$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/352fc5c3-2a25-3c5c-929c-3cd926f99080.roa File: 352fc5c3-2a25-3c5c-929c-3cd926f99080.roa (raw, json) Hash identifier: XWObgyEbTroHR3D+QJ2HfDZNuXHSfBf6XxGlIry0Kis= Subject key identifier: F5:05:92:20:65:8C:59:CE:28:05:60:40:9E:FB:90:35:B6:60:15:C5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BABFD1F9DC2DF7D21094BCBC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/352fc5c3-2a25-3c5c-929c-3cd926f99080.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.69.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:1f:9d:c2:df:7d:21:09:4b:cb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=90105a62-5d82-4427-b9c4-f4398759a830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a8:d6:4a:3f:33:4e:0f:e6:41:b8:3c:ce:27: e9:c0:2c:44:6a:93:bb:0c:c0:18:16:fa:cc:5d:79: c9:b4:48:6c:13:07:9f:9e:c6:a4:77:d0:f8:52:59: 38:f8:01:f5:6b:71:cb:9e:1a:c6:00:1d:9c:21:78: 3e:36:d4:26:b9:4a:be:4d:75:d5:81:a8:b6:35:7f: c7:0c:94:bf:a2:46:d0:53:ab:53:1f:e1:94:db:83: b4:e5:47:03:14:39:76:61:e8:7b:31:83:88:18:ff: bd:5a:50:7b:bb:c4:2f:85:3c:1a:2b:2f:ea:14:04: fc:e2:c3:88:07:0d:82:02:31:b9:b2:ab:bb:7a:35: 92:f8:bb:b4:73:cd:e7:4c:8e:02:8d:9a:7c:9c:28: 88:86:70:e9:67:0b:c8:83:6c:c9:54:cf:0e:fb:1e: c1:95:3f:82:fb:a1:d9:9f:2d:42:f1:ab:41:0a:45: 53:7c:30:89:e2:cd:2b:e8:b1:40:fc:6d:f7:5d:c0: 41:df:8d:cf:45:ec:a9:90:2c:27:06:cc:ad:58:71: 44:01:e3:5a:f5:38:03:88:06:19:af:36:50:30:71: 19:e8:40:69:b5:7a:dd:c2:aa:30:63:d0:95:44:b6: 2e:80:41:e1:63:ab:2b:30:e6:f6:76:18:e5:45:01: 78:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:05:92:20:65:8C:59:CE:28:05:60:40:9E:FB:90:35:B6:60:15:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/352fc5c3-2a25-3c5c-929c-3cd926f99080.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:c9:09:8a:c3:1b:7c:f6:3f:5d:eb:a3:84:b0:ae:05:37:9f: aa:92:9f:af:44:24:b8:39:32:37:ce:08:5c:7b:57:88:b6:93: 88:fa:62:b4:ee:54:b2:44:4d:41:ff:6b:c1:e2:78:7a:cc:fd: f5:6d:01:0e:70:fd:24:c8:1b:dd:2c:1f:da:26:74:7e:e9:c9: ae:1a:94:c7:b9:57:a6:98:cd:da:40:21:8c:d4:15:f1:a2:f7: 2d:bd:88:2e:94:b1:d7:b1:a3:24:f5:f9:78:d6:ab:67:22:4b: 97:20:7b:24:d5:a7:8f:96:4d:7b:f5:4d:1a:3f:eb:67:d8:38: 5a:c4:79:5b:9b:64:f4:d1:e8:9d:ed:a3:ae:4c:25:ea:a4:76: 04:dd:15:83:95:6a:19:2b:85:dc:ca:6f:96:34:fb:ea:9b:61: 66:00:c5:d5:b2:ba:02:9f:60:cf:27:c0:fb:87:3f:a7:fa:9f: fd:5c:05:aa:f9:28:d5:4a:5b:cf:d0:ee:ef:a1:dd:3d:ba:63: cd:95:af:83:93:0c:41:58:3b:72:8f:30:0d:14:6a:4f:bd:d9: 7c:28:7d:bd:64:eb:9b:15:33:a2:81:2c:05:22:9f:03:75:60: 81:84:a2:87:16:ac:97:a5:56:f0:a8:f0:36:34:ee:f1:70:dc: 2f:82:d9:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/R+dwt99IQlLy8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk OTAxMDVhNjItNWQ4Mi00NDI3LWI5YzQtZjQzOTg3NTlhODMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6jWSj8zTg/mQbg8zifpwCxEapO7DMAYFvrM XXnJtEhsEwefnsakd9D4Ulk4+AH1a3HLnhrGAB2cIXg+NtQmuUq+TXXVgai2NX/H DJS/okbQU6tTH+GU24O05UcDFDl2Yeh7MYOIGP+9WlB7u8QvhTwaKy/qFAT84sOI Bw2CAjG5squ7ejWS+Lu0c83nTI4CjZp8nCiIhnDpZwvIg2zJVM8O+x7BlT+C+6HZ ny1C8atBCkVTfDCJ4s0r6LFA/G33XcBB343PReypkCwnBsytWHFEAeNa9TgDiAYZ rzZQMHEZ6EBptXrdwqowY9CVRLYugEHhY6srMOb2dhjlRQF4sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPUFkiBljFnOKAVgQJ77kDW2YBXFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzUyZmM1YzMtMmEyNS0z YzVjLTkyOWMtM2NkOTI2Zjk5MDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEVkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ7JCYrDG3z2P13ro4SwrgU3n6qSn69EJLg5MjfOCFx7V4i2k4j6YrTu VLJETUH/a8HieHrM/fVtAQ5w/STIG90sH9omdH7pya4alMe5V6aYzdpAIYzUFfGi 9y29iC6UsdexoyT1+XjWq2ciS5cgeyTVp4+WTXv1TRo/62fYOFrEeVubZPTR6J3t o65MJeqkdgTdFYOVahkrhdzKb5Y0++qbYWYAxdWyugKfYM8nwPuHP6f6n/1cBar5 KNVKW8/Q7u+h3T26Y82Vr4OTDEFYO3KPMA0Uak+92Xwofb1k65sVM6KBLAUinwN1 YIGEoocWrJelVvCo8DY07vFw3C+C2VI= -----END CERTIFICATE-----Generated at Sat Nov 1 12:36:28 2025 by rpki-client