$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/98398e13-a8fa-3d32-a28a-26fb56a49c17.roa File: 98398e13-a8fa-3d32-a28a-26fb56a49c17.roa (raw, json) Hash identifier: 3y4KC9XKZ8wkzogwhLrcKx4yzDjZSR01oFX2qlSy0K8= Subject key identifier: 3E:74:B4:1B:3B:63:E1:45:46:1A:0B:CC:94:D9:CD:D6:DF:92:0B:59 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA9327744FD41A0F2BBC5E460 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/98398e13-a8fa-3d32-a28a-26fb56a49c17.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 162.158.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:77:44:fd:41:a0:f2:bb:c5:e4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=f3966ef9-a3cb-44f3-b531-ec2d38b1b720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:63:c3:46:18:61:79:fb:82:fb:98:bd:bb:94: 9f:17:1e:87:be:44:92:64:c8:1a:3e:99:db:aa:e1: 76:55:20:bf:d9:42:35:a9:fc:73:af:b9:ca:c0:15: b0:33:37:93:2d:c5:dd:d1:b3:fa:fe:34:1c:fb:e8: 7a:06:ab:65:28:21:e9:8b:fb:7d:88:15:88:76:bd: be:ae:33:e9:8a:77:aa:87:a4:95:0b:59:92:72:81: 5e:06:48:5a:2a:86:21:15:d1:62:b5:c1:0c:8a:86: 04:1f:0d:4d:67:0e:4b:87:6c:f4:ef:4f:67:d8:03: 8c:ed:e7:12:2c:21:8b:d4:2d:65:28:05:01:45:e1: a5:c8:14:81:0d:d3:f3:98:98:d6:48:a3:44:41:73: a6:9c:06:98:7a:43:3b:79:3b:95:a2:46:96:5b:14: 50:bf:ab:fc:07:43:0e:3a:77:f8:1c:55:95:b4:0c: 2a:1f:35:14:28:b1:5e:e6:3a:cf:2b:67:cf:49:f0: 57:b0:6b:84:05:fa:8f:0a:34:02:44:45:69:6a:ce: 31:fc:e7:e1:07:27:e9:5c:72:12:30:39:9f:70:c4: d6:66:b3:f6:6d:a6:7b:d5:83:0e:31:34:4d:f9:8b: 23:ae:ab:80:72:6c:93:49:92:6c:a2:8d:e6:0e:16: bd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:74:B4:1B:3B:63:E1:45:46:1A:0B:CC:94:D9:CD:D6:DF:92:0B:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/98398e13-a8fa-3d32-a28a-26fb56a49c17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:62:7a:bc:70:50:15:7d:a4:11:6e:9d:1b:74:89:98:9d:15: 1b:23:d9:46:40:7e:fe:e1:0b:27:b4:1b:7c:1b:cb:35:4f:dd: 3d:dc:b3:36:38:e7:04:f5:bb:32:68:ed:f9:f6:45:46:fb:0b: b0:7d:81:7e:94:f8:00:6a:3f:53:62:a5:e3:d8:50:5a:12:a7: 71:1c:51:97:2f:8f:08:dd:95:d0:7b:67:07:7b:42:31:0d:09: ea:c5:a1:45:e0:25:03:82:56:20:f2:0f:84:b7:5a:23:aa:ee: 34:05:5d:02:e4:5b:44:6c:54:95:c5:f3:2f:f7:19:c8:95:6a: 35:df:15:65:37:2f:43:47:4a:4a:37:50:d6:d6:e3:61:c7:1d: 02:42:af:6b:2f:36:90:26:94:7e:d4:f1:2b:20:6c:f8:06:b7: f1:26:ac:01:57:64:5c:ad:39:3f:d7:6d:20:02:2a:6b:eb:9a: 1e:23:39:16:21:c3:32:5e:51:36:10:ec:47:d3:b0:02:5e:2b: f2:84:55:53:69:66:97:a0:6a:04:81:92:fe:dc:5b:81:4e:c4: 6a:33:25:d2:98:cd:d0:70:11:3c:09:52:13:45:e3:19:c5:c5: 36:e8:af:e2:a2:73:53:40:7b:5a:ad:47:ba:0c:2a:a3:18:e2: 7b:be:46:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMndE/UGg8rvF5GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk ZjM5NjZlZjktYTNjYi00NGYzLWI1MzEtZWMyZDM4YjFiNzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmPDRhhhefuC+5i9u5SfFx6HvkSSZMgaPpnb quF2VSC/2UI1qfxzr7nKwBWwMzeTLcXd0bP6/jQc++h6BqtlKCHpi/t9iBWIdr2+ rjPpineqh6SVC1mScoFeBkhaKoYhFdFitcEMioYEHw1NZw5Lh2z0709n2AOM7ecS LCGL1C1lKAUBReGlyBSBDdPzmJjWSKNEQXOmnAaYekM7eTuVokaWWxRQv6v8B0MO Onf4HFWVtAwqHzUUKLFe5jrPK2fPSfBXsGuEBfqPCjQCREVpas4x/OfhByfpXHIS MDmfcMTWZrP2baZ71YMOMTRN+YsjrquAcmyTSZJsoo3mDha9FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD50tBs7Y+FFRhoLzJTZzdbfkgtZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTgzOThlMTMtYThmYS0z ZDMyLWEyOGEtMjZmYjU2YTQ5YzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop51MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVierxwUBV9pBFunRt0iZidFRsj2UZAfv7hCye0G3wbyzVP3T3cszY4 5wT1uzJo7fn2RUb7C7B9gX6U+ABqP1NipePYUFoSp3EcUZcvjwjdldB7Zwd7QjEN CerFoUXgJQOCViDyD4S3WiOq7jQFXQLkW0RsVJXF8y/3GciVajXfFWU3L0NHSko3 UNbW42HHHQJCr2svNpAmlH7U8SsgbPgGt/EmrAFXZFytOT/XbSACKmvrmh4jORYh wzJeUTYQ7EfTsAJeK/KEVVNpZpegagSBkv7cW4FOxGozJdKYzdBwETwJUhNF4xnF xTbor+Kic1NAe1qtR7oMKqMY4nu+Rqs= -----END CERTIFICATE-----Generated at Sat Nov 1 12:36:26 2025 by rpki-client