$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c27aaa9f-3aaa-3985-8a68-6ad9191a15e3.roa File: c27aaa9f-3aaa-3985-8a68-6ad9191a15e3.roa (raw, json) Hash identifier: aZ1Qmc560OePqcGyvbDWUyPvCTb5l64zAPy1xgui17I= Subject key identifier: 81:61:49:12:76:39:57:F4:A2:70:8F:84:C2:7B:AA:6F:B0:FA:C2:57 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA932853C2E0BD4DA761C9700 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c27aaa9f-3aaa-3985-8a68-6ad9191a15e3.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 162.158.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:85:3c:2e:0b:d4:da:76:1c:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=460ef202-ae63-4cdd-a18c-9733bcc439d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ae:e4:fa:b5:97:ea:7a:e4:e3:26:69:3b:50: 19:3f:a6:f7:c0:ee:d9:1e:37:29:65:fb:e7:8b:42: 1b:af:d2:22:e1:e9:63:ec:bb:35:54:60:01:83:1c: 95:2b:94:a1:9a:50:84:06:a2:bd:1c:cd:d8:35:9e: 60:1a:b7:1d:d6:00:e3:04:af:30:85:1e:a6:93:d2: 96:1a:c9:f7:05:81:25:eb:f3:29:a5:01:c2:6e:29: 6c:80:ef:7d:30:4e:ac:b9:b5:39:0d:d6:a0:b5:a6: 95:4c:45:e7:67:43:f0:55:44:ad:ca:40:0b:93:3b: a2:7a:cf:dc:b1:44:80:4c:98:c5:2d:4c:b5:8c:33: 64:23:c4:c2:09:66:a1:94:5a:b8:b6:62:86:f3:2f: 83:8a:56:26:06:05:6b:7a:b8:ee:fc:fa:d5:6b:97: 93:ec:32:01:fe:59:fe:92:72:2d:0e:91:12:ac:09: 1a:cb:fa:2c:e2:a4:c0:72:9e:63:c1:9f:95:52:44: 12:66:49:ad:b6:ab:b4:35:e8:ee:99:a6:a5:f0:43: 83:5d:3c:9e:15:1a:da:2c:6c:df:3c:c6:c3:02:30: 4d:a9:0f:9c:be:0a:4b:9b:02:83:29:64:a0:69:69: 35:39:ab:ae:1b:6a:fc:c4:41:c1:93:e8:ec:bc:39: 48:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:61:49:12:76:39:57:F4:A2:70:8F:84:C2:7B:AA:6F:B0:FA:C2:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c27aaa9f-3aaa-3985-8a68-6ad9191a15e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:00:5f:a7:f2:45:eb:67:f6:83:ea:6f:1c:14:e1:ca:c9:94: c3:b7:5e:12:cf:1e:7f:34:46:a9:aa:fd:13:52:13:81:f7:e4: 45:b0:79:2d:fe:25:10:2e:c4:d7:b1:aa:1b:19:24:ed:a3:d8: 8f:ee:2b:55:9a:ce:1a:65:b2:78:0a:53:f4:6c:44:5c:98:6f: 11:7d:3a:0f:1b:8f:c0:e8:b5:5f:d9:5c:6d:40:0a:98:f0:63: c0:1e:dc:09:d3:61:b5:fd:a3:db:d4:0b:10:e7:b6:e0:80:1f: 7b:b4:bf:29:32:ac:f8:68:43:b5:f7:36:42:25:0d:05:87:45: 9b:2f:c6:b7:75:e9:92:ec:e8:eb:79:54:58:88:bc:06:63:2a: f2:eb:7e:ba:5c:bd:ac:0d:3c:a0:09:74:ea:af:30:63:15:44: 44:75:58:8d:76:6d:85:95:7d:2d:6b:a2:77:09:bd:94:3f:52: 9f:f5:7b:cc:6a:2d:d4:95:4d:94:81:e6:f0:6f:d0:4b:84:3b: d5:31:11:c2:2e:b8:c4:e6:b0:ee:06:90:75:67:65:eb:45:4d: 4a:66:08:28:64:cf:7d:f0:b0:39:27:d9:51:3e:e5:2f:7a:e8: cb:3e:d8:86:54:67:8b:1d:b7:b9:bc:d4:47:c3:c1:d4:d5:ee: b5:f7:31:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMoU8LgvU2nYclwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk NDYwZWYyMDItYWU2My00Y2RkLWExOGMtOTczM2JjYzQzOWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7K7k+rWX6nrk4yZpO1AZP6b3wO7ZHjcpZfvn i0Ibr9Ii4elj7Ls1VGABgxyVK5ShmlCEBqK9HM3YNZ5gGrcd1gDjBK8whR6mk9KW Gsn3BYEl6/MppQHCbilsgO99ME6subU5DdagtaaVTEXnZ0PwVUStykALkzuies/c sUSATJjFLUy1jDNkI8TCCWahlFq4tmKG8y+DilYmBgVrerju/PrVa5eT7DIB/ln+ knItDpESrAkay/os4qTAcp5jwZ+VUkQSZkmttqu0Nejumaal8EODXTyeFRraLGzf PMbDAjBNqQ+cvgpLmwKDKWSgaWk1OauuG2r8xEHBk+jsvDlIkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIFhSRJ2OVf0onCPhMJ7qm+w+sJXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzI3YWFhOWYtM2FhYS0z OTg1LThhNjgtNmFkOTE5MWExNWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop55MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcAX6fyRetn9oPqbxwU4crJlMO3XhLPHn80Rqmq/RNSE4H35EWweS3+ JRAuxNexqhsZJO2j2I/uK1WazhplsngKU/RsRFyYbxF9Og8bj8DotV/ZXG1ACpjw Y8Ae3AnTYbX9o9vUCxDntuCAH3u0vykyrPhoQ7X3NkIlDQWHRZsvxrd16ZLs6Ot5 VFiIvAZjKvLrfrpcvawNPKAJdOqvMGMVRER1WI12bYWVfS1roncJvZQ/Up/1e8xq LdSVTZSB5vBv0EuEO9UxEcIuuMTmsO4GkHVnZetFTUpmCChkz33wsDkn2VE+5S96 6Ms+2IZUZ4sdt7m81EfDwdTV7rX3MdU= -----END CERTIFICATE-----Generated at Sat Nov 1 12:37:09 2025 by rpki-client