$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/20cb3e29-2f74-33d1-bc48-09429f1d18ba.roa File: 20cb3e29-2f74-33d1-bc48-09429f1d18ba.roa (raw, json) Hash identifier: JpC+/bwIkQK0i08CTp2wVuGBAM6zq35eftQvP8rwxqo= Subject key identifier: AA:1F:27:0D:3B:39:F3:64:C4:B3:A5:AC:11:3D:2B:B4:3C:98:42:99 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BABFD360EED61B7B8BAB2FB20 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/20cb3e29-2f74-33d1-bc48-09429f1d18ba.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.69.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:36:0e:ed:61:b7:b8:ba:b2:fb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=9823be2c-3047-4fde-9e7a-8b7619aed10f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:32:cf:6d:38:06:dc:49:cd:18:9c:0e:bf:b1: 8c:eb:5f:d7:f2:da:e3:b5:60:bb:cb:cc:19:53:09: 82:ac:c8:9f:00:38:6c:27:47:9f:9f:9b:56:13:25: 64:16:6e:14:2c:69:43:bb:d6:30:1e:43:8c:f7:d1: eb:ee:f2:0a:ec:ea:20:72:a5:40:cb:62:0b:1a:83: f5:da:19:f2:38:db:54:58:9e:03:be:fb:9b:cb:cf: 0d:16:eb:0f:4e:07:52:9e:c0:68:9f:e0:5a:47:87: 57:47:5b:02:22:22:63:76:7b:b5:36:01:e8:ca:17: 86:7b:5b:9e:8f:43:03:f5:22:33:bb:8d:b3:55:0f: 4b:d2:66:2e:31:87:a7:93:bc:63:f8:41:b2:88:cb: fa:e4:21:6d:bb:cc:be:f8:c5:9d:6c:b4:23:9f:8d: 06:31:d7:8f:1a:91:78:82:bb:42:59:bc:0f:8c:bb: 3b:fc:57:52:33:61:e8:8a:4f:63:83:6b:d5:66:66: 90:0d:66:70:bd:47:bf:06:45:7b:b9:af:b4:7c:62: 71:a9:4c:9a:a3:8f:e8:c0:ef:d9:ab:94:aa:e6:a1: 85:c7:fd:ce:00:69:c1:bd:1f:d8:b8:d0:5c:19:2d: 1d:3f:6a:5c:73:3f:72:47:37:50:f6:54:98:16:22: 8a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:1F:27:0D:3B:39:F3:64:C4:B3:A5:AC:11:3D:2B:B4:3C:98:42:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/20cb3e29-2f74-33d1-bc48-09429f1d18ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:2d:a0:ae:bf:f4:58:52:18:f8:d0:04:10:95:e6:c4:70:a5: 4c:2e:c4:47:76:b3:6a:18:c2:a7:9c:ec:46:cf:19:61:f1:63: 7f:7a:86:7d:3e:13:4c:79:78:52:67:99:57:84:22:b3:98:dc: 62:43:a4:5b:14:a6:77:e0:37:aa:19:b2:f6:5d:95:98:1f:09: b8:6d:bf:ac:13:f9:6e:16:8a:66:5a:4d:6c:d1:85:c5:91:07: ed:be:ae:9f:eb:01:10:2a:d4:d5:e0:84:0c:17:56:35:0b:8f: 7b:f1:f7:43:45:e4:81:e7:1d:b1:69:bc:01:c6:46:cf:30:e2: b5:ee:2b:3c:6f:1e:94:4e:9d:ba:5b:f5:cb:3f:ba:4d:4d:05: 5f:35:87:82:19:7d:ea:1d:0a:db:a3:07:82:2c:a6:0e:d0:8d: ad:5b:f9:48:fd:68:bc:5b:ba:37:93:e8:57:99:20:c3:7f:8c: a4:bb:86:f2:15:92:55:a9:2a:98:62:8b:e1:b2:73:8d:7c:0a: df:28:b8:0e:4d:93:50:7a:60:c9:bf:f4:ee:7a:40:68:d6:21: 66:c2:5b:f8:af:30:31:fa:a9:89:d5:52:96:6c:03:5d:43:49: 53:52:87:97:f4:90:71:9e:27:d8:1d:5f:27:76:8a:59:8a:75: f7:14:9e:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/TYO7WG3uLqy+yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk OTgyM2JlMmMtMzA0Ny00ZmRlLTllN2EtOGI3NjE5YWVkMTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zLPbTgG3EnNGJwOv7GM61/X8trjtWC7y8wZ UwmCrMifADhsJ0efn5tWEyVkFm4ULGlDu9YwHkOM99Hr7vIK7OogcqVAy2ILGoP1 2hnyONtUWJ4Dvvuby88NFusPTgdSnsBon+BaR4dXR1sCIiJjdnu1NgHoyheGe1ue j0MD9SIzu42zVQ9L0mYuMYenk7xj+EGyiMv65CFtu8y++MWdbLQjn40GMdePGpF4 grtCWbwPjLs7/FdSM2Hoik9jg2vVZmaQDWZwvUe/BkV7ua+0fGJxqUyao4/owO/Z q5Sq5qGFx/3OAGnBvR/YuNBcGS0dP2pccz9yRzdQ9lSYFiKK0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKofJw07OfNkxLOlrBE9K7Q8mEKZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjBjYjNlMjktMmY3NC0z M2QxLWJjNDgtMDk0MjlmMWQxOGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMtoK6/9FhSGPjQBBCV5sRwpUwuxEd2s2oYwqec7EbPGWHxY396hn0+ E0x5eFJnmVeEIrOY3GJDpFsUpnfgN6oZsvZdlZgfCbhtv6wT+W4WimZaTWzRhcWR B+2+rp/rARAq1NXghAwXVjULj3vx90NF5IHnHbFpvAHGRs8w4rXuKzxvHpROnbpb 9cs/uk1NBV81h4IZfeodCtujB4Ispg7Qja1b+Uj9aLxbujeT6FeZIMN/jKS7hvIV klWpKphii+Gyc418Ct8ouA5Nk1B6YMm/9O56QGjWIWbCW/ivMDH6qYnVUpZsA11D SVNSh5f0kHGeJ9gdXyd2ilmKdfcUnk0= -----END CERTIFICATE-----Generated at Sat Nov 1 12:30:43 2025 by rpki-client