$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fa33fc89-9f73-3872-a795-1e79869a2d7d.roa File: fa33fc89-9f73-3872-a795-1e79869a2d7d.roa (raw, json) Hash identifier: iFlbsjRU+j3yX6DG6WM3qIV4KqKKeiPXaNnEiSBfZvo= Subject key identifier: BB:80:DA:3C:DF:5F:1D:6E:F3:75:44:51:17:D0:FC:06:4B:76:A8:7F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA9328B5F26F80852BE857F60 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fa33fc89-9f73-3872-a795-1e79869a2d7d.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 162.159.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:8b:5f:26:f8:08:52:be:85:7f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=8ada6594-cda0-4f12-b92b-1f1e905d701b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:83:78:2d:44:0b:6e:2f:f8:2d:84:f1:f3:d6: eb:57:b1:12:81:39:e6:ad:9a:b8:22:39:96:9f:08: 7c:7b:df:39:1d:64:f8:68:3c:8d:26:99:d2:b2:05: 05:bd:bb:4f:24:01:4b:19:52:06:af:b5:93:89:97: 8e:49:bf:3a:a1:ee:7c:66:35:1e:9e:1b:d2:c6:15: fc:9c:c5:d6:13:27:f7:22:e0:84:fc:a3:35:d3:e7: d4:c5:3f:80:4d:31:31:60:ae:5d:b2:56:8a:c4:d1: 19:4c:ff:d6:97:09:c8:6f:82:a9:8e:04:38:fe:a5: b6:67:3d:a2:0a:48:83:67:c9:0d:91:6f:39:20:f8: 07:01:49:d7:96:c0:24:ef:31:1a:78:ed:c3:d1:39: 38:93:41:72:5a:2f:41:1e:2b:5d:84:88:2a:59:fd: 12:17:3b:0a:91:9a:c7:d8:b4:45:01:57:d2:ba:c3: e8:a9:80:1b:37:0e:73:e4:86:67:eb:36:ac:74:a0: bf:87:37:38:94:e7:6a:8c:62:bd:bc:e1:58:a1:a7: 33:ef:32:41:21:f6:23:df:33:1b:5e:41:ea:c1:bc: ac:6e:21:40:87:19:db:f4:3e:11:60:dd:05:ea:99: 4c:b5:49:a6:5e:32:5a:e4:8e:5d:c7:1b:01:80:8c: 38:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:80:DA:3C:DF:5F:1D:6E:F3:75:44:51:17:D0:FC:06:4B:76:A8:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fa33fc89-9f73-3872-a795-1e79869a2d7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.159.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:d2:a8:c3:28:42:ed:43:6d:fa:5b:b9:ac:8e:a0:91:14:c9: 67:68:7b:68:08:04:d6:68:2f:30:66:14:f5:38:88:6d:3c:25: 50:95:1a:e9:f3:d9:14:09:cb:88:9f:22:a8:e7:07:ac:93:3e: eb:3d:36:d5:45:d4:2a:75:7a:5a:7f:12:ab:95:b4:49:5e:e3: e7:d8:2d:af:ca:5c:e0:c0:6b:42:17:cd:88:a1:46:4b:06:54: 04:cf:ae:33:a3:56:2e:15:ca:02:f7:e8:8e:22:b1:79:b6:ea: d8:49:64:94:d9:32:b8:02:df:54:4b:8e:d8:d2:51:f0:92:d6: 83:7b:de:f9:2a:5f:d6:a5:26:17:5e:38:bc:b1:6f:af:10:65: 76:90:fb:a9:38:03:0a:f4:2a:df:bd:2f:4e:b8:b8:2e:fb:c5: 67:1e:6d:26:33:73:63:2d:d2:28:23:24:08:90:7d:ba:74:c2: 2d:af:c5:3f:08:81:22:99:07:80:61:50:05:bf:ca:1d:9c:ce: 71:a2:ab:57:86:c3:1a:84:ae:80:13:f1:31:99:7a:91:bb:c6: 5b:92:d6:80:e5:be:fa:ee:68:f3:2c:4b:6a:97:09:f3:58:84: 83:e0:3b:e7:54:6f:fa:0c:cc:4f:a1:e0:41:9e:f0:2a:f9:e3: 41:d1:21:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMotfJvgIUr6Ff2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk OGFkYTY1OTQtY2RhMC00ZjEyLWI5MmItMWYxZTkwNWQ3MDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoN4LUQLbi/4LYTx89brV7ESgTnmrZq4IjmW nwh8e985HWT4aDyNJpnSsgUFvbtPJAFLGVIGr7WTiZeOSb86oe58ZjUenhvSxhX8 nMXWEyf3IuCE/KM10+fUxT+ATTExYK5dslaKxNEZTP/WlwnIb4KpjgQ4/qW2Zz2i CkiDZ8kNkW85IPgHAUnXlsAk7zEaeO3D0Tk4k0FyWi9BHitdhIgqWf0SFzsKkZrH 2LRFAVfSusPoqYAbNw5z5IZn6zasdKC/hzc4lOdqjGK9vOFYoacz7zJBIfYj3zMb XkHqwbysbiFAhxnb9D4RYN0F6plMtUmmXjJa5I5dxxsBgIw4dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuA2jzfXx1u83VEURfQ/AZLdqh/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmEzM2ZjODktOWY3My0z ODcyLWE3OTUtMWU3OTg2OWEyZDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEop/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArSqMMoQu1DbfpbuayOoJEUyWdoe2gIBNZoLzBmFPU4iG08JVCVGunz 2RQJy4ifIqjnB6yTPus9NtVF1Cp1elp/EquVtEle4+fYLa/KXODAa0IXzYihRksG VATPrjOjVi4VygL36I4isXm26thJZJTZMrgC31RLjtjSUfCS1oN73vkqX9alJhde OLyxb68QZXaQ+6k4Awr0Kt+9L064uC77xWcebSYzc2Mt0igjJAiQfbp0wi2vxT8I gSKZB4BhUAW/yh2cznGiq1eGwxqEroAT8TGZepG7xluS1oDlvvruaPMsS2qXCfNY hIPgO+dUb/oMzE+h4EGe8Cr540HRIac= -----END CERTIFICATE-----Generated at Sat Nov 1 12:32:42 2025 by rpki-client