$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/23b42f68-c776-3bc4-ab18-251501f596c9.roa File: 23b42f68-c776-3bc4-ab18-251501f596c9.roa (raw, json) Hash identifier: 5TWi4qaKN/r3pAGy+Aq5Zj5o61VNDqFf0dbPpHoI/QE= Subject key identifier: EF:4D:78:DD:A7:FB:0A:69:38:1E:5E:09:6F:1C:EC:A9:CB:AC:68:72 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD019F5E357AA6C58EB900 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/23b42f68-c776-3bc4-ab18-251501f596c9.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 172.64.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:01:9f:5e:35:7a:a6:c5:8e:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=2d9d1f4e-52b7-4d44-853a-d46c5bc9f6ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:21:6b:05:82:e4:97:89:86:24:0d:5d:47:bc: 89:df:5f:91:23:0e:7f:25:f1:f6:0b:fc:ff:c3:f6: 6a:78:2e:72:52:c3:76:e3:d3:a6:20:9c:68:c5:0f: c7:c0:5f:8c:b6:0a:03:40:b2:a5:13:37:74:98:d0: 65:ce:88:e5:2a:91:f6:10:13:3b:81:2e:18:de:2d: 95:48:a8:14:5c:c4:bf:5d:04:e8:9d:6c:7e:b0:56: cd:c8:a9:2e:63:17:87:e4:c5:4d:80:58:56:0f:25: 3d:0c:2a:17:35:41:a8:67:31:b5:d4:6f:18:76:ef: d8:f8:d1:7b:63:56:70:c7:1c:4c:21:40:5a:8c:e1: 4a:0e:3e:0a:5c:23:b0:04:77:2a:91:86:90:30:a5: a8:25:51:e9:2a:cc:38:5c:1b:65:93:80:fb:48:6f: 9e:ab:a0:c9:33:93:9d:af:51:02:99:e5:3d:1d:c3: f3:73:a9:31:21:6f:98:b2:36:5f:78:a3:51:98:b4: 32:e4:8f:76:65:60:fb:5c:0d:f3:0b:e5:d2:ac:1c: 2d:cc:14:d8:e6:f3:22:d2:b8:04:30:d3:b9:87:8d: 94:22:54:90:20:cc:32:90:54:61:93:4a:98:42:e4: 75:e9:50:ce:b1:38:e9:25:2d:c5:54:db:fa:f1:61: 2d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:4D:78:DD:A7:FB:0A:69:38:1E:5E:09:6F:1C:EC:A9:CB:AC:68:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/23b42f68-c776-3bc4-ab18-251501f596c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:35:fb:9b:9c:4e:2c:62:45:dc:cd:e0:f9:23:92:4d:7f:18: 12:9e:c8:41:18:2d:06:a7:74:ae:ea:27:fb:d9:d7:3c:07:71: d6:39:0e:68:89:ee:fa:ff:86:fb:a9:db:27:fd:68:a3:03:8b: d8:1e:1c:51:73:88:3b:7a:09:d4:7d:58:ee:28:6a:5c:cc:fd: d8:be:5f:52:a3:40:2f:b0:80:a2:fb:29:df:52:0e:0c:97:02: 5d:43:00:80:2f:20:a3:4f:41:58:4b:8b:61:c2:b9:b2:31:59: de:ce:9e:b9:93:38:14:91:1b:2b:11:1b:c4:8f:0d:78:bc:c7: 11:0b:db:08:b8:21:01:b5:f2:80:31:3f:06:bc:67:b5:fb:fc: 91:13:e9:f4:5b:b8:70:81:84:54:d5:ed:9e:be:00:99:50:f4: fb:44:71:91:90:77:1a:4c:c5:82:fb:1a:a2:54:6d:0f:a8:88: 8f:dc:f0:45:93:4b:2b:45:3a:9f:b2:e9:c8:5a:a9:90:b7:a8: 80:40:32:49:f5:9b:8a:a3:e7:44:27:e0:b3:77:c4:c4:6c:71: 16:05:4d:18:08:aa:bb:72:2a:7c:07:ae:ed:67:b8:6b:32:7e: 72:02:c6:ab:aa:74:22:dd:95:e9:78:79:a0:8a:d0:4b:ef:10: b4:af:58:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzQGfXjV6psWOuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk MmQ5ZDFmNGUtNTJiNy00ZDQ0LTg1M2EtZDQ2YzViYzlmNmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiFrBYLkl4mGJA1dR7yJ31+RIw5/JfH2C/z/ w/ZqeC5yUsN249OmIJxoxQ/HwF+MtgoDQLKlEzd0mNBlzojlKpH2EBM7gS4Y3i2V SKgUXMS/XQTonWx+sFbNyKkuYxeH5MVNgFhWDyU9DCoXNUGoZzG11G8Ydu/Y+NF7 Y1ZwxxxMIUBajOFKDj4KXCOwBHcqkYaQMKWoJVHpKsw4XBtlk4D7SG+eq6DJM5Od r1ECmeU9HcPzc6kxIW+YsjZfeKNRmLQy5I92ZWD7XA3zC+XSrBwtzBTY5vMi0rgE MNO5h42UIlSQIMwykFRhk0qYQuR16VDOsTjpJS3FVNv68WEthwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO9NeN2n+wppOB5eCW8c7KnLrGhyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjNiNDJmNjgtYzc3Ni0z YmM0LWFiMTgtMjUxNTAxZjU5NmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEAoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE01+5ucTixiRdzN4Pkjkk1/GBKeyEEYLQandK7qJ/vZ1zwHcdY5DmiJ 7vr/hvup2yf9aKMDi9geHFFziDt6CdR9WO4oalzM/di+X1KjQC+wgKL7Kd9SDgyX Al1DAIAvIKNPQVhLi2HCubIxWd7OnrmTOBSRGysRG8SPDXi8xxEL2wi4IQG18oAx Pwa8Z7X7/JET6fRbuHCBhFTV7Z6+AJlQ9PtEcZGQdxpMxYL7GqJUbQ+oiI/c8EWT SytFOp+y6chaqZC3qIBAMkn1m4qj50Qn4LN3xMRscRYFTRgIqrtyKnwHru1nuGsy fnICxquqdCLdlel4eaCK0EvvELSvWAc= -----END CERTIFICATE-----Generated at Sun Nov 2 04:25:59 2025 by rpki-client