$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bb9c66f0-a4b7-3d62-a215-e11e924c8a5e.roa File: bb9c66f0-a4b7-3d62-a215-e11e924c8a5e.roa (raw, json) Hash identifier: S0lOTd46WBJz2BlZ8z9tY5PLbG/WYzRAYtMfM1TL9HU= Subject key identifier: 0A:83:55:C9:3C:BD:8D:98:E2:43:7A:CD:58:ED:1D:A3:BF:A9:56:71 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD06020DA8A745A366A780 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bb9c66f0-a4b7-3d62-a215-e11e924c8a5e.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 162.158.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:06:02:0d:a8:a7:45:a3:66:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=8b269038-4686-40d6-ab31-501710120b03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f0:1b:0b:de:59:4c:fc:1e:c0:d1:73:d8:16: 9b:c9:b6:d1:42:d7:13:7a:8a:19:f8:5e:eb:70:e9: 0e:28:dc:23:cd:ca:66:d1:6c:ec:07:a2:4b:0f:0f: fd:30:89:29:de:d1:d8:2c:f0:8b:f8:ca:d4:6c:78: f1:ce:49:21:f0:27:c3:24:32:9d:fd:b1:fa:ce:26: fe:f6:f7:b4:0b:51:74:06:c9:71:fc:f3:fc:44:ea: 83:9a:f6:f0:bd:0b:5a:80:44:0f:ee:d6:1c:d6:d1: d9:4c:9d:14:7d:5a:88:9d:ba:87:cb:be:11:e3:70: 4d:9c:04:7b:91:b5:e8:e9:8c:5f:ea:9f:68:25:bd: 25:a6:e1:52:be:c9:ea:d4:8a:ff:c1:3e:38:94:94: b5:83:03:52:67:25:82:43:77:68:0c:1e:cb:37:9b: a3:94:d8:d0:d4:7a:05:8a:d7:be:4f:8e:18:4e:91: 7b:bc:a7:0d:55:eb:16:98:45:3b:77:a9:57:68:5d: 58:4c:59:ed:8c:06:bd:80:43:21:fb:55:3d:79:08: e1:b7:01:00:30:81:3e:04:b6:8d:7d:16:2d:55:43: 54:b4:d7:5c:61:75:95:4b:f5:cb:48:b0:0c:d5:da: 4c:7a:e0:93:2c:5e:ab:ac:ce:c2:ed:22:f7:2e:af: b2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:83:55:C9:3C:BD:8D:98:E2:43:7A:CD:58:ED:1D:A3:BF:A9:56:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bb9c66f0-a4b7-3d62-a215-e11e924c8a5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:5f:e7:f0:72:f9:a0:e6:ea:3a:99:2d:d0:4f:3b:d6:83:05: 91:7e:8b:37:ca:75:2e:9a:54:c1:4f:f4:08:93:43:9a:08:c7: eb:08:ba:56:1f:46:18:e8:b9:1f:86:da:19:44:64:77:46:32: 26:95:02:d1:cd:2b:36:df:5b:26:18:fb:78:eb:d1:d1:df:c9: f1:28:b4:a0:fe:00:3b:72:18:ca:e2:3f:4f:89:bb:e6:49:a3: 60:50:b2:3c:44:69:a8:a9:9d:64:30:b6:82:a2:da:30:27:a1: 15:9c:ab:4d:ce:82:a0:76:08:46:0c:3b:06:ae:de:7a:f7:fd: a9:b1:94:84:4a:c4:aa:30:c0:78:7a:dd:e8:e1:1f:04:6d:5f: 65:f8:5d:a8:63:0c:ec:a0:bf:b7:08:2e:97:b3:fb:04:75:96: e9:d2:ee:18:96:e6:73:a8:e7:47:74:9a:a6:0e:e9:89:4e:ab: 96:b0:14:71:56:8a:2b:9e:ff:08:9c:bb:38:d1:0d:06:2f:78: 53:ce:d0:f1:2b:ce:6c:e8:a1:1f:a9:d6:90:5b:0e:6a:6b:96: 65:e4:36:a9:3c:9a:c1:42:12:53:b7:fb:73:ba:d1:ec:41:0b: 94:e3:41:7d:a1:58:f9:b9:78:63:d8:b6:d8:c0:4c:a5:65:f5: 25:f8:05:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzQYCDainRaNmp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk OGIyNjkwMzgtNDY4Ni00MGQ2LWFiMzEtNTAxNzEwMTIwYjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/AbC95ZTPwewNFz2BabybbRQtcTeooZ+F7r cOkOKNwjzcpm0WzsB6JLDw/9MIkp3tHYLPCL+MrUbHjxzkkh8CfDJDKd/bH6zib+ 9ve0C1F0Bslx/PP8ROqDmvbwvQtagEQP7tYc1tHZTJ0UfVqInbqHy74R43BNnAR7 kbXo6Yxf6p9oJb0lpuFSvsnq1Ir/wT44lJS1gwNSZyWCQ3doDB7LN5ujlNjQ1HoF ite+T44YTpF7vKcNVesWmEU7d6lXaF1YTFntjAa9gEMh+1U9eQjhtwEAMIE+BLaN fRYtVUNUtNdcYXWVS/XLSLAM1dpMeuCTLF6rrM7C7SL3Lq+yswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqDVck8vY2Y4kN6zVjtHaO/qVZxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmI5YzY2ZjAtYTRiNy0z ZDYyLWEyMTUtZTExZTkyNGM4YTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop4wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5f5/By+aDm6jqZLdBPO9aDBZF+izfKdS6aVMFP9AiTQ5oIx+sIulYf RhjouR+G2hlEZHdGMiaVAtHNKzbfWyYY+3jr0dHfyfEotKD+ADtyGMriP0+Ju+ZJ o2BQsjxEaaipnWQwtoKi2jAnoRWcq03OgqB2CEYMOwau3nr3/amxlIRKxKowwHh6 3ejhHwRtX2X4XahjDOygv7cILpez+wR1lunS7hiW5nOo50d0mqYO6YlOq5awFHFW iiue/wicuzjRDQYveFPO0PErzmzooR+p1pBbDmprlmXkNqk8msFCElO3+3O60exB C5TjQX2hWPm5eGPYttjATKVl9SX4BZU= -----END CERTIFICATE-----Generated at Sat Nov 1 12:30:49 2025 by rpki-client