$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0e27b779-c984-3088-944e-5d6cf8237999.roa File: 0e27b779-c984-3088-944e-5d6cf8237999.roa (raw, json) Hash identifier: Pbw8Xk7teOXHcMF+6eMMQlhkJR76M0AtBX+7wi8zm/c= Subject key identifier: 27:BD:BD:B3:93:2F:5B:C0:11:90:CC:04:9C:9A:42:2F:15:EB:13:01 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584ABA80C46ED1F8D85E4EE57280 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0e27b779-c984-3088-944e-5d6cf8237999.roa Signing time: Sun 03 Aug 2025 01:00:32 +0000 ROA not before: Sun 03 Aug 2025 01:00:32 +0000 ROA not after: Sat 01 Nov 2025 01:00:32 +0000 asID: 13335 IP address blocks: 162.159.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ba:80:c4:6e:d1:f8:d8:5e:4e:e5:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 3 01:00:32 2025 GMT Not After : Nov 1 01:00:32 2025 GMT Subject: CN=e3d7e960-5fd7-4a85-b2ba-97b21f6572a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fe:52:32:9f:84:2a:bf:65:20:fa:1a:6b:7c: c2:74:5f:59:b4:13:98:16:8e:82:e6:66:c9:17:fb: 5f:67:f5:60:94:7e:a2:81:8d:c9:d9:47:30:c9:ca: 0d:d5:28:0b:4a:1b:a1:f8:30:46:d1:a1:ee:e7:9a: 88:d2:7a:74:7d:56:ab:b6:ea:c1:66:af:bc:ce:f8: be:5e:6e:b8:f6:04:81:86:12:62:67:d3:2f:48:36: 90:8f:0b:ff:4b:43:25:0b:bf:52:bf:c5:a0:40:19: f2:5a:11:63:77:ea:49:1e:9d:3e:3b:9b:7e:5a:bd: 8f:a9:e7:36:30:37:32:80:f7:b6:a8:4e:eb:a5:a8: bc:e3:bd:f3:f7:09:3f:5a:57:a4:a8:ef:ef:f8:e7: 3e:df:19:18:2d:e8:6e:c7:80:cb:42:20:5d:2a:f7: 17:ad:ab:19:cc:ef:7b:08:82:69:a3:e1:8a:40:19: c7:b0:c8:e1:43:d8:d8:71:81:9c:40:8e:2f:79:c0: 60:85:b9:0a:35:0f:d0:59:57:3f:20:9e:22:eb:3e: e3:4d:4b:b8:8d:42:43:fd:3c:bb:b2:5f:7c:b4:94: 41:72:a7:ed:b4:62:65:6c:70:1d:38:bc:0d:de:01: a9:a8:c8:e8:bd:8b:1f:b0:7e:1f:e3:dd:8d:c6:60: 2e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:BD:BD:B3:93:2F:5B:C0:11:90:CC:04:9C:9A:42:2F:15:EB:13:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0e27b779-c984-3088-944e-5d6cf8237999.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.159.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:bd:37:d5:4e:c8:1b:55:30:e9:c2:52:82:9b:95:68:34:ec: d4:29:40:be:34:d9:5c:db:73:4d:b7:eb:ec:28:2e:6b:b9:8b: e6:bf:f5:c3:e3:11:ae:1c:65:9c:80:e5:52:e0:d7:60:4b:b9: 1f:db:4f:dc:78:da:dd:41:03:86:ab:3f:db:91:25:5d:95:e5: 5a:f3:38:9d:5b:a6:c1:18:64:a5:e7:ff:31:8f:d0:c2:40:5c: 98:4c:f3:f0:d6:a8:c0:04:3b:58:67:4d:2e:44:c1:b3:74:3e: a4:95:bb:02:23:6a:d9:4a:e8:b7:0a:51:a2:98:29:2d:8c:80: a4:c3:98:19:2d:a8:c4:c8:d1:e8:de:0d:37:b7:d9:ed:6c:76: e0:b2:a9:63:7f:9f:01:4f:49:a0:03:89:b2:a7:b8:e5:4d:37: db:5e:a9:a9:0a:99:3e:f6:a5:f3:1d:d8:36:94:35:4b:76:cf: 1a:b2:8f:e4:b6:39:69:5e:d2:93:e6:59:d0:2a:76:41:af:4c: ca:ad:22:52:7f:d0:1b:dd:06:23:67:55:52:82:d9:dc:3d:32: 14:0d:ae:f3:89:a7:b8:22:0f:d1:cf:0a:b0:ec:2c:ec:55:ec: 8a:26:71:6b:9e:6e:7c:31:8d:c2:09:77:4b:c0:f6:d9:5b:ac: cf:a6:d1:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq6gMRu0fjYXk7lcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwMzAxMDAzMloXDTI1MTEwMTAxMDAzMlowLzEtMCsGA1UEAxMk ZTNkN2U5NjAtNWZkNy00YTg1LWIyYmEtOTdiMjFmNjU3MmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwP5SMp+EKr9lIPoaa3zCdF9ZtBOYFo6C5mbJ F/tfZ/VglH6igY3J2UcwycoN1SgLShuh+DBG0aHu55qI0np0fVarturBZq+8zvi+ Xm649gSBhhJiZ9MvSDaQjwv/S0MlC79Sv8WgQBnyWhFjd+pJHp0+O5t+Wr2Pqec2 MDcygPe2qE7rpai8473z9wk/WlekqO/v+Oc+3xkYLehux4DLQiBdKvcXrasZzO97 CIJpo+GKQBnHsMjhQ9jYcYGcQI4vecBghbkKNQ/QWVc/IJ4i6z7jTUu4jUJD/Ty7 sl98tJRBcqfttGJlbHAdOLwN3gGpqMjovYsfsH4f492NxmAuxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCe9vbOTL1vAEZDMBJyaQi8V6xMBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGUyN2I3NzktYzk4NC0z MDg4LTk0NGUtNWQ2Y2Y4MjM3OTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEop8QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+9N9VOyBtVMOnCUoKblWg07NQpQL402Vzbc0236+woLmu5i+a/9cPj Ea4cZZyA5VLg12BLuR/bT9x42t1BA4arP9uRJV2V5VrzOJ1bpsEYZKXn/zGP0MJA XJhM8/DWqMAEO1hnTS5EwbN0PqSVuwIjatlK6LcKUaKYKS2MgKTDmBktqMTI0eje DTe32e1sduCyqWN/nwFPSaADibKnuOVNN9teqakKmT72pfMd2DaUNUt2zxqyj+S2 OWle0pPmWdAqdkGvTMqtIlJ/0BvdBiNnVVKC2dw9MhQNrvOJp7giD9HPCrDsLOxV 7IomcWuebnwxjcIJd0vA9tlbrM+m0bA= -----END CERTIFICATE-----Generated at Mon Aug 4 01:42:53 2025 by rpki-client