$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2d572a85-d2e9-3c92-a7ea-9412eee9750b.roa File: 2d572a85-d2e9-3c92-a7ea-9412eee9750b.roa (raw, json) Hash identifier: LjG8m8aTo9ZVdFz85Y3blfXFe46QpJUAiGyruNAcrYI= Subject key identifier: 92:8F:CE:03:C5:A6:C9:67:F8:5A:AB:3D:C3:6D:11:E4:C1:05:D5:88 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BABFD337BBCACDDDBDA6E0960 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2d572a85-d2e9-3c92-a7ea-9412eee9750b.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.69.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:33:7b:bc:ac:dd:db:da:6e:09:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=e3f21623-e4fc-4d50-b517-72c1382ad724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d5:d4:96:fe:c9:7c:3e:60:38:19:94:92:9c: 75:68:dd:2d:d0:3d:6a:e4:4c:1d:e7:89:d6:d2:fc: ab:ca:bc:d6:f8:b8:7a:ad:4c:61:cb:3e:0b:e4:8d: 37:c3:dc:14:b3:1c:51:5e:27:1a:f8:d9:97:30:20: 63:2f:74:aa:d8:21:4e:39:df:09:ed:88:7d:6e:4a: 49:7c:be:50:83:ea:d4:83:ce:f5:90:9d:74:e5:3a: 85:7a:19:90:59:36:9a:27:26:5a:c4:db:b7:64:e6: 35:cb:59:6a:5c:fa:6d:20:33:ec:38:61:3a:67:c3: 00:a7:a1:4e:4b:c4:95:95:db:51:7f:ab:d1:1e:74: 13:2a:d5:2f:3a:97:8e:74:69:d5:67:7e:4f:cf:79: 0c:81:a6:83:a6:40:66:51:6e:0e:65:e7:89:d6:60: 42:cd:fd:75:9f:cb:00:96:e2:7c:de:5d:19:af:9e: 16:9d:36:df:94:93:99:a2:32:4a:2a:e3:e8:da:68: f8:a1:9e:e3:58:58:ff:9a:eb:86:54:21:79:b2:ac: f9:6e:6d:54:00:80:45:a8:2d:8d:ce:e1:2e:6d:d0: fc:6f:1c:b5:a0:52:96:7c:61:72:2d:4e:4d:bb:43: dc:b8:0f:c7:1a:59:69:73:34:8f:4b:4e:f1:ef:5d: 1c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:8F:CE:03:C5:A6:C9:67:F8:5A:AB:3D:C3:6D:11:E4:C1:05:D5:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2d572a85-d2e9-3c92-a7ea-9412eee9750b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:9a:c6:b5:9d:f0:fc:bd:f0:14:a4:03:67:fc:86:47:1c:38: 50:90:8e:a5:30:b6:1b:fa:c6:b6:24:5e:9a:d8:5f:34:18:ce: 24:bd:ce:78:46:9e:4b:10:cd:1d:d5:7b:77:64:55:48:21:6e: 69:05:cd:a9:35:13:67:32:79:a8:ce:14:25:bb:49:2a:18:2b: 21:fc:27:ae:5b:d1:9a:9f:69:94:8f:68:d5:bd:4c:92:10:1e: 74:32:e7:3b:75:5f:08:f0:93:1b:d1:67:ef:06:17:5e:9d:7c: ae:94:93:41:d0:08:3e:49:7e:28:0e:b7:13:57:af:bc:57:75: 10:c8:1b:82:ac:49:cf:24:8e:c7:6c:63:d8:f9:d8:77:b4:6d: 0c:4f:86:3f:0f:89:8f:b8:32:4b:4e:bb:c6:ae:41:d8:76:0c: 38:d3:d3:0c:a1:86:f8:94:22:86:ab:67:3c:29:7b:11:6a:b2: 09:08:0b:95:70:9a:ad:ef:5c:b0:2a:7c:b9:25:07:a8:a2:b1: 24:c9:0a:ca:ca:28:98:a0:b6:4d:d0:81:0b:d3:95:05:1e:81: 39:ea:3e:0c:1e:de:6e:02:bc:92:70:ca:8b:a4:f9:0b:00:a0: 9c:5b:18:fa:f0:06:2e:2a:ec:8b:f6:cc:76:b1:2c:5b:0d:8a: 52:f8:a3:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/TN7vKzd29puCWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk ZTNmMjE2MjMtZTRmYy00ZDUwLWI1MTctNzJjMTM4MmFkNzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9XUlv7JfD5gOBmUkpx1aN0t0D1q5Ewd54nW 0vyryrzW+Lh6rUxhyz4L5I03w9wUsxxRXica+NmXMCBjL3Sq2CFOOd8J7Yh9bkpJ fL5Qg+rUg871kJ105TqFehmQWTaaJyZaxNu3ZOY1y1lqXPptIDPsOGE6Z8MAp6FO S8SVldtRf6vRHnQTKtUvOpeOdGnVZ35Pz3kMgaaDpkBmUW4OZeeJ1mBCzf11n8sA luJ83l0Zr54WnTbflJOZojJKKuPo2mj4oZ7jWFj/muuGVCF5sqz5bm1UAIBFqC2N zuEubdD8bxy1oFKWfGFyLU5Nu0PcuA/HGllpczSPS07x710crwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJKPzgPFpsln+FqrPcNtEeTBBdWIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmQ1NzJhODUtZDJlOS0z YzkyLWE3ZWEtOTQxMmVlZTk3NTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEVDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGaxrWd8Py98BSkA2f8hkccOFCQjqUwthv6xrYkXprYXzQYziS9znhG nksQzR3Ve3dkVUghbmkFzak1E2cyeajOFCW7SSoYKyH8J65b0ZqfaZSPaNW9TJIQ HnQy5zt1XwjwkxvRZ+8GF16dfK6Uk0HQCD5JfigOtxNXr7xXdRDIG4KsSc8kjsds Y9j52He0bQxPhj8PiY+4MktOu8auQdh2DDjT0wyhhviUIoarZzwpexFqsgkIC5Vw mq3vXLAqfLklB6iisSTJCsrKKJigtk3QgQvTlQUegTnqPgwe3m4CvJJwyouk+QsA oJxbGPrwBi4q7Iv2zHaxLFsNilL4o4M= -----END CERTIFICATE-----Generated at Sat Nov 1 10:03:03 2025 by rpki-client