$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/920a8655-59ce-3482-95ca-ff103f2935e1.roa File: 920a8655-59ce-3482-95ca-ff103f2935e1.roa (raw, json) Hash identifier: mm40i7asPYFBMQY0rKnoeu7Vg3slh7ol0iGKorX4cKY= Subject key identifier: 30:A5:EE:A7:E9:68:C9:51:2B:83:43:62:FB:EA:D8:22:64:C7:58:6B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA932861DB32A05D380337180 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/920a8655-59ce-3482-95ca-ff103f2935e1.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 162.158.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:86:1d:b3:2a:05:d3:80:33:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=b5639b90-90d2-462d-a030-90ba2df37bbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8b:00:83:f3:8b:96:ad:d3:fa:68:54:ac:11: 8d:90:d0:d0:18:e4:e5:58:af:17:1c:20:3d:3e:6f: 93:9e:6a:a6:68:12:ab:3f:e2:5b:90:66:c0:f6:8f: 53:8a:ba:fe:85:98:3b:7d:e1:ab:4a:a9:2b:d1:53: 3a:9b:d3:e4:ee:9d:03:d1:df:4d:9b:f4:26:0e:69: 90:2d:7d:29:c5:35:cb:ad:a8:ca:1e:15:0e:3b:9f: ef:d8:33:fd:f2:7a:ad:38:33:94:e2:81:6b:e7:56: 4b:6c:96:fe:26:10:b8:1d:54:78:f1:dd:7b:b2:28: 4a:6d:c0:a7:6e:fe:24:92:6a:10:f5:38:c9:d2:df: 64:11:e3:e7:99:af:f7:45:9d:d1:c6:cf:ef:d7:81: 3f:95:17:23:0b:f0:e8:d3:bd:41:0a:e1:fa:61:e5: ca:fb:42:d2:20:23:be:bb:48:92:ae:c0:87:72:e5: 31:7d:dd:c0:97:a5:e1:46:ce:c6:fc:5b:99:9a:75: 2d:a8:a9:9d:d9:78:7f:1f:8b:8f:88:aa:17:fc:ab: cf:12:cc:0e:0e:cb:4e:52:67:45:7c:0b:34:f5:b7: 7a:00:7e:24:2a:fe:07:2e:3e:da:21:b2:32:6a:53: 1e:0c:14:44:98:68:c5:f6:4d:5d:75:89:46:9b:6f: 33:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A5:EE:A7:E9:68:C9:51:2B:83:43:62:FB:EA:D8:22:64:C7:58:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/920a8655-59ce-3482-95ca-ff103f2935e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:f6:4b:d6:8a:99:d0:d4:c5:24:2e:b0:1b:33:bf:51:56:7c: 7a:d0:01:c9:ed:8a:2d:3c:06:cc:ed:d5:f7:c2:52:08:8f:85: b7:7a:87:b9:7d:e3:d6:1e:c0:ac:57:46:87:24:01:09:d6:e9: 22:28:13:ec:2b:01:a9:00:45:d4:f3:26:2c:a2:f7:93:e6:75: e3:91:66:f0:30:41:f6:ae:0a:4a:5e:f3:8a:32:5c:ac:e7:7c: 8f:9f:3f:e3:81:db:d3:66:71:c3:f4:bf:28:38:64:31:58:f9: fd:57:2c:73:f2:2a:4b:0a:ba:4a:13:fc:01:84:ce:66:07:94: 29:9f:20:ea:fe:d8:f2:aa:91:cc:1c:a7:28:bd:0f:f5:a7:0e: a4:4e:fa:2a:ca:d6:48:2c:54:ea:ba:7b:fb:3a:dc:c8:71:ab: 92:de:b8:7a:a7:ce:a7:41:1b:cb:3e:a3:b2:3b:45:77:a8:a7: 2d:61:ed:29:51:0f:81:87:b2:7b:b9:cf:41:2b:aa:b9:70:d5: 4a:ca:4a:14:cc:49:34:73:87:c4:e4:ad:28:3e:6f:90:dd:1c: ef:96:40:1d:91:79:19:05:fe:5f:3a:04:93:c3:57:6d:14:38: 10:53:7b:49:44:3b:3e:f5:84:c7:d7:c8:fe:0b:74:35:2f:5f: 9a:db:fe:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMoYdsyoF04AzcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk YjU2MzliOTAtOTBkMi00NjJkLWEwMzAtOTBiYTJkZjM3YmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4sAg/OLlq3T+mhUrBGNkNDQGOTlWK8XHCA9 Pm+TnmqmaBKrP+JbkGbA9o9Tirr+hZg7feGrSqkr0VM6m9Pk7p0D0d9Nm/QmDmmQ LX0pxTXLrajKHhUOO5/v2DP98nqtODOU4oFr51ZLbJb+JhC4HVR48d17sihKbcCn bv4kkmoQ9TjJ0t9kEePnma/3RZ3Rxs/v14E/lRcjC/Do071BCuH6YeXK+0LSICO+ u0iSrsCHcuUxfd3Al6XhRs7G/FuZmnUtqKmd2Xh/H4uPiKoX/KvPEswODstOUmdF fAs09bd6AH4kKv4HLj7aIbIyalMeDBREmGjF9k1ddYlGm28zWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCl7qfpaMlRK4NDYvvq2CJkx1hrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTIwYTg2NTUtNTljZS0z NDgyLTk1Y2EtZmYxMDNmMjkzNWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop6PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALr2S9aKmdDUxSQusBszv1FWfHrQAcntii08Bszt1ffCUgiPhbd6h7l9 49YewKxXRockAQnW6SIoE+wrAakARdTzJiyi95PmdeORZvAwQfauCkpe84oyXKzn fI+fP+OB29NmccP0vyg4ZDFY+f1XLHPyKksKukoT/AGEzmYHlCmfIOr+2PKqkcwc pyi9D/WnDqRO+irK1kgsVOq6e/s63Mhxq5LeuHqnzqdBG8s+o7I7RXeopy1h7SlR D4GHsnu5z0Erqrlw1UrKShTMSTRzh8TkrSg+b5DdHO+WQB2ReRkF/l86BJPDV20U OBBTe0lEOz71hMfXyP4LdDUvX5rb/uA= -----END CERTIFICATE-----Generated at Sat Nov 1 10:01:48 2025 by rpki-client