$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c27aaa9f-3aaa-3985-8a68-6ad9191a15e3.roa File: c27aaa9f-3aaa-3985-8a68-6ad9191a15e3.roa (raw, json) Hash identifier: gZk/NDlsYnRAt8lXx9Rc6q892FT1vDGCMT6tbWWmUzE= Subject key identifier: 80:5F:90:37:61:0C:DA:BE:15:EA:E9:F2:5B:BD:7E:BC:14:99:97:66 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC8766D51E2659060C477EF40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c27aaa9f-3aaa-3985-8a68-6ad9191a15e3.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 162.158.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:6d:51:e2:65:90:60:c4:77:ef:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=3251c6d5-cf10-4659-b841-3f0aa8d56924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7c:be:88:04:e9:eb:54:8c:be:de:4e:a8:80: 80:30:f7:f6:03:1c:19:f0:00:09:f2:b6:dd:70:95: 3a:af:ea:20:52:82:d5:6e:90:68:3d:a8:17:09:06: 0b:d1:07:d7:1d:c7:a6:98:18:a0:62:9b:17:0d:e2: 9e:5a:79:72:b1:d6:7b:9e:08:21:a6:3b:1e:51:56: 70:ec:74:af:09:df:d6:a6:22:b4:a9:39:37:5a:58: 8a:91:39:46:70:8a:cf:9c:67:5c:c0:5f:53:56:15: ad:ff:6c:80:55:f5:13:b7:29:71:72:91:78:f0:86: 8f:22:2a:23:57:95:99:82:02:31:50:b7:c9:ea:c5: da:e4:3a:b7:36:e7:6c:58:a7:21:b4:fb:07:d0:44: 7f:75:c9:69:7f:41:b7:0f:6b:41:e6:38:4c:c9:b8: 6e:c3:59:d6:47:cb:99:83:b6:3c:9e:d4:05:bf:8c: 35:c6:3d:47:37:24:c9:0a:dd:ba:66:4a:56:ee:32: 51:e1:44:33:ef:f7:ff:60:31:66:1d:c1:bc:d5:27: 66:b2:9d:6d:ac:9f:43:37:33:ab:77:46:6d:16:eb: 8d:68:0e:03:49:33:96:f1:40:49:8b:50:d3:09:94: ec:a3:7a:1e:1d:93:8b:92:e7:a1:b3:1e:ff:e4:ac: bd:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:5F:90:37:61:0C:DA:BE:15:EA:E9:F2:5B:BD:7E:BC:14:99:97:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c27aaa9f-3aaa-3985-8a68-6ad9191a15e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:d5:38:a0:67:71:05:93:fc:4a:4e:e4:d2:9d:75:77:e0:22: e1:8f:22:21:a0:06:cf:44:1c:ba:0b:5d:64:8b:f3:3d:59:5a: 53:5a:81:e9:86:7c:d1:e5:7a:cb:c6:70:bd:60:ca:23:a2:cd: 72:33:88:1b:05:79:4d:74:20:6d:67:f8:f5:e4:f0:25:5d:cc: e0:ff:1a:0f:5c:d0:b3:4f:75:b5:72:68:df:ac:2a:6e:b9:41: c0:d6:67:93:39:0d:c5:89:67:d6:0f:fb:21:1d:52:0a:01:2a: e7:4b:c5:0e:b5:a3:2a:ef:87:dd:ef:b2:f4:52:cc:1f:31:71: 92:ae:fa:65:91:91:bc:3d:b6:c7:35:fb:de:d3:06:f1:55:b0: 82:4e:21:d7:8e:c9:5b:bb:61:d3:2c:f3:ba:2a:16:28:0e:72: 99:1e:10:4c:52:1f:a3:fb:23:04:7d:13:7b:ae:eb:f4:be:bc: dd:ee:d6:3a:b6:b1:0b:e4:85:d3:3e:00:7c:e4:eb:99:3e:66: 96:10:a5:d8:77:81:fc:db:bc:67:77:56:dc:c5:07:96:e6:89: 5d:f8:ad:bd:98:c2:c8:0c:4c:51:fb:12:3c:67:b7:7d:8b:74: 7d:ee:b9:4e:af:e3:06:4a:ae:a3:88:0b:d6:f0:a0:e5:9d:85: 60:bb:f2:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdm1R4mWQYMR370AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk MzI1MWM2ZDUtY2YxMC00NjU5LWI4NDEtM2YwYWE4ZDU2OTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3y+iATp61SMvt5OqICAMPf2AxwZ8AAJ8rbd cJU6r+ogUoLVbpBoPagXCQYL0QfXHcemmBigYpsXDeKeWnlysdZ7ngghpjseUVZw 7HSvCd/WpiK0qTk3WliKkTlGcIrPnGdcwF9TVhWt/2yAVfUTtylxcpF48IaPIioj V5WZggIxULfJ6sXa5Dq3NudsWKchtPsH0ER/dclpf0G3D2tB5jhMybhuw1nWR8uZ g7Y8ntQFv4w1xj1HNyTJCt26ZkpW7jJR4UQz7/f/YDFmHcG81Sdmsp1trJ9DNzOr d0ZtFuuNaA4DSTOW8UBJi1DTCZTso3oeHZOLkuehsx7/5Ky9ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBfkDdhDNq+Ferp8lu9frwUmZdmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzI3YWFhOWYtM2FhYS0z OTg1LThhNjgtNmFkOTE5MWExNWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop55MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfVOKBncQWT/EpO5NKddXfgIuGPIiGgBs9EHLoLXWSL8z1ZWlNagemG fNHlesvGcL1gyiOizXIziBsFeU10IG1n+PXk8CVdzOD/Gg9c0LNPdbVyaN+sKm65 QcDWZ5M5DcWJZ9YP+yEdUgoBKudLxQ61oyrvh93vsvRSzB8xcZKu+mWRkbw9tsc1 +97TBvFVsIJOIdeOyVu7YdMs87oqFigOcpkeEExSH6P7IwR9E3uu6/S+vN3u1jq2 sQvkhdM+AHzk65k+ZpYQpdh3gfzbvGd3VtzFB5bmiV34rb2YwsgMTFH7Ejxnt32L dH3uuU6v4wZKrqOIC9bwoOWdhWC78mo= -----END CERTIFICATE-----Generated at Sat Aug 23 18:14:27 2025 by rpki-client