$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8f828895-8770-30d0-a73c-138eff4e0c30.roa File: 8f828895-8770-30d0-a73c-138eff4e0c30.roa (raw, json) Hash identifier: yZoslwP3vkjAxCGtgETa525WeRIfgB860J/Ncjh6v78= Subject key identifier: 9B:15:2A:C3:13:0D:74:23:A7:67:B8:E5:06:35:A7:EF:4C:48:09:5A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584ABA80C48ED13C317C485A8C00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8f828895-8770-30d0-a73c-138eff4e0c30.roa Signing time: Sun 03 Aug 2025 01:00:32 +0000 ROA not before: Sun 03 Aug 2025 01:00:32 +0000 ROA not after: Sat 01 Nov 2025 01:00:32 +0000 asID: 13335 IP address blocks: 162.159.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ba:80:c4:8e:d1:3c:31:7c:48:5a:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 3 01:00:32 2025 GMT Not After : Nov 1 01:00:32 2025 GMT Subject: CN=9c5ae59b-b24f-482c-8a0a-542bcfeca0e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b5:58:8a:0a:22:2c:f0:42:18:64:49:99:60: 2d:c9:e7:97:7b:aa:a1:a5:46:26:95:ad:c7:2f:fe: bc:d0:92:f6:25:7d:96:3f:c2:18:05:8b:b9:1f:35: e4:31:a3:77:ac:20:8d:de:b7:df:c0:62:2b:0f:e2: d9:82:97:ce:4c:d4:64:53:49:d6:a2:31:48:1c:c2: 7b:c5:69:1b:e2:c4:d9:74:15:2e:30:65:6c:6a:2b: 6f:f4:91:c5:83:83:d5:d1:11:4e:8b:1b:bb:f9:da: f1:0c:c1:af:97:e1:9b:ae:64:f3:32:36:af:e1:7d: 34:04:9e:c5:0e:31:44:eb:74:f9:9c:35:50:14:ad: cf:9d:6e:e7:00:0c:29:bc:96:2d:98:4b:23:e9:ac: 18:ba:ea:f7:2b:a2:0a:9b:42:d3:78:ac:00:ab:39: bb:35:0e:22:e5:a7:ca:1b:96:3c:ec:ee:a3:68:89: 61:66:b7:c0:8c:db:7c:af:43:0b:f0:22:67:15:60: ee:05:25:06:35:13:b3:b8:86:e4:34:2e:e6:d8:98: 42:87:aa:8a:66:15:72:a6:0a:44:de:5e:da:e6:23: a8:e9:6a:df:14:c5:c1:65:4d:6d:d8:c6:18:c6:1b: b1:d5:e1:d8:04:72:19:b5:f4:dc:4b:d7:7f:cd:63: 0a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:15:2A:C3:13:0D:74:23:A7:67:B8:E5:06:35:A7:EF:4C:48:09:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8f828895-8770-30d0-a73c-138eff4e0c30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.159.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:09:bd:03:9c:55:15:bb:62:5c:17:a7:b4:0f:9c:2b:f4:2a: 16:c9:f8:a9:75:0b:2c:82:80:02:3f:c5:bf:de:69:fb:99:a2: dc:e6:63:d5:58:d9:65:d9:a5:56:42:e5:8b:a3:71:d4:29:9b: 3c:47:8a:0a:10:3a:58:cb:64:83:96:3c:dc:71:cf:18:a9:5e: c2:1d:a0:3c:9c:7f:31:a9:e3:9e:c9:25:e9:19:fc:df:a6:cc: 17:97:ba:27:52:37:f3:bb:ba:e4:c0:8a:62:1d:d9:4a:b6:83: 9f:7f:b0:1d:f5:7b:47:5f:89:2f:44:a4:c8:c4:53:65:75:1d: 6b:67:36:85:22:30:ad:35:73:20:0f:9c:b7:47:4c:78:7f:56: c7:0e:6c:a3:a5:33:f1:01:86:a7:de:27:52:aa:ed:ef:01:cb: 15:65:48:7a:54:cf:d9:b0:53:b6:e9:3d:0b:0c:a7:5f:a3:61: f5:85:e3:c8:8f:64:20:28:32:77:f5:14:c5:5b:ea:64:ba:9e: 74:40:50:d2:cb:9c:e2:ee:ff:58:99:69:37:e4:c8:fc:2d:14: 54:3a:4a:5f:da:43:2d:ef:65:c6:82:95:a5:f8:95:15:19:10: cc:5f:56:7e:0d:48:e8:33:42:be:8d:29:94:6f:43:9e:82:96: 1e:c4:19:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq6gMSO0TwxfEhajAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwMzAxMDAzMloXDTI1MTEwMTAxMDAzMlowLzEtMCsGA1UEAxMk OWM1YWU1OWItYjI0Zi00ODJjLThhMGEtNTQyYmNmZWNhMGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7VYigoiLPBCGGRJmWAtyeeXe6qhpUYmla3H L/680JL2JX2WP8IYBYu5HzXkMaN3rCCN3rffwGIrD+LZgpfOTNRkU0nWojFIHMJ7 xWkb4sTZdBUuMGVsaitv9JHFg4PV0RFOixu7+drxDMGvl+GbrmTzMjav4X00BJ7F DjFE63T5nDVQFK3PnW7nAAwpvJYtmEsj6awYuur3K6IKm0LTeKwAqzm7NQ4i5afK G5Y87O6jaIlhZrfAjNt8r0ML8CJnFWDuBSUGNROzuIbkNC7m2JhCh6qKZhVypgpE 3l7a5iOo6WrfFMXBZU1t2MYYxhux1eHYBHIZtfTcS9d/zWMK6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJsVKsMTDXQjp2e45QY1p+9MSAlaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGY4Mjg4OTUtODc3MC0z MGQwLWE3M2MtMTM4ZWZmNGUwYzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEop/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkJvQOcVRW7YlwXp7QPnCv0KhbJ+Kl1CyyCgAI/xb/eafuZotzmY9VY 2WXZpVZC5YujcdQpmzxHigoQOljLZIOWPNxxzxipXsIdoDycfzGp457JJekZ/N+m zBeXuidSN/O7uuTAimId2Uq2g59/sB31e0dfiS9EpMjEU2V1HWtnNoUiMK01cyAP nLdHTHh/VscObKOlM/EBhqfeJ1Kq7e8ByxVlSHpUz9mwU7bpPQsMp1+jYfWF48iP ZCAoMnf1FMVb6mS6nnRAUNLLnOLu/1iZaTfkyPwtFFQ6Sl/aQy3vZcaClaX4lRUZ EMxfVn4NSOgzQr6NKZRvQ56Clh7EGac= -----END CERTIFICATE-----Generated at Mon Aug 4 01:44:32 2025 by rpki-client