$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bdb8c7ca-ec5d-3ff3-b98c-a5dac80334a6.roa File: bdb8c7ca-ec5d-3ff3-b98c-a5dac80334a6.roa (raw, json) Hash identifier: AtKRtwMj5s7hyKlXktA23HLVnXI47wO30zsjre1SKVQ= Subject key identifier: BB:20:4C:A3:BB:C3:CF:39:E3:7D:01:7C:F2:00:57:13:D7:CA:1C:0F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA9328AB2CDDC3D3988ED6400 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bdb8c7ca-ec5d-3ff3-b98c-a5dac80334a6.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 162.159.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:8a:b2:cd:dc:3d:39:88:ed:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=9b78ea5d-37f3-4c95-ad13-a1d3db9011cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b1:9f:8f:c5:00:f9:fd:60:b7:bb:63:68:d5: 17:19:76:b1:85:18:f5:32:3a:95:ca:95:1d:ba:49: 02:a9:81:a4:b3:0c:50:8e:b0:0c:9f:ca:a8:15:a1: e8:b0:34:70:1d:4a:f8:bd:03:22:47:49:0e:81:bc: fa:d4:54:c2:e5:1b:9a:82:f8:03:a4:22:40:88:4b: 35:09:89:03:9a:75:2a:08:78:09:42:1b:c0:3e:ae: ec:3a:db:43:3f:ca:53:d0:da:6c:d8:ce:38:b9:4a: 2a:7f:6b:e8:8c:60:9e:f5:54:db:dc:31:29:57:c7: 1e:77:5b:33:f5:04:93:78:98:69:7d:81:30:d3:2d: 5b:86:57:9f:4a:eb:f5:5b:92:09:65:5e:df:4b:c1: 37:6f:24:77:d6:21:ac:79:be:96:69:cb:86:1a:a3: ae:4a:10:be:62:4e:e1:46:79:9a:8d:a5:d8:02:4b: 6d:43:43:ef:8a:07:f6:a9:e6:48:5b:ca:04:17:7a: 83:c6:ba:a5:91:96:f8:14:5f:63:26:86:3c:09:56: 11:26:f1:b1:24:5a:ff:2c:ec:a0:1c:a4:77:6c:f2: d2:3f:34:cf:05:f6:8b:42:e8:b9:31:9d:eb:5e:82: 58:19:51:cd:e9:d9:4d:09:70:95:4b:07:94:c0:60: 19:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:20:4C:A3:BB:C3:CF:39:E3:7D:01:7C:F2:00:57:13:D7:CA:1C:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bdb8c7ca-ec5d-3ff3-b98c-a5dac80334a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.159.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:93:85:0e:f8:44:6e:a6:f8:0f:f5:f3:20:4a:1e:e3:c0:2d: c2:a4:df:5d:97:cc:cd:1f:b4:bf:5f:3e:2f:00:c5:b1:e0:1c: ba:e0:c4:90:be:bb:b9:76:3c:21:1c:ca:ba:0e:86:08:f7:b1: 19:9f:2b:84:43:3b:62:ac:df:48:a9:46:b8:e7:86:31:99:d7: 5f:e6:4b:4b:dc:f9:e4:79:0d:3b:c7:fb:e3:93:87:41:66:4e: 20:1d:90:df:56:cf:fc:87:d4:8b:d8:bf:25:16:14:0d:9f:1e: 9b:3e:a2:47:39:85:d3:96:91:ca:88:9f:d5:63:c8:fa:1d:39: 36:52:60:95:6a:5c:5b:2f:02:db:86:32:9b:03:83:a3:a5:e3: aa:d0:7d:f5:70:ff:db:38:86:a5:5e:70:b5:81:f5:83:1c:d4: af:64:68:e9:b0:7f:a0:9b:64:0c:2e:08:09:9c:02:6d:4e:81: 6a:56:ce:76:24:af:ba:91:f3:e7:19:e6:27:aa:31:bf:9d:24: ac:4b:93:bf:a0:49:0e:6d:4d:c3:18:7a:1f:da:e0:6c:b4:0a: 1d:86:30:37:c9:29:cb:b4:ff:27:35:73:07:35:a8:b1:28:55: 26:c9:8f:7f:d6:a6:3d:40:92:08:1f:35:bc:9a:34:53:7d:ed: f9:72:b9:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMoqyzdw9OYjtZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk OWI3OGVhNWQtMzdmMy00Yzk1LWFkMTMtYTFkM2RiOTAxMWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7Gfj8UA+f1gt7tjaNUXGXaxhRj1MjqVypUd ukkCqYGkswxQjrAMn8qoFaHosDRwHUr4vQMiR0kOgbz61FTC5RuagvgDpCJAiEs1 CYkDmnUqCHgJQhvAPq7sOttDP8pT0Nps2M44uUoqf2vojGCe9VTb3DEpV8ced1sz 9QSTeJhpfYEw0y1bhlefSuv1W5IJZV7fS8E3byR31iGseb6WacuGGqOuShC+Yk7h RnmajaXYAkttQ0Pvigf2qeZIW8oEF3qDxrqlkZb4FF9jJoY8CVYRJvGxJFr/LOyg HKR3bPLSPzTPBfaLQui5MZ3rXoJYGVHN6dlNCXCVSweUwGAZ4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLsgTKO7w885430BfPIAVxPXyhwPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmRiOGM3Y2EtZWM1ZC0z ZmYzLWI5OGMtYTVkYWM4MDMzNGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFop+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+ThQ74RG6m+A/18yBKHuPALcKk312XzM0ftL9fPi8AxbHgHLrgxJC+ u7l2PCEcyroOhgj3sRmfK4RDO2Ks30ipRrjnhjGZ11/mS0vc+eR5DTvH++OTh0Fm TiAdkN9Wz/yH1IvYvyUWFA2fHps+okc5hdOWkcqIn9VjyPodOTZSYJVqXFsvAtuG MpsDg6Ol46rQffVw/9s4hqVecLWB9YMc1K9kaOmwf6CbZAwuCAmcAm1OgWpWznYk r7qR8+cZ5ieqMb+dJKxLk7+gSQ5tTcMYeh/a4Gy0Ch2GMDfJKcu0/yc1cwc1qLEo VSbJj3/Wpj1AkggfNbyaNFN97flyuWE= -----END CERTIFICATE-----Generated at Sat Nov 1 12:30:55 2025 by rpki-client