$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/20c7815d-0d8b-3d41-bfdb-338e530a6983.roa File: 20c7815d-0d8b-3d41-bfdb-338e530a6983.roa (raw, json) Hash identifier: p9zYEACyJ1MzQVBxzstvk0YDVST56ZudXY0cxFE06AE= Subject key identifier: 33:71:15:3A:20:3E:F7:EE:55:C6:03:94:E6:E5:A1:98:EB:BF:F4:9D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB02D08C8EC102F04B0B0FC00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/20c7815d-0d8b-3d41-bfdb-338e530a6983.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 172.69.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2d:08:c8:ec:10:2f:04:b0:b0:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=30dbd6f0-537c-4dbe-8441-27a795dea04c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:04:d7:5e:78:4d:52:1e:36:ae:07:59:e0:ab: 92:b2:12:21:40:b5:fa:53:80:4f:dc:87:35:ca:73: f5:b6:96:a8:17:67:60:a1:f9:71:4f:11:d2:5d:60: 86:1c:e5:37:65:5e:d6:2a:f8:40:04:eb:b8:ab:b6: 96:72:8f:b7:15:60:dd:59:29:8a:00:84:c1:33:a0: 3a:ab:b8:9c:58:d4:9c:b3:4e:a9:a7:0c:82:ad:ab: a7:43:8c:b7:30:20:de:04:c9:6a:11:c5:b4:55:e2: 6f:98:5c:e3:cd:12:4a:30:61:ea:b7:55:70:9f:fa: 97:0a:bd:92:e8:be:4d:a6:0f:0e:7f:0a:3e:65:79: ca:a8:25:2a:c0:70:19:cc:c6:65:f1:dd:69:66:1a: 01:c7:88:b2:e0:31:04:71:f1:d7:73:50:83:04:31: c7:1a:b6:53:ce:86:52:de:9c:a2:a4:c5:37:83:00: e7:e9:fb:42:a4:ef:13:ab:e2:95:d6:e0:b1:fc:b7: c7:d6:47:d4:a0:f7:83:4c:c0:a4:12:8b:b7:ca:5f: 31:2f:fc:73:83:3c:de:52:7a:29:f6:94:d5:e5:62: 08:7f:e2:0f:09:e4:e0:a3:96:1a:49:36:a9:b3:a8: 6b:f0:b5:5c:c4:ab:b7:94:57:c2:1d:93:21:3c:bd: ea:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:71:15:3A:20:3E:F7:EE:55:C6:03:94:E6:E5:A1:98:EB:BF:F4:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/20c7815d-0d8b-3d41-bfdb-338e530a6983.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:d8:ad:63:89:ff:53:70:c9:e8:9f:68:bb:02:85:20:b2:5f: d3:03:25:5e:fb:ac:e5:77:88:a3:b1:6c:62:bf:ff:9c:80:23: d7:f2:da:41:d9:e1:ee:6f:6a:0f:c0:e0:07:49:4a:26:fe:e8: f6:e7:81:90:41:e1:d2:a2:31:2f:c6:59:f2:74:a9:2b:af:0f: e4:19:47:3d:3b:37:c3:ce:6a:e3:e9:42:ee:2a:9c:53:af:47: 2d:66:6b:b8:3f:f1:62:7f:5e:8e:95:21:21:77:41:8a:ae:97: 2e:f2:9f:5f:a9:cc:f5:ae:e2:21:f5:e2:90:f9:50:84:e3:f5: ac:05:a4:30:15:0b:b8:03:1e:db:3c:f0:96:cd:fa:87:04:a9: fd:97:4f:71:24:20:41:32:f6:89:5e:74:0b:6f:23:ce:ba:d9: e3:74:1a:04:6c:a5:67:14:e1:40:4c:99:2a:ec:da:64:2e:8f: fa:57:9f:ab:3c:b0:6d:c6:ff:d0:06:32:25:d3:60:73:2a:9d: e6:b0:17:59:89:b9:ee:41:fc:c7:93:c8:31:46:46:50:79:dd: eb:2d:2c:54:25:d1:47:a2:e2:66:2c:19:1f:d8:a6:23:3f:f9: 19:b1:ab:80:02:1a:57:14:93:70:a8:e2:51:a2:31:ab:2a:84: 42:c3:8b:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLQjI7BAvBLCw/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk MzBkYmQ2ZjAtNTM3Yy00ZGJlLTg0NDEtMjdhNzk1ZGVhMDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QTXXnhNUh42rgdZ4KuSshIhQLX6U4BP3Ic1 ynP1tpaoF2dgoflxTxHSXWCGHOU3ZV7WKvhABOu4q7aWco+3FWDdWSmKAITBM6A6 q7icWNScs06ppwyCraunQ4y3MCDeBMlqEcW0VeJvmFzjzRJKMGHqt1Vwn/qXCr2S 6L5Npg8Ofwo+ZXnKqCUqwHAZzMZl8d1pZhoBx4iy4DEEcfHXc1CDBDHHGrZTzoZS 3pyipMU3gwDn6ftCpO8Tq+KV1uCx/LfH1kfUoPeDTMCkEou3yl8xL/xzgzzeUnop 9pTV5WIIf+IPCeTgo5YaSTaps6hr8LVcxKu3lFfCHZMhPL3qMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNxFTogPvfuVcYDlObloZjrv/SdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjBjNzgxNWQtMGQ4Yi0z ZDQxLWJmZGItMzM4ZTUzMGE2OTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEXpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPYrWOJ/1NwyeifaLsChSCyX9MDJV77rOV3iKOxbGK//5yAI9fy2kHZ 4e5vag/A4AdJSib+6PbngZBB4dKiMS/GWfJ0qSuvD+QZRz07N8POauPpQu4qnFOv Ry1ma7g/8WJ/Xo6VISF3QYquly7yn1+pzPWu4iH14pD5UITj9awFpDAVC7gDHts8 8JbN+ocEqf2XT3EkIEEy9oledAtvI8662eN0GgRspWcU4UBMmSrs2mQuj/pXn6s8 sG3G/9AGMiXTYHMqneawF1mJue5B/MeTyDFGRlB53estLFQl0Uei4mYsGR/YpiM/ +Rmxq4ACGlcUk3Co4lGiMasqhELDiw8= -----END CERTIFICATE-----Generated at Sat Nov 1 12:30:54 2025 by rpki-client