$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6b4d8ae5-ba66-3f6c-bf77-49ed8dbac98c.roa File: 6b4d8ae5-ba66-3f6c-bf77-49ed8dbac98c.roa (raw, json) Hash identifier: K50571xEB7r4fU2pz5B/IijyfwyMa1NUMjCQlmnadfs= Subject key identifier: A2:7A:01:09:A3:82:46:9F:56:26:1A:C1:06:BB:7F:76:6F:18:B9:E8 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA93280622E1AF81DDAD43E18 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6b4d8ae5-ba66-3f6c-bf77-49ed8dbac98c.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.67.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:80:62:2e:1a:f8:1d:da:d4:3e:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=43ca6830-b168-401d-8d2b-ca82a6019489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7b:b8:f4:d2:51:1b:78:95:f9:08:ff:0c:73: bd:00:54:3c:b9:3d:29:7e:fa:46:2c:2b:3c:43:7a: c4:5b:a9:c4:1a:8e:69:ee:e2:3b:6d:24:70:39:0f: 2b:2d:be:11:36:b4:b3:09:2b:d7:88:b3:92:76:7b: 24:78:47:9c:43:79:5b:ed:a2:bc:08:23:9e:44:40: 46:7f:d7:4f:94:d1:d6:fa:e1:1f:3c:0d:40:0f:dc: f7:7c:7a:4a:e1:92:15:2c:c0:3c:e8:b3:0b:36:4b: 7e:4f:33:5c:30:50:67:07:21:86:bf:6e:4c:8c:e6: 1d:0f:62:ad:9e:6c:ee:2a:c6:bd:de:7a:85:ed:70: 61:f0:00:01:8e:1a:9e:b6:2c:4c:88:c2:96:d6:0a: 24:44:00:82:6e:3a:57:49:f4:37:76:b3:cd:18:42: 42:9b:ac:fc:27:a8:dc:5b:23:25:2d:02:5b:4c:ec: a3:ce:e9:15:b5:d9:5c:7a:0f:88:1b:17:ef:d8:f7: 06:97:f7:dd:ad:1b:1f:82:2c:a7:33:ee:28:bd:5c: c5:51:03:87:57:7f:46:98:c2:98:b0:63:b4:c3:e7: f2:11:63:ef:a5:54:51:43:b2:a4:d9:87:12:d7:46: 4c:e8:94:eb:37:71:b1:fb:5a:54:18:32:fa:ba:5b: e2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:7A:01:09:A3:82:46:9F:56:26:1A:C1:06:BB:7F:76:6F:18:B9:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6b4d8ae5-ba66-3f6c-bf77-49ed8dbac98c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.67.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:f0:28:3c:b6:cd:40:37:fb:c6:48:68:5a:1c:a8:48:5a:0c: d6:26:50:84:2e:b4:7d:2b:cf:60:85:67:42:0e:7e:90:47:ab: 6a:3a:5e:c3:bc:41:1d:b2:83:ea:46:e2:6f:40:93:97:39:1f: 1e:62:8d:45:db:fa:17:d4:31:38:e8:e5:74:be:15:9c:9c:01: 21:2b:d6:49:00:b7:79:60:96:78:64:1c:43:25:14:38:c9:b0: 5a:2e:c3:a9:b1:bd:b8:74:dd:a4:c9:f8:dd:92:63:95:f4:89: 26:df:d9:5a:e6:6b:6f:40:af:fa:13:ba:7c:ed:b0:1a:ed:fe: a7:fb:39:e5:6f:5a:09:2f:18:70:66:52:dd:6f:79:23:58:c3: 02:c5:08:a3:87:0d:6b:8d:b3:3c:cf:69:d4:95:c8:a2:34:a2: e5:0d:c9:2f:7c:37:7a:22:0d:dd:71:0c:5b:1b:92:0f:06:f0: 01:4c:89:ae:72:78:7c:18:ce:28:ae:24:8f:9e:38:3c:e8:de: 9a:65:e3:a6:61:56:2f:71:b1:76:cf:5a:13:9f:5d:95:0e:46: 3c:d3:2b:85:be:43:16:a2:fa:25:13:24:36:5f:e4:91:e8:2a: b9:da:d8:37:42:99:5e:eb:00:30:9d:bd:58:c9:97:00:e8:35: 74:37:23:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMoBiLhr4HdrUPhgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk NDNjYTY4MzAtYjE2OC00MDFkLThkMmItY2E4MmE2MDE5NDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nu49NJRG3iV+Qj/DHO9AFQ8uT0pfvpGLCs8 Q3rEW6nEGo5p7uI7bSRwOQ8rLb4RNrSzCSvXiLOSdnskeEecQ3lb7aK8CCOeREBG f9dPlNHW+uEfPA1AD9z3fHpK4ZIVLMA86LMLNkt+TzNcMFBnByGGv25MjOYdD2Kt nmzuKsa93nqF7XBh8AABjhqetixMiMKW1gokRACCbjpXSfQ3drPNGEJCm6z8J6jc WyMlLQJbTOyjzukVtdlceg+IGxfv2PcGl/fdrRsfgiynM+4ovVzFUQOHV39GmMKY sGO0w+fyEWPvpVRRQ7Kk2YcS10ZM6JTrN3Gx+1pUGDL6ulviQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJ6AQmjgkafViYawQa7f3ZvGLnoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNmI0ZDhhZTUtYmE2Ni0z ZjZjLWJmNzctNDllZDhkYmFjOThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnwKDy2zUA3+8ZIaFocqEhaDNYmUIQutH0rz2CFZ0IOfpBHq2o6XsO8 QR2yg+pG4m9Ak5c5Hx5ijUXb+hfUMTjo5XS+FZycASEr1kkAt3lglnhkHEMlFDjJ sFouw6mxvbh03aTJ+N2SY5X0iSbf2Vrma29Ar/oTunztsBrt/qf7OeVvWgkvGHBm Ut1veSNYwwLFCKOHDWuNszzPadSVyKI0ouUNyS98N3oiDd1xDFsbkg8G8AFMia5y eHwYziiuJI+eODzo3ppl46ZhVi9xsXbPWhOfXZUORjzTK4W+Qxai+iUTJDZf5JHo Krna2DdCmV7rADCdvVjJlwDoNXQ3Iy0= -----END CERTIFICATE-----Generated at Sat Nov 1 09:59:16 2025 by rpki-client