$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/08a5e222-b8df-3765-a0fd-4cd50f05e90a.roa File: 08a5e222-b8df-3765-a0fd-4cd50f05e90a.roa (raw, json) Hash identifier: tEItwxmas9Ohl62nk4W8yr+QoYR0lJbB6ytS9JYbIUk= Subject key identifier: 39:C0:92:E3:A4:82:A1:B7:2F:B3:A2:4F:23:31:61:5A:3B:14:61:A7 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BABFD2146C459F6CD4D57D8C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/08a5e222-b8df-3765-a0fd-4cd50f05e90a.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.69.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:21:46:c4:59:f6:cd:4d:57:d8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=4308cc4a-070b-4804-b756-55cb23d42b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f2:14:a6:b2:c9:e0:12:aa:b3:e0:44:35:c6: ac:7f:fc:08:e8:95:e4:52:46:93:7f:b9:91:2b:6e: ca:42:d0:b1:f9:92:ac:22:c4:58:c2:76:3c:58:99: f5:53:84:01:ea:09:0f:3f:37:db:ae:c0:42:2f:24: 42:ed:88:e6:f2:b9:ae:14:40:3d:16:fc:83:ed:5c: 88:01:33:12:b6:db:a6:b0:38:fa:ca:b9:4e:71:88: 3b:4d:d5:d7:30:1d:72:73:32:2c:ed:1e:a2:d9:76: 4a:f3:ad:9b:db:58:5a:c8:a5:30:6e:42:89:ed:71: e3:ec:01:bd:b9:11:6a:16:6f:4c:6d:72:7d:1b:e2: 7c:8d:1e:e9:a3:13:ce:47:85:cd:06:f7:68:da:0d: ba:54:80:3c:ab:79:80:9e:79:92:14:6f:59:25:78: 41:22:08:10:e3:e3:06:c7:61:3d:ae:22:84:4c:5d: 4e:30:71:92:3f:70:c2:b9:0a:69:6c:7a:f9:cd:f7: 4d:39:f9:ed:ab:f5:47:f9:ec:80:b4:c0:6b:72:a2: 3d:7a:4d:e4:75:aa:2b:16:07:ca:28:7b:ef:e4:cc: 2e:b8:2a:14:61:6e:f6:7f:07:f1:ba:29:18:54:f1: ea:b3:4b:01:df:d0:25:25:03:ea:e5:98:48:f4:6b: a4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C0:92:E3:A4:82:A1:B7:2F:B3:A2:4F:23:31:61:5A:3B:14:61:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/08a5e222-b8df-3765-a0fd-4cd50f05e90a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:72:36:03:34:28:37:a2:7c:b7:ef:90:18:0c:05:49:b9:fc: 99:ae:4e:90:3d:6c:18:4f:8b:b0:b5:0c:19:e3:04:79:1d:6b: c3:dd:1f:1f:5b:8a:26:67:37:a7:90:e4:9a:9e:f6:12:87:af: 73:ce:26:ce:22:2a:0f:a5:fc:13:7d:e8:c4:16:aa:92:78:20: e3:79:53:b6:ef:4f:b7:e9:73:ff:71:93:9a:6b:65:97:d0:e6: c0:59:e9:90:6d:66:f9:73:1c:e7:3e:aa:40:94:5f:87:bb:11: f9:35:1a:bd:ed:cc:1c:d4:6b:81:97:1e:f8:79:9c:2e:1a:23: 2f:5a:2a:c3:cb:ff:10:f5:69:96:5d:df:93:95:5a:b1:53:0d: d5:22:2e:62:e4:2d:97:fa:e3:3b:13:bf:ed:e1:02:bb:7d:f8: d0:6e:8a:d2:f3:77:b7:64:e6:b4:8e:bf:93:0c:48:dd:45:fa: fd:56:f4:16:b0:bd:91:2a:f2:5d:e0:a7:ab:d6:e4:df:5f:19: 01:d8:20:86:6c:18:52:b8:e9:fc:dc:9b:33:84:80:04:74:08: 4b:64:7e:c9:74:c7:df:4c:09:56:3c:02:7a:5d:e3:51:24:de: 53:e6:cb:66:e9:1d:d8:dd:8b:36:72:8d:96:15:e0:da:68:1b: ac:33:1f:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/SFGxFn2zU1X2MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk NDMwOGNjNGEtMDcwYi00ODA0LWI3NTYtNTVjYjIzZDQyYjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPIUprLJ4BKqs+BENcasf/wI6JXkUkaTf7mR K27KQtCx+ZKsIsRYwnY8WJn1U4QB6gkPPzfbrsBCLyRC7Yjm8rmuFEA9FvyD7VyI ATMSttumsDj6yrlOcYg7TdXXMB1yczIs7R6i2XZK862b21hayKUwbkKJ7XHj7AG9 uRFqFm9MbXJ9G+J8jR7poxPOR4XNBvdo2g26VIA8q3mAnnmSFG9ZJXhBIggQ4+MG x2E9riKETF1OMHGSP3DCuQppbHr5zfdNOfntq/VH+eyAtMBrcqI9ek3kdaorFgfK KHvv5MwuuCoUYW72fwfxuikYVPHqs0sB39AlJQPq5ZhI9Guk+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnAkuOkgqG3L7OiTyMxYVo7FGGnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDhhNWUyMjItYjhkZi0z NzY1LWEwZmQtNGNkNTBmMDVlOTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEWVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpyNgM0KDeifLfvkBgMBUm5/JmuTpA9bBhPi7C1DBnjBHkda8PdHx9b iiZnN6eQ5Jqe9hKHr3POJs4iKg+l/BN96MQWqpJ4ION5U7bvT7fpc/9xk5prZZfQ 5sBZ6ZBtZvlzHOc+qkCUX4e7Efk1Gr3tzBzUa4GXHvh5nC4aIy9aKsPL/xD1aZZd 35OVWrFTDdUiLmLkLZf64zsTv+3hArt9+NBuitLzd7dk5rSOv5MMSN1F+v1W9Baw vZEq8l3gp6vW5N9fGQHYIIZsGFK46fzcmzOEgAR0CEtkfsl0x99MCVY8Anpd41Ek 3lPmy2bpHdjdizZyjZYV4NpoG6wzHzs= -----END CERTIFICATE-----Generated at Sat Nov 1 12:31:07 2025 by rpki-client