$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/73856ba1-d9c9-3a42-a5eb-fcf769b00437.roa File: 73856ba1-d9c9-3a42-a5eb-fcf769b00437.roa (raw, json) Hash identifier: QSi570UrSlJizlJxNbXFnokXkkcCvUYIyuWOu3ri2Rg= Subject key identifier: 89:CF:A2:FC:E2:17:BC:1B:5E:58:82:3A:62:5C:BF:71:E1:AB:B1:AF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD15753E558C6FE3E7B480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/73856ba1-d9c9-3a42-a5eb-fcf769b00437.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 162.158.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:15:75:3e:55:8c:6f:e3:e7:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=fbdc2f3e-d1bf-4f56-8ad9-9623b6a7a490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5d:45:a6:02:ff:3a:d0:22:75:c1:6e:ab:26: 19:b1:49:82:fd:2e:38:3d:86:b2:c5:3d:3a:e2:10: 1a:93:85:6e:bf:29:59:23:4e:21:d8:07:2d:55:5c: 02:24:fa:1c:8a:25:de:1e:8b:a9:a1:eb:a7:1e:b0: 0a:06:dc:bb:82:43:a8:0f:cb:f3:3a:b9:db:fb:70: a5:a3:da:a3:d3:eb:75:1e:e4:45:23:e2:19:65:03: 53:8b:c9:ff:a9:3d:dd:3e:97:5d:54:80:6c:a1:9f: 9b:52:18:d6:3f:35:ec:9f:3b:60:b8:a1:42:56:46: ad:84:cc:b6:e1:28:b8:41:b4:0c:f4:74:1e:d3:d5: a8:c3:bf:da:9b:5d:9b:cb:0b:51:2a:60:d9:df:18: 08:8e:30:ec:64:1e:d4:45:66:f2:61:26:8e:2e:f5: d2:6f:f4:c1:83:40:d1:db:dd:03:ff:c4:a9:9f:ec: 3d:61:08:d5:b8:71:0a:18:cd:91:1b:db:eb:6d:d7: 46:76:3e:ad:ab:69:8d:dc:7e:be:28:ae:78:3c:25: 41:71:df:f5:0d:9a:dc:5a:57:df:8b:e8:67:69:08: 3e:fa:85:cb:f3:11:91:73:ee:fc:6a:53:f5:32:b4: 9f:a6:a6:cc:9a:29:b6:f6:cb:97:72:9d:a6:1b:d8: 0b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:CF:A2:FC:E2:17:BC:1B:5E:58:82:3A:62:5C:BF:71:E1:AB:B1:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/73856ba1-d9c9-3a42-a5eb-fcf769b00437.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:ce:e6:f6:f1:d1:34:22:cb:ed:02:da:f5:a7:df:bf:58:13: 79:69:48:7c:da:b9:96:c2:e0:65:ff:ed:24:8e:e7:d0:ab:b2: de:de:88:31:d0:ab:8e:bf:ad:8e:e1:87:04:0a:61:58:a6:1b: 02:4c:39:c2:84:83:f6:bb:0b:0c:ab:c0:7d:52:49:2c:9f:b8: d9:15:99:c3:52:54:44:48:d0:5d:3e:91:c1:cd:6e:e9:3e:73: 70:45:0c:9c:3b:9a:e7:ac:1f:b5:cd:5a:1d:7d:2b:96:2c:c9: 88:d4:ea:cd:a9:e2:26:dd:05:c2:ca:a8:a9:f6:7d:37:eb:98: e6:4c:2b:75:d0:6f:3e:98:96:fa:dc:29:7f:bd:4d:6e:c4:f9: c6:fb:a1:7d:d8:c9:44:54:f5:a9:b2:64:10:73:bf:03:7d:77: f9:36:32:df:23:33:7c:8e:8c:09:01:75:87:a2:dd:e7:06:f3: 55:f3:c6:a4:2c:e5:e7:6d:26:25:e7:83:88:29:e6:f3:fe:02: 19:3a:a7:62:4c:33:eb:ea:0d:d7:d3:58:40:99:b3:80:1f:62: 78:ff:33:12:55:d5:63:97:17:26:00:e2:20:0b:0b:e8:0e:eb: 26:34:36:da:e5:2f:07:fa:3c:f8:db:bb:18:0e:bf:d9:fb:cb: 6e:a9:11:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzRV1PlWMb+PntIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk ZmJkYzJmM2UtZDFiZi00ZjU2LThhZDktOTYyM2I2YTdhNDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjV1FpgL/OtAidcFuqyYZsUmC/S44PYayxT06 4hAak4VuvylZI04h2ActVVwCJPociiXeHoupoeunHrAKBty7gkOoD8vzOrnb+3Cl o9qj0+t1HuRFI+IZZQNTi8n/qT3dPpddVIBsoZ+bUhjWPzXsnztguKFCVkathMy2 4Si4QbQM9HQe09Wow7/am12bywtRKmDZ3xgIjjDsZB7URWbyYSaOLvXSb/TBg0DR 290D/8Spn+w9YQjVuHEKGM2RG9vrbddGdj6tq2mN3H6+KK54PCVBcd/1DZrcWlff i+hnaQg++oXL8xGRc+78alP1MrSfpqbMmim29suXcp2mG9gLHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInPovziF7wbXliCOmJcv3Hhq7GvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzM4NTZiYTEtZDljOS0z YTQyLWE1ZWItZmNmNzY5YjAwNDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop5ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALLO5vbx0TQiy+0C2vWn379YE3lpSHzauZbC4GX/7SSO59Crst7eiDHQ q46/rY7hhwQKYVimGwJMOcKEg/a7CwyrwH1SSSyfuNkVmcNSVERI0F0+kcHNbuk+ c3BFDJw7muesH7XNWh19K5YsyYjU6s2p4ibdBcLKqKn2fTfrmOZMK3XQbz6Ylvrc KX+9TW7E+cb7oX3YyURU9amyZBBzvwN9d/k2Mt8jM3yOjAkBdYei3ecG81XzxqQs 5edtJiXng4gp5vP+Ahk6p2JMM+vqDdfTWECZs4AfYnj/MxJV1WOXFyYA4iALC+gO 6yY0NtrlLwf6PPjbuxgOv9n7y26pEcw= -----END CERTIFICATE-----Generated at Sat Nov 1 12:31:09 2025 by rpki-client