$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3af3e7b5-1acc-38ec-b667-14532b7b5e10.roa File: 3af3e7b5-1acc-38ec-b667-14532b7b5e10.roa (raw, json) Hash identifier: cYdXrUdmG1IUFv79yFP4JFVcLL22Cj2MEH9dxXy196w= Subject key identifier: 7F:61:5E:7C:EC:B2:C4:B6:9A:39:8F:2C:34:9F:7E:F2:5F:4B:BC:8E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC8766F910F73311C3DB87F80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3af3e7b5-1acc-38ec-b667-14532b7b5e10.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 162.158.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:6f:91:0f:73:31:1c:3d:b8:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=eeff114f-da19-49a0-b2eb-75cb34bf0d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a3:46:5a:29:1c:64:6c:6e:ef:55:43:a6:96: 06:2c:fc:d7:d3:11:9e:58:0d:4f:20:23:6b:83:4a: fb:56:48:93:47:f5:c2:42:36:50:ca:55:20:ac:2e: b7:3b:c5:7d:01:ab:ec:96:f7:26:ac:3e:26:c6:ee: 46:e2:8e:c5:e9:c7:dc:bf:eb:50:fa:93:4c:e5:64: 10:5f:93:33:41:88:28:db:96:b6:94:e3:f3:e0:36: 1c:76:9a:9e:01:bf:86:f8:ed:7d:32:b8:05:10:d3: 55:23:ac:b0:0c:98:67:44:5d:a6:71:93:5c:09:f3: 69:02:22:61:a6:18:da:f5:51:11:75:24:12:cd:9c: 25:53:92:ea:2d:5e:51:45:5e:2f:db:bb:48:67:a5: 9c:1c:d6:e1:96:54:4c:85:6e:45:c9:d7:19:61:ad: c4:e7:f0:a5:74:c8:3c:e3:80:10:33:0f:83:a6:d9: eb:21:bf:4b:23:c1:67:18:dc:3b:98:6c:b9:c7:11: 5d:00:d0:82:a7:6d:fc:47:c6:bc:e1:db:c2:a8:54: 31:40:0c:7d:58:8d:9b:ae:e4:8d:60:10:4b:5d:be: f7:f4:b2:50:4e:a7:aa:65:49:38:4c:bb:1b:04:ee: bc:62:68:85:b2:1f:24:03:4c:78:ca:88:ae:65:37: bf:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:61:5E:7C:EC:B2:C4:B6:9A:39:8F:2C:34:9F:7E:F2:5F:4B:BC:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3af3e7b5-1acc-38ec-b667-14532b7b5e10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:a2:93:d7:01:f4:15:60:6a:98:c2:e6:24:51:fd:7b:40:1e: 7b:eb:8b:6b:4e:05:fa:0e:b4:84:d8:1c:7a:4e:eb:17:79:31: d0:53:cd:7c:f3:6b:0d:34:a8:07:a3:fc:da:e3:5c:f5:17:77: e8:79:ff:c0:ba:aa:f1:4f:0e:28:fa:c5:26:31:bf:5d:d8:83: 51:00:60:26:0a:c0:e1:fc:38:1a:75:de:5c:67:75:ae:2f:79: 7e:f6:38:64:eb:1c:aa:6d:c9:5e:6f:23:4e:b9:ca:9a:9a:8f: 12:13:cc:3f:64:78:0a:46:f4:41:37:10:e6:92:75:8e:77:8c: cb:0f:ee:17:44:28:60:5c:b1:38:4d:dd:6c:f1:e1:36:0f:dd: 3b:02:00:61:5e:96:e4:2b:33:63:85:1e:06:ab:f2:5d:7b:a3: 93:6c:1c:30:f4:46:97:6b:88:01:cb:10:6d:6a:e6:86:e1:b0: 01:f0:52:ce:16:a7:0c:88:06:9d:1b:86:9a:61:42:40:aa:c5: 9e:50:7d:42:b6:89:3a:76:9d:5c:e9:9e:3e:8b:b7:3e:99:4f: f7:28:5e:31:5c:a7:33:58:32:83:5e:ad:88:8f:2c:24:66:53: 36:87:39:51:98:f5:a3:8e:81:f2:fd:c6:36:97:a4:e9:ca:17: 93:02:e7:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdm+RD3MxHD24f4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZWVmZjExNGYtZGExOS00OWEwLWIyZWItNzVjYjM0YmYwZDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKNGWikcZGxu71VDppYGLPzX0xGeWA1PICNr g0r7VkiTR/XCQjZQylUgrC63O8V9AavslvcmrD4mxu5G4o7F6cfcv+tQ+pNM5WQQ X5MzQYgo25a2lOPz4DYcdpqeAb+G+O19MrgFENNVI6ywDJhnRF2mcZNcCfNpAiJh phja9VERdSQSzZwlU5LqLV5RRV4v27tIZ6WcHNbhllRMhW5FydcZYa3E5/CldMg8 44AQMw+DptnrIb9LI8FnGNw7mGy5xxFdANCCp238R8a84dvCqFQxQAx9WI2bruSN YBBLXb739LJQTqeqZUk4TLsbBO68YmiFsh8kA0x4yoiuZTe/IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH9hXnzsssS2mjmPLDSffvJfS7yOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2FmM2U3YjUtMWFjYy0z OGVjLWI2NjctMTQ1MzJiN2I1ZTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop7GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALeik9cB9BVgapjC5iRR/XtAHnvri2tOBfoOtITYHHpO6xd5MdBTzXzz aw00qAej/NrjXPUXd+h5/8C6qvFPDij6xSYxv13Yg1EAYCYKwOH8OBp13lxnda4v eX72OGTrHKptyV5vI065ypqajxITzD9keApG9EE3EOaSdY53jMsP7hdEKGBcsThN 3Wzx4TYP3TsCAGFeluQrM2OFHgar8l17o5NsHDD0RpdriAHLEG1q5obhsAHwUs4W pwyIBp0bhpphQkCqxZ5QfUK2iTp2nVzpnj6Ltz6ZT/coXjFcpzNYMoNerYiPLCRm UzaHOVGY9aOOgfL9xjaXpOnKF5MC57c= -----END CERTIFICATE-----Generated at Sat Aug 23 15:11:48 2025 by rpki-client