$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/22c71e1e-4d5c-3018-b643-ca10d5260796.roa File: 22c71e1e-4d5c-3018-b643-ca10d5260796.roa (raw, json) Hash identifier: tbSDO1YeoYWjyda0A9a6mguWcnoan5r9SASEMaFwCNY= Subject key identifier: 4F:87:3C:9E:44:B5:1B:B4:70:79:E1:24:97:BC:4D:36:49:B6:35:FA Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA9327FC58407D8FAEDB2D000 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/22c71e1e-4d5c-3018-b643-ca10d5260796.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.65.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:7f:c5:84:07:d8:fa:ed:b2:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=9844974b-3857-42ad-ae0b-ac14b6d9b727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ea:2f:1b:e4:f4:8d:f9:53:b3:2c:79:29:90: 5c:9f:53:32:8c:98:1a:39:15:a6:b3:9b:eb:5e:2a: 38:49:ee:7e:b8:5b:e5:a6:51:84:01:d2:ba:29:4b: 98:06:56:1d:b8:f9:52:18:14:37:3b:45:fe:52:6e: e7:60:b6:82:21:24:59:99:a1:4a:24:18:94:68:b9: e8:5b:e0:30:6c:df:6c:ab:13:63:a1:b4:bd:09:81: af:72:7f:9b:0f:0a:81:68:0e:b5:af:ca:2f:d9:33: e4:76:30:c7:08:28:95:5d:ee:9c:21:43:5a:b7:55: bd:23:d0:2a:f2:4a:52:e7:d2:30:56:a0:69:ce:3e: f1:a8:04:11:51:5f:39:ea:39:01:78:3a:e4:f4:08: 7e:9b:8a:4e:c1:e9:74:b3:40:16:88:e5:b5:45:f3: fa:16:ec:b7:ac:5f:6f:04:6e:5b:e0:3c:c5:db:66: 87:3d:63:36:7a:76:89:d4:3b:f7:6c:a7:59:03:2b: b7:23:c4:4f:76:bf:0d:07:29:5c:7c:7b:eb:44:5c: b5:53:ab:ad:a8:30:66:e1:cf:35:a3:53:26:93:0f: a6:b2:97:59:09:56:d3:12:10:34:59:f3:cc:ed:e9: 2b:92:46:53:f1:54:84:3b:44:04:0a:75:6e:5d:02: 5f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:87:3C:9E:44:B5:1B:B4:70:79:E1:24:97:BC:4D:36:49:B6:35:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/22c71e1e-4d5c-3018-b643-ca10d5260796.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.65.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:e8:d4:df:81:56:fc:3a:60:7d:44:41:b7:ee:29:c8:66:7b: 61:91:ae:18:9d:16:05:b7:dd:87:5c:69:32:aa:b3:46:e0:ec: 0a:31:65:2b:b9:cb:75:cd:62:2c:08:a4:a8:e5:92:59:b4:1b: bd:85:8b:a7:e3:27:97:ef:2c:49:44:e9:85:25:31:ac:2f:ec: 26:81:49:04:73:eb:a7:34:10:4c:dd:0c:82:2d:c8:2b:3b:f1: 70:f2:dd:e8:bc:05:a8:83:c8:ec:9b:62:ce:e0:48:e0:b6:6a: 78:1f:0b:68:5a:8a:c6:2b:ba:0d:ed:1b:b8:ed:f1:ce:69:d1: f5:80:80:08:a9:f3:8a:10:87:a8:51:5c:af:25:75:12:ba:41: c7:9e:e3:17:ba:69:9d:3c:76:e9:ab:75:b1:57:97:86:e3:b6: 9a:8e:b6:07:21:88:5d:00:bc:4d:55:1d:2e:63:30:69:ba:b4: 3f:97:18:38:c1:df:e7:c0:e7:60:59:c2:09:48:5f:f1:0a:c7: d6:c7:c6:ed:fc:41:db:73:9f:81:28:3e:c9:09:80:fe:a2:f4: 56:8d:5d:43:94:e0:80:ab:3f:24:5c:aa:f2:01:9c:95:44:c0: ef:64:8b:e1:d8:e8:1d:27:33:e3:0f:26:8f:7a:12:eb:bb:d9: b5:7c:3b:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMn/FhAfY+u2y0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk OTg0NDk3NGItMzg1Ny00MmFkLWFlMGItYWMxNGI2ZDliNzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOovG+T0jflTsyx5KZBcn1MyjJgaORWms5vr Xio4Se5+uFvlplGEAdK6KUuYBlYduPlSGBQ3O0X+Um7nYLaCISRZmaFKJBiUaLno W+AwbN9sqxNjobS9CYGvcn+bDwqBaA61r8ov2TPkdjDHCCiVXe6cIUNat1W9I9Aq 8kpS59IwVqBpzj7xqAQRUV856jkBeDrk9Ah+m4pOwel0s0AWiOW1RfP6Fuy3rF9v BG5b4DzF22aHPWM2enaJ1Dv3bKdZAyu3I8RPdr8NBylcfHvrRFy1U6utqDBm4c81 o1Mmkw+mspdZCVbTEhA0WfPM7ekrkkZT8VSEO0QECnVuXQJfjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+HPJ5EtRu0cHnhJJe8TTZJtjX6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjJjNzFlMWUtNGQ1Yy0z MDE4LWI2NDMtY2ExMGQ1MjYwNzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKPo1N+BVvw6YH1EQbfuKchme2GRrhidFgW33YdcaTKqs0bg7AoxZSu5 y3XNYiwIpKjlklm0G72Fi6fjJ5fvLElE6YUlMawv7CaBSQRz66c0EEzdDIItyCs7 8XDy3ei8BaiDyOybYs7gSOC2angfC2haisYrug3tG7jt8c5p0fWAgAip84oQh6hR XK8ldRK6Qcee4xe6aZ08dumrdbFXl4bjtpqOtgchiF0AvE1VHS5jMGm6tD+XGDjB 3+fA52BZwglIX/EKx9bHxu38Qdtzn4EoPskJgP6i9FaNXUOU4ICrPyRcqvIBnJVE wO9ki+HY6B0nM+MPJo96Euu72bV8O/Q= -----END CERTIFICATE-----Generated at Sat Nov 1 12:36:54 2025 by rpki-client