$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6108eafa-eded-3e17-8a63-57e1d49d256a.roa File: 6108eafa-eded-3e17-8a63-57e1d49d256a.roa (raw, json) Hash identifier: +k80FofpApAQWBn9s7MUbG6RJWkofEwiB85BQ7VCwDY= Subject key identifier: 59:74:1E:6D:66:61:C2:F5:09:DA:C2:04:3D:FF:C6:C0:FC:08:D4:3D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD0416EAED68BFCC27CE80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6108eafa-eded-3e17-8a63-57e1d49d256a.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 108.162.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:04:16:ea:ed:68:bf:cc:27:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=b5d60384-419a-4e00-a5e1-fd464a641e80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:26:de:26:25:30:1b:44:df:fc:bb:be:1b:f9: f9:c2:5b:97:29:b0:b3:1b:a2:ba:8a:f3:ed:d8:df: ee:76:92:47:07:12:19:7f:92:f4:3e:9c:0a:89:12: aa:ca:93:73:fa:3a:4f:5c:56:b7:6d:45:88:32:3d: fc:41:b7:5d:20:57:c5:9b:f9:1a:44:e6:8b:72:9b: 07:43:d1:e1:bc:14:2c:be:ce:24:1a:65:7d:d1:0b: e3:2a:e2:71:d9:fa:92:b9:40:a7:d5:08:20:4a:1a: ce:19:45:00:a2:b0:af:0f:75:15:41:2e:aa:97:2f: 89:16:6f:4b:87:fe:db:dc:26:bf:85:a3:3c:dd:a8: b2:be:e1:56:9f:94:99:12:08:db:68:8d:2d:63:ca: 21:ac:83:7b:b2:c2:e7:73:79:d7:0b:1d:26:a8:e6: ce:c8:6d:b6:96:0d:bc:4e:e4:37:65:37:5e:27:4d: 22:c0:75:77:cc:65:8b:17:11:f4:a9:0a:5c:3c:5e: 20:ee:ad:5e:26:ef:0a:38:27:9b:10:67:b1:01:dd: cf:5d:f6:25:70:b8:89:cd:66:06:47:9d:13:7f:98: 20:bc:14:a2:38:ad:43:06:97:53:bd:06:68:ed:c7: 42:ad:46:fb:e9:16:eb:c7:b9:47:59:1d:35:ad:c6: 60:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:74:1E:6D:66:61:C2:F5:09:DA:C2:04:3D:FF:C6:C0:FC:08:D4:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6108eafa-eded-3e17-8a63-57e1d49d256a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 108.162.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:d1:46:69:37:f8:c9:57:dc:6e:6e:a7:f7:32:c5:4f:13:83: 48:ff:ba:5c:d0:35:0c:83:85:4c:1a:9a:e1:fd:d7:7f:02:d9: 01:af:0d:1f:ac:7b:e8:6f:a1:21:28:9f:20:5c:e4:95:c8:5c: e4:11:56:46:32:1f:64:07:7d:2f:5e:47:a6:f3:b9:bb:9f:de: 97:98:a3:f1:6d:9f:9a:86:54:55:90:89:08:2c:0c:8d:a7:b8: 1f:61:9d:49:02:12:7b:b4:fd:e2:90:5c:3e:bc:c4:8f:78:c9: 87:f7:46:d0:0b:7f:3e:36:6b:2e:0f:58:ce:ca:1d:a0:fd:f2: a1:ce:f1:1a:af:e7:b0:73:0e:05:19:3c:63:03:c3:90:ea:2e: 3a:c2:c6:70:84:b7:2e:9a:45:27:71:05:2f:d3:43:c3:7c:a6: a2:b2:77:75:1d:a9:a7:82:96:30:ce:ed:2e:cf:5a:12:2b:ad: 46:69:86:0e:80:1f:a8:8e:5c:3b:c4:9c:6a:e4:c6:fe:23:1a: 64:db:87:02:4d:f0:8d:a3:af:b7:1d:8e:4d:e8:aa:76:5c:0d: 70:bf:50:4a:47:ec:0c:48:6f:d5:b8:25:0a:32:ca:c8:c1:2c: 30:df:96:96:07:ac:0d:9e:7b:a1:de:b0:42:45:62:e3:bd:92: b4:e1:3f:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzQQW6u1ov8wnzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk YjVkNjAzODQtNDE5YS00ZTAwLWE1ZTEtZmQ0NjRhNjQxZTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgybeJiUwG0Tf/Lu+G/n5wluXKbCzG6K6ivPt 2N/udpJHBxIZf5L0PpwKiRKqypNz+jpPXFa3bUWIMj38QbddIFfFm/kaROaLcpsH Q9HhvBQsvs4kGmV90QvjKuJx2fqSuUCn1QggShrOGUUAorCvD3UVQS6qly+JFm9L h/7b3Ca/haM83aiyvuFWn5SZEgjbaI0tY8ohrIN7ssLnc3nXCx0mqObOyG22lg28 TuQ3ZTdeJ00iwHV3zGWLFxH0qQpcPF4g7q1eJu8KOCebEGexAd3PXfYlcLiJzWYG R50Tf5ggvBSiOK1DBpdTvQZo7cdCrUb76Rbrx7lHWR01rcZgFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFl0Hm1mYcL1CdrCBD3/xsD8CNQ9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjEwOGVhZmEtZWRlZC0z ZTE3LThhNjMtNTdlMWQ0OWQyNTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKL5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMLRRmk3+MlX3G5up/cyxU8Tg0j/ulzQNQyDhUwamuH9138C2QGvDR+s e+hvoSEonyBc5JXIXOQRVkYyH2QHfS9eR6bzubuf3peYo/Ftn5qGVFWQiQgsDI2n uB9hnUkCEnu0/eKQXD68xI94yYf3RtALfz42ay4PWM7KHaD98qHO8Rqv57BzDgUZ PGMDw5DqLjrCxnCEty6aRSdxBS/TQ8N8pqKyd3UdqaeCljDO7S7PWhIrrUZphg6A H6iOXDvEnGrkxv4jGmTbhwJN8I2jr7cdjk3oqnZcDXC/UEpH7AxIb9W4JQoyysjB LDDflpYHrA2ee6HesEJFYuO9krThP04= -----END CERTIFICATE-----Generated at Sat Nov 1 10:02:37 2025 by rpki-client