$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3118f74d-4ae5-3966-b111-6d6cb9945c2d.roa File: 3118f74d-4ae5-3966-b111-6d6cb9945c2d.roa (raw, json) Hash identifier: nKmMNrjZRvGSkuNfsm4Dj6cuJK/vy88I/TVqISOVFc8= Subject key identifier: C4:C8:EC:B4:AB:A3:0D:C1:DF:16:A3:32:3B:6D:84:E6:31:83:C3:D6 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA93280504FDD2C4D2A86A140 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3118f74d-4ae5-3966-b111-6d6cb9945c2d.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.67.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:80:50:4f:dd:2c:4d:2a:86:a1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=86d88074-869d-49b3-99c1-e14b6b9e8eb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e4:ed:c0:e3:fd:6d:b3:c1:89:e7:42:42:ec: a5:25:3c:dd:00:73:eb:6a:a8:07:dc:cf:fd:d1:db: 1f:06:ca:66:dd:f8:09:1a:b0:08:39:7d:70:e5:20: 04:79:c6:32:a7:9f:b0:0c:f0:e8:75:1c:72:cd:f3: 81:89:e9:b7:80:74:e5:90:a1:25:68:c3:bd:2f:78: 0f:53:98:6b:d9:32:46:81:a2:13:db:7a:d9:6d:79: d2:da:30:68:28:c6:e0:ae:ac:f5:fa:9a:a6:22:cb: 8c:77:fe:18:10:6c:9f:09:d6:af:b1:41:90:62:8f: 95:2b:76:b2:a2:2f:27:99:3c:9b:ad:5c:67:6d:c2: 65:86:72:b7:22:7a:33:d4:fa:8b:64:9f:09:8e:e9: 97:7e:31:47:6a:af:10:07:bc:5b:3d:a8:f1:c4:a5: 63:11:db:e7:58:13:a1:b2:e8:3e:11:33:5d:fc:88: a4:b6:1f:88:37:27:7c:aa:1b:29:d9:b3:b1:65:52: 8b:b6:cc:ca:59:92:db:d3:55:a9:7b:fa:aa:c8:f4: 13:c3:47:0c:74:be:06:60:a6:05:cc:7a:d2:35:70: c7:a8:3b:d4:cf:8a:9d:3b:75:91:ab:91:22:70:ec: 03:98:6b:9a:9d:63:90:07:79:4b:9b:44:e3:46:31: f8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C8:EC:B4:AB:A3:0D:C1:DF:16:A3:32:3B:6D:84:E6:31:83:C3:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3118f74d-4ae5-3966-b111-6d6cb9945c2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.67.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:d5:b0:62:70:03:ab:7a:57:88:36:35:0a:9e:4a:d4:90:70: 5b:f2:fa:e9:8d:a2:bb:12:ca:41:53:eb:ae:9e:ab:4c:50:4a: 62:58:08:3d:bb:d4:2f:ff:51:4d:79:ec:80:8d:8e:ad:57:39: f5:cc:50:50:f4:ee:ba:72:46:4f:d5:b5:6d:1c:9c:5b:32:c6: e6:1d:25:7e:d7:4a:c2:2b:57:19:f5:95:c7:09:e2:9d:ae:6d: c1:37:cd:aa:53:be:87:7b:85:96:19:73:36:02:88:0f:d2:5f: 0b:58:19:97:64:b0:aa:83:b0:e6:29:8e:0f:bc:92:65:ea:e0: 73:6e:09:ae:8d:57:44:8f:49:e5:3f:3c:32:8c:0d:04:7c:6f: ce:a4:95:30:3c:fe:c3:40:37:e1:2e:a5:14:97:e6:5c:b9:c6: d7:d3:a8:51:97:47:ef:6e:cf:48:e8:77:12:ab:df:0a:b1:f8: a3:4c:9f:a2:5b:fa:34:03:13:77:3e:48:e1:b9:f6:7d:b5:ab: 0a:1c:bb:c2:70:1d:a3:82:89:2d:18:8d:88:9e:73:12:5f:f0: ae:35:d2:32:26:38:74:88:06:66:a2:a0:f4:77:0c:2b:40:bc: f2:d2:18:98:24:04:f7:3a:ce:e3:ac:e6:16:a4:bc:ce:1f:c9: e4:c1:de:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMoBQT90sTSqGoUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk ODZkODgwNzQtODY5ZC00OWIzLTk5YzEtZTE0YjZiOWU4ZWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeTtwOP9bbPBiedCQuylJTzdAHPraqgH3M/9 0dsfBspm3fgJGrAIOX1w5SAEecYyp5+wDPDodRxyzfOBiem3gHTlkKElaMO9L3gP U5hr2TJGgaIT23rZbXnS2jBoKMbgrqz1+pqmIsuMd/4YEGyfCdavsUGQYo+VK3ay oi8nmTybrVxnbcJlhnK3Inoz1PqLZJ8JjumXfjFHaq8QB7xbPajxxKVjEdvnWBOh sug+ETNd/Iikth+INyd8qhsp2bOxZVKLtszKWZLb01Wpe/qqyPQTw0cMdL4GYKYF zHrSNXDHqDvUz4qdO3WRq5EicOwDmGuanWOQB3lLm0TjRjH4ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTI7LSrow3B3xajMjtthOYxg8PWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzExOGY3NGQtNGFlNS0z OTY2LWIxMTEtNmQ2Y2I5OTQ1YzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEMQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALnVsGJwA6t6V4g2NQqeStSQcFvy+umNorsSykFT666eq0xQSmJYCD27 1C//UU157ICNjq1XOfXMUFD07rpyRk/VtW0cnFsyxuYdJX7XSsIrVxn1lccJ4p2u bcE3zapTvod7hZYZczYCiA/SXwtYGZdksKqDsOYpjg+8kmXq4HNuCa6NV0SPSeU/ PDKMDQR8b86klTA8/sNAN+EupRSX5ly5xtfTqFGXR+9uz0jodxKr3wqx+KNMn6Jb +jQDE3c+SOG59n21qwocu8JwHaOCiS0YjYiecxJf8K410jImOHSIBmaioPR3DCtA vPLSGJgkBPc6zuOs5hakvM4fyeTB3vg= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:56 2025 by rpki-client