$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3539e0c0-dc5a-32f6-9f02-921aef5e15cf.roa File: 3539e0c0-dc5a-32f6-9f02-921aef5e15cf.roa (raw, json) Hash identifier: 5zYqGCGoIs3zttYfRkvcFZzdGhAdtJ3VxLo5A4NSipY= Subject key identifier: 77:6B:78:0B:80:7E:26:E4:2F:70:35:BC:69:A6:6D:09:E3:0E:E3:9F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BABFD33D0D6D8F114F809AAB0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3539e0c0-dc5a-32f6-9f02-921aef5e15cf.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.69.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:33:d0:d6:d8:f1:14:f8:09:aa:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=288dfa48-f3ba-415f-ac11-9f6d1df92888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e5:a5:b4:95:38:f7:18:e9:34:a5:b6:29:6b: 74:70:c9:30:c3:04:b8:c6:44:6b:32:82:bc:b4:48: 8a:a1:7f:ce:a1:5c:95:72:a3:a8:8a:6d:14:1b:af: cc:d9:41:dc:59:b3:05:d1:c9:e3:b8:cb:01:8c:77: ab:c5:84:38:7d:1c:f7:bc:2c:b2:48:46:4f:de:6f: 08:66:83:01:70:e0:ce:38:90:15:20:20:b8:45:55: 46:60:52:5b:c1:54:07:02:7f:41:cf:c0:95:cc:95: f8:ce:82:64:19:b2:4f:6d:1e:4b:68:b5:0c:c4:85: 2d:5b:e3:e2:a5:2b:c0:e3:b7:ea:15:d7:9f:cf:34: 11:a6:36:b3:af:a7:52:8d:7f:f4:a7:10:1d:dc:8e: f1:18:58:bc:0c:cf:d8:9f:aa:ba:99:77:4e:19:67: 71:5c:32:38:0e:6a:a9:d2:3a:45:b7:9d:20:c6:14: 82:fa:36:6d:8c:68:f6:3c:33:f5:71:cd:60:b1:a9: 45:ef:3e:b4:6b:64:21:51:ca:be:86:98:74:fc:4f: 3b:3b:54:56:78:ef:6e:d6:69:e8:a4:69:80:e4:37: 0c:6b:73:7f:9b:68:8f:53:a8:1f:3d:8d:1c:87:a0: 5d:f6:7e:b5:d7:20:34:28:f2:90:4c:95:84:80:96: f8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:6B:78:0B:80:7E:26:E4:2F:70:35:BC:69:A6:6D:09:E3:0E:E3:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3539e0c0-dc5a-32f6-9f02-921aef5e15cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:86:ca:b7:b4:27:ef:37:3f:1b:a6:31:64:8d:aa:12:e5:c3: d8:7e:7b:b8:27:18:28:4f:ee:8a:b1:10:96:18:34:00:62:7b: 7d:6e:5e:75:46:22:8b:bc:7a:09:b0:f0:ea:2b:18:9d:7a:09: b8:db:c5:5c:ba:26:3c:b9:8c:53:f4:99:b4:9d:97:0f:5a:9b: ad:ab:96:89:63:56:58:64:3b:13:73:f1:9d:42:4b:24:08:46: 95:72:5f:b5:7d:7d:e7:f5:30:a2:03:cb:6a:f1:b5:6f:f9:21: 40:d5:3e:80:69:7f:e9:1e:31:72:bc:3e:35:33:f2:74:97:57: ed:b8:c8:87:43:12:4e:ec:fe:0c:8c:b5:c2:eb:85:1b:b7:ef: e3:75:e8:e0:6d:11:27:2b:11:81:2b:9d:f0:97:da:00:02:ed: 65:6a:a8:b1:26:ed:ce:d2:5e:79:b3:32:dd:45:ec:35:87:8f: 9b:b2:42:54:22:ac:34:4e:72:df:06:cc:fe:33:6a:90:f6:f5: 88:08:b6:7e:c6:1a:60:01:c0:44:0d:1a:1a:02:de:40:a5:9f: 99:47:3e:4c:b1:47:a5:62:ee:12:bf:13:a2:e3:8b:12:d1:74: c6:0d:3b:72:c6:65:74:4f:66:54:a7:a2:a5:2f:27:6e:80:3a: 64:a7:72:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/TPQ1tjxFPgJqrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk Mjg4ZGZhNDgtZjNiYS00MTVmLWFjMTEtOWY2ZDFkZjkyODg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeWltJU49xjpNKW2KWt0cMkwwwS4xkRrMoK8 tEiKoX/OoVyVcqOoim0UG6/M2UHcWbMF0cnjuMsBjHerxYQ4fRz3vCyySEZP3m8I ZoMBcODOOJAVICC4RVVGYFJbwVQHAn9Bz8CVzJX4zoJkGbJPbR5LaLUMxIUtW+Pi pSvA47fqFdefzzQRpjazr6dSjX/0pxAd3I7xGFi8DM/Yn6q6mXdOGWdxXDI4Dmqp 0jpFt50gxhSC+jZtjGj2PDP1cc1gsalF7z60a2QhUcq+hph0/E87O1RWeO9u1mno pGmA5DcMa3N/m2iPU6gfPY0ch6Bd9n611yA0KPKQTJWEgJb4ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHdreAuAfibkL3A1vGmmbQnjDuOfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzUzOWUwYzAtZGM1YS0z MmY2LTlmMDItOTIxYWVmNWUxNWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEVMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeGyre0J+83PxumMWSNqhLlw9h+e7gnGChP7oqxEJYYNABie31uXnVG Iou8egmw8OorGJ16CbjbxVy6Jjy5jFP0mbSdlw9am62rloljVlhkOxNz8Z1CSyQI RpVyX7V9fef1MKIDy2rxtW/5IUDVPoBpf+keMXK8PjUz8nSXV+24yIdDEk7s/gyM tcLrhRu37+N16OBtEScrEYErnfCX2gAC7WVqqLEm7c7SXnmzMt1F7DWHj5uyQlQi rDROct8GzP4zapD29YgItn7GGmABwEQNGhoC3kCln5lHPkyxR6Vi7hK/E6LjixLR dMYNO3LGZXRPZlSnoqUvJ26AOmSncsY= -----END CERTIFICATE-----Generated at Sat Nov 1 12:32:41 2025 by rpki-client