$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/540c9de6-ccf9-387c-9dc0-117d1911ac2e.roa File: 540c9de6-ccf9-387c-9dc0-117d1911ac2e.roa (raw, json) Hash identifier: zR2mtTXzzixsHwUjkgynqi3MUVNUtBvBgKLjP72D4U4= Subject key identifier: F5:06:12:A5:03:DF:9D:A7:D8:09:4C:43:1C:63:BE:A1:B9:B6:36:D2 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BABFD1D2B9BD1B1636F1602D0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/540c9de6-ccf9-387c-9dc0-117d1911ac2e.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.69.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:1d:2b:9b:d1:b1:63:6f:16:02:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=68bdc38f-d55c-4ec7-849d-05d4afe4f7b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:19:b2:5f:3a:c0:a0:66:36:4a:ce:ec:34:6d: 31:f5:7f:9c:78:c5:31:ea:84:1c:78:15:76:aa:7d: a8:54:a9:71:06:4b:e3:80:17:e0:85:2d:10:57:7a: 69:29:df:44:30:c6:2f:e4:da:74:1f:37:49:5b:ea: 58:55:87:c5:df:00:0b:68:27:91:9f:77:99:3b:9e: e0:21:52:4a:46:88:86:82:58:71:a2:9a:73:73:bb: a2:aa:1a:e0:47:bf:3f:93:b9:1c:29:33:eb:19:37: 3a:02:5f:93:6b:d2:5d:63:2e:d3:e4:49:6a:97:1c: 98:53:f3:e2:a5:df:2c:bb:f2:a6:86:50:cb:77:07: cf:03:52:71:79:58:6d:e7:aa:08:f0:f1:e3:cb:05: c0:00:bd:ef:cb:72:ac:f7:ea:77:ce:5b:9f:8c:97: 84:bd:4f:c2:c0:2d:90:c0:f0:ae:d2:69:4a:7d:4a: 4a:06:3c:19:c4:10:a7:21:79:11:40:55:af:8d:53: f5:5f:f8:f8:e2:ba:96:31:eb:4c:a1:3a:76:aa:e7: 36:b5:53:77:56:f9:53:e6:f8:76:64:ee:6b:03:32: a6:02:9a:d0:ce:1d:50:29:47:f5:2b:fe:bf:51:29: 32:00:00:a0:ec:2d:b4:1b:d7:4c:0f:e6:0c:8f:69: 46:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:06:12:A5:03:DF:9D:A7:D8:09:4C:43:1C:63:BE:A1:B9:B6:36:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/540c9de6-ccf9-387c-9dc0-117d1911ac2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:62:84:70:69:9f:43:8b:bd:5b:4e:a9:e9:bc:e3:23:64:0c: 6f:12:ec:74:41:51:69:3f:3b:58:c8:37:82:bc:91:d8:2b:c5: 28:c0:7e:a8:20:8d:de:6b:96:a9:0a:82:12:17:3a:4b:b5:9d: 85:c5:25:26:0c:1c:3b:d6:e4:2e:d8:84:3f:03:29:8c:9b:7d: 22:2c:75:16:ef:27:49:cc:0f:37:59:92:82:98:a0:06:09:65: 74:ef:1e:d8:d1:cb:31:8e:26:2f:ba:86:ae:c0:cc:d1:f3:40: e0:40:6c:98:aa:35:b5:c0:4e:8b:b5:26:4c:db:a3:87:bf:2e: 91:4f:db:98:b7:20:04:78:bd:10:9f:07:d3:8e:bb:27:61:f3: d4:77:57:e4:30:87:9f:4d:ee:db:fc:2c:53:cf:24:78:6a:20: 76:dd:27:97:39:8c:a4:2c:81:bf:15:00:5f:1b:66:fc:25:8e: d8:4b:89:f6:d4:f2:ef:c0:89:51:a1:83:a2:35:a1:45:06:45: 3b:51:ba:ca:5c:73:60:d4:94:71:0f:a1:28:b0:dc:d5:22:84: f4:14:51:7d:e6:b5:f1:38:dc:bd:e2:e9:66:d7:f4:e3:cc:cc: ad:47:77:fe:88:18:90:d9:6d:06:bc:3b:99:65:31:20:e7:8e: 6d:b4:9d:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/R0rm9GxY28WAtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk NjhiZGMzOGYtZDU1Yy00ZWM3LTg0OWQtMDVkNGFmZTRmN2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7xmyXzrAoGY2Ss7sNG0x9X+ceMUx6oQceBV2 qn2oVKlxBkvjgBfghS0QV3ppKd9EMMYv5Np0HzdJW+pYVYfF3wALaCeRn3eZO57g IVJKRoiGglhxoppzc7uiqhrgR78/k7kcKTPrGTc6Al+Ta9JdYy7T5ElqlxyYU/Pi pd8su/KmhlDLdwfPA1JxeVht56oI8PHjywXAAL3vy3Ks9+p3zlufjJeEvU/CwC2Q wPCu0mlKfUpKBjwZxBCnIXkRQFWvjVP1X/j44rqWMetMoTp2quc2tVN3VvlT5vh2 ZO5rAzKmAprQzh1QKUf1K/6/USkyAACg7C20G9dMD+YMj2lGyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPUGEqUD352n2AlMQxxjvqG5tjbSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTQwYzlkZTYtY2NmOS0z ODdjLTlkYzAtMTE3ZDE5MTFhYzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEXBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVihHBpn0OLvVtOqem84yNkDG8S7HRBUWk/O1jIN4K8kdgrxSjAfqgg jd5rlqkKghIXOku1nYXFJSYMHDvW5C7YhD8DKYybfSIsdRbvJ0nMDzdZkoKYoAYJ ZXTvHtjRyzGOJi+6hq7AzNHzQOBAbJiqNbXATou1Jkzbo4e/LpFP25i3IAR4vRCf B9OOuydh89R3V+Qwh59N7tv8LFPPJHhqIHbdJ5c5jKQsgb8VAF8bZvwljthLifbU 8u/AiVGhg6I1oUUGRTtRuspcc2DUlHEPoSiw3NUihPQUUX3mtfE43L3i6WbX9OPM zK1Hd/6IGJDZbQa8O5llMSDnjm20nZ4= -----END CERTIFICATE-----Generated at Sat Nov 1 12:32:44 2025 by rpki-client