$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/38f04789-bbe7-3d34-8d74-0ee8e1e83360.roa File: 38f04789-bbe7-3d34-8d74-0ee8e1e83360.roa (raw, json) Hash identifier: zytV1LQC/bzAK1PIPWM7IiX6oR1XYD7LHF9yQ/SyPLI= Subject key identifier: 1D:5A:6A:0C:42:90:35:B2:19:00:CB:2E:F6:80:39:24:9C:5F:3C:FF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667BF2591C97C8E4DE99D3A Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/38f04789-bbe7-3d34-8d74-0ee8e1e83360.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.64.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:bf:25:91:c9:7c:8e:4d:e9:9d:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=6a7f8da6-c34f-4d5d-bdef-9f0327461606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5f:a9:4c:60:e4:d4:d8:04:2f:35:58:35:0b: 29:7a:e3:22:73:8f:68:45:a4:aa:ef:9c:7d:94:1f: bb:45:39:0c:35:98:8a:4e:53:ca:fe:31:0a:36:17: 6a:b7:79:1a:95:79:03:77:ef:ab:12:80:e1:d6:54: c2:3b:1b:a1:2f:78:1a:3a:be:07:2a:1a:2b:c6:65: d7:34:50:a8:f2:eb:2b:f0:04:66:f4:56:e8:c0:be: 9d:cf:5d:a0:22:a5:3b:98:f3:1d:46:53:f1:0a:ef: 1a:4d:54:ef:8d:08:64:d1:c7:ed:2b:e5:16:36:bd: 4f:8f:83:c2:e0:45:db:1b:bd:aa:54:ee:27:95:f9: d9:3c:60:18:43:fb:6e:3c:1e:c1:9c:3b:39:6f:a6: 36:d2:2a:a0:1d:c7:8f:af:55:d3:a1:3e:1f:ea:39: 1d:80:c6:a0:a0:12:9f:59:5e:31:53:43:6d:84:a9: 41:41:bc:a5:b4:1d:d8:95:1a:04:48:34:19:55:35: e0:6b:fe:6a:97:1e:65:c6:29:1d:23:1a:42:df:a9: cb:39:74:85:b9:ec:c2:48:44:7b:f2:b9:4a:88:98: 1d:5d:41:51:e2:78:47:18:33:52:8e:b7:da:32:4d: 8f:14:38:fa:50:ff:65:dd:40:80:06:63:73:ec:91: 4f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:5A:6A:0C:42:90:35:B2:19:00:CB:2E:F6:80:39:24:9C:5F:3C:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/38f04789-bbe7-3d34-8d74-0ee8e1e83360.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:0f:79:b0:5f:16:ee:2c:9b:fb:3a:df:2d:37:68:6d:f7:51: 85:53:fd:5b:2d:6a:15:78:cd:72:50:65:c0:5e:93:02:61:9b: cc:9a:7a:f9:1a:6c:7e:a0:e0:16:bf:14:5f:18:64:53:5e:be: b5:b4:00:6f:26:13:b0:98:ff:c8:70:f3:c6:7a:b3:96:1d:67: cd:8c:82:dd:f8:4a:f8:7d:bf:35:d6:27:ce:0e:71:60:13:a5: ff:a7:52:03:51:ca:46:e9:e2:74:55:27:96:05:97:52:2e:8e: a0:07:59:16:45:50:47:f5:ec:a0:c1:0d:d9:72:ad:2f:35:8c: 16:d9:82:e2:65:20:94:ce:b9:d4:29:dc:f0:7e:bd:3d:42:e3: 12:a1:bb:95:60:04:ea:e0:fd:70:59:18:2c:b8:82:67:a7:de: 81:e2:9d:5f:e5:56:16:45:34:ac:12:fe:b2:63:56:ad:47:b9: fe:e6:4d:a0:89:49:0c:28:32:0c:d1:c1:97:55:04:68:67:eb: f8:48:35:8b:7e:6a:ad:20:d2:60:33:27:19:e7:4e:9e:d3:d6: b0:34:b7:3a:d4:21:52:dd:f3:49:b3:8b:65:3d:05:2a:b5:04: 36:73:86:f5:3e:fa:c7:b3:74:1a:15:da:68:af:13:f7:ae:69: 77:e6:1f:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ78lkcl8jk3pnTowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk NmE3ZjhkYTYtYzM0Zi00ZDVkLWJkZWYtOWYwMzI3NDYxNjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiF+pTGDk1NgELzVYNQspeuMic49oRaSq75x9 lB+7RTkMNZiKTlPK/jEKNhdqt3kalXkDd++rEoDh1lTCOxuhL3gaOr4HKhorxmXX NFCo8usr8ARm9FbowL6dz12gIqU7mPMdRlPxCu8aTVTvjQhk0cftK+UWNr1Pj4PC 4EXbG72qVO4nlfnZPGAYQ/tuPB7BnDs5b6Y20iqgHcePr1XToT4f6jkdgMagoBKf WV4xU0NthKlBQbyltB3YlRoESDQZVTXga/5qlx5lxikdIxpC36nLOXSFuezCSER7 8rlKiJgdXUFR4nhHGDNSjrfaMk2PFDj6UP9l3UCABmNz7JFPrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB1aagxCkDWyGQDLLvaAOSScXzz/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzhmMDQ3ODktYmJlNy0z ZDM0LThkNzQtMGVlOGUxZTgzMzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArECfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKEPebBfFu4sm/s63y03aG33UYVT/VstahV4zXJQZcBekwJhm8yaevka bH6g4Ba/FF8YZFNevrW0AG8mE7CY/8hw88Z6s5YdZ82Mgt34Svh9vzXWJ84OcWAT pf+nUgNRykbp4nRVJ5YFl1IujqAHWRZFUEf17KDBDdlyrS81jBbZguJlIJTOudQp 3PB+vT1C4xKhu5VgBOrg/XBZGCy4gmen3oHinV/lVhZFNKwS/rJjVq1Huf7mTaCJ SQwoMgzRwZdVBGhn6/hINYt+aq0g0mAzJxnnTp7T1rA0tzrUIVLd80mzi2U9BSq1 BDZzhvU++sezdBoV2mivE/euaXfmH1M= -----END CERTIFICATE-----Generated at Sun Nov 2 04:23:10 2025 by rpki-client