$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a4c25fab-198b-352a-975a-3b994bb6d500.roa File: a4c25fab-198b-352a-975a-3b994bb6d500.roa (raw, json) Hash identifier: 5YhUMnb0g5qqg2GYpRQi5RHw1M2tDZFs7+lUoQzPSgs= Subject key identifier: 69:A3:DD:41:7C:EB:73:58:88:38:7F:B7:EA:13:F2:58:0D:DC:F9:E0 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD13C27135A29DF3033CE0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a4c25fab-198b-352a-975a-3b994bb6d500.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 162.158.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:13:c2:71:35:a2:9d:f3:03:3c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=9c609385-0176-48db-89bc-bf556ec311b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:50:40:5a:e8:fa:f0:ba:c6:0b:71:ec:c9:7e: 22:0d:95:f0:06:56:a4:7b:3c:04:3f:31:95:55:82: a2:60:39:99:81:15:67:75:8b:71:1a:11:71:8b:06: ff:d8:c8:6f:f7:c4:79:16:17:c3:5f:1e:71:3c:85: 9a:57:1e:dc:f4:3c:35:f5:77:16:53:63:19:df:79: da:f8:35:b1:0e:92:08:88:b9:17:31:7c:ca:9c:0d: 67:e0:66:81:1b:ab:da:c7:1d:2b:ce:9d:96:84:be: d9:ff:ba:0d:13:84:7b:d4:93:57:d6:77:1c:77:80: f4:ca:dc:70:1d:2e:c1:9e:1c:83:4e:6b:86:5b:96: 13:d1:2f:9f:5c:f4:d4:6a:7b:bf:f7:8f:d1:d9:b8: 48:24:e4:9e:ef:f0:4f:68:fb:14:5e:ac:57:07:74: 94:09:e3:72:ba:f6:92:76:d7:8a:a0:4d:fd:42:65: b5:7d:cf:a2:ad:14:dd:a3:73:25:88:37:dc:5d:15: fa:ce:be:ad:c9:99:99:9e:22:9e:67:21:6c:c1:e1: fb:5b:77:e7:71:96:e6:83:d7:45:bc:71:d9:5a:3a: 9a:c1:45:5e:a8:ab:ce:46:98:16:a5:d0:72:31:89: 07:56:88:38:5f:1e:d0:f9:c9:aa:9a:30:fa:c5:ee: d7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A3:DD:41:7C:EB:73:58:88:38:7F:B7:EA:13:F2:58:0D:DC:F9:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a4c25fab-198b-352a-975a-3b994bb6d500.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:1a:aa:53:79:5b:8e:d6:e6:44:94:48:e7:72:fc:6a:0c:d0: 0f:60:58:4c:9f:b7:d0:27:9d:0b:4a:4f:c4:d7:33:68:00:7b: c2:c6:c1:76:b8:20:65:e9:19:0d:4e:28:70:e9:e9:dd:31:7b: d1:db:8e:12:ba:5a:9d:de:1a:6e:df:4d:08:3f:32:5d:e2:e2: 05:7b:b9:70:93:1e:c0:73:65:28:75:4c:cb:65:9e:38:82:ea: b4:06:8b:be:fe:cd:99:d6:ce:fb:a7:1d:57:66:06:16:dc:30: da:63:3d:af:76:7b:bb:7a:fc:ba:89:ce:b4:05:85:51:83:a0: 2b:d7:d9:af:ea:22:d3:bf:f7:54:db:e4:dd:31:18:76:56:11: ea:ef:96:2a:06:44:5e:d4:2d:1d:17:9c:9d:98:03:41:75:8c: e3:90:4f:de:ff:50:e6:22:bf:de:1f:c3:21:cd:7d:f5:16:c6: fb:a9:ee:99:d4:c3:c4:9a:bf:fa:38:26:7d:59:c7:75:b0:ed: 10:ac:e9:13:78:b9:c7:8a:9d:a2:fc:99:0e:d3:56:07:9f:c0: 92:e1:f2:f1:8e:a6:d8:a1:32:c5:1e:62:76:bc:0e:bd:c5:88: 73:6e:e2:22:b4:42:9d:42:cb:a9:78:e0:31:c8:45:47:92:fc: fc:ba:00:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzRPCcTWinfMDPOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk OWM2MDkzODUtMDE3Ni00OGRiLTg5YmMtYmY1NTZlYzMxMWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1BAWuj68LrGC3HsyX4iDZXwBlakezwEPzGV VYKiYDmZgRVndYtxGhFxiwb/2Mhv98R5FhfDXx5xPIWaVx7c9Dw19XcWU2MZ33na +DWxDpIIiLkXMXzKnA1n4GaBG6vaxx0rzp2WhL7Z/7oNE4R71JNX1nccd4D0ytxw HS7BnhyDTmuGW5YT0S+fXPTUanu/94/R2bhIJOSe7/BPaPsUXqxXB3SUCeNyuvaS dteKoE39QmW1fc+irRTdo3MliDfcXRX6zr6tyZmZniKeZyFsweH7W3fncZbmg9dF vHHZWjqawUVeqKvORpgWpdByMYkHVog4Xx7Q+cmqmjD6xe7XOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGmj3UF863NYiDh/t+oT8lgN3PngMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTRjMjVmYWItMTk4Yi0z NTJhLTk3NWEtM2I5OTRiYjZkNTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop4ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoaqlN5W47W5kSUSOdy/GoM0A9gWEyft9AnnQtKT8TXM2gAe8LGwXa4 IGXpGQ1OKHDp6d0xe9HbjhK6Wp3eGm7fTQg/Ml3i4gV7uXCTHsBzZSh1TMtlnjiC 6rQGi77+zZnWzvunHVdmBhbcMNpjPa92e7t6/LqJzrQFhVGDoCvX2a/qItO/91Tb 5N0xGHZWEervlioGRF7ULR0XnJ2YA0F1jOOQT97/UOYiv94fwyHNffUWxvup7pnU w8Sav/o4Jn1Zx3Ww7RCs6RN4uceKnaL8mQ7TVgefwJLh8vGOptihMsUeYna8Dr3F iHNu4iK0Qp1Cy6l44DHIRUeS/Py6AKY= -----END CERTIFICATE-----Generated at Sat Nov 1 12:32:31 2025 by rpki-client