$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d21db2b1-6d91-38ba-8b11-45e5e7b7d4aa.roa File: d21db2b1-6d91-38ba-8b11-45e5e7b7d4aa.roa (raw, json) Hash identifier: aNnxbGuLTjYG1fs39Ee92S1duyuGjPcramrcq4xbFK8= Subject key identifier: F6:71:C5:6D:5B:2B:35:42:D7:A2:76:D9:94:AE:07:83:A8:CC:29:9E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA932785BA61B156C3DEFD100 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d21db2b1-6d91-38ba-8b11-45e5e7b7d4aa.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 162.158.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:78:5b:a6:1b:15:6c:3d:ef:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=5f1f8f73-cd0f-4a06-ba57-b33688db0a96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:14:14:06:94:16:aa:ed:67:4e:9e:c8:89:4f: 2b:8c:52:36:a7:2e:f9:bf:a6:7d:ce:c6:3b:67:6f: d1:58:90:5d:2f:22:24:53:2b:22:1d:20:9a:89:11: 46:5d:f6:bc:2f:fe:ec:2c:22:80:fb:bd:cb:99:b2: 67:b9:70:73:e8:36:ad:59:5e:63:cb:93:39:56:85: 9e:82:aa:fb:f9:10:28:1c:a1:a1:38:23:63:69:28: 67:82:0a:7c:8a:ed:ac:b1:5f:8b:71:bf:59:be:c1: ec:8d:64:55:48:6e:f1:d1:b5:bc:a2:b4:44:91:40: a7:df:16:22:8a:10:3c:8d:1a:bb:24:4c:81:68:aa: ae:ed:ae:37:0b:bc:f5:40:8c:72:01:2b:70:3c:41: 92:71:8f:2d:c7:11:20:e4:8b:33:52:8a:ed:75:32: da:a7:ae:e8:0d:a3:5a:9c:28:76:3a:2a:a9:60:92: 7d:d8:84:55:32:99:ca:90:d1:a0:b3:bf:eb:1d:a6: 90:f3:9c:bf:6c:6f:09:a4:fd:c3:23:b2:d5:13:1c: 30:07:25:d6:20:22:5a:29:37:f4:4f:6d:59:be:81: c6:3d:ba:17:3c:e5:fd:c8:30:b4:d3:19:bf:5d:ef: ce:7c:d0:d7:ea:64:dc:90:44:08:78:a2:14:20:78: 2d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:71:C5:6D:5B:2B:35:42:D7:A2:76:D9:94:AE:07:83:A8:CC:29:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d21db2b1-6d91-38ba-8b11-45e5e7b7d4aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:6c:95:ce:fd:3d:f2:b2:d6:33:fa:ea:69:34:15:10:87:a3: 76:a3:02:a8:08:fd:22:4e:36:ad:a1:fd:17:a2:7d:ea:b9:8f: d0:61:22:96:af:dd:3f:49:ee:ac:2a:9a:e5:7a:e1:d0:6e:59: e9:f2:ed:af:13:ff:b5:3d:2f:4b:cd:50:eb:2b:b6:91:d1:7a: f4:06:8d:75:a9:84:b3:84:b2:41:0d:55:f4:c9:6c:b5:6b:da: 07:6b:31:68:82:79:3b:5a:38:b5:35:e9:ed:47:94:24:c7:52: 9c:34:ac:51:d4:4d:87:04:49:e7:8b:99:d6:62:b1:4c:41:a4: 47:10:bf:b4:a0:92:d7:84:59:ea:f3:46:c9:d5:95:88:57:ca: e9:80:94:0b:02:d6:6f:69:e2:0f:64:ca:eb:87:3c:ae:b8:09: a8:dd:c9:fb:39:eb:6d:25:78:71:88:ee:d7:ee:28:05:ba:f9: a2:a8:89:53:48:8c:80:0e:72:2c:37:49:b7:35:0f:15:a6:95: f5:49:5c:5a:34:86:91:2b:85:58:29:ba:62:e2:9d:6f:d7:14: 86:e5:b0:5a:95:5c:76:d3:47:13:23:a1:2a:4f:6b:be:69:5c: 49:51:1c:ff:ae:78:92:9e:bf:84:d6:bc:a9:f3:12:8a:eb:e4: 69:9d:29:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMnhbphsVbD3v0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk NWYxZjhmNzMtY2QwZi00YTA2LWJhNTctYjMzNjg4ZGIwYTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshQUBpQWqu1nTp7IiU8rjFI2py75v6Z9zsY7 Z2/RWJBdLyIkUysiHSCaiRFGXfa8L/7sLCKA+73LmbJnuXBz6DatWV5jy5M5VoWe gqr7+RAoHKGhOCNjaShnggp8iu2ssV+Lcb9ZvsHsjWRVSG7x0bW8orREkUCn3xYi ihA8jRq7JEyBaKqu7a43C7z1QIxyAStwPEGScY8txxEg5IszUortdTLap67oDaNa nCh2OiqpYJJ92IRVMpnKkNGgs7/rHaaQ85y/bG8JpP3DI7LVExwwByXWICJaKTf0 T21ZvoHGPboXPOX9yDC00xm/Xe/OfNDX6mTckEQIeKIUIHgtYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZxxW1bKzVC16J22ZSuB4OozCmeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDIxZGIyYjEtNmQ5MS0z OGJhLThiMTEtNDVlNWU3YjdkNGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop6MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdslc79PfKy1jP66mk0FRCHo3ajAqgI/SJONq2h/Reifeq5j9BhIpav 3T9J7qwqmuV64dBuWeny7a8T/7U9L0vNUOsrtpHRevQGjXWphLOEskENVfTJbLVr 2gdrMWiCeTtaOLU16e1HlCTHUpw0rFHUTYcESeeLmdZisUxBpEcQv7SgkteEWerz RsnVlYhXyumAlAsC1m9p4g9kyuuHPK64Cajdyfs5620leHGI7tfuKAW6+aKoiVNI jIAOciw3Sbc1DxWmlfVJXFo0hpErhVgpumLinW/XFIblsFqVXHbTRxMjoSpPa75p XElRHP+ueJKev4TWvKnzEorr5GmdKTQ= -----END CERTIFICATE-----Generated at Sat Nov 1 12:37:00 2025 by rpki-client