$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c038f0d0-39a4-38e9-8471-343539a03f9f.roa File: c038f0d0-39a4-38e9-8471-343539a03f9f.roa (raw, json) Hash identifier: K2kz+t5okOC9K7xdy9odIZ8ERZ0qyeXSrJEtWbwzvl0= Subject key identifier: 11:86:09:69:25:B6:58:D8:14:E3:33:6F:8E:DA:BE:0A:CE:26:C3:73 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC7110E990325707F2EAA81B0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c038f0d0-39a4-38e9-8471-343539a03f9f.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 13335 IP address blocks: 162.158.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:11:0e:99:03:25:70:7f:2e:aa:81:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=fe49dfe4-8e5d-477f-92b1-66520a1b4720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:99:da:91:16:b4:1b:0c:f5:9f:a1:1c:0a:2f: 70:4a:8c:a5:65:78:08:8a:53:1e:ad:27:f7:b3:8a: f3:35:06:22:1f:58:2b:22:b3:e7:ad:cc:fc:80:fc: 35:ec:67:14:ca:f8:7e:d8:b7:34:c9:28:82:3d:b9: ec:bb:de:45:17:1d:c4:5c:cd:28:57:ec:09:37:52: 47:22:62:8f:60:d4:40:f8:d3:14:06:45:b7:66:ec: 4f:27:73:1e:fe:ec:e8:e2:a3:97:ce:a6:6c:d1:4a: 7f:e4:0a:68:ea:0c:31:fb:00:9d:da:c5:5f:ae:a7: 3c:b6:14:6d:c9:b2:f0:92:34:a9:6b:be:42:f4:1b: 36:ca:4f:27:8b:58:fc:cd:5e:3a:cc:62:17:59:c7: 8c:f6:92:60:8b:42:27:c9:f5:b5:08:07:0b:fa:bb: b2:36:88:a1:d8:f5:18:e0:df:ad:4a:8a:11:83:80: 0d:4e:f4:7e:84:62:b8:0c:ef:f7:91:91:59:85:b8: 59:15:96:96:64:ce:6d:f3:fa:ca:bd:86:39:45:7b: f5:b8:ec:20:3f:dc:37:fb:60:51:24:34:ff:2f:f8: 0a:fc:04:59:1e:36:aa:de:b2:b1:64:81:e8:14:f9: b4:b9:68:17:82:35:f2:c9:fd:4c:a8:d1:e5:3d:94: 7d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:86:09:69:25:B6:58:D8:14:E3:33:6F:8E:DA:BE:0A:CE:26:C3:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c038f0d0-39a4-38e9-8471-343539a03f9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:74:8b:1d:7e:38:b9:42:55:4b:20:43:8d:19:57:25:a1:6a: 81:56:83:73:35:83:87:c2:a0:f1:cb:b7:19:c4:24:f9:45:80: 66:49:d4:61:5f:15:8f:19:9b:47:34:ba:26:7d:d1:d6:eb:7a: 61:0f:f1:96:ce:eb:1e:73:12:40:0e:c3:76:39:c2:b0:6a:87: 30:73:0e:6b:6c:25:64:1e:75:78:96:c9:88:1a:e4:24:64:f1: 57:16:b9:5c:ca:4b:88:c0:6c:d4:70:76:db:4a:33:16:44:e5: 34:c1:1e:13:40:f9:dc:3c:46:77:f2:6c:da:00:ee:d7:37:0e: d3:9d:ee:51:14:50:ac:b0:bb:5a:4a:4a:bc:ee:9f:84:21:76: 94:8f:ac:84:22:01:1c:0f:17:0e:37:6a:54:9b:62:9b:eb:2d: 6a:93:f7:e8:ea:dc:b4:15:fe:d7:f0:6e:a2:c1:e6:2e:d4:6f: 9c:cc:98:89:81:19:be:fa:b6:f3:cf:b2:30:a7:71:17:b2:14: a4:5a:19:99:f0:65:0c:00:19:91:6f:f9:03:23:68:66:70:68: f0:fe:25:91:0a:8d:01:88:b0:c3:ae:31:40:3f:ba:8d:33:16: d2:c0:a1:a7:c6:0f:cd:83:ff:47:c8:b0:a7:77:e4:61:0f:28: ad:96:c1:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHEQ6ZAyVwfy6qgbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk ZmU0OWRmZTQtOGU1ZC00NzdmLTkyYjEtNjY1MjBhMWI0NzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipnakRa0Gwz1n6EcCi9wSoylZXgIilMerSf3 s4rzNQYiH1grIrPnrcz8gPw17GcUyvh+2Lc0ySiCPbnsu95FFx3EXM0oV+wJN1JH ImKPYNRA+NMUBkW3ZuxPJ3Me/uzo4qOXzqZs0Up/5Apo6gwx+wCd2sVfrqc8thRt ybLwkjSpa75C9Bs2yk8ni1j8zV46zGIXWceM9pJgi0InyfW1CAcL+ruyNoih2PUY 4N+tSooRg4ANTvR+hGK4DO/3kZFZhbhZFZaWZM5t8/rKvYY5RXv1uOwgP9w3+2BR JDT/L/gK/ARZHjaq3rKxZIHoFPm0uWgXgjXyyf1MqNHlPZR9VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGGCWkltljYFOMzb47avgrOJsNzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzAzOGYwZDAtMzlhNC0z OGU5LTg0NzEtMzQzNTM5YTAzZjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop5wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZ0ix1+OLlCVUsgQ40ZVyWhaoFWg3M1g4fCoPHLtxnEJPlFgGZJ1GFf FY8Zm0c0uiZ90dbremEP8ZbO6x5zEkAOw3Y5wrBqhzBzDmtsJWQedXiWyYga5CRk 8VcWuVzKS4jAbNRwdttKMxZE5TTBHhNA+dw8RnfybNoA7tc3DtOd7lEUUKywu1pK Srzun4QhdpSPrIQiARwPFw43alSbYpvrLWqT9+jq3LQV/tfwbqLB5i7Ub5zMmImB Gb76tvPPsjCncReyFKRaGZnwZQwAGZFv+QMjaGZwaPD+JZEKjQGIsMOuMUA/uo0z FtLAoafGD82D/0fIsKd35GEPKK2WwQA= -----END CERTIFICATE-----Generated at Sat Aug 23 15:12:31 2025 by rpki-client