$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/11b89bd0-db2d-35b1-82f1-0bc39d3ff2f6.roa File: 11b89bd0-db2d-35b1-82f1-0bc39d3ff2f6.roa (raw, json) Hash identifier: IVtMva5B6KabmuJT51LpdzcbpXzDXm+GiECetYp+83I= Subject key identifier: 6F:37:53:80:5D:3B:55:D9:1D:9F:00:A4:C2:16:44:37:6D:FE:77:22 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA9327F3F9E6B58613FC90750 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/11b89bd0-db2d-35b1-82f1-0bc39d3ff2f6.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.64.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:7f:3f:9e:6b:58:61:3f:c9:07:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=cf453241-05a2-42ea-b70e-2e0279f3cfc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:65:ff:eb:b9:e7:07:32:0c:67:2d:b8:a8:2d: 2c:3a:a4:0e:bb:e6:15:6b:05:24:a0:75:7e:5b:60: 3a:b4:fc:75:85:45:da:90:37:cf:43:5e:65:8d:c7: 95:e9:f8:e2:d3:d4:d3:a5:ba:5b:9f:87:0b:7d:68: 41:e5:93:08:9c:3a:3e:b3:eb:bd:83:a8:e7:e7:c4: 4e:a5:c4:38:3d:aa:d4:b1:c9:d6:54:5e:45:7a:86: 42:38:84:65:db:a3:c7:25:f7:df:24:22:3a:d2:8d: 20:be:25:fe:d0:a3:af:a3:04:a7:48:78:e6:64:95: fd:fe:e7:f5:46:14:9b:b2:28:e7:ae:6f:76:fa:db: 18:27:6f:08:7c:4e:da:76:65:c2:a4:9d:2f:06:9b: 77:e9:cf:5a:57:20:70:ca:b7:7d:a5:62:cd:5a:40: 15:60:d2:08:7c:43:78:a2:38:b1:e3:1f:75:01:16: a3:54:c9:b2:cf:47:d6:57:87:46:45:ee:27:f1:d6: 43:86:d0:66:76:98:cf:bd:c0:a1:8b:5f:7f:7c:3c: 7a:7a:df:7f:26:33:89:57:41:0b:01:6f:a3:32:78: 71:d6:6f:5b:26:92:b4:a6:4e:12:4b:0b:46:01:4c: ed:4c:fe:4e:b4:b3:e3:f8:4c:fd:13:1d:3a:7b:42: a8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:37:53:80:5D:3B:55:D9:1D:9F:00:A4:C2:16:44:37:6D:FE:77:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/11b89bd0-db2d-35b1-82f1-0bc39d3ff2f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:e1:01:9f:d9:28:a5:54:4b:48:b6:68:84:f4:8d:8e:90:84: 42:51:56:e5:92:a1:81:f9:05:55:2f:7e:24:74:f5:f1:da:6c: fe:49:40:12:86:52:20:e5:c9:72:39:c8:71:11:27:b5:23:30: 2a:95:75:1d:2a:a0:8a:1f:49:bb:46:d8:b6:92:60:bd:cc:96: 78:fd:93:d7:41:5a:ff:5e:4f:a8:dd:2c:8d:1e:20:47:9d:36: c4:7c:f8:0b:a2:2f:c5:8d:f7:30:68:cb:54:66:9f:5a:17:4c: 13:4e:6c:39:d9:47:76:6c:52:b5:9b:7a:ce:69:64:65:a8:5d: 53:6a:ef:2c:97:c3:df:fb:62:45:15:db:39:72:de:62:13:5a: 1b:24:cf:00:58:28:5e:1a:e5:46:b9:d0:76:ca:c7:a7:0a:b4: ad:f5:26:8d:4f:31:a3:38:e3:be:4e:9d:c0:64:9e:15:7a:66: 94:df:a3:1d:33:9a:04:0c:3b:ed:45:16:1c:da:fc:dd:a5:91: 3d:7b:58:e3:8b:09:55:41:16:9a:76:07:a8:09:d4:b1:cf:94: b4:73:b2:3c:b8:26:52:93:d7:46:55:b3:88:4f:83:e9:84:c5: b6:35:9e:d9:ad:14:bc:de:42:f7:99:9c:4b:a3:5b:ba:34:6a: ff:1a:7a:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMn8/nmtYYT/JB1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk Y2Y0NTMyNDEtMDVhMi00MmVhLWI3MGUtMmUwMjc5ZjNjZmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGX/67nnBzIMZy24qC0sOqQOu+YVawUkoHV+ W2A6tPx1hUXakDfPQ15ljceV6fji09TTpbpbn4cLfWhB5ZMInDo+s+u9g6jn58RO pcQ4ParUscnWVF5FeoZCOIRl26PHJfffJCI60o0gviX+0KOvowSnSHjmZJX9/uf1 RhSbsijnrm92+tsYJ28IfE7admXCpJ0vBpt36c9aVyBwyrd9pWLNWkAVYNIIfEN4 ojix4x91ARajVMmyz0fWV4dGRe4n8dZDhtBmdpjPvcChi19/fDx6et9/JjOJV0EL AW+jMnhx1m9bJpK0pk4SSwtGAUztTP5OtLPj+Ez9Ex06e0KoOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG83U4BdO1XZHZ8ApMIWRDdt/nciMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTFiODliZDAtZGIyZC0z NWIxLTgyZjEtMGJjMzlkM2ZmMmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEDvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbhAZ/ZKKVUS0i2aIT0jY6QhEJRVuWSoYH5BVUvfiR09fHabP5JQBKG UiDlyXI5yHERJ7UjMCqVdR0qoIofSbtG2LaSYL3Mlnj9k9dBWv9eT6jdLI0eIEed NsR8+AuiL8WN9zBoy1Rmn1oXTBNObDnZR3ZsUrWbes5pZGWoXVNq7yyXw9/7YkUV 2zly3mITWhskzwBYKF4a5Ua50HbKx6cKtK31Jo1PMaM4475OncBknhV6ZpTfox0z mgQMO+1FFhza/N2lkT17WOOLCVVBFpp2B6gJ1LHPlLRzsjy4JlKT10ZVs4hPg+mE xbY1ntmtFLzeQveZnEujW7o0av8aeno= -----END CERTIFICATE-----Generated at Sat Nov 1 12:36:38 2025 by rpki-client