$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/21a06c61-744c-3dbb-806a-b91afc040fef.roa File: 21a06c61-744c-3dbb-806a-b91afc040fef.roa (raw, json) Hash identifier: 7hs5QwlnYzVSBvRdshDB0+DWgnu2A72fuZKKwMzu0FA= Subject key identifier: 59:B4:A2:14:EF:68:83:38:27:C6:FE:25:83:63:2D:E7:E0:F1:F7:93 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD0C107578E3FDEEC9BA40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/21a06c61-744c-3dbb-806a-b91afc040fef.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 172.69.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:0c:10:75:78:e3:fd:ee:c9:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=c10222cb-47ea-418d-b86b-8fc6699e6d82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:af:85:9d:38:26:05:bc:c5:ba:4f:9a:c2:e6: 4a:59:db:63:1f:3b:b1:38:1a:48:8a:65:d0:bc:f3: d4:0f:ea:ab:8d:83:34:62:7d:2e:a7:df:24:56:39: d6:c4:68:63:4d:b9:b1:7d:0a:79:9c:2c:18:0f:e1: af:c8:19:95:1b:68:8e:17:e9:8b:62:28:32:1f:e0: 2f:58:d3:26:24:8a:a3:0c:fb:44:58:d5:70:dd:ee: 33:e2:87:49:19:88:6b:8d:2a:85:8e:d0:8c:f2:7c: 7c:ed:e7:59:de:00:0f:45:a0:8f:b4:9b:4f:b2:a2: 46:18:54:9c:26:36:ae:fa:03:ca:dc:cc:df:c3:a7: f9:c9:3d:1c:2c:45:4b:2a:49:13:4a:db:d6:a5:ae: 6f:f9:7d:b8:2a:45:62:2d:b4:8e:15:80:71:72:a3: 86:9c:c1:1c:11:10:52:66:f8:95:4a:23:c5:31:d0: ba:13:be:4a:9f:03:4b:57:f7:d2:03:f2:c5:23:c1: 75:94:ea:1a:79:aa:6f:fa:66:b8:a4:ca:9f:26:e4: 32:74:ce:39:39:a9:af:95:7a:59:7a:6a:b8:32:4f: 4a:e9:87:d8:be:56:aa:dc:bd:a1:c5:e3:81:97:94: a2:cf:36:83:6f:9a:9c:c8:d7:48:cc:89:c0:be:20: 4b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B4:A2:14:EF:68:83:38:27:C6:FE:25:83:63:2D:E7:E0:F1:F7:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/21a06c61-744c-3dbb-806a-b91afc040fef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:f5:fc:c6:fb:38:40:47:0e:42:c9:e9:22:8b:8f:09:27:ee: 61:f3:ca:7c:c9:6e:d0:07:e5:55:30:3c:c9:5a:b0:01:f3:6a: ff:79:30:59:7f:ae:08:55:c6:15:78:21:91:6e:bb:4f:a7:79: dd:ea:8a:6d:3b:cb:53:37:db:19:d6:d0:a4:be:f7:e9:fc:fa: 98:fa:ed:a9:9f:36:55:84:b0:66:20:b1:91:02:95:d8:88:17: 4d:8f:3f:91:c3:20:fe:d0:cd:b2:12:77:ad:6d:2e:5f:a8:b4: 9c:c6:37:ed:76:ab:0e:d2:ee:29:7f:f0:57:d7:9d:84:f2:79: 53:cb:3d:bd:a9:45:0b:d6:dd:30:b0:f7:aa:bc:c4:23:79:2f: 1a:47:94:aa:67:80:35:94:07:6a:4a:a2:89:08:7b:12:e6:e3: ec:14:37:a3:67:0d:f0:80:df:9f:01:40:79:f4:40:8b:67:69: 39:ed:74:2e:bc:46:8f:37:88:04:b9:fd:31:9f:b6:e9:b6:71: 04:b9:bc:0f:66:de:0e:dc:65:e2:33:bf:4d:59:a6:fc:f3:26: d6:14:54:2e:99:e9:f6:20:16:96:90:b5:74:65:f9:22:0c:05: cb:d4:7c:7b:9a:93:0e:3d:53:25:0f:17:2a:ab:08:b3:44:d0: 7d:ec:14:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzQwQdXjj/e7JukAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk YzEwMjIyY2ItNDdlYS00MThkLWI4NmItOGZjNjY5OWU2ZDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoK+FnTgmBbzFuk+awuZKWdtjHzuxOBpIimXQ vPPUD+qrjYM0Yn0up98kVjnWxGhjTbmxfQp5nCwYD+GvyBmVG2iOF+mLYigyH+Av WNMmJIqjDPtEWNVw3e4z4odJGYhrjSqFjtCM8nx87edZ3gAPRaCPtJtPsqJGGFSc Jjau+gPK3Mzfw6f5yT0cLEVLKkkTStvWpa5v+X24KkViLbSOFYBxcqOGnMEcERBS ZviVSiPFMdC6E75KnwNLV/fSA/LFI8F1lOoaeapv+ma4pMqfJuQydM45OamvlXpZ emq4Mk9K6YfYvlaq3L2hxeOBl5SizzaDb5qcyNdIzInAviBLfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFm0ohTvaIM4J8b+JYNjLefg8feTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjFhMDZjNjEtNzQ0Yy0z ZGJiLTgwNmEtYjkxYWZjMDQwZmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEVyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/1/Mb7OEBHDkLJ6SKLjwkn7mHzynzJbtAH5VUwPMlasAHzav95MFl/ rghVxhV4IZFuu0+ned3qim07y1M32xnW0KS+9+n8+pj67amfNlWEsGYgsZECldiI F02PP5HDIP7QzbISd61tLl+otJzGN+12qw7S7il/8FfXnYTyeVPLPb2pRQvW3TCw 96q8xCN5LxpHlKpngDWUB2pKookIexLm4+wUN6NnDfCA358BQHn0QItnaTntdC68 Ro83iAS5/TGftum2cQS5vA9m3g7cZeIzv01ZpvzzJtYUVC6Z6fYgFpaQtXRl+SIM BcvUfHuakw49UyUPFyqrCLNE0H3sFCo= -----END CERTIFICATE-----Generated at Sat Nov 1 12:37:08 2025 by rpki-client