNiYzY5Zjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7ENp6LnhTFwBgaqEwA2JEMMPvvygxN87qu2 viChrnlRRYtQwTAHMOGwkDkbgsMttkK9JUC68NexmdmUtC8jga7mRrQwNDM/A98f 8OmpCSpEJLjjN6d20gfnkxnt+eLfJ+j+CRMMqm6q4AAPs8eNQgOrKH24u8+G8XZQ wMQEAjsjUIbh//8bV664Qj6rV0qmvuH0/6ORaqUy7BOe+9y/4LUjORqtxCjokuhr ksQ39GEUq7GBq+UFCbmQ7alQs3BKoUX+EavJ9cyb2qyw7X800SJBREfKaoObYOha CEMbNlxtZOEpw4tswfWcNND5z20tMqH9sjDlHA4t0Cczl+eTnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3WQ4a3fe33yMWv1FRLMfKVMZH1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTU1M2Y5MTUtMzdkMC0z ODA3LTk4NGItYzQ0NmQ0Y2I0NTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBop7MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEdMKgkOt5iZ+KS69LQLO2XoIeAg5l3ama7h6HVrcA2VowBVkfjpC7i 2rLebtkkUIXBWpeN2wJnMV9o/9YAngdVphOLUEo/GAJ3UvL9qijihzdVAh7HGDVc 5IzP1KnNbE+UXdkRuDuBnLwFHNclaydUWtRJuXWpkzTOL+Ts7NqtxQ60hhcDMbrp BAnu34yrH/ye73DHDs5UXnGKp1t5eP5T6Xc7kuEEib7/y6cJHN5pRg4AqLC8f+WT J57c4HrJ5iqBS8FHi/Ire3jfJ8MPNswLnEU14emsmdzaX077yyGnVS9P6lnJa6Oz 2+KzJEO2yKz7Q4MAO2GHFjf7fqEkUMI= -----END CERTIFICATE-----Generated at Sat Nov 1 10:01:35 2025 by rpki-client