$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ca89da4f-c69d-3094-b678-d8cc2946ecca.roa File: ca89da4f-c69d-3094-b678-d8cc2946ecca.roa (raw, json) Hash identifier: jUv5GIUwcNrtDiCNBuA+/DA2QRekXg1Qjggs7Nh4m4U= Subject key identifier: D2:C3:90:18:C8:98:BD:DE:52:26:00:16:C9:38:31:90:E6:4A:83:21 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD165A02C10497C27DF400 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ca89da4f-c69d-3094-b678-d8cc2946ecca.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 162.158.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:16:5a:02:c1:04:97:c2:7d:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=4c6f6ff1-b327-4743-92bb-55ebfda94e9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:16:d9:d6:c0:d5:7a:b2:c1:81:14:21:5e:0f: 42:44:0d:61:88:9b:fc:3a:2f:dc:8e:3c:9e:97:db: ba:f6:b3:c0:90:30:f7:13:55:26:a4:ad:73:f8:bc: 83:40:31:2c:2e:c1:75:11:2b:b6:f1:87:2f:78:e5: 9c:99:d9:e5:83:1d:8b:bb:d9:a5:90:ee:54:d3:4c: 21:00:e5:2f:93:b9:8e:bc:94:23:52:72:ee:67:31: 50:df:e8:33:07:f3:57:cc:ee:6f:34:1b:a7:e8:e8: ff:26:9e:c3:da:4b:dc:74:f7:6c:e4:2d:3f:df:af: b5:55:8e:0b:55:ca:c7:d9:40:47:7b:da:2c:ea:59: da:9f:47:d2:ae:df:b5:97:6e:15:79:9d:c7:4d:9a: 4e:6c:8e:8d:e5:24:a3:6f:7b:4f:36:e0:3b:60:9e: 69:e5:2b:00:5a:63:78:83:56:5a:fd:18:c4:35:5c: 2a:f1:42:8e:ee:7f:a8:64:19:37:7a:44:98:49:dd: 51:36:54:54:f4:81:ee:fa:8f:79:56:ae:37:68:98: 3c:f6:d6:98:2f:24:93:c0:00:9d:5f:64:a2:6b:b8: 46:2e:4c:77:c1:46:3a:25:2e:39:46:f3:e1:62:c9: a6:7e:66:b5:ab:90:c1:d9:bf:12:3c:07:fe:f0:46: c4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C3:90:18:C8:98:BD:DE:52:26:00:16:C9:38:31:90:E6:4A:83:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ca89da4f-c69d-3094-b678-d8cc2946ecca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:2f:a2:6a:4e:65:bd:b5:fd:e9:43:dd:0f:e5:1c:76:b9:db: 46:56:c3:69:7d:3a:8e:aa:43:e0:0a:f3:25:6a:10:c5:d1:23: d6:2d:f7:02:2a:3a:88:45:dc:41:e8:24:6a:38:de:6f:38:e4: 10:b0:3a:6a:df:42:1b:b5:59:99:d4:8c:fe:e2:99:66:20:20: 65:5d:22:ff:56:24:cf:d4:5d:a6:5a:e3:fa:81:b8:84:0a:f3: 22:79:ad:a8:be:09:47:1d:43:f8:09:00:a4:b7:dd:55:8f:01: 33:da:a2:6f:86:1f:cc:eb:6e:d1:65:f6:c4:82:23:1d:59:a8: b5:43:18:97:6b:c0:f6:90:8b:97:bd:7b:11:e4:80:bb:47:82: 09:58:54:6a:9c:f8:5e:d4:5b:8b:ed:49:13:9f:d1:e2:32:bd: 0d:05:86:cd:eb:fb:ee:c9:f8:d1:3d:e8:c5:23:99:3d:22:d4: d5:7d:f9:24:26:0e:1a:e5:72:51:9a:29:fc:4b:48:7e:ba:da: cf:4f:69:aa:b3:95:66:ba:a4:48:54:9a:12:89:1b:83:de:91: c4:35:3f:7f:2c:8d:5a:cf:ca:ce:e0:27:25:b7:49:09:84:52: 3a:b5:44:41:0d:8c:be:68:c4:ff:c9:fe:2f:e1:78:85:4f:d0: 8b:81:84:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzRZaAsEEl8J99AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk NGM2ZjZmZjEtYjMyNy00NzQzLTkyYmItNTVlYmZkYTk0ZTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhbZ1sDVerLBgRQhXg9CRA1hiJv8Oi/cjjye l9u69rPAkDD3E1UmpK1z+LyDQDEsLsF1ESu28YcveOWcmdnlgx2Lu9mlkO5U00wh AOUvk7mOvJQjUnLuZzFQ3+gzB/NXzO5vNBun6Oj/Jp7D2kvcdPds5C0/36+1VY4L VcrH2UBHe9os6lnan0fSrt+1l24VeZ3HTZpObI6N5SSjb3tPNuA7YJ5p5SsAWmN4 g1Za/RjENVwq8UKO7n+oZBk3ekSYSd1RNlRU9IHu+o95Vq43aJg89taYLySTwACd X2Sia7hGLkx3wUY6JS45RvPhYsmmfma1q5DB2b8SPAf+8EbEowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLDkBjImL3eUiYAFsk4MZDmSoMhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2E4OWRhNGYtYzY5ZC0z MDk0LWI2NzgtZDhjYzI5NDZlY2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCop5sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMMvompOZb21/elD3Q/lHHa520ZWw2l9Oo6qQ+AK8yVqEMXRI9Yt9wIq OohF3EHoJGo43m845BCwOmrfQhu1WZnUjP7imWYgIGVdIv9WJM/UXaZa4/qBuIQK 8yJ5rai+CUcdQ/gJAKS33VWPATPaom+GH8zrbtFl9sSCIx1ZqLVDGJdrwPaQi5e9 exHkgLtHgglYVGqc+F7UW4vtSROf0eIyvQ0Fhs3r++7J+NE96MUjmT0i1NV9+SQm DhrlclGaKfxLSH662s9PaaqzlWa6pEhUmhKJG4PekcQ1P38sjVrPys7gJyW3SQmE Ujq1REENjL5oxP/J/i/heIVP0IuBhB8= -----END CERTIFICATE-----Generated at Sat Nov 1 12:36:53 2025 by rpki-client