$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a551a6a7-77e9-3e06-81bd-ac7dff435624.roa File: a551a6a7-77e9-3e06-81bd-ac7dff435624.roa (raw, json) Hash identifier: 3YUTq6o8IwSvxbEohmALrEXu3ZX/IHJ39OWA6VieE0E= Subject key identifier: 3F:1B:9C:3A:B0:2E:EC:10:64:9C:6E:D2:D5:8D:0F:30:C1:BF:73:AB Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA93278E5DB8E6C999167F480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a551a6a7-77e9-3e06-81bd-ac7dff435624.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 162.158.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:78:e5:db:8e:6c:99:91:67:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=86e94ff5-f814-40be-90ad-bb5c4e5e6ff2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:36:cc:62:e7:c4:a1:d6:52:f3:9c:9d:09:04: d3:73:cf:26:88:27:2d:76:83:3b:57:41:47:65:a8: d1:db:a2:ee:44:9b:2b:40:63:76:71:3a:16:12:d2: 82:da:25:ff:e1:0d:14:49:de:56:f2:d5:8a:3a:f8: 2e:e8:63:15:ed:35:af:8b:2b:96:4e:02:2c:78:66: a5:b1:73:d4:24:64:12:38:2a:6b:28:7b:36:15:79: a5:66:04:34:4e:2b:d8:e9:7e:1a:70:39:4d:b7:a8: dc:ad:28:28:f1:73:5f:5f:a4:2d:11:fa:c2:88:59: 2b:64:4e:ec:35:06:c3:e4:e5:04:64:dd:4d:b7:27: eb:73:d1:de:6a:de:31:c3:df:24:67:6e:3a:40:bd: 92:85:24:c8:26:ed:73:cd:b7:a4:10:29:2a:bc:6b: 15:db:73:3e:e4:c3:2e:c6:86:b1:5a:28:70:45:c2: 16:a2:67:dc:c4:e2:03:37:eb:27:a0:ff:f5:83:a5: 12:ad:9c:55:50:ce:a8:fd:28:c0:7d:e9:49:56:f4: 8c:63:0d:2e:f9:c7:e1:bd:75:60:33:a6:8b:96:b1: b5:dc:25:9a:96:81:b2:08:a7:19:5b:2c:ba:73:3b: 57:79:f3:4b:8d:6e:2f:4a:dd:e2:20:e9:4c:9b:d1: 13:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:1B:9C:3A:B0:2E:EC:10:64:9C:6E:D2:D5:8D:0F:30:C1:BF:73:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a551a6a7-77e9-3e06-81bd-ac7dff435624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:2e:1d:ca:b0:ea:3d:ba:77:0c:80:fc:a0:bf:b4:b3:4c:f6: cd:62:6b:15:18:b9:44:cd:ea:8d:cd:5d:de:a0:3f:e4:e3:46: d5:5d:eb:84:62:50:d4:f7:0f:18:0f:2d:60:1a:ec:7f:67:63: 59:63:ff:f3:0d:79:72:72:f9:2f:3b:94:49:a7:69:2d:d5:96: 54:fd:26:9c:95:db:76:13:2a:a2:00:d3:d2:64:0d:0d:e6:66: e3:79:ba:20:d4:2f:31:d0:70:9a:bd:21:b6:6a:42:ad:cf:2d: 62:5b:76:bb:2e:3c:ac:f3:90:46:03:7f:92:78:dd:d2:c5:8b: ca:fc:75:38:3e:41:86:d6:cc:34:14:f6:25:24:1b:42:aa:42: b9:3d:18:f8:99:c9:5c:25:e8:6a:a9:13:3f:5d:13:ed:fe:9e: a3:59:e2:5f:e0:b5:22:6a:8f:58:76:f5:65:83:68:5d:9c:73: a3:37:26:ce:3e:2a:14:ed:50:f2:76:4c:4a:c4:09:8f:72:a9: 30:8a:9b:07:d0:f6:93:55:32:94:24:96:d8:df:56:82:e7:e5: 56:b3:b5:08:d8:d4:67:ac:72:c6:5e:fe:81:c1:5d:97:5a:44: 83:54:74:5d:2e:a8:63:ee:2e:3e:80:da:c7:a0:d6:ef:02:56: d4:e8:83:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMnjl245smZFn9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk ODZlOTRmZjUtZjgxNC00MGJlLTkwYWQtYmI1YzRlNWU2ZmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTbMYufEodZS85ydCQTTc88miCctdoM7V0FH ZajR26LuRJsrQGN2cToWEtKC2iX/4Q0USd5W8tWKOvgu6GMV7TWviyuWTgIseGal sXPUJGQSOCprKHs2FXmlZgQ0TivY6X4acDlNt6jcrSgo8XNfX6QtEfrCiFkrZE7s NQbD5OUEZN1Ntyfrc9Heat4xw98kZ246QL2ShSTIJu1zzbekECkqvGsV23M+5MMu xoaxWihwRcIWomfcxOIDN+snoP/1g6USrZxVUM6o/SjAfelJVvSMYw0u+cfhvXVg M6aLlrG13CWaloGyCKcZWyy6cztXefNLjW4vSt3iIOlMm9ETuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8bnDqwLuwQZJxu0tWNDzDBv3OrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTU1MWE2YTctNzdlOS0z ZTA2LTgxYmQtYWM3ZGZmNDM1NjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop6WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8uHcqw6j26dwyA/KC/tLNM9s1iaxUYuUTN6o3NXd6gP+TjRtVd64Ri UNT3DxgPLWAa7H9nY1lj//MNeXJy+S87lEmnaS3VllT9JpyV23YTKqIA09JkDQ3m ZuN5uiDULzHQcJq9IbZqQq3PLWJbdrsuPKzzkEYDf5J43dLFi8r8dTg+QYbWzDQU 9iUkG0KqQrk9GPiZyVwl6GqpEz9dE+3+nqNZ4l/gtSJqj1h29WWDaF2cc6M3Js4+ KhTtUPJ2TErECY9yqTCKmwfQ9pNVMpQkltjfVoLn5VaztQjY1GescsZe/oHBXZda RINUdF0uqGPuLj6A2seg1u8CVtTog4g= -----END CERTIFICATE-----Generated at Sat Nov 1 12:32:50 2025 by rpki-client