$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a7f10e38-41db-39e7-9dd2-6470003e2f8d.roa File: a7f10e38-41db-39e7-9dd2-6470003e2f8d.roa (raw, json) Hash identifier: RkVCu+YcRcH6WO7Y+dljlKo5wwjeHBZtN6zZt2PqPwo= Subject key identifier: 1B:E9:FC:C5:E9:CF:CF:A6:7D:D0:E5:BD:37:06:C7:08:8A:E5:11:4D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD07170EE4C2E69D548540 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a7f10e38-41db-39e7-9dd2-6470003e2f8d.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 162.158.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:07:17:0e:e4:c2:e6:9d:54:85:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=016da252-7be6-47d6-abca-3be311cf100a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ef:ed:db:58:62:df:5e:57:d3:8a:a2:7a:8b: ea:df:13:1b:7f:e8:5f:23:aa:a8:ad:8a:de:cf:1f: 8e:85:c7:1f:e8:6a:5b:16:6d:e6:ba:25:af:7d:28: b9:96:42:29:77:4e:d7:67:6e:9e:22:41:0d:47:a8: 95:01:57:5e:37:7d:ab:9b:17:e7:65:d8:e4:57:87: 6f:0f:2f:8e:42:31:64:97:14:84:b4:7e:9c:b2:27: cd:5c:db:fd:7a:8a:09:02:92:69:15:b6:75:f0:57: 53:3e:c0:8f:9f:92:1b:aa:9b:7f:95:16:aa:42:32: 55:e6:7b:4a:9d:4d:fa:04:3a:f8:13:6f:95:be:20: 0f:df:60:4b:25:89:ee:6f:11:cf:2a:6b:ab:85:ae: 44:99:5f:c0:64:50:47:9b:3a:b3:95:f6:61:68:51: 39:2c:ac:e2:a9:20:08:aa:05:21:80:a0:d5:7d:b9: 82:91:2f:cd:fb:3b:f9:9a:ba:82:f3:39:bf:82:5d: 4d:e2:d5:bb:da:cd:dd:83:72:10:1f:52:ed:99:65: 2e:b1:b6:1b:df:7a:e7:af:a8:7b:d6:77:13:8f:79: 79:2a:d0:d7:12:98:d1:1b:17:29:df:a2:e0:02:1b: 01:84:3a:a0:dc:1e:37:df:ad:02:f3:7a:06:1a:fa: 74:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:E9:FC:C5:E9:CF:CF:A6:7D:D0:E5:BD:37:06:C7:08:8A:E5:11:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a7f10e38-41db-39e7-9dd2-6470003e2f8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:5f:15:14:ca:ad:81:c2:74:3f:0a:76:32:c9:84:ed:73:ec: 1b:6f:04:9d:3e:ca:d9:ca:15:93:e4:d8:60:fe:4d:b3:57:75: b2:16:e2:77:cb:53:3a:33:e1:03:ef:84:33:c1:85:21:d3:89: 0d:9d:c8:07:b1:4a:8a:df:26:ed:4e:55:52:8a:1a:96:b3:11: 9b:1c:9b:d4:33:f9:c0:d4:05:77:a2:6a:98:b8:85:86:ee:23: e6:e3:39:da:6c:67:04:79:4f:d0:6e:1b:ff:d7:88:dc:6f:f2: b5:ec:a7:67:aa:44:53:63:c6:93:eb:33:04:8e:40:b0:67:03: d5:43:50:3c:71:05:d7:da:a0:d5:9c:38:25:b7:7a:2d:97:df: 22:99:b0:7c:1f:c8:8b:62:3b:b8:6e:b9:64:ee:32:fb:3b:d4: bd:9a:7e:8a:fd:c2:bf:a6:c8:5e:0f:2c:e8:07:41:b3:26:d7: bb:eb:9f:94:da:a5:25:93:c4:00:e1:79:82:1d:96:55:2a:d1: 09:50:95:ca:2a:85:31:1b:9f:10:ef:54:cb:1a:7e:1c:ac:e0: 55:b2:1c:e4:81:79:a6:ea:e4:bb:ae:63:19:24:32:20:d9:1f: 87:98:64:2e:26:e4:be:35:e9:c2:ec:25:5e:d9:a1:77:f1:41: bb:44:4e:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzQcXDuTC5p1UhUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk MDE2ZGEyNTItN2JlNi00N2Q2LWFiY2EtM2JlMzExY2YxMDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+/t21hi315X04qieovq3xMbf+hfI6qorYre zx+Ohccf6GpbFm3muiWvfSi5lkIpd07XZ26eIkENR6iVAVdeN32rmxfnZdjkV4dv Dy+OQjFklxSEtH6csifNXNv9eooJApJpFbZ18FdTPsCPn5Ibqpt/lRaqQjJV5ntK nU36BDr4E2+VviAP32BLJYnubxHPKmurha5EmV/AZFBHmzqzlfZhaFE5LKziqSAI qgUhgKDVfbmCkS/N+zv5mrqC8zm/gl1N4tW72s3dg3IQH1LtmWUusbYb33rnr6h7 1ncTj3l5KtDXEpjRGxcp36LgAhsBhDqg3B43360C83oGGvp0NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvp/MXpz8+mfdDlvTcGxwiK5RFNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTdmMTBlMzgtNDFkYi0z OWU3LTlkZDItNjQ3MDAwM2UyZjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop5MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVfFRTKrYHCdD8KdjLJhO1z7BtvBJ0+ytnKFZPk2GD+TbNXdbIW4nfL Uzoz4QPvhDPBhSHTiQ2dyAexSorfJu1OVVKKGpazEZscm9Qz+cDUBXeiapi4hYbu I+bjOdpsZwR5T9BuG//XiNxv8rXsp2eqRFNjxpPrMwSOQLBnA9VDUDxxBdfaoNWc OCW3ei2X3yKZsHwfyItiO7huuWTuMvs71L2afor9wr+myF4PLOgHQbMm17vrn5Ta pSWTxADheYIdllUq0QlQlcoqhTEbnxDvVMsafhys4FWyHOSBeabq5LuuYxkkMiDZ H4eYZC4m5L416cLsJV7ZoXfxQbtEThk= -----END CERTIFICATE-----Generated at Sat Nov 1 12:36:50 2025 by rpki-client