$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c84998f7-11ed-3d07-a1a7-b71c562f951a.roa File: c84998f7-11ed-3d07-a1a7-b71c562f951a.roa (raw, json) Hash identifier: JynZ+Ft6mC4fThqrQD22s2I78BP9LCHbElW8CRpRmII= Subject key identifier: E7:B1:1B:12:9C:76:49:A6:50:B7:E4:44:C8:88:5C:BE:C0:10:27:45 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD086B7F135FC810C837C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c84998f7-11ed-3d07-a1a7-b71c562f951a.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 162.158.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:08:6b:7f:13:5f:c8:10:c8:37:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=bf394e67-32a5-4b62-8e71-a68a916eaf61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:26:a3:3b:e3:e8:8d:8c:ea:67:d4:5f:0f:13: 46:37:a6:56:7a:ed:a2:8e:7f:40:14:6d:7a:de:ce: c7:33:b2:c0:eb:ff:f4:10:f8:c9:0e:f1:04:7d:f9: b3:b3:65:bd:df:7d:f6:5b:82:7f:7e:c8:8d:05:92: 70:1d:00:73:fa:61:0c:b9:55:24:53:08:3e:c9:30: a5:2b:47:62:72:6d:ec:a0:7e:fd:d0:20:04:75:12: 58:a1:a7:0b:4b:74:0e:61:38:81:b6:19:e7:d0:55: b9:3a:51:5e:e0:d5:bd:d8:75:2c:36:e0:6d:25:5e: b1:db:5e:28:e5:be:d1:6f:fd:36:69:9b:3b:fc:92: d2:fb:b0:c8:4a:12:af:5f:8d:cc:62:6a:e1:1c:cd: 11:57:5b:a9:b2:a3:fd:33:16:d5:f5:1f:26:da:4d: 99:c6:6e:71:d7:2c:c8:29:b2:77:42:27:fc:71:f2: e6:2c:40:68:56:9d:63:32:08:95:0a:e4:43:dd:45: 2c:9a:e3:a0:af:4d:bb:00:e2:e3:a8:17:02:17:53: 40:57:da:b7:c8:0b:13:ab:c3:76:3e:10:a3:0b:4d: 39:83:ac:04:c5:67:d1:84:b2:ed:6b:1a:b6:a0:02: 83:be:49:fe:bf:dc:4b:66:37:e0:63:70:f0:af:53: 76:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B1:1B:12:9C:76:49:A6:50:B7:E4:44:C8:88:5C:BE:C0:10:27:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c84998f7-11ed-3d07-a1a7-b71c562f951a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:98:c7:83:70:86:79:78:c1:a9:de:c1:99:69:10:73:a6:42: f9:d1:dd:59:4a:04:83:08:09:c6:09:8b:b4:16:3c:48:94:f9: ff:df:b6:2f:65:3e:a9:e5:1d:2f:28:a5:ea:96:92:3d:ce:71: d5:2c:18:a8:ea:69:13:0c:14:ca:1a:3c:d5:8e:e5:22:70:f8: 31:17:e6:b2:33:93:16:a1:74:99:4b:55:e3:61:1c:56:d1:96: aa:85:ad:95:c4:d5:14:27:93:a4:6d:96:e3:b3:36:99:2d:80: 7d:37:88:92:de:7a:88:ac:1c:d2:4d:1e:99:7a:99:61:0b:c0: 9b:cf:ff:a1:57:f0:ec:b2:15:1d:1c:74:8a:c5:13:e4:14:19: 07:f3:15:a8:4c:11:af:4b:0e:a3:74:08:8e:db:e2:d8:22:5c: 4d:77:ff:6e:ac:1d:d6:f5:ad:59:74:cd:21:15:c2:f5:bd:fd: e9:a2:0a:1b:f4:05:71:cc:d9:56:71:44:cf:79:39:1e:a8:71: a4:7c:91:45:cd:aa:07:e2:55:ca:92:63:d6:b5:4c:8d:d6:de: 33:a9:87:63:a9:2c:c0:21:9e:d0:60:19:68:4c:ae:0a:70:b6: 10:de:1a:7a:33:cd:51:7e:2e:d0:a9:76:4b:82:3b:eb:aa:ae: b0:47:0a:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzQhrfxNfyBDIN8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk YmYzOTRlNjctMzJhNS00YjYyLThlNzEtYTY4YTkxNmVhZjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyajO+PojYzqZ9RfDxNGN6ZWeu2ijn9AFG16 3s7HM7LA6//0EPjJDvEEffmzs2W93332W4J/fsiNBZJwHQBz+mEMuVUkUwg+yTCl K0dicm3soH790CAEdRJYoacLS3QOYTiBthnn0FW5OlFe4NW92HUsNuBtJV6x214o 5b7Rb/02aZs7/JLS+7DIShKvX43MYmrhHM0RV1upsqP9MxbV9R8m2k2Zxm5x1yzI KbJ3Qif8cfLmLEBoVp1jMgiVCuRD3UUsmuOgr027AOLjqBcCF1NAV9q3yAsTq8N2 PhCjC005g6wExWfRhLLtaxq2oAKDvkn+v9xLZjfgY3Dwr1N2eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOexGxKcdkmmULfkRMiIXL7AECdFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzg0OTk4ZjctMTFlZC0z ZDA3LWExYTctYjcxYzU2MmY5NTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop5xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL6Yx4Nwhnl4wanewZlpEHOmQvnR3VlKBIMICcYJi7QWPEiU+f/fti9l PqnlHS8opeqWkj3OcdUsGKjqaRMMFMoaPNWO5SJw+DEX5rIzkxahdJlLVeNhHFbR lqqFrZXE1RQnk6RtluOzNpktgH03iJLeeoisHNJNHpl6mWELwJvP/6FX8OyyFR0c dIrFE+QUGQfzFahMEa9LDqN0CI7b4tgiXE13/26sHdb1rVl0zSEVwvW9/emiChv0 BXHM2VZxRM95OR6ocaR8kUXNqgfiVcqSY9a1TI3W3jOph2OpLMAhntBgGWhMrgpw thDeGnozzVF+LtCpdkuCO+uqrrBHCtA= -----END CERTIFICATE-----Generated at Sat Nov 1 12:30:45 2025 by rpki-client