$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1c9cb1d5-d582-3d73-bce5-d082f0742de9.roa File: 1c9cb1d5-d582-3d73-bce5-d082f0742de9.roa (raw, json) Hash identifier: vMjYfMzC0Wh2Z7UWXEBXU39DOwTtLH0YjRCheW7rP3s= Subject key identifier: 41:67:13:07:88:98:BB:9D:2E:30:15:43:8B:F4:03:63:BF:56:DD:3A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CCFC9C3C1957EE3250B380 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1c9cb1d5-d582-3d73-bce5-d082f0742de9.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 172.64.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cc:fc:9c:3c:19:57:ee:32:50:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=4c856cd7-d29a-4a8a-85cc-59d97fc9fddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:af:fe:c3:8e:10:f1:76:f1:75:82:d5:76:4a: 90:3c:ff:d4:55:24:1b:a8:7d:86:6c:67:d9:17:ac: 10:05:ba:e7:fb:bc:10:cd:87:ea:c1:60:e9:c2:98: 41:f7:e3:88:30:d8:24:8f:bf:91:c9:a5:62:54:61: 5b:b2:d6:90:01:f1:bd:08:55:40:a2:76:e1:78:0b: 6f:f1:bb:93:60:87:23:77:38:a5:4b:b7:73:c0:f6: 8a:5a:be:05:38:a9:15:fa:9c:eb:4d:f2:ee:78:2a: ef:53:c8:71:8d:43:63:39:06:56:4d:91:f4:ef:e9: 3e:7e:df:91:a9:6c:b5:86:93:28:d5:f5:a4:0d:93: 4f:30:bd:83:45:a5:10:62:1b:b1:73:bf:64:78:31: 5c:dc:6c:a5:a0:7b:ed:28:a2:9a:7e:d7:f4:5b:ca: a1:62:54:1a:3b:40:77:f9:d7:4b:29:76:72:7a:9e: dc:eb:9c:90:47:9c:71:eb:e1:98:7a:15:14:1a:ba: ab:ac:7b:e3:eb:2d:16:dd:dc:ef:40:ef:9b:ef:7b: 06:bd:fb:73:26:66:7b:28:b1:c2:e3:b3:a9:ad:38: b1:bc:5c:48:ed:3a:2c:3b:bf:b2:d9:62:48:46:03: f3:7b:9d:61:9d:13:a9:4c:1b:4d:11:2a:be:7f:cd: 3b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:67:13:07:88:98:BB:9D:2E:30:15:43:8B:F4:03:63:BF:56:DD:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1c9cb1d5-d582-3d73-bce5-d082f0742de9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:d9:50:85:49:e5:d8:a4:07:3b:b6:10:70:4e:a8:ca:5a:42: 8f:3e:a3:b8:18:2b:34:2e:33:30:bd:76:81:91:87:9e:fa:59: f2:53:fa:b8:78:05:e7:8e:6d:11:8e:37:3d:c8:46:1a:d5:8b: 2a:23:6f:13:04:7e:2a:96:70:4c:e3:00:4b:83:34:df:5a:49: 9e:47:17:0e:04:35:c5:96:ab:9e:b8:9b:e0:43:6e:81:df:ee: 7b:63:2c:a5:c0:18:f6:6d:dd:ca:c1:16:86:cd:fc:ce:05:ff: 32:a9:97:7e:07:07:56:a2:20:87:9e:ec:b4:44:84:7f:d0:fa: 61:32:e9:54:eb:da:90:a6:d8:53:9e:30:7c:73:d5:a6:84:61: 9b:55:9d:0d:72:3d:5f:da:1a:89:6c:df:97:ba:8c:bb:23:5a: e2:45:69:c0:89:66:5b:0c:eb:14:34:65:bf:07:e0:f4:78:13: 1d:b2:8c:cc:f3:68:6c:eb:0f:d3:14:68:d3:e6:8e:be:b3:8c: 8d:1d:7c:c9:b9:82:80:6b:89:80:49:9b:f9:17:38:ad:f1:aa: 15:41:3b:12:76:d2:c2:cb:1a:97:fd:b4:4d:a6:5c:4b:9a:3f: 9d:f9:40:2b:86:0a:bb:2a:41:ad:97:94:b2:43:b5:28:25:38: 78:93:5e:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzPycPBlX7jJQs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk NGM4NTZjZDctZDI5YS00YThhLTg1Y2MtNTlkOTdmYzlmZGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAla/+w44Q8XbxdYLVdkqQPP/UVSQbqH2GbGfZ F6wQBbrn+7wQzYfqwWDpwphB9+OIMNgkj7+RyaViVGFbstaQAfG9CFVAonbheAtv 8buTYIcjdzilS7dzwPaKWr4FOKkV+pzrTfLueCrvU8hxjUNjOQZWTZH07+k+ft+R qWy1hpMo1fWkDZNPML2DRaUQYhuxc79keDFc3GyloHvtKKKaftf0W8qhYlQaO0B3 +ddLKXZyep7c65yQR5xx6+GYehUUGrqrrHvj6y0W3dzvQO+b73sGvftzJmZ7KLHC 47OprTixvFxI7TosO7+y2WJIRgPze51hnROpTBtNESq+f807XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFnEweImLudLjAVQ4v0A2O/Vt06MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWM5Y2IxZDUtZDU4Mi0z ZDczLWJjZTUtZDA4MmYwNzQyZGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArECzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvZUIVJ5dikBzu2EHBOqMpaQo8+o7gYKzQuMzC9doGRh576WfJT+rh4 BeeObRGONz3IRhrViyojbxMEfiqWcEzjAEuDNN9aSZ5HFw4ENcWWq564m+BDboHf 7ntjLKXAGPZt3crBFobN/M4F/zKpl34HB1aiIIee7LREhH/Q+mEy6VTr2pCm2FOe MHxz1aaEYZtVnQ1yPV/aGols35e6jLsjWuJFacCJZlsM6xQ0Zb8H4PR4Ex2yjMzz aGzrD9MUaNPmjr6zjI0dfMm5goBriYBJm/kXOK3xqhVBOxJ20sLLGpf9tE2mXEua P535QCuGCrsqQa2XlLJDtSglOHiTXhk= -----END CERTIFICATE-----Generated at Sat Nov 1 12:31:14 2025 by rpki-client