$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cbf9a1e5-8296-3dd7-b165-a687fdfc8717.roa File: cbf9a1e5-8296-3dd7-b165-a687fdfc8717.roa (raw, json) Hash identifier: emQM2OZKbcRaDf/QytruzOb2nK81Rki/SAsdZJuJMXI= Subject key identifier: C0:A2:CE:76:C1:05:71:81:36:C1:34:E1:26:57:61:2F:E9:20:CF:E7 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA9328A0C573C62EFA623A100 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cbf9a1e5-8296-3dd7-b165-a687fdfc8717.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 162.159.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:8a:0c:57:3c:62:ef:a6:23:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=b07a99e9-31f5-41b5-994a-11701089670b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1d:8a:5e:e9:6e:84:b5:2c:c0:82:ed:41:d1: 57:15:e0:f7:72:f5:53:ef:c7:ed:f9:ba:bf:7b:e2: 09:45:f3:dd:aa:57:48:13:6a:77:04:31:46:92:7e: b2:95:6f:76:2c:3e:7d:f0:d0:d6:2c:38:36:1f:c9: 45:c5:05:06:6e:5b:6b:25:44:f2:eb:c1:5b:34:d9: 66:c3:d0:db:dd:2a:8e:02:a0:3d:5d:15:23:71:be: f8:03:28:6b:bd:b9:bd:f5:ca:53:62:2e:30:7b:46: bf:ae:0f:27:f7:b1:74:3e:7d:ba:f8:3a:1d:38:c9: ed:25:67:07:0f:b5:b6:d4:38:d9:8e:6c:a6:c7:ee: 27:a5:29:42:18:52:21:c4:ae:c8:b6:90:c9:e8:4d: c4:fa:5b:54:dd:4c:a7:57:39:d7:41:b9:af:6d:c4: 8a:6d:0d:70:f9:c9:bd:f7:d9:fe:8e:00:ea:1a:64: c6:ce:42:b4:e5:2e:6c:e7:f7:f0:cf:46:34:ff:0f: fd:0e:ed:35:cd:08:e0:40:e0:f7:e5:98:ac:c8:80: 94:bc:fc:b1:df:04:8f:ca:35:cf:d2:96:c7:6b:2b: bf:69:fa:56:43:76:0b:e5:ba:72:16:16:40:ec:b3: dc:25:df:ce:b5:c2:82:27:ac:49:02:c1:91:5a:36: 9e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A2:CE:76:C1:05:71:81:36:C1:34:E1:26:57:61:2F:E9:20:CF:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cbf9a1e5-8296-3dd7-b165-a687fdfc8717.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.159.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:cf:a7:e0:76:78:ad:b4:57:60:02:85:e4:54:2f:5a:fd:3d: 4c:40:e1:51:32:e0:5a:bc:e9:17:78:2d:c7:8c:22:cc:63:44: 66:d0:61:f6:72:87:43:0a:93:92:5c:93:1d:05:3c:a4:f9:7a: 97:a5:89:77:a1:d2:55:67:c2:12:28:05:0d:74:cd:ee:b9:31: 19:e4:37:88:fb:5d:84:b5:e9:d3:c0:4f:eb:ea:27:b0:e1:00: 6e:97:1c:f3:dd:09:39:5b:87:2f:1d:74:0a:06:c6:de:37:43: 96:ef:46:11:ff:71:35:bb:70:2e:35:b0:2c:33:0d:fb:29:33: 6e:45:63:f6:d7:fa:f0:21:ee:a0:0a:2d:eb:39:1a:a9:9f:8b: a9:1b:90:1f:f6:59:b3:34:0a:cc:e7:25:dd:3d:a1:76:ed:9b: d6:81:dc:98:73:36:bd:fd:67:42:06:d4:e9:ac:7e:ab:da:57: 63:eb:2a:c0:f7:0b:cb:85:72:ae:3f:04:59:ff:fb:f0:a6:4a: 4d:19:3f:93:aa:c0:b7:78:d7:94:c9:5c:c1:8e:ef:f3:5b:37: ac:8e:57:18:43:ec:85:4c:16:48:a3:9a:5d:9b:d6:66:4f:b9: 95:50:18:66:45:36:1e:80:1e:8b:36:f2:2e:2c:17:ba:dd:47: 8c:a5:3f:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMooMVzxi76YjoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk YjA3YTk5ZTktMzFmNS00MWI1LTk5NGEtMTE3MDEwODk2NzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiB2KXuluhLUswILtQdFXFeD3cvVT78ft+bq/ e+IJRfPdqldIE2p3BDFGkn6ylW92LD598NDWLDg2H8lFxQUGbltrJUTy68FbNNlm w9Db3SqOAqA9XRUjcb74Ayhrvbm99cpTYi4we0a/rg8n97F0Pn26+DodOMntJWcH D7W21DjZjmymx+4npSlCGFIhxK7ItpDJ6E3E+ltU3UynVznXQbmvbcSKbQ1w+cm9 99n+jgDqGmTGzkK05S5s5/fwz0Y0/w/9Du01zQjgQOD35ZisyICUvPyx3wSPyjXP 0pbHayu/afpWQ3YL5bpyFhZA7LPcJd/OtcKCJ6xJAsGRWjaeFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCiznbBBXGBNsE04SZXYS/pIM/nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2JmOWExZTUtODI5Ni0z ZGQ3LWIxNjUtYTY4N2ZkZmM4NzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBop8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXPp+B2eK20V2ACheRUL1r9PUxA4VEy4Fq86Rd4LceMIsxjRGbQYfZy h0MKk5Jckx0FPKT5epeliXeh0lVnwhIoBQ10ze65MRnkN4j7XYS16dPAT+vqJ7Dh AG6XHPPdCTlbhy8ddAoGxt43Q5bvRhH/cTW7cC41sCwzDfspM25FY/bX+vAh7qAK Les5Gqmfi6kbkB/2WbM0CsznJd09oXbtm9aB3JhzNr39Z0IG1OmsfqvaV2PrKsD3 C8uFcq4/BFn/+/CmSk0ZP5OqwLd415TJXMGO7/NbN6yOVxhD7IVMFkijml2b1mZP uZVQGGZFNh6AHos28i4sF7rdR4ylP3E= -----END CERTIFICATE-----Generated at Sat Nov 1 12:37:03 2025 by rpki-client