$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/37cd307f-7c23-382f-8799-79e8d3a8d8b1.roa File: 37cd307f-7c23-382f-8799-79e8d3a8d8b1.roa (raw, json) Hash identifier: 6Gw0G9WL4iYPEfmIiBLEfEmLgePvKhZ5zBFWKMCz3Qg= Subject key identifier: 00:08:92:4A:4E:0B:C7:33:09:8F:31:06:35:68:6B:34:86:6C:C3:88 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BABFD323D8571D3DD3A6FA2A0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/37cd307f-7c23-382f-8799-79e8d3a8d8b1.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.69.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:32:3d:85:71:d3:dd:3a:6f:a2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=1f1f5ee3-062d-4f90-879e-7051d355a042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8a:6d:b1:78:f4:a5:81:8e:72:13:b1:b3:69: f6:34:9c:51:d2:bc:e9:99:3c:95:22:46:3a:76:d1: 3e:22:c2:9e:3d:ae:f7:01:dc:f9:49:25:98:e5:14: 11:05:40:b0:a3:98:96:15:7f:1e:be:88:ea:4f:fd: 88:39:04:7b:64:91:3f:40:69:12:e4:6d:99:63:b5: 2d:b6:72:3d:36:d1:a9:d0:70:b8:da:05:ec:5b:0d: 98:18:71:98:6c:33:2e:25:a0:9b:ee:88:bb:d2:39: f5:74:2f:ca:9e:9a:5d:a7:c2:83:32:6b:b3:ff:2c: 16:d8:de:a2:bc:ab:db:14:e7:1a:81:72:b2:02:6f: 0e:1a:19:1d:1b:f7:da:23:e2:b2:86:cf:67:6b:5f: a3:6c:41:d6:c6:78:12:d9:04:ad:e5:3f:12:ba:3f: ff:f7:cb:ae:b1:88:36:1f:84:09:25:98:46:31:23: 7a:9a:e5:91:f5:6a:1a:a6:e8:eb:18:b3:da:01:3a: 5a:28:90:e1:96:7e:b9:a8:c3:2e:2d:7f:ff:8b:e6: 51:46:7d:78:69:ed:ad:3b:21:dc:d2:7d:07:08:c9: ab:e5:99:90:f5:00:2f:32:0f:d7:52:79:e7:16:f0: 20:30:4f:fc:3f:78:5b:c7:13:c4:b7:f3:2f:16:0f: f6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:08:92:4A:4E:0B:C7:33:09:8F:31:06:35:68:6B:34:86:6C:C3:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/37cd307f-7c23-382f-8799-79e8d3a8d8b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:2c:4d:fa:30:f4:56:49:b5:bb:c2:fc:ce:73:ef:f3:39:13: 53:a5:08:3e:73:f3:c2:9c:04:b6:27:2f:ec:18:82:91:82:72: 8a:9c:c6:79:61:32:e1:0b:08:1e:d9:08:62:b5:3e:7d:53:68: 14:a3:35:1c:ee:ae:4e:b3:5d:12:41:f1:11:7b:3b:b3:76:03: 6d:b7:8c:22:b3:93:e8:09:93:dd:d4:d3:84:cb:03:33:0d:30: 10:aa:d5:2c:3f:ff:40:1c:d8:85:2c:5d:d1:5d:7f:b9:08:8a: b9:74:d6:5a:96:13:59:11:eb:1e:61:53:14:0d:d3:d5:06:a4: ac:fc:d6:51:80:90:2d:10:03:a3:00:af:27:bb:4b:84:c3:88: 1f:3d:77:1e:13:99:bb:c5:79:a5:e9:10:17:8c:4f:9b:cc:14: 53:e6:ca:95:37:ab:9e:7d:05:28:6d:e0:80:64:7c:e6:ec:d7: d7:43:b1:22:b6:50:1e:31:2e:2b:0c:a5:16:f3:86:77:9b:fa: 10:82:68:f8:01:4e:87:af:67:31:0b:0f:c1:c8:c5:17:a0:06: 5f:0a:2a:fd:dc:4a:4f:85:05:27:8b:b3:51:47:32:bf:2a:9f: f4:16:3a:68:c1:b1:d9:57:1d:08:a3:7a:c4:a0:d1:f5:4b:ae: 05:46:c7:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/TI9hXHT3TpvoqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk MWYxZjVlZTMtMDYyZC00ZjkwLTg3OWUtNzA1MWQzNTVhMDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4ptsXj0pYGOchOxs2n2NJxR0rzpmTyVIkY6 dtE+IsKePa73Adz5SSWY5RQRBUCwo5iWFX8evojqT/2IOQR7ZJE/QGkS5G2ZY7Ut tnI9NtGp0HC42gXsWw2YGHGYbDMuJaCb7oi70jn1dC/Knppdp8KDMmuz/ywW2N6i vKvbFOcagXKyAm8OGhkdG/faI+Kyhs9na1+jbEHWxngS2QSt5T8Suj//98uusYg2 H4QJJZhGMSN6muWR9WoapujrGLPaATpaKJDhln65qMMuLX//i+ZRRn14ae2tOyHc 0n0HCMmr5ZmQ9QAvMg/XUnnnFvAgME/8P3hbxxPEt/MvFg/2GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAIkkpOC8czCY8xBjVoazSGbMOIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzdjZDMwN2YtN2MyMy0z ODJmLTg3OTktNzllOGQzYThkOGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEUOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAsTfow9FZJtbvC/M5z7/M5E1OlCD5z88KcBLYnL+wYgpGCcoqcxnlh MuELCB7ZCGK1Pn1TaBSjNRzurk6zXRJB8RF7O7N2A223jCKzk+gJk93U04TLAzMN MBCq1Sw//0Ac2IUsXdFdf7kIirl01lqWE1kR6x5hUxQN09UGpKz81lGAkC0QA6MA rye7S4TDiB89dx4TmbvFeaXpEBeMT5vMFFPmypU3q559BSht4IBkfObs19dDsSK2 UB4xLisMpRbzhneb+hCCaPgBToevZzELD8HIxRegBl8KKv3cSk+FBSeLs1FHMr8q n/QWOmjBsdlXHQijesSg0fVLrgVGx9Y= -----END CERTIFICATE-----Generated at Sat Nov 1 10:02:45 2025 by rpki-client