$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0d38fe17-05e7-3ec1-9112-cca1b2ac1e74.roa File: 0d38fe17-05e7-3ec1-9112-cca1b2ac1e74.roa (raw, json) Hash identifier: earyqtAHKjASD6D7Lix9CIimEyB6aFgBGMgBTYwFhOs= Subject key identifier: B6:F5:59:3B:10:FF:67:3D:3D:06:4D:F8:36:DB:95:29:65:F9:B2:9C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667BEB930C281DB9F77F500 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0d38fe17-05e7-3ec1-9112-cca1b2ac1e74.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.64.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:be:b9:30:c2:81:db:9f:77:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=31d7b25e-11e3-49c9-914d-c231e639d70c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:22:5e:df:15:2d:2e:00:fc:a3:82:f0:5a:37: 03:b3:a1:79:c4:e9:7e:87:3e:97:5d:c0:59:89:99: 06:8f:80:53:c7:7f:33:10:df:e2:78:4b:99:04:76: 95:56:dd:ac:82:ff:15:0f:1e:2e:f2:80:64:5c:ce: e0:ea:0b:41:7a:4f:cf:b7:fa:e7:5c:8c:44:e6:d4: 41:2e:2a:4d:0f:a0:63:12:c0:7e:58:f4:2c:6c:7d: 59:20:ce:2c:66:47:38:ac:86:6e:76:02:ed:5d:7f: 52:36:62:3f:3b:ce:70:0e:51:02:24:52:ca:1d:f0: 34:f6:ab:6b:df:d0:dd:03:c8:80:d4:37:43:e3:16: 14:e7:68:35:b8:a7:dd:de:c1:a6:ea:9e:93:80:78: 37:79:0d:e9:95:9d:ff:6d:30:fe:42:fa:58:7a:56: 6e:54:82:56:c0:81:d2:5d:ae:29:4e:3a:f7:69:37: db:e7:99:36:09:64:8f:3c:58:e8:1e:4b:65:0f:d6: 3b:27:d1:a2:cf:b5:4c:a3:ee:64:e2:65:e6:85:4f: 38:f5:6d:f0:67:a4:f0:eb:84:40:be:f5:fe:ad:e5: a5:73:4a:2d:08:42:f6:a4:02:bd:34:19:0b:b7:b2: 57:44:97:cc:b4:19:92:09:49:ee:03:23:50:fa:cb: f3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:F5:59:3B:10:FF:67:3D:3D:06:4D:F8:36:DB:95:29:65:F9:B2:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0d38fe17-05e7-3ec1-9112-cca1b2ac1e74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:03:3e:b7:86:44:fe:70:48:83:02:32:1d:09:80:a6:97:de: 75:93:9e:f1:bd:e5:dd:ca:cc:3e:bd:3f:c1:e3:66:20:5d:f8: 45:d6:54:61:33:87:0b:98:0f:82:1e:84:56:57:73:3f:24:c4: 3d:92:f7:09:fb:5e:46:20:a9:a9:8d:21:b0:f0:7e:7e:62:b8: 37:95:83:56:59:3b:90:90:79:ac:78:3b:02:29:4e:2f:bb:1c: e5:38:f0:64:b8:6e:48:50:fc:06:f0:fa:17:8e:1f:e3:e6:5b: 68:12:b0:ee:1a:77:b9:78:8c:ae:76:b0:66:22:08:a8:9f:a1: 2d:1b:9c:5b:14:77:ff:2c:bf:0f:f2:5a:17:ef:75:a9:75:8d: 7e:e4:4b:6a:f4:21:9c:d6:5e:06:65:ff:a5:a6:47:dd:76:01: d5:5d:ec:3e:f8:57:26:3b:95:be:b8:f0:af:17:3a:c2:d2:30: 19:32:c6:ed:73:9f:19:82:58:6f:02:cd:ea:83:51:de:4e:bb: 7a:fd:b7:9c:4f:42:d0:15:52:65:0a:1f:0a:b7:a4:9f:c3:c5: b5:2e:68:7f:0b:08:91:36:df:d9:50:fa:58:dd:31:c9:65:85: 47:75:70:5a:f9:e5:49:e7:8f:60:35:26:0d:26:c3:fe:eb:f1: f6:a4:8a:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ765MMKB25939QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk MzFkN2IyNWUtMTFlMy00OWM5LTkxNGQtYzIzMWU2MzlkNzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiJe3xUtLgD8o4LwWjcDs6F5xOl+hz6XXcBZ iZkGj4BTx38zEN/ieEuZBHaVVt2sgv8VDx4u8oBkXM7g6gtBek/Pt/rnXIxE5tRB LipND6BjEsB+WPQsbH1ZIM4sZkc4rIZudgLtXX9SNmI/O85wDlECJFLKHfA09qtr 39DdA8iA1DdD4xYU52g1uKfd3sGm6p6TgHg3eQ3plZ3/bTD+QvpYelZuVIJWwIHS Xa4pTjr3aTfb55k2CWSPPFjoHktlD9Y7J9Giz7VMo+5k4mXmhU849W3wZ6Tw64RA vvX+reWlc0otCEL2pAK9NBkLt7JXRJfMtBmSCUnuAyNQ+svzowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLb1WTsQ/2c9PQZN+DbblSll+bKcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGQzOGZlMTctMDVlNy0z ZWMxLTkxMTItY2NhMWIyYWMxZTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArECVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIDPreGRP5wSIMCMh0JgKaX3nWTnvG95d3KzD69P8HjZiBd+EXWVGEz hwuYD4IehFZXcz8kxD2S9wn7XkYgqamNIbDwfn5iuDeVg1ZZO5CQeax4OwIpTi+7 HOU48GS4bkhQ/Abw+heOH+PmW2gSsO4ad7l4jK52sGYiCKifoS0bnFsUd/8svw/y Whfvdal1jX7kS2r0IZzWXgZl/6WmR912AdVd7D74VyY7lb648K8XOsLSMBkyxu1z nxmCWG8CzeqDUd5Ou3r9t5xPQtAVUmUKHwq3pJ/DxbUuaH8LCJE239lQ+ljdMcll hUd1cFr55Unnj2A1Jg0mw/7r8fakito= -----END CERTIFICATE-----Generated at Sat Nov 1 12:30:47 2025 by rpki-client