$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0a95c72c-4c3a-3661-8c15-522333021f1c.roa File: 0a95c72c-4c3a-3661-8c15-522333021f1c.roa (raw, json) Hash identifier: gzqP9V4oVy6ldRma5UG9hZc9VdLEis7b+z2O/vkjHus= Subject key identifier: 39:DB:91:0D:7D:DF:B6:B5:72:88:AB:BB:36:01:5B:9A:FB:93:82:4C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667C7FE7DBF1A57C5ACF680 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0a95c72c-4c3a-3661-8c15-522333021f1c.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.69.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:c7:fe:7d:bf:1a:57:c5:ac:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=31401299-4f97-427b-b4a9-258128e8b7e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b8:03:03:14:93:bc:4b:7f:05:bf:3d:7d:84: 80:7d:c4:ae:2e:95:cc:89:59:66:51:b8:0c:d8:b9: 3a:2c:a5:73:67:0c:db:6c:f9:9e:fe:65:d3:8e:cf: 5b:18:e3:a4:40:27:8f:7c:f2:23:7d:9c:d2:ea:21: 6b:14:e8:45:9d:af:66:fe:1b:73:c3:0b:45:d9:8a: f2:f7:c5:4a:84:06:f1:bd:ef:95:62:0b:f2:8f:18: 0c:77:44:07:ba:55:2a:fb:e3:78:01:e8:78:1f:d9: 68:7c:7f:76:c6:ff:69:3d:72:82:a2:48:bd:59:64: 17:c1:da:66:4e:df:7f:30:bd:a1:34:52:68:c1:d9: f9:ad:5c:77:92:43:b3:99:61:d3:92:bf:4f:c0:a6: ba:08:1d:25:17:f2:32:ef:e0:a5:c1:67:1d:ff:5b: 3e:17:62:77:3b:73:21:87:73:94:d8:5f:74:8e:ec: 68:f9:5a:1e:b8:bb:05:08:cf:b8:41:70:82:4f:0e: f5:a5:9d:7b:03:8a:bb:3b:39:75:b8:d8:d8:8c:4d: 04:d1:2f:81:fc:04:34:5e:fc:e0:7c:c2:84:bd:68: 20:51:10:c2:27:61:f0:f6:76:7b:9b:be:7e:fa:ad: a7:65:04:b9:a1:72:d9:74:99:c6:fc:e4:7d:45:92: c5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:DB:91:0D:7D:DF:B6:B5:72:88:AB:BB:36:01:5B:9A:FB:93:82:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0a95c72c-4c3a-3661-8c15-522333021f1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:20:47:7c:24:24:ac:79:4f:1c:e5:ad:a2:44:0d:f4:62:c1: 67:8d:c8:d4:c7:5a:02:f4:79:47:b5:e6:b1:6c:c7:e5:fb:47: f6:08:fb:60:3f:b2:20:8b:ff:ae:47:af:e8:f4:67:37:37:12: 2f:57:4d:0a:37:f7:83:59:eb:2c:c2:01:41:54:d6:98:b7:4e: 53:94:68:04:21:68:d2:1d:76:5b:c8:5f:02:4f:61:93:f4:20: 74:70:10:54:62:1d:81:e0:00:05:db:d3:07:b6:51:57:51:76: 43:1d:c4:29:8b:fb:7c:35:82:99:18:4e:ab:4c:e8:a2:b4:f6: ee:6a:a8:04:ab:6d:d7:36:67:70:8d:5e:a4:74:b5:d1:e0:7a: 16:77:7c:af:1c:dc:c6:7f:7c:34:11:d2:82:95:cc:4b:5f:66: 51:11:bf:d4:90:10:f0:32:6c:75:37:23:03:22:f2:e5:dc:a4: 57:b9:12:b9:5d:40:1d:9a:0c:4f:d5:81:6a:43:93:a3:d1:3f: ff:41:82:c8:f9:4d:47:57:15:8f:aa:f8:f1:9f:3f:5c:16:79: 4f:27:da:f2:24:7b:79:bb:a5:ae:5e:70:09:1a:5c:29:05:b0: da:29:93:36:f2:09:72:c3:32:1e:8a:c8:6a:a4:32:3d:31:1c: c9:74:3b:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ8f+fb8aV8Ws9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk MzE0MDEyOTktNGY5Ny00MjdiLWI0YTktMjU4MTI4ZThiN2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLgDAxSTvEt/Bb89fYSAfcSuLpXMiVlmUbgM 2Lk6LKVzZwzbbPme/mXTjs9bGOOkQCePfPIjfZzS6iFrFOhFna9m/htzwwtF2Yry 98VKhAbxve+VYgvyjxgMd0QHulUq++N4Aeh4H9lofH92xv9pPXKCoki9WWQXwdpm Tt9/ML2hNFJowdn5rVx3kkOzmWHTkr9PwKa6CB0lF/Iy7+ClwWcd/1s+F2J3O3Mh h3OU2F90juxo+VoeuLsFCM+4QXCCTw71pZ17A4q7Ozl1uNjYjE0E0S+B/AQ0Xvzg fMKEvWggURDCJ2Hw9nZ7m75++q2nZQS5oXLZdJnG/OR9RZLFKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnbkQ1937a1coiruzYBW5r7k4JMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGE5NWM3MmMtNGMzYS0z NjYxLThjMTUtNTIyMzMzMDIxZjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEW/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcgR3wkJKx5TxzlraJEDfRiwWeNyNTHWgL0eUe15rFsx+X7R/YI+2A/ siCL/65Hr+j0Zzc3Ei9XTQo394NZ6yzCAUFU1pi3TlOUaAQhaNIddlvIXwJPYZP0 IHRwEFRiHYHgAAXb0we2UVdRdkMdxCmL+3w1gpkYTqtM6KK09u5qqASrbdc2Z3CN XqR0tdHgehZ3fK8c3MZ/fDQR0oKVzEtfZlERv9SQEPAybHU3IwMi8uXcpFe5Erld QB2aDE/VgWpDk6PRP/9Bgsj5TUdXFY+q+PGfP1wWeU8n2vIke3m7pa5ecAkaXCkF sNopkzbyCXLDMh6KyGqkMj0xHMl0O3A= -----END CERTIFICATE-----Generated at Sat Nov 1 09:59:19 2025 by rpki-client