$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8c43847a-437e-3536-8a40-3c39eda254d9.roa File: 8c43847a-437e-3536-8a40-3c39eda254d9.roa (raw, json) Hash identifier: JKjer1cBGdEq+cU5LGryTwH4sFKDkPX5tFBeQB4VhWE= Subject key identifier: BC:3A:71:FA:9D:43:E5:80:E6:17:F4:E3:EF:4B:5D:06:B0:C9:05:7F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5ABB000BB7C8C07003B6F00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8c43847a-437e-3536-8a40-3c39eda254d9.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 162.158.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:b0:00:bb:7c:8c:07:00:3b:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=a97f64b2-231e-4fb0-90c2-18eebfe3d925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d5:dc:d5:07:30:15:fd:55:55:8d:05:29:a8: bc:1f:13:d4:c4:0a:d1:88:b1:8c:2f:de:12:d4:11: e6:ce:0c:e7:ed:f4:be:77:a6:44:4b:cf:d9:37:bc: b5:92:52:b8:ba:a5:c4:38:60:2d:6b:7c:aa:de:3f: 6b:55:37:6d:c3:6b:d1:46:be:c8:e5:4c:11:60:a5: 12:d2:3c:d5:e7:94:4b:36:03:ab:07:53:9f:06:9d: 85:07:4e:94:89:a9:00:17:0d:50:0a:1b:cc:cf:68: 3d:8f:21:a4:39:98:ce:ca:42:7a:de:c1:64:7d:00: fe:59:3a:41:94:a5:55:d2:63:69:f6:86:a8:b4:98: e9:7a:18:c4:b5:e6:f6:2b:83:f1:29:26:91:c1:ef: 56:b0:81:5b:b6:64:6f:83:f6:f1:90:cc:ef:7c:a1: 7f:cc:ca:3d:46:54:62:ff:10:8c:b7:b9:d6:be:8d: 23:72:16:e7:28:97:1f:88:21:d2:b2:65:8d:42:53: e6:fb:5c:4b:1d:91:da:6a:2a:64:de:ec:53:fe:2c: 8c:8f:6a:75:b5:ea:b9:cb:ae:6b:b7:58:af:ca:62: c0:e1:56:9b:7f:56:f8:e8:83:6b:fe:0e:b7:38:2d: ba:fa:7e:ae:e6:f5:66:ca:d5:4d:f0:02:35:e7:a4: 51:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:3A:71:FA:9D:43:E5:80:E6:17:F4:E3:EF:4B:5D:06:B0:C9:05:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8c43847a-437e-3536-8a40-3c39eda254d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:59:6b:8f:b1:a7:45:47:90:40:22:07:8c:2a:d0:c4:96:34: 80:0d:5d:63:d2:7a:13:de:41:91:52:54:23:4e:23:bc:8a:a6: 46:9c:e2:bd:55:4b:f0:cd:93:7c:67:ae:59:d3:98:91:39:e8: 4b:6a:27:9b:c9:2a:c8:2a:2a:2f:9f:ea:6d:ad:7f:99:98:b2: 61:24:86:6c:39:2d:68:31:a0:33:d6:3a:e1:24:d5:68:94:56: ec:c6:3d:d0:92:ce:23:d2:7b:36:ab:8d:0c:55:6d:7a:11:9e: 55:57:3b:f9:af:02:cc:45:27:1c:45:c7:63:31:1d:eb:79:c3: 2f:2b:7f:8f:d6:8e:49:94:79:06:8a:dd:43:0a:83:5a:5b:69: 34:4e:10:a7:f1:a0:09:17:15:bb:b3:bb:3f:a7:c3:83:31:fe: 97:f7:6b:a8:ee:27:9a:ef:f7:1a:9c:1f:3e:3e:6d:90:5b:06: 1b:3d:8b:7b:f6:af:74:89:15:25:69:85:57:6c:f1:22:9d:be: 1a:34:b9:38:85:6b:af:59:b5:54:ee:98:b2:53:46:84:df:d4: bf:46:37:5f:82:41:94:e9:06:82:e1:fa:2e:12:c8:ab:79:99: ba:c6:f9:ab:17:97:fc:11:88:1f:b4:c9:96:d9:0a:5c:89:85: 82:61:be:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq7AAu3yMBwA7bwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk YTk3ZjY0YjItMjMxZS00ZmIwLTkwYzItMThlZWJmZTNkOTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdXc1QcwFf1VVY0FKai8HxPUxArRiLGML94S 1BHmzgzn7fS+d6ZES8/ZN7y1klK4uqXEOGAta3yq3j9rVTdtw2vRRr7I5UwRYKUS 0jzV55RLNgOrB1OfBp2FB06UiakAFw1QChvMz2g9jyGkOZjOykJ63sFkfQD+WTpB lKVV0mNp9oaotJjpehjEteb2K4PxKSaRwe9WsIFbtmRvg/bxkMzvfKF/zMo9RlRi /xCMt7nWvo0jchbnKJcfiCHSsmWNQlPm+1xLHZHaaipk3uxT/iyMj2p1teq5y65r t1ivymLA4Vabf1b46INr/g63OC26+n6u5vVmytVN8AI156RRTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLw6cfqdQ+WA5hf04+9LXQawyQV/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGM0Mzg0N2EtNDM3ZS0z NTM2LThhNDAtM2MzOWVkYTI1NGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop5IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJZa4+xp0VHkEAiB4wq0MSWNIANXWPSehPeQZFSVCNOI7yKpkac4r1V S/DNk3xnrlnTmJE56EtqJ5vJKsgqKi+f6m2tf5mYsmEkhmw5LWgxoDPWOuEk1WiU VuzGPdCSziPSezarjQxVbXoRnlVXO/mvAsxFJxxFx2MxHet5wy8rf4/WjkmUeQaK 3UMKg1pbaTROEKfxoAkXFbuzuz+nw4Mx/pf3a6juJ5rv9xqcHz4+bZBbBhs9i3v2 r3SJFSVphVds8SKdvho0uTiFa69ZtVTumLJTRoTf1L9GN1+CQZTpBoLh+i4SyKt5 mbrG+asXl/wRiB+0yZbZClyJhYJhvro= -----END CERTIFICATE-----Generated at Sat Aug 23 20:17:33 2025 by rpki-client