$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b46d5546-78d0-3e79-8dc2-7e07aebfecf8.roa File: b46d5546-78d0-3e79-8dc2-7e07aebfecf8.roa (raw, json) Hash identifier: yudM/zYSQwfIIxw3P6ARPwjzLoiq9bgKbvI/EIPorhw= Subject key identifier: CD:A8:E5:41:62:C8:0A:75:79:AF:5F:31:78:1B:E9:B8:9E:3E:8E:A4 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD13158BB3D06F47022180 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b46d5546-78d0-3e79-8dc2-7e07aebfecf8.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 162.158.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:13:15:8b:b3:d0:6f:47:02:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=3a2e8b72-3bf9-445c-9bee-33ce850b0320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d8:5d:da:fd:13:d9:46:6f:02:a1:7e:c0:8a: b9:fb:49:df:e8:ee:4b:44:36:bd:da:c0:c0:b0:f6: db:dd:13:d4:6d:64:d6:dc:a8:63:8c:c7:0c:ac:ff: 11:34:01:51:8c:3d:aa:ab:72:60:2f:53:c8:50:2c: ba:1e:7b:dc:31:18:36:a3:48:82:69:69:ab:db:69: 95:36:86:d5:fc:b3:61:40:60:5d:ad:24:e4:7f:fc: db:87:71:d7:c3:35:c0:0b:95:42:07:c2:1b:c9:ba: b4:61:5e:a4:23:36:89:ee:e8:8f:67:13:19:cc:6c: 29:ac:2d:d0:56:b9:0b:ad:15:23:e4:32:44:db:9f: a0:7e:03:c8:e5:60:f6:8f:e8:5a:05:a8:09:1a:d6: 8c:bb:25:ec:30:7e:6d:cb:86:d0:3f:52:5a:f9:f9: 98:63:04:1f:e2:ac:d1:fe:bc:d9:95:d9:37:eb:da: 4e:d1:91:bf:9a:95:bf:e9:75:00:b5:85:b1:d9:04: 8c:23:3f:f1:28:30:df:be:8c:6e:21:8e:4f:4d:be: d6:48:eb:4a:e7:0c:c3:dd:64:3f:45:a6:fe:b8:b7: b5:8e:3e:3b:3d:4c:7e:91:38:9a:a1:3a:3c:eb:ed: c8:f9:86:79:d3:ea:46:0e:7a:ec:61:67:a4:76:5e: 93:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A8:E5:41:62:C8:0A:75:79:AF:5F:31:78:1B:E9:B8:9E:3E:8E:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b46d5546-78d0-3e79-8dc2-7e07aebfecf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:50:0a:12:d3:0a:1b:e7:d7:c2:04:f9:19:b9:42:02:d0:5e: f4:f8:f4:64:37:51:f6:e1:52:9e:8b:cb:a1:3d:a3:c9:0f:89: 16:c2:04:44:a7:d2:d0:cd:dc:23:e0:d3:96:c7:02:64:39:53: 32:1d:74:c5:48:f4:d0:f1:92:67:bd:a2:72:2b:06:f9:67:ed: 81:35:49:7f:b3:90:68:31:47:4c:30:be:5d:42:6b:d4:e0:b1: 64:ca:e6:a5:c8:21:ba:47:dd:9a:f1:6d:70:f9:e4:90:26:cb: 8d:84:2b:7e:e6:bd:f6:5a:30:30:4c:07:33:08:a5:37:44:c6: 36:7b:04:8e:61:24:ce:ec:38:96:77:95:75:9d:1d:8b:4f:e0: 01:22:8c:95:5d:50:f5:2e:62:ec:bf:64:45:f5:2a:cf:61:23: 7c:f0:49:47:9a:22:11:c6:60:78:f5:f3:81:7f:ab:84:25:0a: 71:98:eb:e2:5a:17:fb:8d:06:e0:21:0c:ad:8f:85:1b:16:e1: e7:d0:d2:c9:25:ce:ec:60:48:29:38:c0:55:1a:29:d7:51:5f: d6:d3:5e:c9:41:f8:0f:c1:ec:68:f1:36:12:66:e8:7c:74:b9: 94:b4:7b:42:9c:26:0b:e1:7e:c8:a3:9a:84:75:51:5e:39:54: 27:93:e6:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzRMVi7PQb0cCIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk M2EyZThiNzItM2JmOS00NDVjLTliZWUtMzNjZTg1MGIwMzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNhd2v0T2UZvAqF+wIq5+0nf6O5LRDa92sDA sPbb3RPUbWTW3KhjjMcMrP8RNAFRjD2qq3JgL1PIUCy6HnvcMRg2o0iCaWmr22mV NobV/LNhQGBdrSTkf/zbh3HXwzXAC5VCB8Ibybq0YV6kIzaJ7uiPZxMZzGwprC3Q VrkLrRUj5DJE25+gfgPI5WD2j+haBagJGtaMuyXsMH5ty4bQP1Ja+fmYYwQf4qzR /rzZldk369pO0ZG/mpW/6XUAtYWx2QSMIz/xKDDfvoxuIY5PTb7WSOtK5wzD3WQ/ Rab+uLe1jj47PUx+kTiaoTo86+3I+YZ50+pGDnrsYWekdl6TrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM2o5UFiyAp1ea9fMXgb6biePo6kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjQ2ZDU1NDYtNzhkMC0z ZTc5LThkYzItN2UwN2FlYmZlY2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCop4EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1QChLTChvn18IE+Rm5QgLQXvT49GQ3UfbhUp6Ly6E9o8kPiRbCBESn 0tDN3CPg05bHAmQ5UzIddMVI9NDxkme9onIrBvln7YE1SX+zkGgxR0wwvl1Ca9Tg sWTK5qXIIbpH3ZrxbXD55JAmy42EK37mvfZaMDBMBzMIpTdExjZ7BI5hJM7sOJZ3 lXWdHYtP4AEijJVdUPUuYuy/ZEX1Ks9hI3zwSUeaIhHGYHj184F/q4QlCnGY6+Ja F/uNBuAhDK2PhRsW4efQ0sklzuxgSCk4wFUaKddRX9bTXslB+A/B7GjxNhJm6Hx0 uZS0e0KcJgvhfsijmoR1UV45VCeT5oQ= -----END CERTIFICATE-----Generated at Sat Nov 1 09:59:23 2025 by rpki-client