$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/357ba2a2-7d1d-32f0-a8bd-ee55a9ff505a.roa File: 357ba2a2-7d1d-32f0-a8bd-ee55a9ff505a.roa (raw, json) Hash identifier: KDsFLvVn5CBb8OoLwKn+i1yfYKx9poAwmOwQ0tq0rYo= Subject key identifier: 5F:D3:C6:13:69:D8:23:B0:8A:1A:4B:6E:35:B3:72:09:3D:10:9C:6D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA9327EB22272BAA9AB128460 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/357ba2a2-7d1d-32f0-a8bd-ee55a9ff505a.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.64.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:7e:b2:22:72:ba:a9:ab:12:84:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=166be268-4361-47d8-887a-feb3ac0fb3b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:55:cf:e6:df:22:83:b7:32:18:4a:49:f1:fa: 03:b9:71:59:b2:78:5e:45:1d:ae:06:25:79:44:73: 4a:cb:b0:c5:0f:f9:f4:f6:cb:05:0e:6a:65:6c:11: b1:9f:a1:73:6f:23:3f:b4:03:a8:a5:f4:ff:46:90: c9:41:eb:9e:3d:e3:2e:c5:e1:2f:3b:c9:04:21:a8: d3:72:f6:4b:67:32:e7:90:29:01:ec:3e:a7:ec:e3: 1e:07:80:2c:5b:35:02:39:47:76:d0:f0:ef:7e:56: 5b:c8:34:df:c7:2e:fa:0a:79:06:39:a0:96:c8:14: 5e:eb:e7:77:1f:d1:e5:0e:b0:3d:1c:31:a5:18:09: d1:13:69:82:8a:7d:6f:a1:c8:80:8e:fd:6b:00:0d: be:20:42:ae:e7:9d:9c:73:51:4c:9b:5a:b7:a2:25: 64:f7:fc:6e:eb:76:ca:1b:fa:1d:c9:99:10:0d:6c: 2a:18:c3:e1:51:60:a9:bc:5d:0d:22:1c:8a:bb:6b: 51:fe:36:ac:38:49:6b:d4:44:25:6d:81:de:9c:03: e3:db:f8:5d:15:36:11:0c:6e:07:1a:47:d1:c9:70: 31:a0:ea:f6:13:36:50:a8:4a:d5:01:96:b4:f2:42: 74:ba:9a:e1:2a:25:f9:9a:b4:16:18:39:d0:12:80: 74:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D3:C6:13:69:D8:23:B0:8A:1A:4B:6E:35:B3:72:09:3D:10:9C:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/357ba2a2-7d1d-32f0-a8bd-ee55a9ff505a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:36:d9:85:3c:ca:ef:5e:16:c3:7f:a2:1c:85:f6:8b:0f:e6: 31:6e:e3:c1:31:d8:01:0a:2e:ad:15:ec:7c:32:c8:e8:fd:70: c0:a3:c6:29:78:95:90:0b:e9:34:81:50:17:64:06:fb:c6:da: c7:aa:2e:d4:21:ca:89:1a:cf:42:62:23:82:c7:96:a4:3f:5c: cd:75:1d:f2:a4:f0:68:6d:e1:ec:75:01:a9:99:4a:23:95:fd: 1e:93:20:f6:31:f8:6e:22:15:aa:0d:59:5e:1a:20:d7:9f:ab: c3:bd:9e:3e:d6:40:8e:8e:13:35:94:2d:9e:89:8e:dc:2a:dd: 0b:e6:20:93:f4:1a:14:09:f0:cb:25:0b:9a:a8:90:fa:06:96: 45:ca:0c:9b:48:67:91:a9:dc:3e:76:07:f7:93:0f:f0:24:42: 8b:c0:3c:91:df:1c:8d:05:4f:3a:1b:49:89:b0:2d:33:b7:5d: a6:69:97:94:d9:cd:63:07:2d:55:2a:ef:4d:c9:6c:9a:c7:bd: be:f3:ab:68:50:c1:37:51:e1:e4:30:2a:a2:e6:64:72:e2:c7: 59:95:53:07:18:a4:ce:21:81:75:b1:17:f3:82:de:b1:d4:ce: aa:15:4d:43:be:71:d0:59:20:b0:7e:17:4b:8b:c6:5e:88:f9: 63:4b:1e:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMn6yInK6qasShGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk MTY2YmUyNjgtNDM2MS00N2Q4LTg4N2EtZmViM2FjMGZiM2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lXP5t8ig7cyGEpJ8foDuXFZsnheRR2uBiV5 RHNKy7DFD/n09ssFDmplbBGxn6FzbyM/tAOopfT/RpDJQeuePeMuxeEvO8kEIajT cvZLZzLnkCkB7D6n7OMeB4AsWzUCOUd20PDvflZbyDTfxy76CnkGOaCWyBRe6+d3 H9HlDrA9HDGlGAnRE2mCin1vociAjv1rAA2+IEKu552cc1FMm1q3oiVk9/xu63bK G/odyZkQDWwqGMPhUWCpvF0NIhyKu2tR/jasOElr1EQlbYHenAPj2/hdFTYRDG4H GkfRyXAxoOr2EzZQqErVAZa08kJ0uprhKiX5mrQWGDnQEoB04wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/TxhNp2COwihpLbjWzcgk9EJxtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzU3YmEyYTItN2QxZC0z MmYwLWE4YmQtZWU1NWE5ZmY1MDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErECQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH422YU8yu9eFsN/ohyF9osP5jFu48Ex2AEKLq0V7HwyyOj9cMCjxil4 lZAL6TSBUBdkBvvG2seqLtQhyokaz0JiI4LHlqQ/XM11HfKk8Ght4ex1AamZSiOV /R6TIPYx+G4iFaoNWV4aINefq8O9nj7WQI6OEzWULZ6Jjtwq3QvmIJP0GhQJ8Msl C5qokPoGlkXKDJtIZ5Gp3D52B/eTD/AkQovAPJHfHI0FTzobSYmwLTO3XaZpl5TZ zWMHLVUq703JbJrHvb7zq2hQwTdR4eQwKqLmZHLix1mVUwcYpM4hgXWxF/OC3rHU zqoVTUO+cdBZILB+F0uLxl6I+WNLHqI= -----END CERTIFICATE-----Generated at Sat Nov 1 10:02:38 2025 by rpki-client