$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/09baa7be-9ccb-321e-a5dc-4ca7fd01b1be.roa File: 09baa7be-9ccb-321e-a5dc-4ca7fd01b1be.roa (raw, json) Hash identifier: fnzqOLP1hrB2urnxBg7AzCYfaZ9haQOW+1l9lL6RDcY= Subject key identifier: 00:EB:BB:30:50:5D:19:52:13:0C:90:16:52:C5:0E:23:89:8B:A4:0B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC8766E0BD68A4A3C87155080 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/09baa7be-9ccb-321e-a5dc-4ca7fd01b1be.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 162.158.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:6e:0b:d6:8a:4a:3c:87:15:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=05b588c3-2023-486f-a74c-7680d05d7558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b0:f4:5d:6f:6d:7a:a7:d4:e6:52:18:45:52: 65:a9:29:d5:71:13:5e:30:65:c5:6f:fd:1b:b6:79: e5:ef:6c:5f:da:ed:6c:c2:1b:94:fe:5d:ae:85:ed: 88:42:b9:12:4c:db:65:a1:15:9e:89:60:4b:fb:c9: 7b:f2:ca:71:92:f3:10:d5:20:f8:99:1e:60:8d:17: ca:98:86:9c:f2:78:73:d8:0b:7a:60:0a:28:44:d6: 58:32:fb:57:55:0b:1b:0e:3a:59:02:8e:ed:c2:d7: ee:b9:8b:60:a5:66:4a:26:e1:13:ef:2c:03:fa:0e: 07:95:8b:9b:19:2e:4b:b7:a5:b8:09:52:08:9b:31: 18:0b:a7:f6:0f:32:8c:76:c8:02:42:53:04:c6:1b: 2a:a8:c9:97:16:e1:6c:1a:e8:2d:c3:72:0a:22:5f: 5d:d2:d4:88:c1:76:a3:77:92:40:53:a6:49:52:13: 64:18:16:cb:53:bb:ac:cb:4b:87:d4:b0:be:5a:37: 30:e4:03:51:65:ed:f8:fe:eb:67:d4:5e:92:bb:60: 89:46:07:8f:38:45:0a:d0:3a:d6:ea:39:ea:89:50: 87:ea:48:4e:7e:69:1e:80:77:58:bb:8a:ec:a9:24: ee:c4:f2:17:f7:ea:6c:c4:f0:47:ef:e6:c8:65:f9: 1d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:EB:BB:30:50:5D:19:52:13:0C:90:16:52:C5:0E:23:89:8B:A4:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/09baa7be-9ccb-321e-a5dc-4ca7fd01b1be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:ed:7f:b7:e5:8f:10:56:9e:b3:f1:f8:13:06:a7:2b:cc:a9: ff:cd:d5:df:30:71:9d:90:09:2d:25:f4:5e:e4:59:50:f5:1d: a9:6e:35:67:92:be:eb:08:7a:cb:33:32:d9:cf:d8:c2:96:d2: 12:16:58:64:97:3f:55:aa:a8:e5:35:96:d7:cc:00:7a:08:4b: 50:be:91:38:7a:1a:57:15:73:ca:64:d0:ec:c8:dc:ec:36:90: c2:1f:64:d0:06:ef:bd:bc:6f:01:74:e8:ae:d3:9a:ab:d7:3a: 4d:ed:57:43:b6:9f:02:e8:b1:f1:37:b5:be:b1:14:05:76:aa: f8:29:dc:7b:e2:d6:73:68:e3:5b:a4:5d:98:a6:8e:bc:18:cc: 81:d9:6f:50:68:85:5e:98:3e:ee:b6:c7:57:0b:cc:aa:cd:a1: b8:e6:57:dc:26:75:49:09:e6:93:4c:fe:ce:2c:e0:df:0f:dd: 0e:f9:eb:05:dd:06:7d:6b:a0:18:61:41:2d:94:ce:b7:66:2f: 67:c8:89:c8:cb:19:ba:f5:c4:c4:93:96:9a:f7:ad:a1:2b:2b: 16:d0:ec:af:cf:93:ca:f5:90:db:37:36:68:44:6a:e8:22:7b: ba:70:9b:e2:67:5f:8f:37:94:91:64:f6:8c:43:d8:82:cc:92: 61:5b:30:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdm4L1opKPIcVUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk MDViNTg4YzMtMjAyMy00ODZmLWE3NGMtNzY4MGQwNWQ3NTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7D0XW9teqfU5lIYRVJlqSnVcRNeMGXFb/0b tnnl72xf2u1swhuU/l2uhe2IQrkSTNtloRWeiWBL+8l78spxkvMQ1SD4mR5gjRfK mIac8nhz2At6YAooRNZYMvtXVQsbDjpZAo7twtfuuYtgpWZKJuET7ywD+g4HlYub GS5Lt6W4CVIImzEYC6f2DzKMdsgCQlMExhsqqMmXFuFsGugtw3IKIl9d0tSIwXaj d5JAU6ZJUhNkGBbLU7usy0uH1LC+Wjcw5ANRZe34/utn1F6Su2CJRgePOEUK0DrW 6jnqiVCH6khOfmkegHdYu4rsqSTuxPIX9+psxPBH7+bIZfkdlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADruzBQXRlSEwyQFlLFDiOJi6QLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDliYWE3YmUtOWNjYi0z MjFlLWE1ZGMtNGNhN2ZkMDFiMWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop6JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvtf7fljxBWnrPx+BMGpyvMqf/N1d8wcZ2QCS0l9F7kWVD1HaluNWeS vusIesszMtnP2MKW0hIWWGSXP1WqqOU1ltfMAHoIS1C+kTh6GlcVc8pk0OzI3Ow2 kMIfZNAG7728bwF06K7TmqvXOk3tV0O2nwLosfE3tb6xFAV2qvgp3Hvi1nNo41uk XZimjrwYzIHZb1BohV6YPu62x1cLzKrNobjmV9wmdUkJ5pNM/s4s4N8P3Q756wXd Bn1roBhhQS2UzrdmL2fIicjLGbr1xMSTlpr3raErKxbQ7K/Pk8r1kNs3NmhEaugi e7pwm+JnX483lJFk9oxD2ILMkmFbMBk= -----END CERTIFICATE-----Generated at Sat Aug 23 18:04:04 2025 by rpki-client