$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ca89da4f-c69d-3094-b678-d8cc2946ecca.roa File: ca89da4f-c69d-3094-b678-d8cc2946ecca.roa (raw, json) Hash identifier: LLBdou2gIrtgha+e+cARk7UfTv6sdoj2aBKNfceY0nI= Subject key identifier: 77:64:67:D9:18:81:01:98:7D:89:68:CA:5F:A0:40:01:2C:2B:0C:E9 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC7111CA552927041DC142080 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ca89da4f-c69d-3094-b678-d8cc2946ecca.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 13335 IP address blocks: 162.158.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:11:1c:a5:52:92:70:41:dc:14:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=2d12d2fe-0a59-4f6f-a09a-c642cad7cf03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:bf:64:81:17:f9:45:97:5a:a6:c5:e3:e7:f1: cd:a2:80:a8:f9:d2:d8:d0:44:d4:6a:98:36:9c:a0: 36:1f:25:c8:7f:14:c1:60:34:dc:a6:23:36:f4:e4: 50:1e:93:3c:92:db:2f:8e:ac:dd:e4:c7:83:94:f9: 01:93:ab:e4:dd:b4:ee:87:cb:23:5d:28:62:44:a4: e7:6f:74:c7:ae:fe:b7:18:d0:77:26:d1:24:f0:22: 15:9e:e4:54:9c:58:46:fd:cc:23:a6:1d:45:4c:32: e5:4a:dd:5a:19:9d:d9:dc:89:3d:e7:6b:95:eb:4d: c2:08:9d:a7:bc:b1:3a:91:93:c5:14:a3:e5:b8:6f: a2:46:a5:08:a4:9e:ae:fb:b7:43:4d:ba:d2:cf:41: db:7a:f0:d7:e9:f4:b9:10:de:6a:b3:eb:bc:aa:da: f3:79:81:40:b6:6b:bf:c2:85:bd:a8:fd:08:03:aa: 14:35:7e:74:9d:52:ac:6d:3c:ec:fa:e8:73:89:6c: c7:a7:f3:9b:2c:ee:09:03:bc:a1:d7:c4:87:22:fa: 73:00:1a:f6:42:10:19:cb:62:5e:f6:72:91:b3:0b: 55:d2:b2:b9:e4:c2:ea:2f:b5:dc:5e:7f:8e:bd:7c: 82:68:1e:ef:72:8c:07:76:1c:8c:9d:3b:bb:54:90: cb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:64:67:D9:18:81:01:98:7D:89:68:CA:5F:A0:40:01:2C:2B:0C:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ca89da4f-c69d-3094-b678-d8cc2946ecca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:8e:20:82:26:50:c6:08:d8:d4:44:04:ee:19:5f:a7:1b:ca: bb:77:63:40:99:54:95:06:da:94:cc:46:8f:3b:2b:c2:95:a1: 10:c7:10:e6:08:88:01:f7:74:b9:66:11:ff:42:a2:8c:21:14: c8:5c:00:24:62:50:f7:fe:cc:06:e1:70:3e:68:90:bf:6c:94: 5e:0c:8c:7e:bd:e9:6f:47:31:c5:15:f5:a1:01:2b:4d:b5:56: 66:e2:2d:27:55:8e:e0:be:1c:a7:e5:f6:c8:20:ab:f4:f8:f5: d5:08:b0:88:b0:bd:25:9f:40:c3:ad:c6:af:94:c2:d1:07:49: 31:15:fe:49:1b:62:47:d0:96:72:f7:fa:51:a9:4e:b8:88:db: 0e:64:13:ac:ac:3c:5b:95:75:9d:00:f9:98:31:0b:ef:1b:b5: 60:04:64:bd:47:d5:43:10:cd:a6:52:d6:9b:2f:d0:38:c6:87: 77:40:5d:73:8f:99:75:22:7f:b6:39:72:b2:5e:81:c9:58:ad: 4a:af:a5:59:45:2a:8e:bb:51:47:15:ad:82:6f:98:7f:22:ed: 68:04:01:0d:a3:b6:8b:9c:06:6b:4f:69:e8:84:0a:1d:72:b1: 70:5d:56:38:a7:52:58:82:65:03:c9:cd:21:9d:ac:9e:f0:88: f7:65:75:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHERylUpJwQdwUIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk MmQxMmQyZmUtMGE1OS00ZjZmLWEwOWEtYzY0MmNhZDdjZjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnL9kgRf5RZdapsXj5/HNooCo+dLY0ETUapg2 nKA2HyXIfxTBYDTcpiM29ORQHpM8ktsvjqzd5MeDlPkBk6vk3bTuh8sjXShiRKTn b3THrv63GNB3JtEk8CIVnuRUnFhG/cwjph1FTDLlSt1aGZ3Z3Ik952uV603CCJ2n vLE6kZPFFKPluG+iRqUIpJ6u+7dDTbrSz0HbevDX6fS5EN5qs+u8qtrzeYFAtmu/ woW9qP0IA6oUNX50nVKsbTzs+uhziWzHp/ObLO4JA7yh18SHIvpzABr2QhAZy2Je 9nKRswtV0rK55MLqL7XcXn+OvXyCaB7vcowHdhyMnTu7VJDLKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHdkZ9kYgQGYfYloyl+gQAEsKwzpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2E4OWRhNGYtYzY5ZC0z MDk0LWI2NzgtZDhjYzI5NDZlY2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCop5sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyOIIImUMYI2NREBO4ZX6cbyrt3Y0CZVJUG2pTMRo87K8KVoRDHEOYI iAH3dLlmEf9CoowhFMhcACRiUPf+zAbhcD5okL9slF4MjH696W9HMcUV9aEBK021 VmbiLSdVjuC+HKfl9sggq/T49dUIsIiwvSWfQMOtxq+UwtEHSTEV/kkbYkfQlnL3 +lGpTriI2w5kE6ysPFuVdZ0A+ZgxC+8btWAEZL1H1UMQzaZS1psv0DjGh3dAXXOP mXUif7Y5crJegclYrUqvpVlFKo67UUcVrYJvmH8i7WgEAQ2jtoucBmtPaeiECh1y sXBdVjinUliCZQPJzSGdrJ7wiPdlde8= -----END CERTIFICATE-----Generated at Sat Aug 23 15:12:38 2025 by rpki-client