$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c7e7fb76-0569-34f5-bf7a-02ae18a68b74.roa File: c7e7fb76-0569-34f5-bf7a-02ae18a68b74.roa (raw, json) Hash identifier: geJgDKYY/eINam/o0ydfCzyMpwEE+RzaKZHa+1Jx2AY= Subject key identifier: 20:AF:E7:22:E1:BE:2F:7C:60:E3:A0:92:D1:CB:B5:15:A9:F7:8A:52 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC7111C762FB6046CE26F8400 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c7e7fb76-0569-34f5-bf7a-02ae18a68b74.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 13335 IP address blocks: 162.158.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:11:1c:76:2f:b6:04:6c:e2:6f:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=eaa0dcc5-7dc7-42b4-ab11-ef5c4e0666fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:5b:c7:6d:2f:95:99:e0:7f:bb:fd:33:08:ca: 64:80:95:e6:82:24:e6:9c:3b:b7:47:d0:9d:fd:94: 23:2d:bf:b7:86:53:0f:01:4e:06:bc:d9:12:2c:d2: 61:1c:85:13:d7:a3:c0:f2:13:81:26:5e:18:35:dc: 3c:2f:8b:49:e5:99:26:63:d7:d8:03:46:4d:20:68: 47:f9:73:94:9d:3a:12:05:f2:9e:39:3c:e7:78:00: b0:a9:91:85:46:f0:0d:34:31:89:66:95:58:34:cb: 5b:e7:ee:62:ef:d8:4a:87:f0:71:3e:fc:bf:49:0c: 97:d7:50:0d:04:6f:5f:ac:e0:2a:8b:f4:60:ca:7d: b0:b8:d0:a9:d5:40:bc:0a:45:4c:f6:f4:52:c7:5a: 5f:1e:37:ba:bc:4c:62:65:9a:b7:0a:fd:db:15:94: 63:c3:b3:99:85:97:79:f5:06:08:8c:6c:c6:d1:00: 82:95:9d:5a:fa:fe:14:f4:1b:51:9c:64:e7:04:5c: 23:f1:9e:03:78:48:2f:6c:d1:4c:ca:18:f3:dd:6b: 58:b5:9f:3a:58:59:48:40:4b:d2:5e:18:dc:d8:7d: 6e:95:2b:c9:e7:62:d0:76:51:b1:a2:6a:d5:c6:81: 93:0b:8e:5c:b8:88:d5:4e:26:c3:29:d1:0a:b9:03: fd:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:AF:E7:22:E1:BE:2F:7C:60:E3:A0:92:D1:CB:B5:15:A9:F7:8A:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c7e7fb76-0569-34f5-bf7a-02ae18a68b74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:ae:ac:4d:65:51:df:73:37:46:32:c0:f0:98:19:a2:03:bf: 73:ca:7f:6f:36:f9:7f:47:91:1a:bb:7d:f1:cc:e3:9c:89:d6: 87:22:6e:35:00:ec:47:32:e7:19:18:f4:ef:11:4f:ad:09:14: 50:24:65:2f:f9:4a:08:63:19:75:38:6a:8d:9d:2b:75:fa:6f: fa:15:a5:93:ce:bb:b1:00:60:5b:b0:94:ed:33:9e:68:02:f1: 46:45:f8:c8:59:c7:c6:86:3b:60:0c:bf:a2:cd:16:0c:90:53: fb:16:8b:5c:e4:24:33:2f:33:f3:9a:68:aa:dd:20:76:ba:74: 8b:cd:d7:ab:6e:ea:86:86:89:fa:21:7d:be:6c:b8:76:92:9d: 5b:b3:b6:25:75:df:e0:7b:58:b7:f2:da:91:f1:3b:7a:ac:2d: 07:3e:d2:e9:b9:7d:6b:7f:da:5f:8a:fa:56:76:a4:bc:14:e5: 9b:ba:65:83:f3:fb:c0:df:fd:03:05:48:0c:61:3d:01:36:ae: 59:20:2f:e2:63:bc:b9:78:4d:bc:27:f1:ca:4f:74:63:eb:b9: e9:91:a3:93:60:26:5c:9e:1a:d2:dd:0c:14:99:5c:f4:5d:5d: ec:1f:07:25:01:f5:f9:01:31:80:25:da:50:12:02:fb:97:59: 6d:59:b0:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHERx2L7YEbOJvhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk ZWFhMGRjYzUtN2RjNy00MmI0LWFiMTEtZWY1YzRlMDY2NmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVvHbS+VmeB/u/0zCMpkgJXmgiTmnDu3R9Cd /ZQjLb+3hlMPAU4GvNkSLNJhHIUT16PA8hOBJl4YNdw8L4tJ5ZkmY9fYA0ZNIGhH +XOUnToSBfKeOTzneACwqZGFRvANNDGJZpVYNMtb5+5i79hKh/BxPvy/SQyX11AN BG9frOAqi/Rgyn2wuNCp1UC8CkVM9vRSx1pfHje6vExiZZq3Cv3bFZRjw7OZhZd5 9QYIjGzG0QCClZ1a+v4U9BtRnGTnBFwj8Z4DeEgvbNFMyhjz3WtYtZ86WFlIQEvS Xhjc2H1ulSvJ52LQdlGxomrVxoGTC45cuIjVTibDKdEKuQP9FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCv5yLhvi98YOOgktHLtRWp94pSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzdlN2ZiNzYtMDU2OS0z NGY1LWJmN2EtMDJhZTE4YTY4Yjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop5sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2urE1lUd9zN0YywPCYGaIDv3PKf282+X9HkRq7ffHM45yJ1ocibjUA 7Ecy5xkY9O8RT60JFFAkZS/5SghjGXU4ao2dK3X6b/oVpZPOu7EAYFuwlO0znmgC 8UZF+MhZx8aGO2AMv6LNFgyQU/sWi1zkJDMvM/OaaKrdIHa6dIvN16tu6oaGifoh fb5suHaSnVuztiV13+B7WLfy2pHxO3qsLQc+0um5fWt/2l+K+lZ2pLwU5Zu6ZYPz +8Df/QMFSAxhPQE2rlkgL+JjvLl4Tbwn8cpPdGPruemRo5NgJlyeGtLdDBSZXPRd XewfByUB9fkBMYAl2lASAvuXWW1ZsA8= -----END CERTIFICATE-----Generated at Sat Aug 23 15:03:22 2025 by rpki-client