$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc6bed9e-a23b-3c56-b173-25e1153dd830.roa File: dc6bed9e-a23b-3c56-b173-25e1153dd830.roa (raw, json) Hash identifier: yew7JMTAFyqjUAkpDrYtqEx0ooBMfEn7MGmRKUlTFco= Subject key identifier: D2:0C:B1:70:B8:D2:2B:D4:B0:74:48:B0:50:8A:3C:1F:28:6A:DF:C1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD4CD39C9149A506A86860240 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc6bed9e-a23b-3c56-b173-25e1153dd830.roa Signing time: Tue 12 Aug 2025 11:05:38 +0000 ROA not before: Tue 12 Aug 2025 11:05:38 +0000 ROA not after: Mon 10 Nov 2025 12:05:38 +0000 asID: 13335 IP address blocks: 162.159.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d4:cd:39:c9:14:9a:50:6a:86:86:02:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 12 11:05:38 2025 GMT Not After : Nov 10 12:05:38 2025 GMT Subject: CN=3d87c3df-d27c-4d38-8428-ad7b5fefc7cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:14:e4:3e:cc:4c:3f:3f:1f:7e:76:92:93:1f: 20:db:68:14:27:04:66:50:dd:0f:f3:71:b8:87:0d: 31:4a:90:d7:b1:75:f7:23:c2:7b:dc:b0:8a:7a:eb: 69:ca:47:a8:fb:b1:29:1a:da:11:9f:13:24:82:71: 74:91:de:f2:74:17:93:d8:fc:c7:38:69:6f:12:d2: 5d:e0:35:d1:0b:4d:c5:26:72:06:83:88:a8:79:7a: 09:09:0e:ee:40:9f:c2:82:31:03:24:8a:e3:3f:0e: d4:9c:d4:33:26:60:7a:cb:c8:45:6f:47:14:eb:23: 99:a3:e7:0e:ae:c8:be:7b:f3:a8:2d:b2:4c:2c:3d: a2:57:6c:a1:34:d5:69:d8:ce:1d:41:f6:c2:21:1a: 4d:cc:a0:4c:50:53:83:a6:cd:d3:47:d5:98:bc:74: 70:61:18:33:26:bd:3b:e1:84:1b:e9:80:ed:3f:40: cc:f9:00:fd:19:cd:c6:c3:18:67:15:1a:8a:60:b3: 84:b4:2f:f1:f8:18:a0:d6:56:bc:c3:a3:91:55:b1: e5:df:77:e9:62:fd:45:17:dd:da:b1:ce:62:c4:e2: 79:d6:3b:31:2f:59:46:fb:04:a7:90:25:ca:db:dc: e4:6f:38:97:48:77:69:d4:5a:db:27:e1:9e:b1:af: 29:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:0C:B1:70:B8:D2:2B:D4:B0:74:48:B0:50:8A:3C:1F:28:6A:DF:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc6bed9e-a23b-3c56-b173-25e1153dd830.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.159.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:9f:be:71:05:8e:12:71:17:54:32:81:aa:28:3a:62:c1:5f: 38:20:41:7f:14:a7:af:93:83:81:aa:74:44:24:05:77:38:03: 91:e5:2a:96:4a:c8:94:6b:54:09:45:84:21:b1:fe:34:0b:82: d0:9e:d6:ec:2f:04:6c:d8:01:f7:08:9a:61:38:1c:b3:ec:c8: c8:dd:e0:82:c0:2c:ce:05:53:22:c4:2c:c5:49:f2:c8:26:6e: 6a:f2:c5:5a:a5:4e:0c:83:3b:de:fa:e2:1e:82:41:dc:cb:2c: 4c:4c:c8:c2:02:50:08:d3:fe:79:f5:76:db:88:89:fa:53:91: 6f:ae:a9:91:2e:32:2a:d7:d7:8f:62:33:70:e1:21:74:9d:20: 12:c5:41:94:cc:c9:e3:f8:47:37:6e:83:b8:40:73:a1:88:f1: 74:58:74:67:54:41:df:01:99:e9:7a:b5:b9:66:27:a5:ae:b5: e3:8e:8d:72:eb:39:12:63:ba:e8:90:12:b2:a5:4a:7b:1a:37: d4:9c:fa:a5:35:1a:b6:39:d7:ee:a5:20:8d:5e:8e:28:76:ca: 5b:8d:32:e4:98:a5:71:53:cb:c2:4d:e1:d4:1b:0a:0a:3f:a0: 1d:3f:f0:f5:d5:fe:63:ab:aa:98:41:d5:c5:60:53:a2:e2:23: 8c:a0:5b:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErUzTnJFJpQaoaGAkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMjExMDUzOFoXDTI1MTExMDEyMDUzOFowLzEtMCsGA1UEAxMk M2Q4N2MzZGYtZDI3Yy00ZDM4LTg0MjgtYWQ3YjVmZWZjN2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhTkPsxMPz8ffnaSkx8g22gUJwRmUN0P83G4 hw0xSpDXsXX3I8J73LCKeutpykeo+7EpGtoRnxMkgnF0kd7ydBeT2PzHOGlvEtJd 4DXRC03FJnIGg4ioeXoJCQ7uQJ/CgjEDJIrjPw7UnNQzJmB6y8hFb0cU6yOZo+cO rsi+e/OoLbJMLD2iV2yhNNVp2M4dQfbCIRpNzKBMUFODps3TR9WYvHRwYRgzJr07 4YQb6YDtP0DM+QD9Gc3GwxhnFRqKYLOEtC/x+Big1la8w6ORVbHl33fpYv1FF93a sc5ixOJ51jsxL1lG+wSnkCXK29zkbziXSHdp1FrbJ+Gesa8pSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIMsXC40ivUsHRIsFCKPB8oat/BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGM2YmVkOWUtYTIzYi0z YzU2LWIxNzMtMjVlMTE1M2RkODMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop/qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABafvnEFjhJxF1QygaooOmLBXzggQX8Up6+Tg4GqdEQkBXc4A5HlKpZK yJRrVAlFhCGx/jQLgtCe1uwvBGzYAfcImmE4HLPsyMjd4ILALM4FUyLELMVJ8sgm bmryxVqlTgyDO9764h6CQdzLLExMyMICUAjT/nn1dtuIifpTkW+uqZEuMirX149i M3DhIXSdIBLFQZTMyeP4Rzdug7hAc6GI8XRYdGdUQd8Bmel6tblmJ6WuteOOjXLr ORJjuuiQErKlSnsaN9Sc+qU1GrY51+6lII1ejih2yluNMuSYpXFTy8JN4dQbCgo/ oB0/8PXV/mOrqphB1cVgU6LiI4ygW5M= -----END CERTIFICATE-----Generated at Sat Aug 23 18:11:37 2025 by rpki-client