$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/614204ac-6d1c-3957-aacf-46eaa6662605.roa File: 614204ac-6d1c-3957-aacf-46eaa6662605.roa (raw, json) Hash identifier: RAQ6Is0FHjBLuFLQoldT/PU5ifQF733v+XDNc8KIvRw= Subject key identifier: 3E:C6:66:F1:ED:AF:31:F7:F3:FD:C0:78:A7:04:95:DA:D9:C1:ED:B6 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA93280B49A4DF24FA2875900 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/614204ac-6d1c-3957-aacf-46eaa6662605.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.67.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:80:b4:9a:4d:f2:4f:a2:87:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=10157b66-315a-46c8-a519-892e2e90c7b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:40:c4:63:25:62:2d:61:a9:dd:4f:37:5f:16: 59:d2:c6:a2:e7:8f:02:a7:f7:51:c0:61:44:f4:3e: 7c:0e:4e:0c:12:70:25:f1:cc:61:ec:ff:f4:11:b6: bc:22:7e:a9:9c:a0:4c:6d:15:21:97:b2:fb:ea:bc: fc:6f:20:98:63:60:99:76:36:f3:cf:ea:cf:5b:c8: 2e:f0:5e:1f:c9:5a:08:47:70:50:1e:98:c6:97:a5: 69:ea:22:19:32:16:4b:a2:ec:55:9d:50:39:f3:b9: ab:a5:c9:06:ad:e2:d2:fe:77:40:2c:33:64:7f:c0: 16:e5:35:aa:24:b3:e8:21:af:87:a1:80:47:7f:ff: 7c:62:d3:b5:bb:58:a6:f6:fc:61:17:1c:23:66:ad: 3c:9f:f9:45:42:56:8b:8b:8a:06:34:cf:26:8b:f4: c6:e0:9a:de:e0:54:c1:ff:7f:f4:ce:51:89:06:00: dc:b1:6a:e3:e2:47:e1:d7:d2:3a:92:77:41:69:fe: e4:9b:cb:23:a5:f6:ec:40:d5:09:84:58:56:22:17: 84:8f:37:aa:a9:be:21:ac:6f:fe:96:24:e7:d1:d7: 0e:5f:49:8b:52:e4:ae:93:97:36:0c:10:17:cd:17: e3:49:ef:77:78:8f:2b:ac:37:06:99:df:41:89:29: 31:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C6:66:F1:ED:AF:31:F7:F3:FD:C0:78:A7:04:95:DA:D9:C1:ED:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/614204ac-6d1c-3957-aacf-46eaa6662605.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.67.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:b2:b5:14:99:bb:b0:c4:87:28:f8:3f:52:bf:3e:11:ba:46: 39:dd:0a:d1:b4:0c:be:c7:d0:24:58:cc:54:fd:f7:11:e6:7d: 88:d7:15:23:6b:8b:d9:7c:b8:30:8d:38:6d:08:b4:26:d1:3d: da:38:33:87:34:fd:fd:9f:7c:9f:a9:bf:41:3f:17:f3:99:23: cc:6d:fd:65:3a:30:09:4b:62:f6:58:62:fc:8c:ec:6c:7c:7d: c6:d5:35:13:bd:dc:4d:5a:52:7b:20:cf:65:82:3d:f9:e9:5f: 82:d1:cc:c0:5c:e1:3b:24:bf:d1:3d:4e:3c:6b:55:b2:7f:7f: fd:f3:9e:66:9f:10:63:6f:ca:0d:78:6c:1a:0b:d6:4e:99:7e: e0:d5:1b:21:71:91:0d:21:2a:84:d9:5f:0c:62:87:2f:a4:96: de:a2:58:e3:60:0d:3f:13:16:1f:8c:74:55:2f:5e:fd:fb:dd: 82:61:af:cf:a0:db:62:44:45:d7:63:77:01:ff:5a:3c:33:a5: 7f:f3:86:54:6e:43:93:e9:14:d1:69:07:d3:b8:e6:a5:50:3e: 77:87:6e:41:d0:b3:c2:84:92:c4:d2:7d:f4:da:89:f2:50:dc: 10:f9:34:86:25:d9:00:0a:48:39:5e:8f:ae:ea:47:de:58:f6: 1c:18:80:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMoC0mk3yT6KHWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk MTAxNTdiNjYtMzE1YS00NmM4LWE1MTktODkyZTJlOTBjN2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0DEYyViLWGp3U83XxZZ0sai548Cp/dRwGFE 9D58Dk4MEnAl8cxh7P/0Eba8In6pnKBMbRUhl7L76rz8byCYY2CZdjbzz+rPW8gu 8F4fyVoIR3BQHpjGl6Vp6iIZMhZLouxVnVA587mrpckGreLS/ndALDNkf8AW5TWq JLPoIa+HoYBHf/98YtO1u1im9vxhFxwjZq08n/lFQlaLi4oGNM8mi/TG4Jre4FTB /3/0zlGJBgDcsWrj4kfh19I6kndBaf7km8sjpfbsQNUJhFhWIheEjzeqqb4hrG/+ liTn0dcOX0mLUuSuk5c2DBAXzRfjSe93eI8rrDcGmd9BiSkxNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7GZvHtrzH38/3AeKcEldrZwe22MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjE0MjA0YWMtNmQxYy0z OTU3LWFhY2YtNDZlYWE2NjYyNjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuytRSZu7DEhyj4P1K/PhG6RjndCtG0DL7H0CRYzFT99xHmfYjXFSNr i9l8uDCNOG0ItCbRPdo4M4c0/f2ffJ+pv0E/F/OZI8xt/WU6MAlLYvZYYvyM7Gx8 fcbVNRO93E1aUnsgz2WCPfnpX4LRzMBc4Tskv9E9TjxrVbJ/f/3znmafEGNvyg14 bBoL1k6ZfuDVGyFxkQ0hKoTZXwxihy+klt6iWONgDT8TFh+MdFUvXv373YJhr8+g 22JERddjdwH/WjwzpX/zhlRuQ5PpFNFpB9O45qVQPneHbkHQs8KEksTSffTaifJQ 3BD5NIYl2QAKSDlej67qR95Y9hwYgEw= -----END CERTIFICATE-----Generated at Sat Nov 1 10:01:47 2025 by rpki-client