$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0ad2708a-1b21-3e16-9c2f-6f966ba7771c.roa File: 0ad2708a-1b21-3e16-9c2f-6f966ba7771c.roa (raw, json) Hash identifier: ReNUzaedjdGZgeVvc4srCS1PbQk5xDJAi+lkBNZkK7M= Subject key identifier: A4:A3:A4:65:50:5D:5D:B5:D1:7D:FE:D5:FA:AE:6E:67:84:E7:DE:CF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB02D0D83F51FC0D366AC9100 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0ad2708a-1b21-3e16-9c2f-6f966ba7771c.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 172.69.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2d:0d:83:f5:1f:c0:d3:66:ac:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=b962cb9e-7658-4d0c-ab5e-9d030e972aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:40:bf:b0:51:62:c6:ef:ca:11:0c:2d:c3:9b: e7:4f:d1:3e:11:fa:58:ee:fc:9a:b6:3b:08:ff:57: f1:89:af:e0:18:e7:71:44:45:71:a6:07:df:b8:be: 62:97:37:c8:d1:b5:f4:a2:e5:fd:12:9d:9a:19:a3: ec:7f:d3:88:7c:93:a3:be:68:ba:7d:17:05:74:a2: 7b:10:5b:1e:e3:32:c1:52:27:02:11:de:d9:2c:ea: b6:7a:a0:14:9e:7d:e3:23:60:66:ce:bb:54:4c:9e: 22:41:2d:e4:fa:07:64:5f:d7:66:40:50:94:d7:86: 8c:37:61:6d:54:4d:06:9c:c0:0e:34:1a:70:37:b0: ab:c9:22:5a:95:c1:12:81:31:56:6a:b4:49:7f:94: 0f:ae:8f:e7:ac:03:86:66:ea:43:01:6d:52:11:06: 50:63:96:17:31:99:79:43:4b:d1:b1:de:06:24:1b: b9:c2:1e:56:59:b9:39:5a:f7:83:97:df:33:77:6a: 0e:bb:67:d0:53:b6:d8:c1:ce:86:45:02:81:19:92: 6e:44:0b:83:2c:50:80:07:dc:6c:e6:b1:d0:b7:63: b0:a5:8e:b9:bc:e1:d2:53:92:7c:45:19:1d:38:ef: c7:4a:d2:fe:8b:3a:5b:9f:e9:25:54:5d:32:18:9b: a5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A3:A4:65:50:5D:5D:B5:D1:7D:FE:D5:FA:AE:6E:67:84:E7:DE:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0ad2708a-1b21-3e16-9c2f-6f966ba7771c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:fa:0b:4f:b2:85:e4:c8:b9:27:e5:6c:e0:d5:fb:45:7e:6d: c6:20:7c:a8:e0:ab:24:3e:4d:0e:37:d4:71:1a:9b:34:e9:9f: 60:fa:0e:42:a5:63:3e:12:fb:f3:90:bb:af:c8:64:d5:2f:a5: 0a:d3:b4:08:e0:84:bd:3f:7f:b0:f6:47:81:5b:a2:c7:40:18: f6:df:e5:93:57:20:99:dd:58:ce:60:c1:3e:4b:0d:51:6f:cd: cc:da:2a:20:a5:11:06:0d:eb:ad:29:b9:53:44:e4:05:ba:53: de:56:9c:1f:93:2a:b2:8e:d8:a3:21:27:54:6c:15:4d:73:87: 29:58:27:6e:42:bf:92:e6:75:2c:48:f2:9e:3e:d3:84:36:5c: 94:f2:82:db:5a:ad:9d:6d:27:61:ea:dc:a7:fc:75:bc:65:85: 07:2a:7f:88:83:e8:a9:c9:8e:6c:f0:ba:f1:9d:6f:44:e5:a9: 84:c9:9c:86:81:8b:25:65:80:18:ce:16:86:52:70:4e:5d:5d: f7:1b:f8:72:aa:45:6f:d3:5d:4d:ea:18:c6:c2:27:d9:e1:80: 7d:84:8a:51:24:11:c5:51:5d:81:51:75:33:d3:07:5f:cc:01: b9:f6:69:c5:a8:04:4b:7e:27:35:12:12:f9:db:06:b9:e5:c8: 6d:ec:34:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLQ2D9R/A02askQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk Yjk2MmNiOWUtNzY1OC00ZDBjLWFiNWUtOWQwMzBlOTcyYWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0C/sFFixu/KEQwtw5vnT9E+EfpY7vyatjsI /1fxia/gGOdxREVxpgffuL5ilzfI0bX0ouX9Ep2aGaPsf9OIfJOjvmi6fRcFdKJ7 EFse4zLBUicCEd7ZLOq2eqAUnn3jI2BmzrtUTJ4iQS3k+gdkX9dmQFCU14aMN2Ft VE0GnMAONBpwN7CrySJalcESgTFWarRJf5QPro/nrAOGZupDAW1SEQZQY5YXMZl5 Q0vRsd4GJBu5wh5WWbk5WveDl98zd2oOu2fQU7bYwc6GRQKBGZJuRAuDLFCAB9xs 5rHQt2OwpY65vOHSU5J8RRkdOO/HStL+izpbn+klVF0yGJullQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKSjpGVQXV210X3+1fqubmeE597PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGFkMjcwOGEtMWIyMS0z ZTE2LTljMmYtNmY5NjZiYTc3NzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEXnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMb6C0+yheTIuSflbODV+0V+bcYgfKjgqyQ+TQ431HEamzTpn2D6DkKl Yz4S+/OQu6/IZNUvpQrTtAjghL0/f7D2R4FbosdAGPbf5ZNXIJndWM5gwT5LDVFv zczaKiClEQYN660puVNE5AW6U95WnB+TKrKO2KMhJ1RsFU1zhylYJ25Cv5LmdSxI 8p4+04Q2XJTygttarZ1tJ2Hq3Kf8dbxlhQcqf4iD6KnJjmzwuvGdb0TlqYTJnIaB iyVlgBjOFoZScE5dXfcb+HKqRW/TXU3qGMbCJ9nhgH2EilEkEcVRXYFRdTPTB1/M Abn2acWoBEt+JzUSEvnbBrnlyG3sNIk= -----END CERTIFICATE-----Generated at Sat Nov 1 12:37:09 2025 by rpki-client