$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/23712172-214b-3172-8741-3994c18b8812.roa File: 23712172-214b-3172-8741-3994c18b8812.roa (raw, json) Hash identifier: IgpHRLw2kkpfKObJJV6kPHMAUgX/4KKmNpH95U3syPg= Subject key identifier: A7:38:BF:89:79:1F:A4:EE:97:98:E6:9A:2B:BA:29:D1:D6:87:D0:CB Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BBBC8FB1D56E19F18FA109800 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/23712172-214b-3172-8741-3994c18b8812.roa Signing time: Mon 03 Nov 2025 04:48:49 +0000 ROA not before: Mon 03 Nov 2025 04:48:49 +0000 ROA not after: Sun 01 Feb 2026 04:48:49 +0000 asID: 13335 IP address blocks: 162.159.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:c8:fb:1d:56:e1:9f:18:fa:10:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Nov 3 04:48:49 2025 GMT Not After : Feb 1 04:48:49 2026 GMT Subject: CN=6863ff0f-31d0-46aa-a19b-349ece52332f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:31:a1:0a:42:7a:4e:7d:01:a9:0b:ef:30:e5: d5:98:a0:5a:2b:96:19:b3:4a:7d:10:d6:9d:57:b4: 47:0e:af:48:c4:77:74:eb:82:20:10:2b:c1:d6:70: 0e:a9:ba:bb:9a:ce:f7:06:e3:ad:c3:16:a2:97:df: 40:4e:c1:53:5e:40:5f:26:2e:ce:a3:b6:05:09:17: 71:75:f7:4d:24:e8:2c:8a:fa:df:33:d5:14:34:5a: 19:cf:df:97:38:27:9a:4b:e9:c5:3a:7a:9a:dd:00: a2:f3:d8:64:96:95:64:87:60:25:0a:e3:9a:0c:26: 60:51:73:86:05:d1:b2:d2:52:5d:eb:4c:ac:09:fe: fb:bd:42:3e:e7:a5:d8:ab:79:96:44:fb:6a:79:5c: 59:02:95:43:16:cb:08:3c:09:b7:81:24:8e:e5:70: 8b:de:14:f0:d2:5b:8a:ef:7e:1d:76:ed:f7:e9:e1: bb:d6:0c:7d:d6:9c:7b:1c:87:b4:3d:9d:48:fc:dd: 39:b5:3f:e9:fc:9f:64:12:84:56:f2:2c:97:a1:b2: c5:a2:e1:61:92:78:53:ab:0e:9e:43:f0:3f:e4:5e: 20:63:2c:dd:87:dd:9d:2c:5a:ae:fa:47:57:29:07: c3:b7:96:40:21:39:88:9f:06:79:f5:9f:b0:bd:92: 50:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:38:BF:89:79:1F:A4:EE:97:98:E6:9A:2B:BA:29:D1:D6:87:D0:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/23712172-214b-3172-8741-3994c18b8812.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.159.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:07:5d:e7:ec:0c:2b:fe:0e:4c:8e:09:6c:fa:8e:ed:1d:e7: a3:66:12:3a:81:cb:c2:fa:56:2f:d5:c8:dd:8d:e5:fe:4d:d2: ea:a5:04:0b:bc:64:a6:4b:08:f7:bd:b8:94:c9:e1:af:2f:65: aa:0e:90:8e:bb:2f:5c:8a:b8:96:e6:30:86:8f:15:6c:3c:dc: e3:30:1f:d2:95:39:12:8f:c5:85:72:a1:c7:35:6e:80:1c:a4: 4d:33:72:a2:82:6b:c9:2a:6d:bd:95:63:59:e2:b7:95:e8:96: 8e:9b:c0:9e:da:b4:89:49:a0:b1:c7:cb:39:de:40:ee:e5:45: c0:25:bc:23:6e:41:23:c7:80:36:09:79:53:e5:40:59:7b:37: ee:d4:da:7e:03:84:d7:12:a0:a1:2f:5e:4d:b7:fb:11:8b:8e: f7:5f:09:f6:d9:c5:68:bc:72:d6:e6:e1:a6:d3:47:3c:12:ba: c8:cc:32:8d:26:57:a2:4e:f1:ed:64:69:d2:d3:2f:13:b4:99: f2:7f:66:d2:e4:cf:f3:ab:ac:79:d4:6d:86:e1:80:23:04:39: b5:fe:90:6a:8f:fd:78:6f:ec:2c:9c:af:fb:d2:91:47:bc:71: cd:61:08:e1:77:e4:35:f3:49:76:cf:da:47:23:db:76:1e:d1: 86:b5:0c:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7yPsdVuGfGPoQmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTEwMzA0NDg0OVoXDTI2MDIwMTA0NDg0OVowLzEtMCsGA1UEAxMk Njg2M2ZmMGYtMzFkMC00NmFhLWExOWItMzQ5ZWNlNTIzMzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjGhCkJ6Tn0BqQvvMOXVmKBaK5YZs0p9ENad V7RHDq9IxHd064IgECvB1nAOqbq7ms73BuOtwxail99ATsFTXkBfJi7Oo7YFCRdx dfdNJOgsivrfM9UUNFoZz9+XOCeaS+nFOnqa3QCi89hklpVkh2AlCuOaDCZgUXOG BdGy0lJd60ysCf77vUI+56XYq3mWRPtqeVxZApVDFssIPAm3gSSO5XCL3hTw0luK 734ddu336eG71gx91px7HIe0PZ1I/N05tT/p/J9kEoRW8iyXobLFouFhknhTqw6e Q/A/5F4gYyzdh92dLFqu+kdXKQfDt5ZAITmInwZ59Z+wvZJQrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKc4v4l5H6Tul5jmmiu6KdHWh9DLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjM3MTIxNzItMjE0Yi0z MTcyLTg3NDEtMzk5NGMxOGI4ODEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop9sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMAHXefsDCv+DkyOCWz6ju0d56NmEjqBy8L6Vi/VyN2N5f5N0uqlBAu8 ZKZLCPe9uJTJ4a8vZaoOkI67L1yKuJbmMIaPFWw83OMwH9KVORKPxYVyocc1boAc pE0zcqKCa8kqbb2VY1nit5Xolo6bwJ7atIlJoLHHyzneQO7lRcAlvCNuQSPHgDYJ eVPlQFl7N+7U2n4DhNcSoKEvXk23+xGLjvdfCfbZxWi8ctbm4abTRzwSusjMMo0m V6JO8e1kadLTLxO0mfJ/ZtLkz/OrrHnUbYbhgCMEObX+kGqP/Xhv7Cycr/vSkUe8 cc1hCOF35DXzSXbP2kcj23Ye0Ya1DGY= -----END CERTIFICATE-----Generated at Wed Nov 5 02:36:33 2025 by rpki-client