$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb83ef79-dc1c-307f-b985-e61117ccea3f.roa File: fb83ef79-dc1c-307f-b985-e61117ccea3f.roa (raw, json) Hash identifier: Oq1C1yjDOZj0AxxIC9jRWoQGEVjS4tYEiJ8UTNANh2o= Subject key identifier: F8:A6:F6:D1:11:0F:2C:09:75:12:FD:CD:76:B6:5C:7A:CF:03:37:10 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD12D24ED6E0339C4720C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb83ef79-dc1c-307f-b985-e61117ccea3f.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 108.162.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:12:d2:4e:d6:e0:33:9c:47:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=2f89701f-7f50-4526-beeb-8e07986ec938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:96:d3:3f:78:39:ab:9a:31:26:c9:fb:42:65: d8:32:98:fb:e2:02:c7:e4:b9:1d:d6:1b:c1:76:60: 6d:79:ff:45:1d:bb:94:73:ca:77:7a:45:18:92:a6: c5:35:17:ca:c4:65:b7:e1:24:34:75:ba:f4:24:1e: 7a:13:59:8c:bf:09:f1:9f:95:cc:cb:5c:87:76:fa: 6f:70:2f:25:8c:e4:2f:f8:b9:0c:e7:71:8c:c3:0d: 03:4e:ce:3d:48:53:9f:c6:c7:f2:36:b6:62:16:36: d5:d3:bb:04:7c:23:a2:c7:d3:0c:00:b5:7b:89:a5: a5:ed:37:00:9b:fc:00:26:08:dc:b0:56:18:0a:c6: 46:dd:19:d0:ef:e8:0a:4c:48:57:b9:ec:c5:30:f2: c4:85:5b:1a:c0:1e:36:18:c6:7c:48:08:2f:e2:e1: 8d:5c:28:53:08:70:e5:a7:7c:7c:ba:3d:4f:7f:89: ba:7f:3f:8e:9c:da:08:6e:51:49:82:4d:b3:f3:8b: 87:ff:06:7e:3a:4f:30:2a:b6:e1:d4:fe:60:22:5a: a6:62:73:09:8d:b1:c9:7e:98:59:08:cb:dc:7a:bf: 21:c2:5e:fe:97:c9:33:bf:dc:69:3a:ee:f8:4c:7e: 51:45:05:88:3d:85:2a:49:bc:23:a7:8b:1f:db:51: 89:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A6:F6:D1:11:0F:2C:09:75:12:FD:CD:76:B6:5C:7A:CF:03:37:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb83ef79-dc1c-307f-b985-e61117ccea3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 108.162.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:40:69:80:b0:18:0e:38:cb:f0:62:66:9a:d1:cb:6d:09:62: c8:29:06:d6:01:ba:43:b3:28:86:05:dc:d0:66:74:87:5f:be: 7a:74:9b:17:5d:dd:34:c2:11:82:7b:2d:6d:12:1e:68:68:62: 9e:db:9b:2c:48:a3:0e:5d:fc:65:75:43:cd:38:fd:8c:d0:18: 80:1a:d9:6e:06:7d:75:eb:a3:6b:97:90:b4:04:58:f7:a7:37: 0b:05:39:e8:91:83:10:74:24:a8:e6:d4:e2:79:8e:54:28:2d: bd:29:0b:3f:ed:da:34:d7:ec:9d:4d:74:63:72:e6:71:bb:93: 96:5d:ac:51:a2:6e:6f:5e:93:00:7c:dc:3f:8b:38:d6:68:ef: b5:86:a6:96:68:1d:ca:d9:f4:2a:d4:1f:05:90:2c:40:9f:6e: ed:a8:59:cb:85:27:c9:1b:62:cc:6a:45:c8:70:24:6e:2e:0c: 9f:04:00:96:1e:a8:86:8f:08:ca:1c:cf:b6:29:01:60:39:0b: 75:8e:c9:e4:14:17:9b:40:07:6b:f6:80:0f:57:98:94:61:c7: d7:ef:d8:27:c5:de:f0:02:20:68:f3:d1:27:70:5f:df:6f:b8: 47:0f:c7:97:0e:d2:f9:97:17:03:66:0b:fe:0f:18:84:68:b0: a1:43:a6:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzRLSTtbgM5xHIMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk MmY4OTcwMWYtN2Y1MC00NTI2LWJlZWItOGUwNzk4NmVjOTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ZbTP3g5q5oxJsn7QmXYMpj74gLH5Lkd1hvB dmBtef9FHbuUc8p3ekUYkqbFNRfKxGW34SQ0dbr0JB56E1mMvwnxn5XMy1yHdvpv cC8ljOQv+LkM53GMww0DTs49SFOfxsfyNrZiFjbV07sEfCOix9MMALV7iaWl7TcA m/wAJgjcsFYYCsZG3RnQ7+gKTEhXuezFMPLEhVsawB42GMZ8SAgv4uGNXChTCHDl p3x8uj1Pf4m6fz+OnNoIblFJgk2z84uH/wZ+Ok8wKrbh1P5gIlqmYnMJjbHJfphZ CMvcer8hwl7+l8kzv9xpOu74TH5RRQWIPYUqSbwjp4sf21GJpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPim9tERDywJdRL9zXa2XHrPAzcQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmI4M2VmNzktZGMxYy0z MDdmLWI5ODUtZTYxMTE3Y2NlYTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKL9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKBAaYCwGA44y/BiZprRy20JYsgpBtYBukOzKIYF3NBmdIdfvnp0mxdd 3TTCEYJ7LW0SHmhoYp7bmyxIow5d/GV1Q804/YzQGIAa2W4GfXXro2uXkLQEWPen NwsFOeiRgxB0JKjm1OJ5jlQoLb0pCz/t2jTX7J1NdGNy5nG7k5ZdrFGibm9ekwB8 3D+LONZo77WGppZoHcrZ9CrUHwWQLECfbu2oWcuFJ8kbYsxqRchwJG4uDJ8EAJYe qIaPCMocz7YpAWA5C3WOyeQUF5tAB2v2gA9XmJRhx9fv2CfF3vACIGjz0SdwX99v uEcPx5cO0vmXFwNmC/4PGIRosKFDprc= -----END CERTIFICATE-----Generated at Sat Nov 1 12:37:11 2025 by rpki-client