$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0c9e51d5-d7df-394f-b4a2-5d8c3089f82a.roa File: 0c9e51d5-d7df-394f-b4a2-5d8c3089f82a.roa (raw, json) Hash identifier: ff/hiRLZ1v/k7pQjS8kbg0e/AT7bT/5vJkK63KjDs7w= Subject key identifier: 8F:B6:CF:93:31:82:1D:51:B2:32:D0:D3:98:A9:5B:58:B6:3C:C2:63 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BABFD21A030FD25CA9CFED840 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0c9e51d5-d7df-394f-b4a2-5d8c3089f82a.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.69.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:21:a0:30:fd:25:ca:9c:fe:d8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=b0bffa0a-1c1b-420b-a279-9741a5ded25c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b1:70:00:c7:e0:f9:e8:45:01:c6:03:4c:30: 1f:8a:40:29:ef:32:cb:7c:df:65:b6:68:54:3f:a8: dd:78:ae:43:e2:cb:32:51:54:bd:18:bb:55:f0:1e: 44:a8:ea:ff:48:de:55:a7:cd:c4:4a:fe:8f:e2:20: 41:a0:33:4d:fb:6d:87:5a:14:0e:e3:43:47:7e:61: 70:09:bc:b1:b7:2b:d1:b8:1a:67:f9:42:b8:b1:66: 62:af:2c:3e:b8:e6:bc:a2:0e:93:35:df:60:94:c9: c7:74:99:19:1c:2f:24:be:ff:99:39:d0:ee:e1:09: 65:b9:64:95:eb:5e:43:cf:8d:14:91:7c:2d:86:ee: f9:89:5b:6d:04:9c:3b:9e:d5:e2:3c:32:f3:d6:bd: c5:46:1e:3a:85:8b:98:38:55:d4:93:33:09:56:43: 0e:f6:20:20:0e:bb:1c:42:62:16:be:df:3f:4f:cc: 71:ad:73:b3:5c:13:14:7b:13:51:8e:34:53:cf:bf: c1:52:a7:bb:fd:63:9e:0e:99:1e:c4:f6:0a:f6:47: a0:da:24:c3:db:40:bd:95:67:65:82:84:8a:3e:32: 88:55:9f:e1:e5:75:7c:d1:90:2c:1c:a4:69:78:64: a7:a4:fa:09:7a:04:91:3a:94:48:a7:66:7d:b6:11: 90:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B6:CF:93:31:82:1D:51:B2:32:D0:D3:98:A9:5B:58:B6:3C:C2:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0c9e51d5-d7df-394f-b4a2-5d8c3089f82a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:a6:8e:46:35:ca:69:e4:95:3d:59:e5:fd:2c:e5:ba:37:67: 20:17:f1:f9:68:25:b3:60:16:56:e1:7a:a7:4e:c9:96:60:b7: 66:0c:03:f9:df:15:d2:50:b1:8d:12:a5:a6:70:34:6f:50:ed: 71:61:4f:e8:a7:99:e3:f2:62:d8:a8:0f:63:4f:9a:48:37:5e: dc:5e:cd:4c:f8:d5:03:bf:cc:de:2f:93:08:52:7a:3e:7a:82: e0:cb:44:f2:5b:36:aa:99:68:8c:15:08:33:3f:2c:01:25:21: 93:6b:3f:8f:c4:18:8f:4a:4a:b1:a8:5b:f1:49:9c:4f:4d:01: 36:ab:44:16:86:4c:a4:89:fa:85:37:63:08:c1:84:7f:21:49: 36:2d:87:6e:a1:86:31:99:6e:a1:b9:cf:9b:61:a7:43:f3:93: 79:68:3a:55:4e:8c:33:f6:90:9d:8b:e2:be:81:7d:8b:8f:db: b8:86:a3:07:b3:b7:a1:ac:cc:44:32:a8:68:a7:60:db:e9:9e: 64:eb:42:88:93:05:2e:81:97:7f:4c:e6:ce:fa:8d:94:a8:ab: d2:70:e3:a3:1a:77:00:a0:fd:ef:dc:53:97:75:81:16:b7:87: 35:a7:61:66:36:98:51:ff:f3:59:b8:68:3e:97:c4:10:d4:25: a2:44:d3:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/SGgMP0lypz+2EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk YjBiZmZhMGEtMWMxYi00MjBiLWEyNzktOTc0MWE1ZGVkMjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbFwAMfg+ehFAcYDTDAfikAp7zLLfN9ltmhU P6jdeK5D4ssyUVS9GLtV8B5EqOr/SN5Vp83ESv6P4iBBoDNN+22HWhQO40NHfmFw CbyxtyvRuBpn+UK4sWZiryw+uOa8og6TNd9glMnHdJkZHC8kvv+ZOdDu4QlluWSV 615Dz40UkXwthu75iVttBJw7ntXiPDLz1r3FRh46hYuYOFXUkzMJVkMO9iAgDrsc QmIWvt8/T8xxrXOzXBMUexNRjjRTz7/BUqe7/WOeDpkexPYK9keg2iTD20C9lWdl goSKPjKIVZ/h5XV80ZAsHKRpeGSnpPoJegSROpRIp2Z9thGQFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+2z5Mxgh1RsjLQ05ipW1i2PMJjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGM5ZTUxZDUtZDdkZi0z OTRmLWI0YTItNWQ4YzMwODlmODJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEWjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ6mjkY1ymnklT1Z5f0s5bo3ZyAX8floJbNgFlbheqdOyZZgt2YMA/nf FdJQsY0SpaZwNG9Q7XFhT+inmePyYtioD2NPmkg3XtxezUz41QO/zN4vkwhSej56 guDLRPJbNqqZaIwVCDM/LAElIZNrP4/EGI9KSrGoW/FJnE9NATarRBaGTKSJ+oU3 YwjBhH8hSTYth26hhjGZbqG5z5thp0Pzk3loOlVOjDP2kJ2L4r6BfYuP27iGowez t6GszEQyqGinYNvpnmTrQoiTBS6Bl39M5s76jZSoq9Jw46MadwCg/e/cU5d1gRa3 hzWnYWY2mFH/81m4aD6XxBDUJaJE0wY= -----END CERTIFICATE-----Generated at Sat Nov 1 10:03:23 2025 by rpki-client