$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17b45d6a-4c9a-3d6d-8ecb-09dfb8816a01.roa File: 17b45d6a-4c9a-3d6d-8ecb-09dfb8816a01.roa (raw, json) Hash identifier: 7nI4Hh5ls687zUDydiX9fcIfkX1DQ3aGJ1nK9TqzBp8= Subject key identifier: A9:1A:4A:1A:D7:6E:02:C2:C6:1A:15:9D:82:63:6B:DB:54:1E:B3:E6 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BABFD22F1637198A7D4ACE400 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17b45d6a-4c9a-3d6d-8ecb-09dfb8816a01.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.69.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:22:f1:63:71:98:a7:d4:ac:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=9e3ea5dc-a29e-4d4c-83ec-da7c4fd69861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:bf:db:21:85:42:a7:58:eb:6c:a7:4d:84:24: 1f:e1:b7:f9:6d:77:e2:21:36:e6:cd:bb:9d:bf:63: ad:74:9f:d1:a8:df:a9:fb:75:46:8c:28:c6:97:e2: 17:4e:74:f1:80:cf:08:73:ea:e0:dc:c9:67:6a:ac: 1a:f6:80:e9:bb:81:b8:50:6b:f3:62:dd:3d:84:58: 0c:e9:62:b5:92:50:07:e4:11:55:4e:b8:71:8a:6e: 64:d5:35:5f:5d:e4:52:a9:16:f8:26:29:85:99:56: b5:a3:45:1e:bf:a6:41:92:05:8f:d4:15:4b:1c:33: 07:11:6a:da:80:5a:ca:92:f7:03:74:07:5b:95:78: 67:83:07:de:bb:61:0e:28:08:fc:90:b0:e5:46:b3: ce:14:22:ad:30:f5:f8:77:25:05:55:35:8d:73:c0: 5b:dd:bd:71:1f:95:55:ff:9b:e5:94:77:63:87:93: b7:6a:48:30:a8:71:b4:15:19:91:f1:cb:15:64:6a: 29:e4:75:d4:7c:13:13:5b:f2:f2:1e:f2:08:0a:7d: 1c:02:f0:be:fe:87:00:8a:56:39:68:60:13:e5:6b: 0f:02:89:b1:2c:f1:39:79:0d:5b:89:e3:4a:e6:17: 5b:c9:9a:0b:2b:b0:34:dd:f3:9a:0b:7d:0d:51:59: 7e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:1A:4A:1A:D7:6E:02:C2:C6:1A:15:9D:82:63:6B:DB:54:1E:B3:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17b45d6a-4c9a-3d6d-8ecb-09dfb8816a01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:68:a3:0f:98:8a:e3:0c:bf:fe:d1:20:45:36:24:1d:2a:99: 9a:05:40:e5:18:85:1a:ec:4c:55:2b:e2:9e:fe:37:90:c7:2c: 6f:50:47:22:fc:e2:2f:87:24:c7:e8:87:cb:53:8c:af:4a:68: 23:cc:61:2c:63:70:e0:38:1e:0f:b2:c7:f3:78:5d:ed:d0:55: e2:ee:3e:ab:df:19:4e:7f:33:18:80:58:2a:28:f5:48:bb:7b: dc:39:c1:6c:d8:9f:28:70:74:3d:d7:0e:72:05:3a:e9:d8:38: c7:c5:81:2d:19:c2:03:68:ea:0e:a1:28:5a:78:64:f4:5f:47: e0:62:1e:1d:dc:ad:3a:99:08:9c:62:16:75:4c:bf:e2:aa:59: 24:aa:d4:d6:6a:aa:72:50:c1:d7:5f:c0:ed:0b:a1:53:39:1b: a0:e8:15:cb:a4:c3:96:d9:40:1f:18:a1:00:95:95:a1:06:61: bc:d1:bf:54:fa:1f:16:8c:1c:a3:c7:3c:b4:08:8f:33:e7:b1: 7d:0c:8f:0d:fb:c7:19:79:03:37:83:40:f7:20:f5:f7:97:c1: 5d:83:45:77:58:a3:06:3a:15:75:f4:5e:e3:34:56:93:f3:4d: 88:3c:09:c4:c3:c7:8c:cb:59:19:80:2a:35:a9:29:9e:63:a5: 35:6c:08:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/SLxY3GYp9Ss5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk OWUzZWE1ZGMtYTI5ZS00ZDRjLTgzZWMtZGE3YzRmZDY5ODYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7/bIYVCp1jrbKdNhCQf4bf5bXfiITbmzbud v2OtdJ/RqN+p+3VGjCjGl+IXTnTxgM8Ic+rg3Mlnaqwa9oDpu4G4UGvzYt09hFgM 6WK1klAH5BFVTrhxim5k1TVfXeRSqRb4JimFmVa1o0Uev6ZBkgWP1BVLHDMHEWra gFrKkvcDdAdblXhngwfeu2EOKAj8kLDlRrPOFCKtMPX4dyUFVTWNc8Bb3b1xH5VV /5vllHdjh5O3akgwqHG0FRmR8csVZGop5HXUfBMTW/LyHvIICn0cAvC+/ocAilY5 aGAT5WsPAomxLPE5eQ1bieNK5hdbyZoLK7A03fOaC30NUVl+9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkaShrXbgLCxhoVnYJja9tUHrPmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTdiNDVkNmEtNGM5YS0z ZDZkLThlY2ItMDlkZmI4ODE2YTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrEXUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMJoow+YiuMMv/7RIEU2JB0qmZoFQOUYhRrsTFUr4p7+N5DHLG9QRyL8 4i+HJMfoh8tTjK9KaCPMYSxjcOA4Hg+yx/N4Xe3QVeLuPqvfGU5/MxiAWCoo9Ui7 e9w5wWzYnyhwdD3XDnIFOunYOMfFgS0ZwgNo6g6hKFp4ZPRfR+BiHh3crTqZCJxi FnVMv+KqWSSq1NZqqnJQwddfwO0LoVM5G6DoFcukw5bZQB8YoQCVlaEGYbzRv1T6 HxaMHKPHPLQIjzPnsX0Mjw37xxl5AzeDQPcg9feXwV2DRXdYowY6FXX0XuM0VpPz TYg8CcTDx4zLWRmAKjWpKZ5jpTVsCAM= -----END CERTIFICATE-----Generated at Sat Nov 1 12:30:50 2025 by rpki-client