$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3f6f5124-c551-3cc3-9b04-79df6f1ea0c8.roa File: 3f6f5124-c551-3cc3-9b04-79df6f1ea0c8.roa (raw, json) Hash identifier: oMBqKdAfAAf5lTOs3rzApg7IUv4EEI+qf6o1xpsznt8= Subject key identifier: 42:BB:BC:B9:EC:B4:11:F2:97:89:27:0C:19:96:29:0E:E6:0B:B8:C7 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC87670DAA2C0AA99606E6550 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3f6f5124-c551-3cc3-9b04-79df6f1ea0c8.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 162.158.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:70:da:a2:c0:aa:99:60:6e:65:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=559c6e21-9182-400c-b75a-da4ca4d7ec87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a0:ee:d5:fd:1a:57:4f:c3:49:c0:35:5e:1d: a5:2a:43:ec:c0:e8:b2:6f:63:22:ee:7c:41:fa:e1: e4:05:bf:7f:e2:2a:43:2a:d6:59:c5:d0:df:b1:70: 29:5d:43:bb:49:e1:6f:05:c6:ce:d1:71:93:cf:c3: 0f:cb:4d:73:89:c8:a8:fa:e2:00:98:96:84:70:d1: 3b:84:f0:10:e7:5a:44:d5:f6:1c:b5:2a:4f:57:ce: 72:3f:01:b2:2f:2b:b9:87:42:ab:02:ad:34:2b:fc: 73:51:f7:a0:a5:b2:47:c6:39:e3:6e:0b:df:e6:34: 35:0e:e8:62:3c:4e:b5:07:75:23:9b:39:eb:58:b1: df:cc:03:28:18:5b:bd:1c:b0:8c:73:19:a7:a4:ea: d0:5f:b8:0d:57:49:4d:36:0d:26:2d:f8:a2:06:3b: 82:74:0b:85:d2:79:7e:a6:6f:d1:52:fa:34:9b:64: 27:49:71:ce:48:fb:29:9c:38:2d:5e:3c:46:a3:34: 54:cc:f6:d7:4e:0f:7c:fd:05:03:c8:1a:d8:73:61: 80:14:1b:0d:78:1c:39:9a:60:b5:70:5b:60:85:b8: 63:80:cd:58:c1:36:4a:7d:3a:64:91:49:a7:68:ff: 86:0f:e6:79:98:9f:33:1e:0f:7a:ef:9d:0b:8f:1c: bb:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:BB:BC:B9:EC:B4:11:F2:97:89:27:0C:19:96:29:0E:E6:0B:B8:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3f6f5124-c551-3cc3-9b04-79df6f1ea0c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:65:97:58:d5:d1:b8:3c:79:81:70:c4:80:94:0c:70:ad:3b: 13:89:fc:25:41:88:7d:18:02:39:fb:ae:4d:26:ce:4c:74:ff: 59:32:16:f4:d4:26:3b:5d:79:32:f3:72:e6:b6:5b:33:60:ff: c5:2a:69:a8:6c:a7:8f:54:33:b1:ab:36:ba:38:24:4c:60:68: 22:1d:30:81:61:7b:29:6a:44:ef:de:08:a0:5f:e4:14:93:d4: 9c:6d:24:09:75:ab:0d:27:8d:57:9d:ac:c8:8b:39:ca:1b:e3: 4a:59:95:cc:e8:5a:18:30:3e:a5:6a:76:2a:24:40:a4:f2:40: 70:3f:4b:d0:84:e3:f9:cc:74:c9:df:c9:61:b3:f3:1c:e6:d1: 2f:f5:76:0f:b6:72:28:09:c5:01:f2:5a:ff:36:f1:a9:c6:e9: 2f:b7:64:a4:75:b0:70:41:29:51:10:ee:d4:b5:cc:d9:c4:85: 98:6a:c8:2f:1d:bd:6b:3e:81:7d:80:e7:4e:99:54:d7:5c:dc: ea:91:c0:77:3e:64:2d:6e:86:b8:8e:5d:b2:1e:74:eb:ba:c9: 70:fe:1c:b0:5b:fd:54:f0:4a:5d:46:be:f0:a1:a8:8d:94:97: 15:ff:84:2f:52:04:30:ef:d6:5e:5d:aa:98:56:04:79:e1:20: 07:aa:3b:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdnDaosCqmWBuZVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk NTU5YzZlMjEtOTE4Mi00MDBjLWI3NWEtZGE0Y2E0ZDdlYzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKDu1f0aV0/DScA1Xh2lKkPswOiyb2Mi7nxB +uHkBb9/4ipDKtZZxdDfsXApXUO7SeFvBcbO0XGTz8MPy01zicio+uIAmJaEcNE7 hPAQ51pE1fYctSpPV85yPwGyLyu5h0KrAq00K/xzUfegpbJHxjnjbgvf5jQ1Duhi PE61B3UjmznrWLHfzAMoGFu9HLCMcxmnpOrQX7gNV0lNNg0mLfiiBjuCdAuF0nl+ pm/RUvo0m2QnSXHOSPspnDgtXjxGozRUzPbXTg98/QUDyBrYc2GAFBsNeBw5mmC1 cFtghbhjgM1YwTZKfTpkkUmnaP+GD+Z5mJ8zHg96750Ljxy7lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEK7vLnstBHyl4knDBmWKQ7mC7jHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2Y2ZjUxMjQtYzU1MS0z Y2MzLTliMDQtNzlkZjZmMWVhMGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop71MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNll1jV0bg8eYFwxICUDHCtOxOJ/CVBiH0YAjn7rk0mzkx0/1kyFvTU JjtdeTLzcua2WzNg/8Uqaahsp49UM7GrNro4JExgaCIdMIFheylqRO/eCKBf5BST 1JxtJAl1qw0njVedrMiLOcob40pZlczoWhgwPqVqdiokQKTyQHA/S9CE4/nMdMnf yWGz8xzm0S/1dg+2cigJxQHyWv828anG6S+3ZKR1sHBBKVEQ7tS1zNnEhZhqyC8d vWs+gX2A506ZVNdc3OqRwHc+ZC1uhriOXbIedOu6yXD+HLBb/VTwSl1GvvChqI2U lxX/hC9SBDDv1l5dqphWBHnhIAeqOxc= -----END CERTIFICATE-----Generated at Sat Aug 23 18:11:25 2025 by rpki-client