$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1e989c28-67b5-315c-a26f-bf1772d8f3e9.roa File: 1e989c28-67b5-315c-a26f-bf1772d8f3e9.roa (raw, json) Hash identifier: UOYRt53uXy8Xnq4Sk/Y+3mxZwqz7MIp+Ckyg9aVScd4= Subject key identifier: 4A:1A:CE:6E:46:72:E1:14:A4:80:F4:FC:60:21:2E:B8:35:0D:EF:A7 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD01B1D034B8CEB3B46600 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1e989c28-67b5-315c-a26f-bf1772d8f3e9.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 108.162.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:01:b1:d0:34:b8:ce:b3:b4:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=65e1199c-6f2c-4c44-8b7b-c0ac6982a671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8d:37:20:5d:b9:0a:bb:3e:14:8c:aa:53:04: a0:ec:17:a1:49:c1:b7:b6:17:7e:92:84:c6:1f:5a: 3e:02:47:d0:7e:9a:8f:ce:24:2f:4c:b6:53:de:1e: 2d:96:39:d5:d1:75:48:c8:98:ca:f9:83:74:11:25: f6:bd:c3:22:ec:85:f2:35:33:a5:a6:d0:83:9b:23: 78:06:d8:29:7d:6d:6c:5b:92:d8:d6:d6:87:6a:53: f6:95:42:5b:85:ed:8b:8b:05:97:79:93:dc:a5:00: 9e:cb:ad:3e:44:bd:63:f0:fc:c9:ad:55:9e:3a:d9: 8c:43:94:a7:24:ee:10:c1:7f:be:9b:a5:e2:09:60: a3:86:3b:c6:14:29:2f:da:f1:fc:a7:60:12:9f:a0: 13:35:ec:ed:f2:70:f5:a5:ff:4d:0f:10:86:16:92: a6:50:ec:30:24:6d:42:5b:42:1e:31:2b:24:83:72: 07:80:d6:cf:e0:72:bf:65:0d:96:5d:43:39:eb:ae: b3:12:b0:68:be:2e:84:3a:c8:93:b8:26:27:e3:f3: 7f:8f:a5:cd:27:01:13:50:e5:4a:9a:19:3c:06:4a: 68:ab:01:57:de:73:77:ae:e1:e7:39:d9:99:ff:d7: 94:38:85:17:bd:04:a7:d3:b1:ed:84:2a:bb:b0:a8: d6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:1A:CE:6E:46:72:E1:14:A4:80:F4:FC:60:21:2E:B8:35:0D:EF:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1e989c28-67b5-315c-a26f-bf1772d8f3e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 108.162.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:27:e6:91:d3:37:99:41:6b:9c:81:3c:bc:74:90:89:0c:5d: 85:94:04:65:a1:4f:63:70:46:3e:61:5a:1f:10:79:1b:e0:be: c0:7b:39:f7:2e:43:94:1b:e0:1c:b1:7f:0c:d2:41:47:17:40: 79:12:b1:ae:29:21:7f:d9:b0:42:aa:61:f0:f4:4c:8e:3c:98: f3:0d:46:19:8f:eb:0e:66:b8:e2:76:fb:ce:9f:23:c5:cd:94: 67:d5:ce:2e:9b:95:76:5b:a3:51:ce:22:32:0f:52:d7:cf:c4: 67:45:fe:2a:78:34:58:b0:0f:5c:20:fa:d1:8c:29:b1:ee:3a: 86:1f:3d:e6:6b:f2:72:52:5a:31:8c:14:f4:79:a4:f3:8a:da: a1:df:f2:8d:fd:01:8e:39:40:18:76:77:a6:29:1d:78:c1:5b: 26:70:fd:5e:19:f8:ac:e2:25:d6:5e:8c:c0:49:b8:ba:66:a7: 58:25:0d:5e:30:17:e2:83:50:73:b9:a4:29:d0:34:df:b6:b0: 9d:4d:fd:52:12:2c:a3:2f:9e:a8:0f:32:9c:f5:ef:a3:c7:36: 4e:c8:63:c2:c2:2b:22:fd:eb:24:45:69:b1:2f:ec:03:03:84: 82:e6:09:45:63:c4:73:a3:19:e9:85:58:65:0c:89:60:4a:53: 2b:6f:48:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzQGx0DS4zrO0ZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk NjVlMTE5OWMtNmYyYy00YzQ0LThiN2ItYzBhYzY5ODJhNjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlo03IF25Crs+FIyqUwSg7BehScG3thd+koTG H1o+AkfQfpqPziQvTLZT3h4tljnV0XVIyJjK+YN0ESX2vcMi7IXyNTOlptCDmyN4 BtgpfW1sW5LY1taHalP2lUJbhe2LiwWXeZPcpQCey60+RL1j8PzJrVWeOtmMQ5Sn JO4QwX++m6XiCWCjhjvGFCkv2vH8p2ASn6ATNezt8nD1pf9NDxCGFpKmUOwwJG1C W0IeMSskg3IHgNbP4HK/ZQ2WXUM5666zErBovi6EOsiTuCYn4/N/j6XNJwETUOVK mhk8BkpoqwFX3nN3ruHnOdmZ/9eUOIUXvQSn07HthCq7sKjW1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoazm5GcuEUpID0/GAhLrg1De+nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWU5ODljMjgtNjdiNS0z MTVjLWEyNmYtYmYxNzcyZDhmM2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKLRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcn5pHTN5lBa5yBPLx0kIkMXYWUBGWhT2NwRj5hWh8QeRvgvsB7Ofcu Q5Qb4ByxfwzSQUcXQHkSsa4pIX/ZsEKqYfD0TI48mPMNRhmP6w5muOJ2+86fI8XN lGfVzi6blXZbo1HOIjIPUtfPxGdF/ip4NFiwD1wg+tGMKbHuOoYfPeZr8nJSWjGM FPR5pPOK2qHf8o39AY45QBh2d6YpHXjBWyZw/V4Z+KziJdZejMBJuLpmp1glDV4w F+KDUHO5pCnQNN+2sJ1N/VISLKMvnqgPMpz176PHNk7IY8LCKyL96yRFabEv7AMD hILmCUVjxHOjGemFWGUMiWBKUytvSNI= -----END CERTIFICATE-----Generated at Sat Nov 1 12:30:41 2025 by rpki-client