$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/89b8c64b-5bb0-3893-8bb9-391ace61f3d9.roa File: 89b8c64b-5bb0-3893-8bb9-391ace61f3d9.roa (raw, json) Hash identifier: 4434IRNNfXz1NOtUO73ceRnbMnWFNwI/o5XoF2LUHQE= Subject key identifier: 13:95:3E:FF:4B:30:47:07:10:6E:DE:63:65:2F:F2:0F:5B:00:F6:89 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584B2496E7B75BD5DB0A77574380 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/89b8c64b-5bb0-3893-8bb9-391ace61f3d9.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 13335 IP address blocks: 162.159.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:e7:b7:5b:d5:db:0a:77:57:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=662f4ba2-9169-4194-a2c6-55b9a80f636e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:bf:31:cb:50:a2:2c:18:de:68:a0:ca:51:9a: 18:88:85:d3:ab:47:04:b6:c4:92:25:6b:f5:b5:fb: 88:bf:3d:25:38:49:69:c9:48:1c:94:80:e5:26:95: 77:36:1b:8e:e3:e1:28:29:b7:8c:3a:17:88:89:3d: 45:b8:4c:3c:84:8f:16:40:30:f2:17:12:37:b0:86: e9:b1:bb:ee:6b:b6:1c:c8:0e:7b:10:69:b9:ac:61: 91:78:2a:8b:eb:78:64:37:f8:8d:8c:bf:ab:52:a6: 10:3f:bd:b4:b2:65:95:c9:e7:94:27:ff:d3:dd:7b: c4:c5:61:c9:59:5c:b4:25:71:e8:f4:71:c7:1a:03: 08:d4:67:81:ed:f7:f4:78:3b:5e:4d:c4:d9:bb:4c: 93:7e:c4:68:04:87:63:5c:f1:18:f2:4e:10:c1:43: 19:bb:44:1d:48:e6:92:d4:82:23:f5:f9:9b:06:c7: 48:01:2b:83:bd:b7:2b:7d:3f:cc:47:52:35:7a:5c: ee:27:c7:b8:dc:d4:eb:de:76:48:6f:82:09:ec:2f: 5f:73:b5:f7:73:78:a6:bd:fd:83:4d:95:71:e4:95: c2:df:4c:9c:44:06:21:e2:00:db:0e:5e:38:f6:61: c4:bb:75:5e:fb:90:8c:20:d1:7e:8b:b4:d9:64:c3: 35:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:95:3E:FF:4B:30:47:07:10:6E:DE:63:65:2F:F2:0F:5B:00:F6:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/89b8c64b-5bb0-3893-8bb9-391ace61f3d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.159.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:5c:5f:3b:c8:72:92:bf:63:25:bf:7b:4b:6e:6f:d6:f5:04: bf:ec:cd:ae:75:d0:38:68:24:78:66:06:52:89:4f:6d:8f:55: 12:8f:75:3a:92:15:90:1d:0a:1d:00:dd:d8:32:b8:5e:b4:56: f0:f1:3b:eb:b1:94:21:02:d6:e8:80:18:9f:39:28:28:e1:6c: be:26:37:8b:83:d2:c3:04:c4:47:58:b0:b3:88:83:f6:17:7d: e3:ca:7a:5a:ad:5d:92:99:50:7b:40:d4:7e:83:c2:e4:60:a4: 7d:a5:10:b1:5d:86:81:18:c7:18:1a:4f:f0:c3:8c:f0:8e:dd: 2e:93:57:86:5f:2c:81:48:2b:86:8b:87:4c:4b:74:12:62:cf: 80:70:18:ca:93:c8:78:ff:56:8c:cf:83:52:48:e3:48:f9:19: 43:df:dd:3e:8f:b9:8a:90:ec:58:e6:a2:ba:71:ea:24:ef:df: 6d:0f:7b:87:5f:8a:c7:60:9a:98:6b:23:5c:86:86:b3:1d:d8: 31:1f:18:fb:2c:5b:9a:2f:6b:16:55:85:05:ff:5a:14:b7:b5: 8a:ef:d7:8f:74:9d:1c:96:9c:6e:44:08:ce:b7:89:87:f5:c9: 04:77:6b:b2:6f:d4:a9:fc:2b:74:ae:e5:ea:6b:ef:0e:d4:e9: f1:57:7c:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsklue3W9XbCndXQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk NjYyZjRiYTItOTE2OS00MTk0LWEyYzYtNTViOWE4MGY2MzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkr8xy1CiLBjeaKDKUZoYiIXTq0cEtsSSJWv1 tfuIvz0lOElpyUgclIDlJpV3NhuO4+EoKbeMOheIiT1FuEw8hI8WQDDyFxI3sIbp sbvua7YcyA57EGm5rGGReCqL63hkN/iNjL+rUqYQP720smWVyeeUJ//T3XvExWHJ WVy0JXHo9HHHGgMI1GeB7ff0eDteTcTZu0yTfsRoBIdjXPEY8k4QwUMZu0QdSOaS 1IIj9fmbBsdIASuDvbcrfT/MR1I1elzuJ8e43NTr3nZIb4IJ7C9fc7X3c3imvf2D TZVx5JXC30ycRAYh4gDbDl449mHEu3Ve+5CMINF+i7TZZMM1EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBOVPv9LMEcHEG7eY2Uv8g9bAPaJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODliOGM2NGItNWJiMC0z ODkzLThiYjktMzkxYWNlNjFmM2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop/BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJcXzvIcpK/YyW/e0tub9b1BL/sza510DhoJHhmBlKJT22PVRKPdTqS FZAdCh0A3dgyuF60VvDxO+uxlCEC1uiAGJ85KCjhbL4mN4uD0sMExEdYsLOIg/YX fePKelqtXZKZUHtA1H6DwuRgpH2lELFdhoEYxxgaT/DDjPCO3S6TV4ZfLIFIK4aL h0xLdBJiz4BwGMqTyHj/VozPg1JI40j5GUPf3T6PuYqQ7Fjmorpx6iTv320Pe4df isdgmphrI1yGhrMd2DEfGPssW5ovaxZVhQX/WhS3tYrv1490nRyWnG5ECM63iYf1 yQR3a7Jv1Kn8K3Su5epr7w7U6fFXfNA= -----END CERTIFICATE-----Generated at Sat Nov 1 10:01:47 2025 by rpki-client