$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/ca144a0e-e82c-3512-b111-99f54ffd3c8c.roa File: ca144a0e-e82c-3512-b111-99f54ffd3c8c.roa (raw, json) Hash identifier: 4k0iD9lRQYFkUlS79O5kp+Z3dH2a3PwqzABtXvuz9fo= Subject key identifier: BF:BE:93:48:F0:18:1A:7F:25:06:5A:7F:6A:DD:7E:B6:7C:1C:19:27 Certificate issuer: /CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Certificate serial: 010D0C9F4328584BD3BCDFE3C1A9691CC367EC00 Authority key identifier: 90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/ca144a0e-e82c-3512-b111-99f54ffd3c8c.roa Signing time: Tue 11 Nov 2025 18:43:49 +0000 ROA not before: Tue 11 Nov 2025 18:43:49 +0000 ROA not after: Mon 09 Feb 2026 18:43:49 +0000 asID: 27395 IP address blocks: 162.248.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d3:bc:df:e3:c1:a9:69:1c:c3:67:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Validity Not Before: Nov 11 18:43:49 2025 GMT Not After : Feb 9 18:43:49 2026 GMT Subject: CN=6be3ee3f-3331-41a2-bcdd-f1f4569bdf19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2e:4d:26:b9:00:53:3c:0b:b8:41:4f:ac:a8: a2:3c:c0:ed:09:bd:04:ed:f0:68:0d:d1:e9:f5:8a: 48:78:c5:e5:47:33:c0:fa:d9:28:23:18:84:99:7c: e5:ad:74:c1:cd:77:a9:54:52:32:07:53:bb:3d:35: 14:34:11:d7:ca:95:45:10:e4:9f:37:d9:bb:43:03: 17:b8:ea:61:9c:16:8c:1a:5d:bd:a9:89:74:f9:dd: 9b:ce:8c:5a:68:5a:45:3d:ab:b6:5b:ea:16:e4:8c: 73:87:7a:12:08:3e:35:cd:49:1c:aa:50:6d:b9:69: 06:4f:cf:d5:7f:7f:1f:10:17:82:9e:ef:2e:0e:44: 4b:9b:04:c6:d0:84:58:a0:4c:0f:73:b4:8e:1b:92: a9:4a:43:75:8b:65:f9:f8:c6:e6:cd:ae:cf:f8:19: d0:97:a5:2f:52:c0:e5:56:6a:ea:53:86:64:39:17: 35:b3:9d:d7:f9:b4:fc:aa:96:80:8a:06:1a:32:f3: e6:99:84:19:b7:d1:26:26:08:79:e7:2e:dc:b8:6f: 75:3c:d2:e1:59:62:b5:13:8f:38:d4:60:b2:66:2c: 9e:ff:c2:71:ed:14:ec:69:7a:51:ad:77:5d:34:ac: 9e:5b:36:da:7e:46:a5:fe:4d:41:ac:78:82:fa:7e: 36:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:BE:93:48:F0:18:1A:7F:25:06:5A:7F:6A:DD:7E:B6:7C:1C:19:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/ca144a0e-e82c-3512-b111-99f54ffd3c8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl X509v3 Authority Key Identifier: keyid:90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer sbgp-ipAddrBlock: critical IPv4: 162.248.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:20:b9:e7:54:e2:85:e0:0f:64:81:36:9d:13:76:b0:d2:12: cf:ae:3a:f5:03:4a:69:8f:23:0b:4d:99:d9:b8:f9:99:75:58: b2:04:b1:c2:f6:68:77:b3:e4:78:67:1d:7b:72:87:aa:8b:7b: 68:5e:12:26:0e:e7:67:41:9a:7a:44:1e:55:28:f1:27:cd:1c: 00:00:2c:02:8b:13:0b:3e:87:2f:8f:ed:b5:b9:71:ca:b7:b6: 8c:4a:22:03:b9:d9:25:63:c6:22:7b:06:3b:a6:f8:8f:2d:48: b5:d2:d4:df:1e:9e:e7:28:7f:8f:5d:a7:4b:b9:ec:cb:ac:60: 13:50:03:7f:0f:a9:c6:b1:0b:3c:3f:47:56:f2:7c:c5:8d:44: b1:4c:41:8e:6b:22:be:61:38:86:92:7b:d5:5b:21:09:16:9a: 21:e2:b7:a7:99:3c:d6:d6:58:f2:80:85:0a:85:dd:3b:99:e8: b4:f6:90:1e:ec:d9:6e:01:5c:62:3f:83:ba:97:b3:50:e7:9d: 52:bd:e5:ad:ef:8e:81:af:dc:f4:b3:fe:be:f6:55:99:41:4b: 05:04:cc:b3:77:88:a9:f6:07:2b:0a:4a:88:89:15:cf:eb:27: b2:8f:8d:6d:0a:9d:24:d7:19:8c:c0:36:84:fe:a7:fe:00:77: 6a:14:47:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvTvN/jwalpHMNn7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JlZDlkMmMtNTUyNi00ZDdlLWJlNGYtYzliNWVjYzY3 ZWFmMB4XDTI1MTExMTE4NDM0OVoXDTI2MDIwOTE4NDM0OVowLzEtMCsGA1UEAxMk NmJlM2VlM2YtMzMzMS00MWEyLWJjZGQtZjFmNDU2OWJkZjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAji5NJrkAUzwLuEFPrKiiPMDtCb0E7fBoDdHp 9YpIeMXlRzPA+tkoIxiEmXzlrXTBzXepVFIyB1O7PTUUNBHXypVFEOSfN9m7QwMX uOphnBaMGl29qYl0+d2bzoxaaFpFPau2W+oW5Ixzh3oSCD41zUkcqlBtuWkGT8/V f38fEBeCnu8uDkRLmwTG0IRYoEwPc7SOG5KpSkN1i2X5+Mbmza7P+BnQl6UvUsDl VmrqU4ZkORc1s53X+bT8qpaAigYaMvPmmYQZt9EmJgh55y7cuG91PNLhWWK1E484 1GCyZiye/8Jx7RTsaXpRrXddNKyeWzbafkal/k1BrHiC+n42XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL++k0jwGBp/JQZaf2rdfrZ8HBknMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YmVk OWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1ZWNjNjdlYWYvY2ExNDRhMGUtZTgyYy0z NTEyLWIxMTEtOTlmNTRmZmQzYzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2JlZDlkMmMtNTUyNi00ZDdlLWJl NGYtYzliNWVjYzY3ZWFmLzdiZWQ5ZDJjLTU1MjYtNGQ3ZS1iZTRmLWM5YjVlY2M2 N2VhZi5jcmwwHwYDVR0jBBgwFoAUkCUA1dSBUGBUAHzWMP1xpk+TRq8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YmVkOWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1 ZWNjNjdlYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoviHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKwguedU4oXgD2SBNp0TdrDSEs+uOvUDSmmPIwtNmdm4+Zl1WLIEscL2 aHez5HhnHXtyh6qLe2heEiYO52dBmnpEHlUo8SfNHAAALAKLEws+hy+P7bW5ccq3 toxKIgO52SVjxiJ7Bjum+I8tSLXS1N8enucof49dp0u57MusYBNQA38PqcaxCzw/ R1byfMWNRLFMQY5rIr5hOIaSe9VbIQkWmiHit6eZPNbWWPKAhQqF3TuZ6LT2kB7s 2W4BXGI/g7qXs1DnnVK95a3vjoGv3PSz/r72VZlBSwUEzLN3iKn2BysKSoiJFc/r J7KPjW0KnSTXGYzANoT+p/4Ad2oUR80= -----END CERTIFICATE-----Generated at Mon Nov 17 13:21:05 2025 by rpki-client