$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1c28c159-38bf-3e29-8c0f-df7aef4f5405.roa File: 1c28c159-38bf-3e29-8c0f-df7aef4f5405.roa (raw, json) Hash identifier: Ew6JQ+NWhH9WTTr/gAbTYRDBZiN1XtiQwYXUt1UB8KU= Subject key identifier: 1F:25:06:DB:4E:6F:4A:6C:58:6E:E3:4D:5E:6F:B1:58:34:5E:84:68 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AE90ED7667B8CC156A54C8B88 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1c28c159-38bf-3e29-8c0f-df7aef4f5405.roa Signing time: Tue 19 Aug 2025 17:14:01 +0000 ROA not before: Tue 19 Aug 2025 17:14:01 +0000 ROA not after: Mon 17 Nov 2025 18:14:01 +0000 asID: 13335 IP address blocks: 162.159.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:0e:d7:66:7b:8c:c1:56:a5:4c:8b:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 19 17:14:01 2025 GMT Not After : Nov 17 18:14:01 2025 GMT Subject: CN=ec8607bf-8f60-4087-9696-d53fab164a01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:51:ce:02:e9:6b:2d:d6:c1:a1:7c:c0:0a:f4: ae:bc:7c:40:45:5e:c2:3c:3d:58:c0:f9:bd:d0:1a: 7d:bd:3d:92:65:70:69:cb:0d:7c:d3:b6:07:a4:24: eb:68:20:79:47:9a:8c:0b:8c:55:e8:63:c7:44:68: 07:22:41:ca:e2:40:e7:dc:5f:bc:d7:41:6d:ff:db: d4:d8:e4:4c:66:5f:ec:46:36:ad:83:74:23:a3:c4: fb:76:c9:c4:c9:60:d7:69:d1:c1:6b:43:17:58:07: a5:14:a5:a7:61:40:f3:44:c5:ed:7d:a3:44:77:4b: 9b:6a:8b:a4:6e:d5:b4:3e:53:aa:23:6d:60:72:c4: cb:dc:de:f8:13:3d:fa:13:7e:a1:f3:ae:59:5d:36: d5:14:0b:6a:93:73:65:29:c1:63:97:53:ea:5f:d3: 88:b8:26:ba:49:63:05:93:51:0e:93:b5:f0:ef:ee: 77:14:48:3f:a4:1e:d5:82:ab:b4:14:13:96:6b:f5: 1a:1b:08:ab:77:4d:f6:64:37:6b:2c:0c:4a:76:0d: 19:40:d0:59:94:6a:64:ec:cf:e6:90:cc:ce:6d:a3: b0:05:f3:52:c8:99:91:e7:0a:0f:3d:8c:58:a9:5c: 40:44:95:38:b5:1e:bb:01:c8:8e:87:65:c4:9a:72: 4d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:25:06:DB:4E:6F:4A:6C:58:6E:E3:4D:5E:6F:B1:58:34:5E:84:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1c28c159-38bf-3e29-8c0f-df7aef4f5405.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.159.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:2d:37:67:cf:d8:e9:70:81:33:e0:97:27:16:c2:e6:3e:52: 53:19:e8:77:fb:4f:a7:2f:7f:e8:43:ab:55:d5:f2:67:24:09: 01:2f:10:a4:10:1d:44:88:56:6e:6f:21:c5:bc:fe:fb:27:87: e5:3f:06:ef:31:22:66:80:6f:fb:f8:44:3a:1a:9a:0e:28:8c: 96:91:5d:ae:a3:05:f7:e1:da:d7:91:26:55:64:ab:53:a1:78: 98:f7:34:54:34:84:41:4d:ce:36:a8:a9:af:f3:c5:f2:06:45: 0a:73:6e:32:d5:3c:32:3d:ea:6d:ae:07:ba:59:19:ff:45:97: 37:27:78:76:70:a4:76:d9:dd:3f:1b:aa:31:a1:75:38:d5:f2: 74:59:74:a1:be:2f:27:4d:24:6e:ba:04:df:59:7c:76:0c:4a: c3:bb:0a:4d:75:91:70:ef:87:57:66:f7:59:88:3b:01:26:7b: 23:99:d5:e7:19:72:d2:b4:5d:f0:d1:38:3d:05:75:fb:15:ed: 03:ed:66:eb:92:9d:1f:3d:ae:b3:1a:a9:e3:69:87:3f:3d:ba: 4f:af:f4:08:4d:01:79:81:40:27:b2:58:55:48:cb:da:3e:2f: e3:84:a1:07:70:3e:fc:9e:89:92:27:ed:33:11:32:8c:2c:c0: be:4f:9e:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpDtdme4zBVqVMi4gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxOTE3MTQwMVoXDTI1MTExNzE4MTQwMVowLzEtMCsGA1UEAxMk ZWM4NjA3YmYtOGY2MC00MDg3LTk2OTYtZDUzZmFiMTY0YTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1HOAulrLdbBoXzACvSuvHxARV7CPD1YwPm9 0Bp9vT2SZXBpyw1807YHpCTraCB5R5qMC4xV6GPHRGgHIkHK4kDn3F+810Ft/9vU 2ORMZl/sRjatg3Qjo8T7dsnEyWDXadHBa0MXWAelFKWnYUDzRMXtfaNEd0ubaouk btW0PlOqI21gcsTL3N74Ez36E36h865ZXTbVFAtqk3NlKcFjl1PqX9OIuCa6SWMF k1EOk7Xw7+53FEg/pB7Vgqu0FBOWa/UaGwird032ZDdrLAxKdg0ZQNBZlGpk7M/m kMzObaOwBfNSyJmR5woPPYxYqVxARJU4tR67AciOh2XEmnJNmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8lBttOb0psWG7jTV5vsVg0XoRoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWMyOGMxNTktMzhiZi0z ZTI5LThjMGYtZGY3YWVmNGY1NDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgtN2fP2OlwgTPglycWwuY+UlMZ6Hf7T6cvf+hDq1XV8mckCQEvEKQQ HUSIVm5vIcW8/vsnh+U/Bu8xImaAb/v4RDoamg4ojJaRXa6jBffh2teRJlVkq1Oh eJj3NFQ0hEFNzjaoqa/zxfIGRQpzbjLVPDI96m2uB7pZGf9FlzcneHZwpHbZ3T8b qjGhdTjV8nRZdKG+LydNJG66BN9ZfHYMSsO7Ck11kXDvh1dm91mIOwEmeyOZ1ecZ ctK0XfDROD0FdfsV7QPtZuuSnR89rrMaqeNphz89uk+v9AhNAXmBQCeyWFVIy9o+ L+OEoQdwPvyeiZIn7TMRMowswL5Pnjs= -----END CERTIFICATE-----Generated at Sat Aug 23 18:14:06 2025 by rpki-client