$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1c3b485d-5c20-3a8f-b4b2-973c69dd7e15.roa File: 1c3b485d-5c20-3a8f-b4b2-973c69dd7e15.roa (raw, json) Hash identifier: Hbyo0IiT1DgSzYh4sNZXsYl0Sd4ESdS+9VBxyj7y9sY= Subject key identifier: 87:21:A9:1B:A3:2A:8C:DF:1B:E1:E8:FC:A0:39:82:B9:36:50:BF:B8 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB02D09110389C5E3CB91CB80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1c3b485d-5c20-3a8f-b4b2-973c69dd7e15.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 172.69.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2d:09:11:03:89:c5:e3:cb:91:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=2bf78cc3-0d44-492a-9296-6467f82bdc9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d2:3b:8d:2f:ec:3a:a7:e1:92:65:e0:39:5b: f2:f3:61:2a:18:3b:61:ab:fb:79:a0:6c:91:60:32: 65:25:f4:35:49:da:f5:c2:b0:5a:56:7f:93:d5:51: 56:fd:0f:52:e4:1b:5b:bf:da:88:94:31:97:0d:56: 0c:cd:4b:a7:b2:2b:68:36:d1:39:05:7a:b5:15:3e: cc:00:ff:de:a7:23:49:65:d7:d0:8b:68:b9:ac:32: 6e:70:8b:a1:d7:d0:ff:98:14:ac:a6:a2:64:b7:ba: d6:3b:db:f6:3f:0a:6f:4b:35:fb:23:a5:33:76:d0: fe:a6:6f:33:55:d8:03:47:86:c9:fa:b6:43:bb:b7: f6:fd:01:e3:3b:6a:e7:81:e9:80:2b:d6:38:b4:66: 28:e0:2b:bb:c4:c4:d1:5b:ee:03:f5:80:37:2e:d6: 4a:03:0d:af:4e:c8:5c:79:bf:d4:5d:52:b6:07:a3: 50:cb:69:98:8a:d2:37:c3:83:1d:ed:96:3c:6c:c6: 15:42:8b:55:4a:7f:d6:fe:9b:f9:3f:42:65:ef:37: e9:fb:52:b2:e9:47:85:35:78:43:99:a6:d8:66:95: e1:72:f8:31:41:ab:2c:d9:3e:93:e2:5b:b3:e7:31: 2a:ed:4d:fd:52:08:52:5f:ef:5b:ba:b4:73:c0:48: af:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:21:A9:1B:A3:2A:8C:DF:1B:E1:E8:FC:A0:39:82:B9:36:50:BF:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1c3b485d-5c20-3a8f-b4b2-973c69dd7e15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:13:86:65:2f:fe:14:ec:03:32:42:c7:e4:42:a7:62:5f:11: 0b:da:09:fa:29:57:00:15:ef:c2:6a:a5:cb:84:ee:36:64:de: 9f:ac:27:6a:db:91:a2:78:45:21:ed:5d:e5:97:75:32:b9:19: 4a:b8:02:7c:19:7a:cd:9d:eb:ce:24:f2:bf:ae:20:d7:34:00: 95:8d:dd:e7:d2:5d:bb:ab:e1:99:0b:ed:de:c9:67:f6:3f:c4: 4e:72:6f:68:a1:16:34:68:e5:d0:2a:b7:24:30:ad:ea:80:00: c8:73:50:17:66:9a:c8:99:e1:01:c8:89:0d:3d:68:71:f1:43: eb:d6:92:f7:fa:fa:5d:2d:cf:43:2d:2a:47:d4:49:ac:b2:77: 4f:cc:b0:23:a2:a8:e5:3c:9c:f5:28:90:79:77:0e:fe:aa:fb: f3:ca:99:bb:80:a3:9b:71:f9:14:36:6a:23:4c:c2:0d:2d:27: ad:82:37:23:d7:5d:37:11:77:e1:97:e1:dc:3a:ed:48:94:a3: 50:ab:a0:f8:51:bc:ee:94:97:a3:7f:e1:d8:00:8b:95:5f:8a: 1c:f4:43:02:dc:1e:0d:31:47:1e:c8:db:d2:5b:2f:98:4f:ee: a9:1c:50:43:57:7b:a4:c9:f3:8d:a4:97:9c:80:ef:5f:50:f7: a3:25:6d:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLQkRA4nF48uRy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk MmJmNzhjYzMtMGQ0NC00OTJhLTkyOTYtNjQ2N2Y4MmJkYzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtI7jS/sOqfhkmXgOVvy82EqGDthq/t5oGyR YDJlJfQ1Sdr1wrBaVn+T1VFW/Q9S5Btbv9qIlDGXDVYMzUunsitoNtE5BXq1FT7M AP/epyNJZdfQi2i5rDJucIuh19D/mBSspqJkt7rWO9v2PwpvSzX7I6UzdtD+pm8z VdgDR4bJ+rZDu7f2/QHjO2rngemAK9Y4tGYo4Cu7xMTRW+4D9YA3LtZKAw2vTshc eb/UXVK2B6NQy2mYitI3w4Md7ZY8bMYVQotVSn/W/pv5P0Jl7zfp+1Ky6UeFNXhD mabYZpXhcvgxQass2T6T4luz5zEq7U39UghSX+9burRzwEivvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIchqRujKozfG+Ho/KA5grk2UL+4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWMzYjQ4NWQtNWMyMC0z YThmLWI0YjItOTczYzY5ZGQ3ZTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrEXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMThmUv/hTsAzJCx+RCp2JfEQvaCfopVwAV78JqpcuE7jZk3p+sJ2rb kaJ4RSHtXeWXdTK5GUq4AnwZes2d684k8r+uINc0AJWN3efSXbur4ZkL7d7JZ/Y/ xE5yb2ihFjRo5dAqtyQwreqAAMhzUBdmmsiZ4QHIiQ09aHHxQ+vWkvf6+l0tz0Mt KkfUSayyd0/MsCOiqOU8nPUokHl3Dv6q+/PKmbuAo5tx+RQ2aiNMwg0tJ62CNyPX XTcRd+GX4dw67UiUo1CroPhRvO6Ul6N/4dgAi5Vfihz0QwLcHg0xRx7I29JbL5hP 7qkcUENXe6TJ842kl5yA719Q96MlbTU= -----END CERTIFICATE-----Generated at Sat Nov 1 12:36:47 2025 by rpki-client