$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/85191697-4486-34b1-b948-f32f6e1d6be5.roa File: 85191697-4486-34b1-b948-f32f6e1d6be5.roa (raw, json) Hash identifier: T4plpE5vIq0Uf8hzhHRGBwWJ14/+3D6gs0EyxiGwdDE= Subject key identifier: 2C:00:90:4B:BB:AA:00:ED:AD:AE:11:41:35:A4:00:13:76:71:D2:76 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA932882AF955212C4A851000 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/85191697-4486-34b1-b948-f32f6e1d6be5.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 162.158.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:88:2a:f9:55:21:2c:4a:85:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=ac303160-98b7-4d24-b3df-8a21e4769927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ab:e9:07:04:3c:4c:e1:83:cd:6e:41:69:cb: a2:b6:99:c1:49:e5:58:98:32:99:47:7a:6d:52:3e: c9:05:a3:c5:57:ba:6f:f8:5a:0c:b3:c7:9d:97:1a: 85:ef:56:96:d2:73:c8:42:35:2e:16:74:05:b9:fc: 1b:33:36:99:94:28:eb:06:80:3b:bf:dc:f8:d4:b6: ae:71:4f:5f:6b:14:9e:59:29:5c:fc:0d:c3:8c:f4: 39:33:2f:f4:f5:98:67:73:c4:d9:6e:22:42:b4:6d: 80:f8:e0:8d:bd:9c:17:48:b8:46:6e:29:6b:86:38: f9:68:12:21:8a:78:c2:35:37:4a:ef:46:32:c6:79: de:72:26:5e:ef:f0:37:34:3f:25:7a:64:53:57:5a: 17:87:25:68:5c:bb:e6:f2:b2:88:72:0e:9d:88:a8: 0f:82:57:c8:93:00:7c:6a:f9:71:bc:66:3e:c2:f9: 6c:dc:18:a3:24:15:68:69:e7:50:11:fb:7b:14:08: 81:0c:0a:d4:ad:f5:00:33:c4:b6:84:37:6b:46:44: 7d:66:46:f5:ec:ef:4a:cb:59:ab:df:b5:6e:25:03: 8f:27:92:3a:9d:85:89:49:06:8e:5b:ef:7d:97:1e: b2:57:f0:6f:5d:22:83:a7:2a:96:ae:84:4d:06:c0: ad:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:00:90:4B:BB:AA:00:ED:AD:AE:11:41:35:A4:00:13:76:71:D2:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/85191697-4486-34b1-b948-f32f6e1d6be5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:3e:e8:af:e1:6c:91:a2:07:05:84:c4:23:3d:f6:f1:88:96: e2:71:f1:4f:f7:e2:30:0c:b5:9e:7f:b2:89:59:9f:94:5b:9a: 31:4e:99:cb:f1:13:18:4c:a1:18:1d:27:ec:8f:08:dc:32:82: 95:dc:b6:a4:4f:b2:bd:c3:2d:da:73:84:ea:a0:11:fe:61:7b: 95:2a:78:3d:08:26:c1:cd:0d:ab:03:c8:3f:8c:0c:23:d9:e9: 2b:0b:6e:4e:64:34:4f:15:d0:08:68:eb:53:08:77:1a:78:f1: 67:92:45:b9:42:cf:ed:19:36:d6:7c:94:35:fe:6e:23:ae:bb: fb:4e:88:03:59:99:9e:dc:9f:06:69:d6:90:b9:76:19:e9:bb: 74:52:77:46:e0:24:fa:63:af:8f:ef:88:ff:78:26:a3:06:24: 41:33:f9:e4:40:02:19:da:69:20:60:58:a2:a9:a9:5b:15:cb: d8:c3:90:25:42:f0:35:9c:1f:e7:1c:82:c5:c5:59:e6:7b:b4: 50:50:45:11:1a:5b:43:94:c3:a2:4a:38:f5:32:43:8b:a6:03: cb:44:b1:26:26:e2:56:d7:b8:5c:50:70:f0:91:ab:36:87:07: 65:f2:ed:f3:8d:b8:00:b7:5c:af:c9:44:d2:a9:73:f5:99:f9: 78:af:7a:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMogq+VUhLEqFEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk YWMzMDMxNjAtOThiNy00ZDI0LWIzZGYtOGEyMWU0NzY5OTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqvpBwQ8TOGDzW5BacuitpnBSeVYmDKZR3pt Uj7JBaPFV7pv+FoMs8edlxqF71aW0nPIQjUuFnQFufwbMzaZlCjrBoA7v9z41Lau cU9faxSeWSlc/A3DjPQ5My/09Zhnc8TZbiJCtG2A+OCNvZwXSLhGbilrhjj5aBIh injCNTdK70YyxnneciZe7/A3ND8lemRTV1oXhyVoXLvm8rKIcg6diKgPglfIkwB8 avlxvGY+wvls3BijJBVoaedQEft7FAiBDArUrfUAM8S2hDdrRkR9Zkb17O9Ky1mr 37VuJQOPJ5I6nYWJSQaOW+99lx6yV/BvXSKDpyqWroRNBsCtmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwAkEu7qgDtra4RQTWkABN2cdJ2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODUxOTE2OTctNDQ4Ni0z NGIxLWI5NDgtZjMyZjZlMWQ2YmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCop7kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJg+6K/hbJGiBwWExCM99vGIluJx8U/34jAMtZ5/solZn5RbmjFOmcvx ExhMoRgdJ+yPCNwygpXctqRPsr3DLdpzhOqgEf5he5UqeD0IJsHNDasDyD+MDCPZ 6SsLbk5kNE8V0Aho61MIdxp48WeSRblCz+0ZNtZ8lDX+biOuu/tOiANZmZ7cnwZp 1pC5dhnpu3RSd0bgJPpjr4/viP94JqMGJEEz+eRAAhnaaSBgWKKpqVsVy9jDkCVC 8DWcH+ccgsXFWeZ7tFBQRREaW0OUw6JKOPUyQ4umA8tEsSYm4lbXuFxQcPCRqzaH B2Xy7fONuAC3XK/JRNKpc/WZ+Xivepw= -----END CERTIFICATE-----Generated at Sat Nov 1 15:25:46 2025 by rpki-client