$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d7a20a8f-f2a3-3500-8657-5af0d6aa0424.roa File: d7a20a8f-f2a3-3500-8657-5af0d6aa0424.roa (raw, json) Hash identifier: 11YVfZufjTjdw7rKrA6hMbbqHyWJ5giyCtUz7Ka14wQ= Subject key identifier: 17:18:2B:C4:9F:19:51:64:01:A8:F0:90:C4:05:AF:23:E8:F1:2A:85 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AFBEB04D82CD6CE9C882D0F00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d7a20a8f-f2a3-3500-8657-5af0d6aa0424.roa Signing time: Tue 26 Aug 2025 11:22:12 +0000 ROA not before: Tue 26 Aug 2025 11:22:12 +0000 ROA not after: Mon 24 Nov 2025 12:22:12 +0000 asID: 14789 IP address blocks: 162.158.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fb:eb:04:d8:2c:d6:ce:9c:88:2d:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 26 11:22:12 2025 GMT Not After : Nov 24 12:22:12 2025 GMT Subject: CN=06977a87-7856-4afa-958a-d9b2f5cd0f4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c8:88:00:f2:19:5e:38:ab:cd:ce:ac:b0:cc: e7:6e:4d:52:bc:f0:40:fa:8b:02:02:7a:cf:bb:35: c8:2c:35:b7:08:2c:d0:a7:57:3f:67:5a:4a:86:3c: 4b:33:e7:e6:5a:e0:85:d2:69:cc:2f:62:ea:ad:08: 64:4b:ab:12:19:31:26:d3:f8:6e:f7:ba:18:14:b4: 6c:32:2a:e8:51:ff:0a:97:10:22:0f:de:65:2a:aa: b3:94:f6:38:62:ba:a3:4a:fc:34:06:a4:7a:df:2f: 16:f1:1e:87:5f:8c:22:96:1b:ae:85:25:3f:42:d3: 23:e0:a7:d5:97:bf:88:d5:ea:9a:5c:a0:20:bc:55: c1:84:06:2c:c8:f2:18:7d:38:ca:31:05:a3:7e:c0: bb:72:f5:e1:11:95:ec:a9:d9:60:25:cb:fd:43:eb: 17:4f:6c:a2:f0:fe:fc:4f:6a:63:82:10:83:ab:84: 6d:6d:9c:7c:fd:03:d7:c5:85:01:da:e2:f0:80:ca: 27:d0:38:86:b4:66:ff:0d:b5:71:df:5e:4b:a3:35: 74:c9:6d:91:02:7f:d7:4e:61:cd:41:fd:66:c8:1f: 4c:c5:35:36:89:5d:22:a6:2b:83:31:11:cd:b4:19: 47:1b:10:1f:22:fe:d5:65:61:83:c2:64:8d:4b:47: ef:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:18:2B:C4:9F:19:51:64:01:A8:F0:90:C4:05:AF:23:E8:F1:2A:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d7a20a8f-f2a3-3500-8657-5af0d6aa0424.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:15:38:aa:3b:90:fa:fa:76:52:56:66:5b:ff:36:8c:0f:52: 5b:9b:5b:a5:e2:88:77:e6:ca:5f:98:6d:3c:28:b8:61:f8:14: cd:64:5a:9e:11:6d:69:bb:94:1c:f8:27:eb:a0:7f:37:ec:4a: 21:19:ed:a6:09:f4:9c:ea:de:8a:30:17:83:e1:6a:65:a0:6f: a4:2e:65:c2:e5:12:87:a6:7b:74:91:6e:57:c9:2d:2e:42:66: 38:42:51:d5:a8:44:ff:7d:16:f1:9b:85:11:d3:60:d2:bc:be: 61:11:e4:52:a6:3c:ed:8f:42:e2:b6:d8:92:83:03:7d:21:44: 97:2a:9e:77:bc:ea:ce:a4:90:4d:e5:a8:a1:91:0c:ab:9b:ae: 2a:b7:32:61:04:21:81:fa:2c:46:cd:72:a8:f0:d9:78:3f:1e: f8:a2:29:74:6c:d2:42:af:4f:2e:c0:45:3c:58:27:a1:b6:53: df:0d:6b:b3:08:ab:92:e1:19:9d:57:13:4b:c1:55:e8:cf:f6: 78:6f:2f:fd:c5:93:f7:4a:a2:a7:53:9b:41:66:56:d6:2e:46: 0e:bf:82:8e:80:ea:a7:a6:45:97:3f:8e:f6:cc:66:3c:b0:d2: 54:7d:e2:91:41:69:c0:2e:57:e4:1b:c9:56:38:e9:f9:e9:60: 66:77:ca:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr76wTYLNbOnIgtDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgyNjExMjIxMloXDTI1MTEyNDEyMjIxMlowLzEtMCsGA1UEAxMk MDY5NzdhODctNzg1Ni00YWZhLTk1OGEtZDliMmY1Y2QwZjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMiIAPIZXjirzc6ssMznbk1SvPBA+osCAnrP uzXILDW3CCzQp1c/Z1pKhjxLM+fmWuCF0mnML2LqrQhkS6sSGTEm0/hu97oYFLRs MiroUf8KlxAiD95lKqqzlPY4YrqjSvw0BqR63y8W8R6HX4wilhuuhSU/QtMj4KfV l7+I1eqaXKAgvFXBhAYsyPIYfTjKMQWjfsC7cvXhEZXsqdlgJcv9Q+sXT2yi8P78 T2pjghCDq4RtbZx8/QPXxYUB2uLwgMon0DiGtGb/DbVx315LozV0yW2RAn/XTmHN Qf1myB9MxTU2iV0ipiuDMRHNtBlHGxAfIv7VZWGDwmSNS0fvzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcYK8SfGVFkAajwkMQFryPo8SqFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDdhMjBhOGYtZjJhMy0z NTAwLTg2NTctNWFmMGQ2YWEwNDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop5iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQVOKo7kPr6dlJWZlv/NowPUlubW6XiiHfmyl+YbTwouGH4FM1kWp4R bWm7lBz4J+ugfzfsSiEZ7aYJ9Jzq3oowF4PhamWgb6QuZcLlEoeme3SRblfJLS5C ZjhCUdWoRP99FvGbhRHTYNK8vmER5FKmPO2PQuK22JKDA30hRJcqnne86s6kkE3l qKGRDKubriq3MmEEIYH6LEbNcqjw2Xg/HviiKXRs0kKvTy7ARTxYJ6G2U98Na7MI q5LhGZ1XE0vBVejP9nhvL/3Fk/dKoqdTm0FmVtYuRg6/go6A6qemRZc/jvbMZjyw 0lR94pFBacAuV+QbyVY46fnpYGZ3yic= -----END CERTIFICATE-----Generated at Mon Sep 8 20:45:40 2025 by rpki-client