$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e9d6a6b2-ee75-3b27-9f06-44c8b7bf5372.roa File: e9d6a6b2-ee75-3b27-9f06-44c8b7bf5372.roa (raw, json) Hash identifier: 1YQvDFzX6/D38NSO7qEOXVAOoX9A2xB5+b5nb26kMAY= Subject key identifier: 2A:D6:9E:92:2D:6F:C2:38:77:73:0B:AD:21:7D:44:59:04:88:91:B8 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD07F211EC12D62CE18D80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e9d6a6b2-ee75-3b27-9f06-44c8b7bf5372.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 162.158.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:07:f2:11:ec:12:d6:2c:e1:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=b655e908-0e5e-4d8a-bcc8-a854e15ba57e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:79:e1:2d:da:a0:56:91:ab:ac:bc:27:41:84: 3c:5d:cd:3f:f7:cf:ab:c8:a2:13:f7:52:0d:00:e9: ed:21:d9:18:dc:5c:0d:4a:a4:26:19:ae:15:f0:86: 0c:2c:ad:bb:78:63:a8:d7:e5:2b:1a:f2:26:4a:44: ff:e9:8c:06:35:e1:72:48:6d:fb:b6:20:65:de:33: e1:0c:f5:8e:f5:d4:ec:0d:aa:f4:43:65:7c:eb:cf: b3:a8:9b:88:9f:55:e8:fd:8b:d1:95:32:60:0c:ce: 6b:78:cc:69:d8:43:c0:f7:48:ff:ea:b5:2c:cb:6b: fc:7e:19:69:d8:fe:15:d5:b4:9e:16:a7:17:aa:12: 7f:19:c3:6b:e7:ae:7b:ec:f1:03:6b:86:8c:6d:45: e7:d4:37:d7:64:0e:e7:ec:2e:e6:64:be:a4:f3:34: 4a:26:e5:86:7c:ad:17:ba:92:14:74:3a:82:e4:e2: d9:07:8b:78:af:60:b3:22:ca:d6:64:7a:6f:d4:cf: b5:53:a0:ea:39:14:3a:8c:37:6a:bb:63:b8:cd:4c: 24:91:f1:56:4b:6c:14:8a:47:a0:18:08:8d:c9:92: 50:c8:1e:ab:d6:38:dd:1e:3c:0c:c4:56:66:e5:f6: 40:2b:cd:45:f6:a7:13:19:cd:d1:e6:c4:b5:c6:a0: a4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D6:9E:92:2D:6F:C2:38:77:73:0B:AD:21:7D:44:59:04:88:91:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e9d6a6b2-ee75-3b27-9f06-44c8b7bf5372.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:16:21:7a:c0:4f:36:6b:02:37:81:bd:80:f7:a3:29:a9:b8: cf:3d:d2:eb:b6:eb:b7:c0:79:a5:49:e5:33:e2:74:f6:b2:d4: 4e:aa:32:bc:dd:8b:3a:42:f5:c9:a8:f7:02:1d:ae:80:5b:b6: 1d:74:3f:03:a2:ff:b0:d4:1c:dc:f5:69:e3:2b:28:14:58:c8: 1d:2c:df:7a:1e:df:b4:ba:42:8c:0c:92:06:75:9a:78:02:89: 21:3a:9c:d9:5e:cd:33:f2:a4:84:f1:f7:1d:6b:a6:05:76:f8: ab:90:15:df:a2:f7:f4:cc:18:a6:a6:3d:5d:f0:7c:ff:ac:ee: a8:88:6a:8f:d6:ac:1b:0d:8c:1b:79:57:93:54:ae:76:96:67: c9:1e:c3:e2:00:c9:a8:eb:f0:e4:ea:77:42:91:63:cf:a7:2b: dc:89:4d:df:0d:f7:40:0e:bc:66:c9:a7:ed:6a:d1:a0:71:4c: a9:4e:2f:23:bb:d0:eb:0f:13:91:60:32:3f:bd:c8:1e:9e:f4: b5:4d:07:e5:a0:76:8e:3d:e7:e8:1d:78:14:70:bf:b5:4e:07: 3b:69:52:f6:16:de:9f:7b:1e:f5:fe:ab:02:4e:e1:e6:ab:aa: 1c:7a:f0:63:11:16:a5:e4:bb:db:3b:5e:d8:a8:8a:e9:dc:6f: c2:fa:ed:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzQfyEewS1izhjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk YjY1NWU5MDgtMGU1ZS00ZDhhLWJjYzgtYTg1NGUxNWJhNTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HnhLdqgVpGrrLwnQYQ8Xc0/98+ryKIT91IN AOntIdkY3FwNSqQmGa4V8IYMLK27eGOo1+UrGvImSkT/6YwGNeFySG37tiBl3jPh DPWO9dTsDar0Q2V868+zqJuIn1Xo/YvRlTJgDM5reMxp2EPA90j/6rUsy2v8fhlp 2P4V1bSeFqcXqhJ/GcNr56577PEDa4aMbUXn1DfXZA7n7C7mZL6k8zRKJuWGfK0X upIUdDqC5OLZB4t4r2CzIsrWZHpv1M+1U6DqORQ6jDdqu2O4zUwkkfFWS2wUikeg GAiNyZJQyB6r1jjdHjwMxFZm5fZAK81F9qcTGc3R5sS1xqCkzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrWnpItb8I4d3MLrSF9RFkEiJG4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZTlkNmE2YjItZWU3NS0z YjI3LTlmMDYtNDRjOGI3YmY1MzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDop5YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcWIXrATzZrAjeBvYD3oympuM890uu267fAeaVJ5TPidPay1E6qMrzd izpC9cmo9wIdroBbth10PwOi/7DUHNz1aeMrKBRYyB0s33oe37S6QowMkgZ1mngC iSE6nNlezTPypITx9x1rpgV2+KuQFd+i9/TMGKamPV3wfP+s7qiIao/WrBsNjBt5 V5NUrnaWZ8kew+IAyajr8OTqd0KRY8+nK9yJTd8N90AOvGbJp+1q0aBxTKlOLyO7 0OsPE5FgMj+9yB6e9LVNB+Wgdo495+gdeBRwv7VOBztpUvYW3p97HvX+qwJO4ear qhx68GMRFqXku9s7Xtioiuncb8L67ZQ= -----END CERTIFICATE-----Generated at Sat Nov 1 12:31:17 2025 by rpki-client