$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/28695044-fdc2-3f03-bb5e-7c71fef2f129.roa File: 28695044-fdc2-3f03-bb5e-7c71fef2f129.roa (raw, json) Hash identifier: Hi+crtY1grVC87CATcwJg219ae01dbXCZtXmO2UKA7A= Subject key identifier: 34:28:3B:5D:45:8B:CF:8D:AA:B0:C1:2C:4A:38:40:40:F2:C7:E2:A1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA9328CC94AE53FEE9D76B4C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/28695044-fdc2-3f03-bb5e-7c71fef2f129.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.65.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:8c:c9:4a:e5:3f:ee:9d:76:b4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=f602a5de-1d79-4e0c-a5ea-a7e5a4b5348e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:52:81:75:4f:e0:e9:b7:3d:e0:04:69:42:77: 8c:4c:20:9a:b9:87:f8:d7:1a:80:7a:6f:d1:a0:b6: 5c:41:64:86:4c:33:13:45:0c:cf:18:7f:05:7f:c6: dc:1f:75:65:5c:f7:18:b1:ed:5d:2e:65:10:ff:c5: b8:c5:1e:d8:78:a7:84:b8:5b:7d:d3:ec:0d:f3:02: ff:ec:56:7a:57:30:c8:a1:c7:c5:84:d7:85:19:9f: cc:40:c4:25:9d:e8:6d:e3:4e:fc:5c:ec:b9:b2:b9: a8:34:dc:06:5d:b2:c9:84:8b:b1:f6:72:2c:db:ec: d0:5c:b6:b1:a2:0b:87:1c:21:7b:ea:31:c4:19:82: 53:cf:63:f9:68:4d:fe:e6:c1:71:13:cb:32:d3:ea: 9b:15:ca:8d:e2:97:5a:6d:71:5a:71:23:1a:bf:40: 81:0e:00:2f:a6:96:a0:47:34:b7:8c:2a:4f:2b:99: c7:c4:66:a0:9b:4f:63:d7:c1:fa:ad:04:30:c6:2f: 00:ca:17:88:35:6d:75:65:75:7d:6c:c1:52:21:2b: 3d:bc:68:72:27:52:02:36:c5:fe:2e:f2:c0:aa:0b: 39:a4:22:9d:be:5f:4a:1a:c9:21:cb:77:67:c5:c5: 8e:ce:be:ab:18:df:a6:f4:3f:e9:eb:34:bb:84:00: ea:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:28:3B:5D:45:8B:CF:8D:AA:B0:C1:2C:4A:38:40:40:F2:C7:E2:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/28695044-fdc2-3f03-bb5e-7c71fef2f129.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.65.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:61:42:28:d4:0a:1c:3b:3c:d3:2c:64:ef:de:d9:1c:d5:30: 7a:36:18:4d:40:b0:28:53:c6:a4:d9:09:a2:3b:7f:90:c2:c6: 81:07:38:3d:f6:9e:0e:97:af:51:51:49:26:37:58:c7:b3:c5: 5c:e3:fe:8a:ab:c9:97:11:e5:0a:73:25:05:43:9f:ec:35:5a: b3:8e:97:0d:0e:4f:a5:6b:4a:6f:21:55:a4:20:e1:2c:36:4d: 23:81:f2:23:c3:de:12:16:5f:a5:64:42:10:fa:fb:16:33:c7: 4f:9d:54:a8:16:03:1f:67:45:91:1b:6c:79:49:dd:fa:21:f1: 4e:0b:e0:c4:ad:ce:c2:c7:18:47:fd:52:33:32:b3:dd:8f:23: c9:b5:2a:4d:bc:de:5a:f8:60:c3:19:c2:22:94:76:4e:90:bb: d3:85:b8:c8:99:b8:ea:69:22:5b:8f:ec:5f:44:47:23:60:ee: b8:7e:0d:27:f3:46:a6:de:95:e0:27:c1:80:3a:a8:66:fb:11: 46:38:22:a9:ed:04:74:45:d3:ae:44:6f:c6:2b:4e:b7:6a:39: 3b:0d:a4:0c:6b:6a:54:99:0f:01:7c:5a:ff:57:a2:8e:53:9b: f5:52:2c:0d:5c:1b:67:2c:33:46:c0:05:40:00:1b:cd:f3:1f: 4f:f5:fe:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMozJSuU/7p12tMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk ZjYwMmE1ZGUtMWQ3OS00ZTBjLWE1ZWEtYTdlNWE0YjUzNDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVKBdU/g6bc94ARpQneMTCCauYf41xqAem/R oLZcQWSGTDMTRQzPGH8Ff8bcH3VlXPcYse1dLmUQ/8W4xR7YeKeEuFt90+wN8wL/ 7FZ6VzDIocfFhNeFGZ/MQMQlneht4078XOy5srmoNNwGXbLJhIux9nIs2+zQXLax oguHHCF76jHEGYJTz2P5aE3+5sFxE8sy0+qbFcqN4pdabXFacSMav0CBDgAvppag RzS3jCpPK5nHxGagm09j18H6rQQwxi8AyheINW11ZXV9bMFSISs9vGhyJ1ICNsX+ LvLAqgs5pCKdvl9KGskhy3dnxcWOzr6rGN+m9D/p6zS7hADqYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQoO11Fi8+NqrDBLEo4QEDyx+KhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjg2OTUwNDQtZmRjMi0z ZjAzLWJiNWUtN2M3MWZlZjJmMTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEFQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhhQijUChw7PNMsZO/e2RzVMHo2GE1AsChTxqTZCaI7f5DCxoEHOD32 ng6Xr1FRSSY3WMezxVzj/oqryZcR5QpzJQVDn+w1WrOOlw0OT6VrSm8hVaQg4Sw2 TSOB8iPD3hIWX6VkQhD6+xYzx0+dVKgWAx9nRZEbbHlJ3foh8U4L4MStzsLHGEf9 UjMys92PI8m1Kk283lr4YMMZwiKUdk6Qu9OFuMiZuOppIluP7F9ERyNg7rh+DSfz RqbeleAnwYA6qGb7EUY4IqntBHRF065Eb8YrTrdqOTsNpAxralSZDwF8Wv9Xoo5T m/VSLA1cG2csM0bABUAAG83zH0/1/uE= -----END CERTIFICATE-----Generated at Sat Nov 1 12:32:49 2025 by rpki-client