$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8e639956-81c8-3ab2-a92f-aebaa197a530.roa File: 8e639956-81c8-3ab2-a92f-aebaa197a530.roa (raw, json) Hash identifier: REYTr1DLfnOQ88r4CnblMEPe3CBpBIPFqWdh9koteWk= Subject key identifier: 32:9F:91:83:9F:AC:F1:66:02:32:ED:D2:22:7E:E3:27:B2:16:58:A4 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA93289B8DB2B00E7262EB480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8e639956-81c8-3ab2-a92f-aebaa197a530.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 162.159.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:89:b8:db:2b:00:e7:26:2e:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=c7f9022d-f362-476d-af19-06bf33b4577a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f1:64:f3:44:d0:53:b4:b2:71:04:ee:5a:9d: 30:5d:82:fe:56:58:21:47:04:ab:bc:ff:90:dc:89: 4f:ae:e1:e5:3a:16:eb:97:b8:65:39:a0:19:fd:5d: 79:30:c1:cb:10:21:1c:4a:e8:51:f7:bd:1a:e7:ea: 48:db:92:1e:4d:ff:2b:34:05:fb:cb:f4:88:cd:a7: 84:07:f6:44:6c:b9:b2:27:4f:84:51:4b:a5:7a:d0: 8a:9c:2f:cb:42:4e:5c:ea:4d:a4:72:18:c8:a0:b3: e6:ee:3b:11:3e:a6:01:e6:09:64:1a:12:46:d9:50: 8a:24:47:ce:04:a8:d5:3c:0a:af:15:54:16:c3:55: e9:ea:7a:5f:f4:58:7b:00:ad:cd:d1:dd:1f:4f:18: c8:95:99:8b:1c:f1:46:14:88:1a:1a:c5:f7:45:5d: dc:cd:bc:14:4c:c8:4a:4a:da:ae:01:95:24:27:f4: 0c:82:4a:46:c7:05:1c:4e:78:26:32:63:d7:cd:e6: bd:84:83:d5:4c:22:40:ca:a6:86:30:29:47:95:05: 91:bb:29:03:7c:d1:22:74:c8:e9:bd:cb:5d:ed:ab: cd:0e:b3:dc:e9:be:d0:9b:1e:2d:69:a4:4e:a3:19: d3:ed:06:63:18:5f:f4:ce:0c:41:a9:ea:82:03:ff: 2b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:9F:91:83:9F:AC:F1:66:02:32:ED:D2:22:7E:E3:27:B2:16:58:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8e639956-81c8-3ab2-a92f-aebaa197a530.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.159.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:28:8b:31:50:0e:7f:38:1e:8d:f7:01:c3:83:52:3c:9b:da: c2:9f:01:23:62:11:1e:35:45:64:db:93:1e:cb:09:b4:e6:8f: 4e:9b:6c:26:ab:c7:af:4b:c8:56:2a:73:be:0f:1c:50:ce:db: 06:25:23:c1:d7:b3:0e:30:5e:e5:77:a5:91:50:01:28:1d:ef: e5:22:11:3f:a7:f3:ec:41:43:59:09:4e:e5:bb:41:ad:dd:cb: f0:28:e6:f2:89:48:a0:1e:0d:ba:a8:8c:c8:8e:cc:c6:32:19: eb:3f:8b:eb:87:82:f1:18:95:40:25:4e:6f:30:f8:27:b9:fe: b4:1b:cc:fe:8c:bd:77:4d:32:d7:ce:af:b7:8b:26:94:09:e7: ae:0d:0b:cc:d0:3f:7c:d2:e9:a1:1e:25:9a:57:d6:21:f1:5a: 0f:9b:a1:54:ce:fe:94:89:df:8a:7c:f7:b1:93:3f:94:19:91: ff:8c:6e:ef:d7:e1:27:a7:fe:8e:ef:95:13:da:c1:1c:4d:83: 30:ce:1b:d9:a5:37:e2:ff:4e:81:32:0c:24:9d:aa:ca:8c:92: df:2c:99:f9:2b:d1:08:03:2e:4b:72:a7:a7:6e:59:17:98:c2: 7e:e8:4b:7c:03:0a:7d:16:2e:b2:0a:a1:44:df:ce:8b:7c:fe: d2:d5:78:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMom42ysA5yYutIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk YzdmOTAyMmQtZjM2Mi00NzZkLWFmMTktMDZiZjMzYjQ1NzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPFk80TQU7SycQTuWp0wXYL+VlghRwSrvP+Q 3IlPruHlOhbrl7hlOaAZ/V15MMHLECEcSuhR970a5+pI25IeTf8rNAX7y/SIzaeE B/ZEbLmyJ0+EUUuletCKnC/LQk5c6k2kchjIoLPm7jsRPqYB5glkGhJG2VCKJEfO BKjVPAqvFVQWw1Xp6npf9Fh7AK3N0d0fTxjIlZmLHPFGFIgaGsX3RV3czbwUTMhK StquAZUkJ/QMgkpGxwUcTngmMmPXzea9hIPVTCJAyqaGMClHlQWRuykDfNEidMjp vctd7avNDrPc6b7Qmx4taaROoxnT7QZjGF/0zgxBqeqCA/8rLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKfkYOfrPFmAjLt0iJ+4yeyFlikMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGU2Mzk5NTYtODFjOC0z YWIyLWE5MmYtYWViYWExOTdhNTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop8XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALgoizFQDn84Ho33AcODUjyb2sKfASNiER41RWTbkx7LCbTmj06bbCar x69LyFYqc74PHFDO2wYlI8HXsw4wXuV3pZFQASgd7+UiET+n8+xBQ1kJTuW7Qa3d y/Ao5vKJSKAeDbqojMiOzMYyGes/i+uHgvEYlUAlTm8w+Ce5/rQbzP6MvXdNMtfO r7eLJpQJ564NC8zQP3zS6aEeJZpX1iHxWg+boVTO/pSJ34p897GTP5QZkf+Mbu/X 4Sen/o7vlRPawRxNgzDOG9mlN+L/ToEyDCSdqsqMkt8smfkr0QgDLktyp6duWReY wn7oS3wDCn0WLrIKoUTfzot8/tLVeJg= -----END CERTIFICATE-----Generated at Sat Nov 1 12:36:56 2025 by rpki-client