$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ed5865bc-56ad-32da-b5e8-3a020dbe9cba.roa File: ed5865bc-56ad-32da-b5e8-3a020dbe9cba.roa (raw, json) Hash identifier: zQyNjngCB3TZFafgnT6yMRlSkBbbEV/oqI95VfQhxgo= Subject key identifier: 3C:CA:92:87:02:8C:DC:D3:EB:7B:AD:E1:89:71:77:DE:10:99:D8:5F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD0DEB55323E4D3A9B0040 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ed5865bc-56ad-32da-b5e8-3a020dbe9cba.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 162.158.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:0d:eb:55:32:3e:4d:3a:9b:00:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=df140828-2ad0-4f5c-942a-28478d081e85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6b:56:13:6c:58:58:b7:0f:d7:f1:e8:35:33: 16:fa:6b:7c:bd:fb:37:25:52:fd:3a:4e:cc:eb:f2: ca:9e:6f:c5:31:5a:8e:f8:92:7a:88:6d:12:9d:ac: b5:23:fc:47:18:fe:03:ac:85:33:5d:e9:59:ca:19: 8d:ad:6b:df:eb:05:e6:8c:cb:1e:b9:3d:8c:98:35: 07:9c:3f:83:80:e6:5d:26:18:14:a3:a5:58:06:29: b0:1e:3b:fc:6b:75:24:3f:e8:89:95:24:e0:88:65: f2:10:6c:0c:75:51:b7:8c:5a:a2:27:7f:fb:c7:29: 39:bb:86:d7:0d:b8:6f:c5:cc:e9:b2:0c:12:bb:57: e4:3f:49:23:a0:11:7d:8c:4e:ec:4c:66:7f:91:59: e7:f9:a5:28:cf:e4:57:da:82:bb:7a:83:53:3f:80: 7b:b7:5e:7c:5a:79:b6:88:34:57:2b:98:58:47:e7: 36:3f:a4:1d:74:98:22:1c:37:72:52:ed:33:f6:82: 27:05:1c:cd:1d:bb:18:b4:de:a8:f4:b9:52:42:ca: 96:06:d3:b0:be:59:e8:48:8c:9a:f9:9c:4b:6c:8c: ca:32:7e:d1:e6:01:86:33:6d:21:e4:32:2c:94:0b: cc:62:6e:df:34:40:2e:d7:e0:74:84:ac:a6:4d:b2: 35:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:CA:92:87:02:8C:DC:D3:EB:7B:AD:E1:89:71:77:DE:10:99:D8:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ed5865bc-56ad-32da-b5e8-3a020dbe9cba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:8e:a9:4b:00:d6:42:f7:1a:71:b7:2b:d8:13:2a:5c:ac:0a: be:dc:4d:75:6d:57:7d:85:8b:7a:3a:c7:be:91:a6:a1:c4:28: c6:9b:00:6e:02:4f:26:4e:ad:21:a0:b3:a9:ea:31:53:15:a0: a2:93:a8:dc:37:eb:dc:b8:75:a3:4a:5c:54:7c:de:89:17:98: da:da:72:04:38:4b:a3:67:3f:4c:de:29:ce:1a:11:55:b2:30: fa:5a:88:fd:03:fe:41:7b:cb:fe:53:9b:4b:86:74:44:b4:e5: ba:d6:54:b5:76:ba:98:20:a7:ef:ff:a7:fa:f8:ce:b3:6e:78: 27:fe:dd:58:57:11:fd:b0:2d:21:03:df:df:31:fe:95:e0:0b: 60:e4:e8:65:ba:41:52:a4:99:27:1e:9a:c8:41:99:d3:6d:53: 69:d2:23:ed:81:de:f9:8d:ee:17:9a:c3:f6:c8:2d:2f:d7:95: c6:93:0c:35:07:c7:f7:3e:c8:1e:dc:e7:dc:02:3f:1b:74:3a: 58:53:5a:63:fd:6d:be:3d:ab:2a:21:c5:d4:31:af:e5:0b:88: 51:02:1c:5a:6a:8a:53:31:ae:1a:dd:93:37:09:2e:a1:aa:bd: 0f:5e:71:eb:32:3f:55:3c:bd:a4:3b:56:87:d4:b8:ef:15:7a: 09:7f:f7:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzQ3rVTI+TTqbAEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk ZGYxNDA4MjgtMmFkMC00ZjVjLTk0MmEtMjg0NzhkMDgxZTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2tWE2xYWLcP1/HoNTMW+mt8vfs3JVL9Ok7M 6/LKnm/FMVqO+JJ6iG0Snay1I/xHGP4DrIUzXelZyhmNrWvf6wXmjMseuT2MmDUH nD+DgOZdJhgUo6VYBimwHjv8a3UkP+iJlSTgiGXyEGwMdVG3jFqiJ3/7xyk5u4bX DbhvxczpsgwSu1fkP0kjoBF9jE7sTGZ/kVnn+aUoz+RX2oK7eoNTP4B7t158Wnm2 iDRXK5hYR+c2P6QddJgiHDdyUu0z9oInBRzNHbsYtN6o9LlSQsqWBtOwvlnoSIya +ZxLbIzKMn7R5gGGM20h5DIslAvMYm7fNEAu1+B0hKymTbI1AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzKkocCjNzT63ut4Ylxd94QmdhfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWQ1ODY1YmMtNTZhZC0z MmRhLWI1ZTgtM2EwMjBkYmU5Y2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop6eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSOqUsA1kL3GnG3K9gTKlysCr7cTXVtV32Fi3o6x76RpqHEKMabAG4C TyZOrSGgs6nqMVMVoKKTqNw369y4daNKXFR83okXmNracgQ4S6NnP0zeKc4aEVWy MPpaiP0D/kF7y/5Tm0uGdES05brWVLV2upggp+//p/r4zrNueCf+3VhXEf2wLSED 398x/pXgC2Dk6GW6QVKkmScemshBmdNtU2nSI+2B3vmN7heaw/bILS/XlcaTDDUH x/c+yB7c59wCPxt0OlhTWmP9bb49qyohxdQxr+ULiFECHFpqilMxrhrdkzcJLqGq vQ9ecesyP1U8vaQ7VofUuO8Vegl/960= -----END CERTIFICATE-----Generated at Sat Nov 1 12:32:47 2025 by rpki-client