$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fe7c6c28-c683-37a9-ab15-e3bb519b2b67.roa File: fe7c6c28-c683-37a9-ab15-e3bb519b2b67.roa (raw, json) Hash identifier: hXWQ+cvHb2wVMi+67WsSFNwfiDXB3DN3x/z4nXswtAA= Subject key identifier: E0:B1:B7:B0:43:D4:8C:C1:F4:2A:70:A4:AB:52:78:3E:A4:07:BD:5C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5ABAD186D9F9B33E4DB0980 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fe7c6c28-c683-37a9-ab15-e3bb519b2b67.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 162.158.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:ad:18:6d:9f:9b:33:e4:db:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=5fa4167a-ea0c-4365-880c-ccacc6b484f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:aa:4b:03:6d:62:fb:cf:db:eb:1d:23:21:38: e9:68:82:5b:29:7b:32:a9:40:19:5b:84:b6:aa:5c: 83:bc:3c:1f:f3:d8:8c:e1:20:64:dc:1f:fb:dd:9f: 54:b5:92:1a:8c:c4:35:07:be:47:76:1a:fc:bd:1d: 12:16:da:d6:fe:13:b1:f3:2d:05:8f:b5:c1:0b:9f: 00:9d:76:dc:b6:84:6f:18:3d:f7:df:7a:34:d3:10: 10:4a:72:9a:8a:38:35:5d:70:f7:5f:e3:24:8c:13: 5b:69:77:9e:18:89:15:ce:4c:31:06:9b:8d:39:f0: 43:83:74:6d:99:a7:f3:a0:4c:49:24:4b:12:d8:b4: e4:92:a4:0b:87:a1:8e:5c:5b:e5:bb:51:cb:7f:2a: 02:00:40:03:a0:17:92:26:40:0c:c5:7c:de:32:d2: a8:58:1e:96:7a:03:61:c0:8b:85:09:31:31:a7:ab: ec:30:96:dc:2d:69:5c:70:cb:6e:84:fd:3b:7d:04: 8a:d3:9c:4b:28:b1:a2:6c:29:b5:ad:0f:03:16:cd: b5:02:d3:24:0a:e5:07:53:0f:3e:61:a6:50:36:8e: 79:63:54:01:b3:f7:b2:c8:6d:1c:aa:db:1b:07:a0: 2c:05:d3:6b:26:af:11:1e:be:13:79:ba:02:09:e1: 3b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:B1:B7:B0:43:D4:8C:C1:F4:2A:70:A4:AB:52:78:3E:A4:07:BD:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fe7c6c28-c683-37a9-ab15-e3bb519b2b67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:41:c1:6e:d8:c0:01:be:a3:eb:25:ed:b7:c9:bc:25:11:1f: 12:23:12:51:d9:c3:1f:3a:fa:d3:8d:a4:f4:c8:b7:93:15:9a: c8:eb:90:c1:60:11:8e:80:56:71:59:ee:25:97:18:e2:ba:a9: 52:c4:45:64:b8:1d:62:a9:d5:92:06:50:2c:9d:8c:d9:6b:cc: 00:a4:44:35:00:44:19:b6:9f:93:85:7b:01:99:d5:32:6f:c3: 97:a8:7a:00:eb:8e:a6:34:18:1e:d0:3d:12:94:f4:49:b9:b1: 3c:5b:1e:dc:64:14:35:6d:03:c8:97:e1:da:98:24:d4:d1:fc: a4:b3:db:10:00:e8:d6:4c:a1:c9:85:8e:17:53:e1:8b:e8:ca: 32:5d:b9:a9:a1:ee:2d:51:47:52:37:45:91:06:7d:01:e0:d6: 82:68:dd:16:93:8b:14:33:0a:27:ad:36:ed:be:b9:28:8e:52: fc:6d:90:85:71:7e:a6:05:93:c2:45:c0:37:e1:fd:80:e3:5c: fa:d2:f3:29:d5:80:aa:65:cb:92:ca:9b:8d:9c:ae:96:a5:54: 51:e1:5f:b2:65:2a:d8:36:94:99:83:c1:32:d5:88:39:d8:00: 5f:91:17:27:e7:6c:17:04:6d:ef:cd:86:32:64:d1:7d:0f:1e: c4:c5:b7:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq60YbZ+bM+TbCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk NWZhNDE2N2EtZWEwYy00MzY1LTg4MGMtY2NhY2M2YjQ4NGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqpLA21i+8/b6x0jITjpaIJbKXsyqUAZW4S2 qlyDvDwf89iM4SBk3B/73Z9UtZIajMQ1B75Hdhr8vR0SFtrW/hOx8y0Fj7XBC58A nXbctoRvGD3333o00xAQSnKaijg1XXD3X+MkjBNbaXeeGIkVzkwxBpuNOfBDg3Rt mafzoExJJEsS2LTkkqQLh6GOXFvlu1HLfyoCAEADoBeSJkAMxXzeMtKoWB6WegNh wIuFCTExp6vsMJbcLWlccMtuhP07fQSK05xLKLGibCm1rQ8DFs21AtMkCuUHUw8+ YaZQNo55Y1QBs/eyyG0cqtsbB6AsBdNrJq8RHr4TeboCCeE7dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOCxt7BD1IzB9CpwpKtSeD6kB71cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmU3YzZjMjgtYzY4My0z N2E5LWFiMTUtZTNiYjUxOWIyYjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop68MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJlBwW7YwAG+o+sl7bfJvCURHxIjElHZwx86+tONpPTIt5MVmsjrkMFg EY6AVnFZ7iWXGOK6qVLERWS4HWKp1ZIGUCydjNlrzACkRDUARBm2n5OFewGZ1TJv w5eoegDrjqY0GB7QPRKU9Em5sTxbHtxkFDVtA8iX4dqYJNTR/KSz2xAA6NZMocmF jhdT4YvoyjJduamh7i1RR1I3RZEGfQHg1oJo3RaTixQzCietNu2+uSiOUvxtkIVx fqYFk8JFwDfh/YDjXPrS8ynVgKply5LKm42crpalVFHhX7JlKtg2lJmDwTLViDnY AF+RFyfnbBcEbe/NhjJk0X0PHsTFt2A= -----END CERTIFICATE-----Generated at Sat Aug 23 19:52:55 2025 by rpki-client