$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c641345d-8f91-3192-898b-c75c9616bbd2.roa File: c641345d-8f91-3192-898b-c75c9616bbd2.roa (raw, json) Hash identifier: YSddskODI8qtnwePiBYbGwlx2shgR/CLQ/GLMbvubcw= Subject key identifier: 12:F1:4F:3B:E8:DB:5A:F1:A2:3D:67:0B:23:32:48:8A:AD:EE:DC:4A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD05BC1C9E2ECFAC1FF220 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c641345d-8f91-3192-898b-c75c9616bbd2.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 162.158.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:05:bc:1c:9e:2e:cf:ac:1f:f2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=db5f0fb1-85ab-4713-a17c-a157d52f2d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:54:ef:f0:2c:e4:08:75:39:b3:4e:04:30:2c: ab:5b:cd:37:01:e7:19:db:f7:59:11:26:0d:7a:87: dd:be:62:28:0f:58:6b:20:5b:07:62:24:41:a8:7c: 2c:3b:b6:7f:0f:d4:10:02:2c:b0:61:1c:ce:e3:76: 0c:51:c5:33:75:00:c8:26:aa:cf:39:8c:cb:d1:97: 6e:45:15:b7:ac:47:31:e3:57:4c:53:b3:31:16:0e: ba:9b:d0:27:13:51:ba:95:05:3e:89:50:33:a2:bc: bc:21:1c:7d:f6:73:1c:7b:63:c1:d4:79:52:b4:02: fc:f7:8d:f9:c1:70:a3:7e:0c:9c:cd:55:76:f3:d0: 2f:7a:72:12:7c:b0:c3:b3:6c:f4:b0:03:bc:af:b7: f9:13:ae:2f:b5:1d:18:64:c0:22:d6:1b:5c:ac:5d: e6:3c:15:9f:d9:71:9e:7f:fe:6d:4a:d1:a0:29:47: 6e:8c:a7:1d:d1:2a:0d:f6:13:1b:45:af:d7:04:62: 2c:b6:6f:9f:2d:59:23:ca:47:ed:63:eb:da:8c:78: e1:5c:35:13:12:52:52:de:8c:13:df:8e:77:90:3e: 3d:b5:b2:51:e5:1d:7e:3f:e2:16:b6:fa:d8:0a:5a: e3:f7:09:27:4e:36:1e:9f:4f:82:e9:22:75:4f:83: a2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F1:4F:3B:E8:DB:5A:F1:A2:3D:67:0B:23:32:48:8A:AD:EE:DC:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c641345d-8f91-3192-898b-c75c9616bbd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:2e:ac:79:a8:b2:3a:7b:ff:7d:37:cd:e0:99:43:c6:77:d1: b2:4b:35:67:d0:5a:2e:c1:97:5a:68:23:6d:5b:12:39:b9:d9: 06:08:c5:2e:bc:b0:52:b7:97:04:10:be:ca:40:23:9f:b3:a9: 5e:d0:42:a6:2d:74:a6:e8:b1:35:b9:43:50:9b:eb:6a:a2:44: b8:ff:53:f4:64:1e:1e:eb:31:09:b0:a3:64:cf:be:f6:b3:b1: 5b:a1:ad:29:c5:31:9f:02:7d:2a:5e:45:41:1b:03:cd:a3:dc: 61:7d:72:17:ac:aa:3c:c1:b0:33:42:09:c6:5b:b0:33:2f:05: 36:3c:16:cc:fb:c6:ed:49:41:ea:4d:6a:dd:d7:4d:a9:fc:31: 28:cc:05:bb:b0:d8:69:dd:94:9c:3d:f7:3f:27:0b:87:17:47: db:5a:e3:05:f2:56:de:c9:93:bc:70:97:63:a4:ed:5f:f4:d6: 4b:2d:49:5a:69:9d:8d:93:2b:08:76:f5:e8:8e:cb:60:ca:8a: 51:b0:f3:15:43:c0:14:5e:46:25:19:90:1b:d6:c7:a4:23:aa: 51:9f:10:29:eb:ac:d2:9a:77:66:f8:6a:50:c2:c5:2f:4d:5a: 38:35:a6:4a:e6:8d:70:27:fb:d3:c4:82:45:f3:6b:3b:b9:41: 6b:72:50:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzQW8HJ4uz6wf8iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk ZGI1ZjBmYjEtODVhYi00NzEzLWExN2MtYTE1N2Q1MmYyZDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplTv8CzkCHU5s04EMCyrW803AecZ2/dZESYN eofdvmIoD1hrIFsHYiRBqHwsO7Z/D9QQAiywYRzO43YMUcUzdQDIJqrPOYzL0Zdu RRW3rEcx41dMU7MxFg66m9AnE1G6lQU+iVAzory8IRx99nMce2PB1HlStAL89435 wXCjfgyczVV289AvenISfLDDs2z0sAO8r7f5E64vtR0YZMAi1htcrF3mPBWf2XGe f/5tStGgKUdujKcd0SoN9hMbRa/XBGIstm+fLVkjykftY+vajHjhXDUTElJS3owT 3453kD49tbJR5R1+P+IWtvrYClrj9wknTjYen0+C6SJ1T4Oi2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBLxTzvo21rxoj1nCyMySIqt7txKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzY0MTM0NWQtOGY5MS0z MTkyLTg5OGItYzc1Yzk2MTZiYmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop4rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIurHmosjp7/303zeCZQ8Z30bJLNWfQWi7Bl1poI21bEjm52QYIxS68 sFK3lwQQvspAI5+zqV7QQqYtdKbosTW5Q1Cb62qiRLj/U/RkHh7rMQmwo2TPvvaz sVuhrSnFMZ8CfSpeRUEbA82j3GF9chesqjzBsDNCCcZbsDMvBTY8Fsz7xu1JQepN at3XTan8MSjMBbuw2GndlJw99z8nC4cXR9ta4wXyVt7Jk7xwl2Ok7V/01kstSVpp nY2TKwh29eiOy2DKilGw8xVDwBReRiUZkBvWx6QjqlGfECnrrNKad2b4alDCxS9N Wjg1pkrmjXAn+9PEgkXzazu5QWtyUEE= -----END CERTIFICATE-----Generated at Sat Nov 1 10:02:55 2025 by rpki-client