$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2896349d-d866-3aca-a14c-16a1b5220e33.roa File: 2896349d-d866-3aca-a14c-16a1b5220e33.roa (raw, json) Hash identifier: 5M/7crTl+JRtC8QYIR0XLo0IQGleRAw//NIhYDV0vJ8= Subject key identifier: 45:A3:E9:81:40:57:B6:3A:04:AD:E2:6B:26:2D:C5:39:1B:0D:A5:C7 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA9327F4F57707D5B791948C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2896349d-d866-3aca-a14c-16a1b5220e33.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.65.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:7f:4f:57:70:7d:5b:79:19:48:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=9714d477-f8e2-4fb3-9989-cd1403ed7ca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e7:a9:65:55:36:16:bb:84:7c:b3:b1:27:e5: d0:2b:a4:be:15:1f:01:25:b3:fc:7a:59:07:f5:d7: ae:47:dc:5c:f5:48:94:0a:b5:5b:17:4c:97:d6:e5: f3:99:b8:0c:23:cc:8d:64:78:bc:0c:b1:04:dc:10: e3:60:90:fb:94:21:5d:f9:ea:84:25:1c:aa:44:b6: ab:aa:f7:38:92:5d:e0:72:70:dc:2b:0c:6f:48:94: cd:42:c4:85:33:c9:3c:72:b0:de:60:26:da:67:05: 31:7c:52:05:32:e7:18:60:14:8c:80:8d:28:ff:ce: a9:d4:cd:1d:8d:11:75:54:ba:f1:23:37:30:13:c0: 1e:15:25:eb:4c:c8:ac:8e:ce:c5:b4:fe:64:2c:3b: a5:bf:8f:74:22:d1:02:70:68:3a:78:dd:55:32:ed: 14:9f:bc:81:8f:af:07:c2:e1:6e:e7:2f:f0:87:9f: a1:84:58:59:10:f5:31:b3:89:26:32:ad:11:e2:80: f9:ee:5f:43:8f:bd:c9:72:99:d5:94:06:75:2f:ae: 2f:91:41:db:fd:52:b8:a2:95:08:c7:11:f1:de:64: a1:d5:95:d8:5c:7d:27:b5:1b:2a:f6:9d:88:e4:20: c3:5c:fc:4b:21:08:f5:5f:1c:b9:18:56:ff:e3:ce: 1f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A3:E9:81:40:57:B6:3A:04:AD:E2:6B:26:2D:C5:39:1B:0D:A5:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2896349d-d866-3aca-a14c-16a1b5220e33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.65.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:34:bf:1d:d7:8c:7d:24:bb:9d:39:71:46:c0:13:98:74:60: d7:f8:25:ae:7e:48:be:2f:98:a8:88:bc:7f:73:58:83:73:ec: 93:b3:22:15:9a:79:7f:79:ae:bb:dd:fb:2d:ea:f2:b4:03:78: 8a:54:c6:8d:87:64:d8:96:c6:0b:62:21:07:2e:7d:69:45:b8: 3f:f0:ca:17:3c:19:07:d2:78:36:fd:a2:35:d9:b3:40:56:54: e1:59:95:a1:c2:31:3e:b2:99:86:60:ff:d4:29:09:ab:fe:a0: bb:4e:17:48:76:c1:d6:82:1e:7d:21:93:35:00:31:8d:b9:96: ff:c3:76:60:77:ad:03:00:e9:11:7f:fd:8b:1f:c9:c2:70:00: 44:c3:fc:f3:21:91:ce:a6:38:f2:c5:c1:4c:4e:de:56:4a:e2: 62:d8:09:0a:e4:e4:8b:44:98:46:6e:d9:2d:f4:be:4d:ec:01: 45:c0:fa:ca:22:3a:de:60:ea:e3:d7:a8:19:56:e7:ed:e1:54: 0e:09:52:c7:e7:85:15:be:00:59:14:94:bc:27:41:c2:0f:aa: 50:76:e6:4f:57:00:2f:81:bb:10:56:b3:97:30:92:c7:06:0d: 5f:54:9f:31:3e:93:b9:2b:34:95:82:06:b2:0f:cd:ac:5e:c4: ee:bd:d4:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMn9PV3B9W3kZSMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk OTcxNGQ0NzctZjhlMi00ZmIzLTk5ODktY2QxNDAzZWQ3Y2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOepZVU2FruEfLOxJ+XQK6S+FR8BJbP8elkH 9deuR9xc9UiUCrVbF0yX1uXzmbgMI8yNZHi8DLEE3BDjYJD7lCFd+eqEJRyqRLar qvc4kl3gcnDcKwxvSJTNQsSFM8k8crDeYCbaZwUxfFIFMucYYBSMgI0o/86p1M0d jRF1VLrxIzcwE8AeFSXrTMisjs7FtP5kLDulv490ItECcGg6eN1VMu0Un7yBj68H wuFu5y/wh5+hhFhZEPUxs4kmMq0R4oD57l9Dj73JcpnVlAZ1L64vkUHb/VK4opUI xxHx3mSh1ZXYXH0ntRsq9p2I5CDDXPxLIQj1Xxy5GFb/484fWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWj6YFAV7Y6BK3iayYtxTkbDaXHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjg5NjM0OWQtZDg2Ni0z YWNhLWExNGMtMTZhMWI1MjIwZTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQ0vx3XjH0ku505cUbAE5h0YNf4Ja5+SL4vmKiIvH9zWINz7JOzIhWa eX95rrvd+y3q8rQDeIpUxo2HZNiWxgtiIQcufWlFuD/wyhc8GQfSeDb9ojXZs0BW VOFZlaHCMT6ymYZg/9QpCav+oLtOF0h2wdaCHn0hkzUAMY25lv/DdmB3rQMA6RF/ /YsfycJwAETD/PMhkc6mOPLFwUxO3lZK4mLYCQrk5ItEmEZu2S30vk3sAUXA+soi Ot5g6uPXqBlW5+3hVA4JUsfnhRW+AFkUlLwnQcIPqlB25k9XAC+BuxBWs5cwkscG DV9UnzE+k7krNJWCBrIPzaxexO691CE= -----END CERTIFICATE-----Generated at Sat Nov 1 12:31:02 2025 by rpki-client