$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fac91bac-7478-3da9-98b5-e3be6e95f28f.roa File: fac91bac-7478-3da9-98b5-e3be6e95f28f.roa (raw, json) Hash identifier: d2MbFC+2geNFuRcdOYMB+ok6Wx7o9zMVqpPkGh+oIM4= Subject key identifier: E5:FA:9B:5A:57:38:3C:7D:2C:BF:45:F2:D5:E8:8D:2E:C0:06:24:45 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC876620E71D39343C0AE9CC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fac91bac-7478-3da9-98b5-e3be6e95f28f.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 162.158.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:62:0e:71:d3:93:43:c0:ae:9c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=50b4ee27-04af-4b93-89f8-0faffa1ff387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6e:b8:96:f3:2a:92:5c:fb:26:75:eb:e1:82: d4:93:27:28:b4:f3:a6:d2:28:5a:29:f1:98:9a:1c: 69:46:63:3d:46:53:b2:1a:a8:f5:65:43:d7:b4:54: 21:e4:d7:ca:00:10:0a:96:f3:d3:91:46:78:7e:93: 25:d1:d4:01:22:7d:aa:16:18:4a:f3:dd:62:18:f1: 6a:1d:1a:01:7b:c1:9a:d6:82:14:f4:ab:c3:58:5b: cd:91:07:c6:91:c4:b1:46:aa:45:92:db:a3:dc:b7: 98:51:d5:b3:54:14:08:76:ca:31:e9:31:48:52:96: 6f:20:7c:fb:b6:4e:02:70:29:36:3d:a6:47:b5:05: 3d:14:05:54:16:59:b3:4e:d5:2c:e8:a3:b4:2b:8d: f1:46:83:b4:13:20:dd:46:ca:f9:41:a8:c8:19:6b: 05:ff:76:a6:7c:82:00:d8:61:b8:96:5a:bc:ee:a2: 1c:5b:03:60:dd:08:c3:66:b4:9c:20:27:57:5c:c7: 26:24:0c:19:98:88:37:40:92:44:40:1d:5f:11:c7: 0f:2f:a6:01:5a:e0:31:f6:9a:81:f7:56:7f:7c:5a: 06:70:2b:09:01:74:dc:4d:bc:30:83:fe:06:b8:f4: 97:6b:0c:55:b8:6b:23:97:6f:d5:73:c2:ee:4c:03: 55:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:FA:9B:5A:57:38:3C:7D:2C:BF:45:F2:D5:E8:8D:2E:C0:06:24:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fac91bac-7478-3da9-98b5-e3be6e95f28f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:f9:58:f1:c1:fd:dc:61:29:8d:34:94:bd:b2:cb:fe:98:91: 18:5e:3b:30:d6:bb:3e:e9:e8:3f:c6:e8:e6:79:d9:6e:35:ff: fe:60:39:c1:29:2a:4e:36:ed:6c:7a:1d:70:85:6c:14:d9:b3: 58:b6:a3:a0:89:f4:47:09:0c:dd:18:c4:4c:47:bb:6a:0b:3a: 75:01:f8:58:e1:fa:81:ce:e2:70:b8:79:19:07:97:6d:be:50: 97:49:34:59:b4:08:31:a7:72:cb:93:9d:ca:28:2a:55:57:5d: 44:fa:5b:1d:1b:0e:f4:e8:5c:2c:ef:56:9e:a9:91:4a:dd:71: af:e6:72:90:8f:19:34:11:58:90:1c:a6:6a:65:75:e5:08:1e: ac:f4:c4:01:d9:ab:43:dc:cb:cd:7b:0d:5d:ab:b0:98:14:8e: 33:22:3b:91:fd:22:e3:5b:a2:3e:2f:7c:42:5e:4b:a2:5a:0a: ee:47:1e:e5:d6:83:4f:de:90:d6:7d:86:6d:4c:03:31:e0:2e: 53:3e:f6:96:50:31:46:07:19:b6:7a:67:1a:31:ba:08:3a:c3: 0d:ef:70:1b:2a:60:1c:cb:e8:37:0d:0d:29:a4:0f:55:ea:6f: 95:c2:92:d3:b7:c6:a2:b4:17:a6:68:a3:3e:eb:ba:72:70:6d: 5d:a5:7d:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdmIOcdOTQ8CunMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk NTBiNGVlMjctMDRhZi00YjkzLTg5ZjgtMGZhZmZhMWZmMzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi264lvMqklz7JnXr4YLUkycotPOm0ihaKfGY mhxpRmM9RlOyGqj1ZUPXtFQh5NfKABAKlvPTkUZ4fpMl0dQBIn2qFhhK891iGPFq HRoBe8Ga1oIU9KvDWFvNkQfGkcSxRqpFktuj3LeYUdWzVBQIdsox6TFIUpZvIHz7 tk4CcCk2PaZHtQU9FAVUFlmzTtUs6KO0K43xRoO0EyDdRsr5QajIGWsF/3amfIIA 2GG4llq87qIcWwNg3QjDZrScICdXXMcmJAwZmIg3QJJEQB1fEccPL6YBWuAx9pqB 91Z/fFoGcCsJAXTcTbwwg/4GuPSXawxVuGsjl2/Vc8LuTANVCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOX6m1pXODx9LL9F8tXojS7ABiRFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmFjOTFiYWMtNzQ3OC0z ZGE5LTk4YjUtZTNiZTZlOTVmMjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop7nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMT5WPHB/dxhKY00lL2yy/6YkRheOzDWuz7p6D/G6OZ52W41//5gOcEp Kk427Wx6HXCFbBTZs1i2o6CJ9EcJDN0YxExHu2oLOnUB+Fjh+oHO4nC4eRkHl22+ UJdJNFm0CDGncsuTncooKlVXXUT6Wx0bDvToXCzvVp6pkUrdca/mcpCPGTQRWJAc pmpldeUIHqz0xAHZq0Pcy817DV2rsJgUjjMiO5H9IuNboj4vfEJeS6JaCu5HHuXW g0/ekNZ9hm1MAzHgLlM+9pZQMUYHGbZ6Zxoxugg6ww3vcBsqYBzL6DcNDSmkD1Xq b5XCktO3xqK0F6Zooz7runJwbV2lfRk= -----END CERTIFICATE-----Generated at Sat Aug 23 14:58:48 2025 by rpki-client