$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/03eb4b43-2bc3-3cc7-bb31-6446ec1c66a0.roa File: 03eb4b43-2bc3-3cc7-bb31-6446ec1c66a0.roa (raw, json) Hash identifier: 4+2BP9Rs3dj1xE4m49jnvEVwOuuoh3vp6Kd2yvj5+WA= Subject key identifier: C7:77:DF:84:2B:37:29:7B:F1:A9:56:AD:2F:C6:A0:4B:C5:30:F2:13 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC876634484FF1434AF902420 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/03eb4b43-2bc3-3cc7-bb31-6446ec1c66a0.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 162.159.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:63:44:84:ff:14:34:af:90:24:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=ed5b09d4-a207-45c2-8ab8-15b97f57fb53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:14:ec:0d:e5:b6:f8:d8:cf:b3:ef:74:24:4a: b8:b3:bc:70:dc:34:92:c3:41:bf:c2:3e:c4:dc:94: 00:d3:c5:f2:e2:f3:f8:2b:b4:5a:e5:df:77:bb:6c: 9f:7b:c1:6e:de:b1:43:2f:cd:2e:4f:8e:6f:ec:c3: b6:7d:58:4b:39:33:d7:75:e5:3f:4d:13:bc:9b:b2: 50:a4:4c:56:ea:87:2b:df:3d:5a:0f:33:33:7f:e0: 99:fd:e6:b4:62:ca:38:a1:53:f4:53:c9:7e:9e:e9: 23:f2:de:35:f5:4e:26:8b:44:b8:c5:a4:e5:88:fb: 01:da:2e:c9:0d:0f:3e:6b:88:de:e3:0f:1e:48:21: b5:9a:94:76:7f:cb:8a:e4:50:de:e0:7e:4a:96:a9: a6:8d:ac:50:56:36:26:98:f2:8b:41:3c:a4:3b:83: d1:04:a7:b9:1c:5c:08:ef:ae:8c:52:63:91:f9:eb: f1:b7:ae:2a:88:a0:10:7e:28:c8:02:ed:ea:12:a4: 54:72:19:d0:31:61:a0:36:06:16:46:26:c4:0a:08: da:b6:2d:e1:9f:16:fe:29:78:64:38:17:67:b3:71: ee:d1:17:8b:72:5d:3d:30:96:cf:61:ab:4c:c0:e2: d9:e5:45:2e:29:2c:10:66:f3:93:c3:f3:4c:a4:a0: 53:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:77:DF:84:2B:37:29:7B:F1:A9:56:AD:2F:C6:A0:4B:C5:30:F2:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/03eb4b43-2bc3-3cc7-bb31-6446ec1c66a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.159.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:4a:f7:eb:17:d9:0d:a0:f6:9f:58:01:aa:0d:31:5f:4c:61: dc:1f:9c:22:75:cb:16:f6:4e:29:58:07:8b:c9:a1:b8:ff:14: b8:ab:c6:8d:e4:be:f8:53:57:0d:b4:66:6c:08:4d:c6:fe:dc: d7:4b:c2:be:bf:98:bd:b8:5d:3e:5a:4f:3a:56:2c:a7:5a:b0: 31:9f:7f:84:38:d2:7b:0f:9c:20:ec:73:26:f3:a2:41:22:23: ee:75:d3:e7:21:9e:00:ef:9d:bc:82:a6:a8:fe:88:c4:56:3e: b2:d1:84:3a:c3:c9:90:df:e3:3e:9e:9c:84:94:d7:32:5e:f7: 89:06:27:6c:a8:92:5b:d3:0e:02:6d:f7:dd:6a:96:5f:08:89: 58:ea:55:69:b2:47:7f:43:0b:5f:fa:f2:5e:90:b2:ca:af:21: ba:ff:32:f3:2f:9b:a1:01:fc:0d:b5:db:fe:19:c3:6e:f5:29: a4:19:53:ed:8b:51:fc:15:26:6a:87:68:cc:e9:99:76:2b:75: b2:04:1c:f8:d6:96:e3:58:a3:a3:90:b4:a8:4e:cb:9c:0e:2d: 31:3b:2f:5a:b7:bb:59:9d:d4:fd:c1:66:3c:53:e6:15:7e:a2: 30:9c:11:21:d2:6b:44:42:9a:33:89:79:ce:bf:28:f1:29:eb: 2c:07:14:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdmNEhP8UNK+QJCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZWQ1YjA5ZDQtYTIwNy00NWMyLThhYjgtMTViOTdmNTdmYjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhTsDeW2+NjPs+90JEq4s7xw3DSSw0G/wj7E 3JQA08Xy4vP4K7Ra5d93u2yfe8Fu3rFDL80uT45v7MO2fVhLOTPXdeU/TRO8m7JQ pExW6ocr3z1aDzMzf+CZ/ea0Yso4oVP0U8l+nukj8t419U4mi0S4xaTliPsB2i7J DQ8+a4je4w8eSCG1mpR2f8uK5FDe4H5KlqmmjaxQVjYmmPKLQTykO4PRBKe5HFwI 766MUmOR+evxt64qiKAQfijIAu3qEqRUchnQMWGgNgYWRibECgjati3hnxb+KXhk OBdns3Hu0ReLcl09MJbPYatMwOLZ5UUuKSwQZvOTw/NMpKBTLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMd334QrNyl78alWrS/GoEvFMPITMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDNlYjRiNDMtMmJjMy0z Y2M3LWJiMzEtNjQ0NmVjMWM2NmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop8EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhK9+sX2Q2g9p9YAaoNMV9MYdwfnCJ1yxb2TilYB4vJobj/FLirxo3k vvhTVw20ZmwITcb+3NdLwr6/mL24XT5aTzpWLKdasDGff4Q40nsPnCDscybzokEi I+510+chngDvnbyCpqj+iMRWPrLRhDrDyZDf4z6enISU1zJe94kGJ2yoklvTDgJt 991qll8IiVjqVWmyR39DC1/68l6QssqvIbr/MvMvm6EB/A212/4Zw271KaQZU+2L UfwVJmqHaMzpmXYrdbIEHPjWluNYo6OQtKhOy5wOLTE7L1q3u1md1P3BZjxT5hV+ ojCcESHSa0RCmjOJec6/KPEp6ywHFKI= -----END CERTIFICATE-----Generated at Sat Aug 23 14:47:47 2025 by rpki-client