$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/962df271-1360-37e2-b4e4-813295d26896.roa File: 962df271-1360-37e2-b4e4-813295d26896.roa (raw, json) Hash identifier: jN4hCuiiXwlidxAdE+pWX8VdvPNdxv3Yt8cJm/8dvy0= Subject key identifier: F2:85:D9:02:E9:BC:73:63:6A:8B:4A:FC:70:33:57:EF:B3:E1:37:7B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD15DF72E01E0019708204 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/962df271-1360-37e2-b4e4-813295d26896.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 162.158.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:15:df:72:e0:1e:00:19:70:82:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=98f2010c-5de3-477c-a4bd-05351fcf366c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b5:91:bb:43:85:0d:6a:75:93:c0:d9:fa:7d: 13:ac:92:a6:e8:0d:c0:86:09:f6:2f:24:bf:3b:83: 6a:b9:3d:e1:1f:a6:d3:db:8e:d8:12:7d:b6:12:93: 8e:35:9c:63:d3:8b:aa:a7:ce:c3:9c:cc:cf:1a:3d: 0d:bb:7b:5a:ec:d1:f1:aa:cb:57:38:80:50:e8:e3: b3:78:14:30:a8:01:bd:56:73:22:ac:d1:27:86:f3: 9e:c7:2d:71:fc:4a:3f:3b:9d:52:5b:3c:72:5d:6e: 90:23:50:77:df:af:2c:00:28:15:44:ed:4e:ff:35: 68:fc:30:c3:b2:10:87:bb:31:58:d6:cc:93:67:49: 9a:c9:a3:1f:3a:66:fd:2c:95:7f:0e:72:57:17:d2: ec:3e:2e:4a:fb:7b:de:fb:c5:22:85:08:ea:e3:df: 9f:20:98:41:90:a6:89:e4:11:e0:6a:a5:96:fa:c2: bd:5a:de:b7:3b:48:4f:e0:45:fe:8d:5e:1d:1a:b5: d0:af:80:ed:05:3d:c4:68:31:50:8c:9c:77:c1:b0: e9:77:f3:db:e7:6a:59:e3:e1:e2:7b:ce:95:dc:37: dd:85:28:3f:b7:0c:d0:73:e8:94:2e:16:5e:5f:b8: 84:9a:33:b3:34:96:5b:da:4b:2c:76:c3:07:d5:0a: c2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:85:D9:02:E9:BC:73:63:6A:8B:4A:FC:70:33:57:EF:B3:E1:37:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/962df271-1360-37e2-b4e4-813295d26896.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:5f:f4:c6:bb:9a:24:f0:a1:34:49:82:58:a9:10:61:b5:14: 60:de:a9:46:5f:7d:6e:bf:f6:8c:a5:00:2d:f5:56:33:9a:2a: 7e:78:78:ef:75:e5:00:2f:ed:46:ac:76:b0:a5:cd:ad:16:55: 43:da:7f:b9:17:30:dd:5b:03:95:11:d0:c9:50:86:3e:e2:ba: 8c:f4:7a:ce:1a:b3:c5:49:69:2f:dd:cb:fe:5c:2e:8c:f3:8f: c2:34:12:0f:8a:f9:1d:f3:83:26:dc:09:47:16:50:a4:6a:ca: 96:f5:a1:34:7e:5a:5a:05:6d:c1:97:67:43:14:63:de:26:ca: 2e:72:53:f3:98:ea:38:88:b9:93:60:c3:6e:45:53:24:ba:13: 87:7b:14:e3:e2:6b:83:17:cc:55:20:94:bb:c9:a8:db:5f:5e: 72:a9:90:cb:40:aa:0f:c3:15:98:38:f5:37:a2:00:c6:8e:0b: 7a:b8:0a:ef:1c:f3:ef:b6:cc:f6:ba:3a:9f:81:24:c0:c9:9f: f6:cf:c4:50:00:de:1b:06:f0:8b:c0:35:35:b6:f6:25:f5:35: 5e:e2:39:67:4c:35:aa:64:b0:df:d3:e9:25:10:0a:b6:57:ae: 23:00:a6:12:77:bb:6e:34:da:b1:2b:c6:f9:13:2d:29:77:dd: ef:66:64:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzRXfcuAeABlwggQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk OThmMjAxMGMtNWRlMy00NzdjLWE0YmQtMDUzNTFmY2YzNjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7WRu0OFDWp1k8DZ+n0TrJKm6A3Ahgn2LyS/ O4NquT3hH6bT247YEn22EpOONZxj04uqp87DnMzPGj0Nu3ta7NHxqstXOIBQ6OOz eBQwqAG9VnMirNEnhvOexy1x/Eo/O51SWzxyXW6QI1B3368sACgVRO1O/zVo/DDD shCHuzFY1syTZ0mayaMfOmb9LJV/DnJXF9LsPi5K+3ve+8UihQjq49+fIJhBkKaJ 5BHgaqWW+sK9Wt63O0hP4EX+jV4dGrXQr4DtBT3EaDFQjJx3wbDpd/Pb52pZ4+Hi e86V3DfdhSg/twzQc+iULhZeX7iEmjOzNJZb2kssdsMH1QrC7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPKF2QLpvHNjaotK/HAzV++z4Td7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTYyZGYyNzEtMTM2MC0z N2UyLWI0ZTQtODEzMjk1ZDI2ODk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop5hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdf9Ma7miTwoTRJglipEGG1FGDeqUZffW6/9oylAC31VjOaKn54eO91 5QAv7UasdrClza0WVUPaf7kXMN1bA5UR0MlQhj7iuoz0es4as8VJaS/dy/5cLozz j8I0Eg+K+R3zgybcCUcWUKRqypb1oTR+WloFbcGXZ0MUY94myi5yU/OY6jiIuZNg w25FUyS6E4d7FOPia4MXzFUglLvJqNtfXnKpkMtAqg/DFZg49TeiAMaOC3q4Cu8c 8++2zPa6Op+BJMDJn/bPxFAA3hsG8IvANTW29iX1NV7iOWdMNapksN/T6SUQCrZX riMAphJ3u2402rErxvkTLSl33e9mZKc= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:44 2025 by rpki-client