$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5dcaeb10-b7cb-3505-8e13-e528c0587c0f.roa File: 5dcaeb10-b7cb-3505-8e13-e528c0587c0f.roa (raw, json) Hash identifier: X7w0msDXO8Ea8q+fNlY+oMBXjOdTnaZ2YV7OmZxum0o= Subject key identifier: 78:2C:E7:DB:DA:A9:3C:21:13:C0:99:9E:C8:E3:85:CB:0B:EB:3D:4B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA9328BB7814B546CD0CF1F70 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5dcaeb10-b7cb-3505-8e13-e528c0587c0f.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.64.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:8b:b7:81:4b:54:6c:d0:cf:1f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=12042b29-0cc2-4bfa-accb-727058be9024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:50:38:6f:22:4a:cf:06:43:88:80:a7:f1:05: 8a:b9:45:12:14:fe:05:1e:31:8f:27:40:a4:d4:2b: a5:cc:07:6b:fa:55:ba:99:04:a2:31:7a:01:4c:98: 6c:c2:c2:2e:e5:5d:73:ac:8c:1c:1d:43:0a:6a:7b: df:c2:4c:ae:ea:cd:45:41:8a:a9:54:5b:ef:a7:3f: fd:0a:c1:f1:d5:23:cd:a5:83:fd:be:16:ac:8a:98: 56:8b:5d:31:3b:15:8a:48:8d:e5:fe:2d:0a:15:54: 6f:c2:8b:90:7c:01:83:0b:a9:cb:32:0b:d6:d4:26: e3:a5:03:64:a0:71:a4:65:35:d0:34:6a:c4:b1:a8: 35:ec:86:f8:3b:19:6c:9a:95:a9:73:51:cb:d7:df: ed:1c:a1:20:fd:79:58:0f:c7:84:f7:bf:5b:f8:f8: 2b:2a:fb:f6:57:f2:4b:7a:be:3b:17:93:61:17:da: f0:e6:44:8d:48:8c:af:cd:cf:6f:2e:d0:0e:99:fc: a8:0c:2a:d2:6a:af:79:a9:95:4b:03:40:5f:c5:4d: 96:3c:87:c3:59:ea:75:45:ed:c8:fa:d8:bb:be:8e: 21:e7:15:8b:67:8c:4b:bb:aa:3b:ca:a0:1b:05:21: 31:9c:13:75:c2:78:75:39:2a:cb:1e:54:2f:b1:22: be:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:2C:E7:DB:DA:A9:3C:21:13:C0:99:9E:C8:E3:85:CB:0B:EB:3D:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5dcaeb10-b7cb-3505-8e13-e528c0587c0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:df:81:c4:1b:f1:70:a8:6b:fc:16:1f:31:41:58:3c:4e:51: 81:6b:99:4b:a2:20:46:b1:18:d9:ae:92:25:62:68:eb:d5:cc: ac:32:a1:7a:a4:e7:ce:77:75:c9:74:c0:26:56:64:47:4e:c2: 66:b7:f6:d2:46:35:66:14:66:49:a8:d0:51:b5:d3:c9:10:87: 8f:68:73:73:f7:30:b7:3d:00:cb:1c:d6:1d:15:45:a4:f3:ce: cd:11:3f:c0:e8:c7:d0:c1:fa:c2:e1:51:80:9a:e0:1d:b8:65: d8:ce:eb:9e:8d:0a:e6:31:4d:b5:d9:c1:48:a4:cf:c2:88:d0: 6b:1f:ce:3c:87:fe:79:4b:47:e0:ec:74:e4:e0:24:a9:d6:a4: 25:d5:09:37:68:44:54:22:f5:31:20:93:66:4d:d9:a5:a3:41: 58:3a:fd:43:e7:bd:43:d2:2e:18:23:88:88:29:d3:5b:21:3f: a6:8e:fe:5c:00:0b:ac:cb:4a:25:f3:29:df:66:8f:cf:24:44: f4:e5:65:bf:b1:4b:c5:98:57:6d:38:40:f3:00:72:e5:45:e8: bc:9e:15:58:e6:c7:b3:86:8b:af:2f:56:da:62:1e:49:4b:4e: 79:ac:fb:09:96:60:6e:f5:e0:a5:4a:58:60:0b:06:49:9c:0a: b9:fb:7b:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMou3gUtUbNDPH3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk MTIwNDJiMjktMGNjMi00YmZhLWFjY2ItNzI3MDU4YmU5MDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglA4byJKzwZDiICn8QWKuUUSFP4FHjGPJ0Ck 1CulzAdr+lW6mQSiMXoBTJhswsIu5V1zrIwcHUMKanvfwkyu6s1FQYqpVFvvpz/9 CsHx1SPNpYP9vhasiphWi10xOxWKSI3l/i0KFVRvwouQfAGDC6nLMgvW1CbjpQNk oHGkZTXQNGrEsag17Ib4OxlsmpWpc1HL19/tHKEg/XlYD8eE979b+PgrKvv2V/JL er47F5NhF9rw5kSNSIyvzc9vLtAOmfyoDCrSaq95qZVLA0BfxU2WPIfDWep1Re3I +ti7vo4h5xWLZ4xLu6o7yqAbBSExnBN1wnh1OSrLHlQvsSK+8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHgs59vaqTwhE8CZnsjjhcsL6z1LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWRjYWViMTAtYjdjYi0z NTA1LThlMTMtZTUyOGMwNTg3YzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEAwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPfgcQb8XCoa/wWHzFBWDxOUYFrmUuiIEaxGNmukiViaOvVzKwyoXqk 5853dcl0wCZWZEdOwma39tJGNWYUZkmo0FG108kQh49oc3P3MLc9AMsc1h0VRaTz zs0RP8Dox9DB+sLhUYCa4B24ZdjO656NCuYxTbXZwUikz8KI0GsfzjyH/nlLR+Ds dOTgJKnWpCXVCTdoRFQi9TEgk2ZN2aWjQVg6/UPnvUPSLhgjiIgp01shP6aO/lwA C6zLSiXzKd9mj88kRPTlZb+xS8WYV204QPMAcuVF6LyeFVjmx7OGi68vVtpiHklL Tnms+wmWYG714KVKWGALBkmcCrn7ezA= -----END CERTIFICATE-----Generated at Sat Nov 1 12:32:32 2025 by rpki-client