$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a171e529-be52-33c0-a394-6d7043980bdd.roa File: a171e529-be52-33c0-a394-6d7043980bdd.roa (raw, json) Hash identifier: AdsRey22m5wChZkW4ZdZvcYD9h0zir2wwKlg6g1HcCo= Subject key identifier: 9A:02:22:87:25:09:41:81:34:D3:19:C3:48:3A:09:56:2D:57:A0:7C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667C5D472F1C461C3458EE0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a171e529-be52-33c0-a394-6d7043980bdd.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 162.158.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:c5:d4:72:f1:c4:61:c3:45:8e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=07e88b61-e84e-4cbb-b898-ae9f5e6b3a01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a2:f4:83:25:d8:37:13:e1:7b:21:05:0e:70: f3:0d:dc:6e:05:1f:58:41:f0:cf:5d:8e:dd:69:4d: 52:7d:55:73:fe:57:de:51:fa:83:e1:02:46:14:b4: f1:0d:0b:03:ae:0a:da:c3:d2:11:ab:2f:c9:9f:27: e7:ca:f6:1f:f5:ca:2e:93:d8:43:4e:6c:09:33:f9: 8b:c5:4c:1f:b3:85:d3:d3:68:17:a3:c7:16:9b:35: bd:46:b0:43:15:71:fe:47:d0:16:02:a9:45:28:33: f8:d2:60:70:c8:a8:44:4b:34:b0:b8:5f:09:f0:26: 2a:60:e9:fb:01:0e:f4:0b:fa:5d:8f:f6:9f:18:f2: d1:3d:36:f6:7a:6a:b9:12:5c:02:a1:17:5d:01:f7: b8:22:d0:5a:e0:20:08:d3:b1:d0:5d:2d:b6:12:fc: da:39:8e:60:fa:ea:ab:aa:9e:87:a2:04:41:cc:3b: 61:c9:07:8e:9b:f5:35:53:e9:e9:d0:29:c0:4f:8c: fe:26:1b:2b:28:b0:ee:6d:cb:1c:8d:c4:dd:72:35: 53:d3:59:19:b7:50:16:ea:10:62:a8:45:53:ce:27: 9d:fb:7e:e5:b2:89:da:c8:84:2f:5e:c8:3c:04:90: e2:00:5b:9d:4f:b7:23:db:a6:ea:2a:6a:19:48:0b: 31:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:02:22:87:25:09:41:81:34:D3:19:C3:48:3A:09:56:2D:57:A0:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a171e529-be52-33c0-a394-6d7043980bdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:82:e6:8d:51:04:c6:b5:8b:ae:bf:ae:a2:aa:88:f9:cc:7a: 84:6c:05:2c:4b:65:7b:e4:d2:35:d6:9a:ac:c8:af:65:87:36: 7a:48:9f:e0:87:13:81:00:88:26:fb:c2:4c:6a:00:fb:5f:3c: 6f:ba:0f:2a:c3:c1:73:82:22:c5:74:b5:b2:b6:89:e6:98:88: 02:18:41:7e:57:23:fd:28:ce:5e:3f:04:81:bf:c0:bd:c5:73: 4a:2c:f5:3b:cb:60:13:9e:78:23:30:9f:7a:8f:7d:e8:f1:a7: 0a:0b:bd:3e:89:29:22:dd:41:d1:0a:43:8d:17:45:6f:8d:de: 87:32:e2:bb:4a:70:2a:1b:98:62:6a:ac:c5:d9:d5:50:a8:23: c4:53:3a:26:1b:02:17:a3:63:db:00:0c:25:47:98:a5:c1:d2: c9:67:42:5c:93:61:ee:9a:26:52:d8:46:cf:3f:2b:c9:9c:f3: 60:01:a5:fa:70:d5:f5:d7:1b:a8:48:0d:0f:ea:3c:5f:c6:18: d0:26:06:99:6a:e4:33:c0:23:f7:dc:df:bc:d0:9a:b8:07:e3: 3c:02:3c:b4:e4:6d:be:c2:69:dd:6a:23:a0:09:d5:d4:f5:03: 46:ca:d1:f0:91:2c:52:02:4e:a9:9b:55:4f:50:52:66:bc:a6: 5a:61:a4:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ8XUcvHEYcNFjuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk MDdlODhiNjEtZTg0ZS00Y2JiLWI4OTgtYWU5ZjVlNmIzYTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqL0gyXYNxPheyEFDnDzDdxuBR9YQfDPXY7d aU1SfVVz/lfeUfqD4QJGFLTxDQsDrgraw9IRqy/JnyfnyvYf9couk9hDTmwJM/mL xUwfs4XT02gXo8cWmzW9RrBDFXH+R9AWAqlFKDP40mBwyKhESzSwuF8J8CYqYOn7 AQ70C/pdj/afGPLRPTb2emq5ElwCoRddAfe4ItBa4CAI07HQXS22EvzaOY5g+uqr qp6HogRBzDthyQeOm/U1U+np0CnAT4z+JhsrKLDubcscjcTdcjVT01kZt1AW6hBi qEVTzied+37lsonayIQvXsg8BJDiAFudT7cj26bqKmoZSAsxMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJoCIoclCUGBNNMZw0g6CVYtV6B8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTE3MWU1MjktYmU1Mi0z M2MwLWEzOTQtNmQ3MDQzOTgwYmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop4PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSC5o1RBMa1i66/rqKqiPnMeoRsBSxLZXvk0jXWmqzIr2WHNnpIn+CH E4EAiCb7wkxqAPtfPG+6DyrDwXOCIsV0tbK2ieaYiAIYQX5XI/0ozl4/BIG/wL3F c0os9TvLYBOeeCMwn3qPfejxpwoLvT6JKSLdQdEKQ40XRW+N3ocy4rtKcCobmGJq rMXZ1VCoI8RTOiYbAhejY9sADCVHmKXB0slnQlyTYe6aJlLYRs8/K8mc82ABpfpw 1fXXG6hIDQ/qPF/GGNAmBplq5DPAI/fc37zQmrgH4zwCPLTkbb7Cad1qI6AJ1dT1 A0bK0fCRLFICTqmbVU9QUma8plphpOM= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:47 2025 by rpki-client