$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17c6f27c-a53d-33a1-929c-74e0ae7d8470.roa File: 17c6f27c-a53d-33a1-929c-74e0ae7d8470.roa (raw, json) Hash identifier: 4uh9qIezCpycWuY4vqHNiVo/UTE9rXrbPmvDj/zI/Js= Subject key identifier: B7:4C:1A:E3:74:A7:75:F3:61:8D:95:BC:30:FF:2E:E3:5A:9B:23:EF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA9328D4455D6F8182B9E5A40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17c6f27c-a53d-33a1-929c-74e0ae7d8470.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.66.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:8d:44:55:d6:f8:18:2b:9e:5a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=3d6ce6d5-4f00-4bbb-a2e9-1efaeb1d121b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ef:48:da:48:9d:93:6a:82:89:c0:17:67:04: 38:df:e6:ff:22:c4:8c:25:b3:84:6a:d0:1b:68:da: 5b:14:79:71:7b:85:be:c3:51:83:78:1f:40:a7:d3: 69:73:0c:f0:d9:c3:bc:fc:39:95:ff:f0:c7:4c:31: 02:0a:71:17:7e:62:c5:2e:0b:05:f6:61:a0:9b:ff: a4:16:fc:93:b3:3e:80:be:f3:4c:94:70:c1:5f:50: 27:12:05:a6:a4:0e:8c:67:2b:5e:54:3e:8d:8b:fb: ff:13:4c:c5:ab:5b:2a:00:19:a9:5f:6e:bd:45:09: 8c:6d:27:5e:d3:fa:cb:c4:6f:37:c1:54:26:94:3c: 4f:bc:ca:06:35:52:bb:8c:9a:0c:87:74:06:bc:37: 45:2a:70:24:44:52:c8:8c:21:c8:bd:3f:cd:9e:35: cb:8a:09:2b:07:2c:b8:97:74:6c:05:fa:ab:45:99: 6e:72:60:16:cc:f8:cf:55:40:ae:c3:6a:5c:13:eb: a8:1a:6a:5f:40:a2:0e:ed:fa:7a:56:e2:19:3a:d3: d1:7d:7c:c1:51:2a:9e:f6:22:e5:99:21:a7:7e:bd: e0:ea:68:a0:14:e1:27:2b:68:49:01:66:c8:66:be: e6:61:50:73:75:87:83:b4:d3:aa:94:da:06:a0:cc: 89:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:4C:1A:E3:74:A7:75:F3:61:8D:95:BC:30:FF:2E:E3:5A:9B:23:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17c6f27c-a53d-33a1-929c-74e0ae7d8470.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.66.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:72:8b:97:38:7e:ee:a6:35:63:81:ea:92:09:d6:71:64:86: 0f:6d:a8:e6:67:36:73:bc:78:e4:1c:63:c6:8d:4e:4a:27:e0: 40:82:78:34:cd:bc:ae:a1:d7:01:69:01:30:0f:83:99:da:0e: 8c:8a:3a:0f:98:0d:86:c2:07:07:06:bc:3f:44:52:63:c4:0e: 86:83:fd:5d:b2:25:81:9b:d1:c5:6c:01:60:85:c6:1d:21:76: b9:20:f4:6b:c5:9a:65:81:09:5c:ca:c4:f1:bb:9a:6f:da:46: 60:68:20:f7:34:fe:a1:39:85:ad:0e:4f:05:cd:4c:02:00:28: a6:bb:c7:6f:d7:17:82:42:5f:fd:0e:dc:2a:5d:b1:4b:96:0f: bb:46:d9:33:ec:12:33:48:09:e2:72:5e:39:fa:54:1a:4f:d6: 1b:c6:50:92:fb:ff:aa:14:a1:cc:91:81:6a:a3:56:f3:c7:cf: 63:e2:1c:3d:91:7c:bb:23:5c:30:14:6e:8f:57:ef:a8:1a:cf: 73:78:27:42:7d:9b:c1:08:38:8c:f0:0c:fd:0f:2d:ba:c2:02: 48:54:69:88:08:bc:16:2f:38:56:30:e8:09:ad:0a:71:ad:ec: d3:e3:04:c1:be:2a:4f:cc:ab:d4:27:33:aa:0c:cb:e2:05:f6: ec:29:68:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMo1EVdb4GCueWkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk M2Q2Y2U2ZDUtNGYwMC00YmJiLWEyZTktMWVmYWViMWQxMjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4u9I2kidk2qCicAXZwQ43+b/IsSMJbOEatAb aNpbFHlxe4W+w1GDeB9Ap9Npcwzw2cO8/DmV//DHTDECCnEXfmLFLgsF9mGgm/+k FvyTsz6AvvNMlHDBX1AnEgWmpA6MZyteVD6Ni/v/E0zFq1sqABmpX269RQmMbSde 0/rLxG83wVQmlDxPvMoGNVK7jJoMh3QGvDdFKnAkRFLIjCHIvT/NnjXLigkrByy4 l3RsBfqrRZlucmAWzPjPVUCuw2pcE+uoGmpfQKIO7fp6VuIZOtPRfXzBUSqe9iLl mSGnfr3g6migFOEnK2hJAWbIZr7mYVBzdYeDtNOqlNoGoMyJeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLdMGuN0p3XzYY2VvDD/LuNamyPvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTdjNmYyN2MtYTUzZC0z M2ExLTkyOWMtNzRlMGFlN2Q4NDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrEIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5yi5c4fu6mNWOB6pIJ1nFkhg9tqOZnNnO8eOQcY8aNTkon4ECCeDTN vK6h1wFpATAPg5naDoyKOg+YDYbCBwcGvD9EUmPEDoaD/V2yJYGb0cVsAWCFxh0h drkg9GvFmmWBCVzKxPG7mm/aRmBoIPc0/qE5ha0OTwXNTAIAKKa7x2/XF4JCX/0O 3CpdsUuWD7tG2TPsEjNICeJyXjn6VBpP1hvGUJL7/6oUocyRgWqjVvPHz2PiHD2R fLsjXDAUbo9X76gaz3N4J0J9m8EIOIzwDP0PLbrCAkhUaYgIvBYvOFYw6AmtCnGt 7NPjBMG+Kk/Mq9QnM6oMy+IF9uwpaAI= -----END CERTIFICATE-----Generated at Sat Nov 1 12:30:38 2025 by rpki-client