$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/081c02bc-82f7-3545-a8ca-5870207f5ad5.roa File: 081c02bc-82f7-3545-a8ca-5870207f5ad5.roa (raw, json) Hash identifier: L8FXALVNUGHor7MdJmL79ybHGyTvbvmj0LsVa5uDUPA= Subject key identifier: 84:CB:BA:AB:20:86:DA:FA:DE:A1:E9:7B:02:7B:A8:44:16:8F:FF:49 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667BE851DF0E12D3FF58240 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/081c02bc-82f7-3545-a8ca-5870207f5ad5.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.64.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:be:85:1d:f0:e1:2d:3f:f5:82:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=b3608289-108c-469d-beaf-4bda2fbf5544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ba:bd:2e:e1:fd:8a:1e:20:00:73:00:aa:1d: ab:60:be:f8:8c:6b:63:1a:84:ce:f4:7d:33:a5:d7: 3b:d8:75:23:68:57:09:4c:29:a1:82:62:32:4d:a7: 52:1b:19:88:f0:fe:75:0f:5c:09:97:5d:f0:b5:dc: 77:7a:fd:75:a4:e1:aa:53:f0:d9:ff:9e:f5:42:89: 58:0b:7a:f1:0a:71:c0:fc:a0:46:b6:0f:45:fe:f5: cb:da:51:9c:ff:73:19:ca:41:c0:cd:80:ed:0a:78: 85:59:e2:8a:a8:07:a0:fa:4c:67:82:b8:03:af:68: 34:df:86:9a:5a:a5:10:78:07:9d:4e:87:1c:43:d3: 12:fc:5b:d1:53:07:44:e1:a5:e1:08:17:08:29:44: 3c:15:57:b8:20:40:f3:43:7d:a7:0f:51:2c:2a:19: 21:88:98:28:24:4a:95:c2:5b:5c:5f:6b:5b:58:05: 7a:ab:2e:fe:08:cb:b8:f0:91:e1:92:70:4b:54:a2: 6c:aa:5c:1a:c4:75:bc:5e:67:72:91:81:ec:1c:d6: 2f:54:30:5b:b1:1a:e2:96:f1:83:30:d4:a2:98:ee: 20:70:e9:f6:83:37:2f:a5:37:59:9d:07:c0:c0:54: 55:8b:ba:d7:ef:45:eb:2d:0b:85:bb:bf:74:d3:e8: 92:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:CB:BA:AB:20:86:DA:FA:DE:A1:E9:7B:02:7B:A8:44:16:8F:FF:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/081c02bc-82f7-3545-a8ca-5870207f5ad5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:8b:d1:d6:6a:34:db:19:5a:82:b1:fa:9c:ab:09:ce:a9:6f: ab:43:b8:9d:08:45:0c:16:a2:3a:ff:0a:09:7f:0c:30:2f:c1: 90:00:e1:8d:35:b5:84:a3:a0:64:ea:e0:ac:b3:7d:32:c7:3c: 32:fc:1f:ab:da:43:eb:04:ff:6a:fb:9d:bd:ed:ce:61:31:e4: eb:24:3d:a0:1c:e1:ec:a1:66:2f:ef:e5:94:8c:07:d0:2a:0b: ee:8e:3c:6d:51:45:e8:50:33:c6:25:e7:10:9e:bf:fb:d9:9c: 41:4d:ee:70:00:3d:92:16:2b:cd:c9:bf:cb:90:b4:c0:f5:fe: 92:61:a1:5c:b0:ce:eb:e3:c1:4a:7a:31:cc:3d:15:4b:db:8f: 26:c8:77:1f:9f:4b:4d:86:c6:15:db:23:b9:82:e6:98:29:cc: 85:85:19:4b:3b:09:d4:91:72:90:e3:9a:4e:24:52:3b:54:f5: a9:09:70:cc:7d:80:f4:2f:41:2e:3e:bb:9d:ca:a1:59:3b:aa: ae:8c:81:76:ac:7d:66:62:aa:e5:fc:90:1c:d0:46:77:3f:8f: a5:75:32:22:07:b2:fb:14:24:46:08:d2:f0:3a:89:86:da:89: c0:1a:86:e8:e1:95:20:1b:e8:db:5d:f1:36:3d:d3:a2:b7:27: 10:9a:c2:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ76FHfDhLT/1gkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk YjM2MDgyODktMTA4Yy00NjlkLWJlYWYtNGJkYTJmYmY1NTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLq9LuH9ih4gAHMAqh2rYL74jGtjGoTO9H0z pdc72HUjaFcJTCmhgmIyTadSGxmI8P51D1wJl13wtdx3ev11pOGqU/DZ/571QolY C3rxCnHA/KBGtg9F/vXL2lGc/3MZykHAzYDtCniFWeKKqAeg+kxngrgDr2g034aa WqUQeAedToccQ9MS/FvRUwdE4aXhCBcIKUQ8FVe4IEDzQ32nD1EsKhkhiJgoJEqV wltcX2tbWAV6qy7+CMu48JHhknBLVKJsqlwaxHW8XmdykYHsHNYvVDBbsRrilvGD MNSimO4gcOn2gzcvpTdZnQfAwFRVi7rX70XrLQuFu7900+iSgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITLuqsghtr63qHpewJ7qEQWj/9JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDgxYzAyYmMtODJmNy0z NTQ1LWE4Y2EtNTg3MDIwN2Y1YWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArECQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmL0dZqNNsZWoKx+pyrCc6pb6tDuJ0IRQwWojr/Cgl/DDAvwZAA4Y01 tYSjoGTq4KyzfTLHPDL8H6vaQ+sE/2r7nb3tzmEx5OskPaAc4eyhZi/v5ZSMB9Aq C+6OPG1RRehQM8Yl5xCev/vZnEFN7nAAPZIWK83Jv8uQtMD1/pJhoVywzuvjwUp6 Mcw9FUvbjybIdx+fS02GxhXbI7mC5pgpzIWFGUs7CdSRcpDjmk4kUjtU9akJcMx9 gPQvQS4+u53KoVk7qq6MgXasfWZiquX8kBzQRnc/j6V1MiIHsvsUJEYI0vA6iYba icAahujhlSAb6Ntd8TY906K3JxCawrM= -----END CERTIFICATE-----Generated at Sat Nov 1 12:35:01 2025 by rpki-client