$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fe7c6c28-c683-37a9-ab15-e3bb519b2b67.roa File: fe7c6c28-c683-37a9-ab15-e3bb519b2b67.roa (raw, json) Hash identifier: 6dww3h4Pv5582api7oymo074S/beURwXeR1rmqK8vbs= Subject key identifier: 22:C1:7F:08:86:77:0A:AF:15:02:54:D7:3E:23:75:4E:57:A7:3E:31 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667C5F843A5F950E3188F00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fe7c6c28-c683-37a9-ab15-e3bb519b2b67.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 162.158.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:c5:f8:43:a5:f9:50:e3:18:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=bc85b6cd-dbf4-4550-be5a-05d51f9494c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ba:3f:be:89:81:74:b0:73:4a:3d:42:04:c2: bc:fc:b6:ad:4b:de:2f:95:37:1a:05:9d:c1:9a:5c: 7a:18:53:b2:7b:f8:21:92:13:2f:d6:ed:53:da:49: 4d:78:69:dc:3f:b3:24:45:e6:f1:df:51:ee:8c:d2: fb:60:cd:b0:81:b5:09:3c:40:0e:cd:cf:93:fc:d4: 52:48:3f:1f:5d:c5:90:f0:10:7c:8f:bd:a3:47:6c: d6:87:b2:0f:b3:f5:bf:e6:e0:7b:ba:31:b8:95:c7: 61:af:0d:10:0a:36:25:08:1d:cb:8f:3d:08:6f:94: 06:65:e4:35:84:38:a9:d9:81:0e:78:d0:77:c0:77: 02:c8:f0:35:ca:66:7f:cf:cd:4e:8d:f1:2f:48:8c: 1c:4d:43:fc:22:7f:b4:c6:1a:04:13:98:50:fe:dc: 96:95:2a:13:ea:60:59:af:c9:c2:1e:72:1c:85:99: 49:64:9c:4d:2b:7e:57:0d:df:4c:51:13:16:f4:83: c0:72:1f:9a:c3:28:00:c4:fb:8b:3c:a1:b1:d0:fd: 43:d6:a4:ce:0b:82:1c:6c:e1:66:23:4a:ca:5a:a7: ca:b3:f9:d8:14:53:e2:ca:4a:dc:b1:58:e4:1f:36: a8:21:ee:f5:cd:89:8e:2f:df:4e:27:ac:ae:cb:61: e2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C1:7F:08:86:77:0A:AF:15:02:54:D7:3E:23:75:4E:57:A7:3E:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fe7c6c28-c683-37a9-ab15-e3bb519b2b67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:08:2b:07:55:1b:0f:03:a7:29:1b:63:5d:e9:df:28:a1:fe: cc:71:5d:a6:5c:01:cc:c4:f3:fc:89:e4:6f:83:fe:48:f6:da: 1e:ea:c9:fa:5a:09:5a:ce:ff:3f:13:be:47:bd:e5:b9:0e:e0: 01:bd:89:92:d9:19:0a:50:b8:b6:25:a3:1b:80:eb:85:50:84: cf:a3:ef:c3:26:5d:fe:10:e8:6b:1a:40:d8:92:c0:16:91:cb: 3d:eb:29:c8:9c:ec:1e:0c:02:81:e4:94:90:48:44:24:1c:43: 6c:4a:67:39:ff:00:76:f4:fa:e0:7f:a8:57:e5:89:3d:85:23: ab:b0:f2:4b:ac:d8:97:09:e5:28:38:ed:31:75:8f:07:ef:09: 48:c6:07:28:37:2a:50:c4:bc:a4:d7:2b:d5:da:8b:df:18:4f: 6b:07:39:b1:c0:23:d3:35:40:17:45:05:ad:47:c2:a6:b8:6b: 1f:fd:ec:a8:f6:c0:90:71:a1:48:38:2d:02:4c:22:97:4a:99: d8:08:01:7b:30:fe:79:e0:1f:c5:83:76:2f:34:c3:b3:1b:82: 53:0f:f6:82:1f:b3:a5:ed:f8:35:39:61:66:a9:6e:26:e7:18: cf:61:86:1c:61:f0:78:a7:a9:a0:d8:09:e1:e2:8f:79:ae:14: 6a:c9:3e:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ8X4Q6X5UOMYjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk YmM4NWI2Y2QtZGJmNC00NTUwLWJlNWEtMDVkNTFmOTQ5NGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobo/vomBdLBzSj1CBMK8/LatS94vlTcaBZ3B mlx6GFOye/ghkhMv1u1T2klNeGncP7MkRebx31HujNL7YM2wgbUJPEAOzc+T/NRS SD8fXcWQ8BB8j72jR2zWh7IPs/W/5uB7ujG4lcdhrw0QCjYlCB3Ljz0Ib5QGZeQ1 hDip2YEOeNB3wHcCyPA1ymZ/z81OjfEvSIwcTUP8In+0xhoEE5hQ/tyWlSoT6mBZ r8nCHnIchZlJZJxNK35XDd9MURMW9IPAch+awygAxPuLPKGx0P1D1qTOC4IcbOFm I0rKWqfKs/nYFFPiykrcsVjkHzaoIe71zYmOL99OJ6yuy2HiNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLBfwiGdwqvFQJU1z4jdU5Xpz4xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmU3YzZjMjgtYzY4My0z N2E5LWFiMTUtZTNiYjUxOWIyYjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop68MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK8IKwdVGw8DpykbY13p3yih/sxxXaZcAczE8/yJ5G+D/kj22h7qyfpa CVrO/z8Tvke95bkO4AG9iZLZGQpQuLYloxuA64VQhM+j78MmXf4Q6GsaQNiSwBaR yz3rKcic7B4MAoHklJBIRCQcQ2xKZzn/AHb0+uB/qFfliT2FI6uw8kus2JcJ5Sg4 7TF1jwfvCUjGByg3KlDEvKTXK9Xai98YT2sHObHAI9M1QBdFBa1Hwqa4ax/97Kj2 wJBxoUg4LQJMIpdKmdgIAXsw/nngH8WDdi80w7MbglMP9oIfs6Xt+DU5YWapbibn GM9hhhxh8HinqaDYCeHij3muFGrJPnM= -----END CERTIFICATE-----Generated at Sat Nov 1 10:03:20 2025 by rpki-client