$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/721533ef-e8d8-339f-a6fc-095c78b535c0.roa File: 721533ef-e8d8-339f-a6fc-095c78b535c0.roa (raw, json) Hash identifier: ma1oHZLiDJ/NFhU0224LEoOiAoVjSwIGV3Gzvib9hpw= Subject key identifier: 2F:E2:85:3A:4A:5D:63:A2:E7:F2:03:6E:B0:01:C5:45:6A:B2:40:1B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BABFD361F38BFF97FBA91E980 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/721533ef-e8d8-339f-a6fc-095c78b535c0.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.69.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:36:1f:38:bf:f9:7f:ba:91:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=c4c49f91-f14c-488c-9183-be8d3f618f5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:be:0d:66:36:26:54:76:51:d8:43:a8:73:6b: 76:ba:97:3d:6f:13:59:a3:ac:4b:ac:4e:2d:81:9a: 75:5a:a4:f2:c3:7f:13:2e:be:e1:f1:7c:52:e3:4e: 9b:dd:ae:29:59:3d:d0:7a:60:a1:26:b3:e7:26:86: 25:a5:c2:a8:80:c7:2f:e6:53:32:d2:29:e3:9b:83: 2c:cd:a2:a8:d0:fd:48:db:38:aa:25:cc:9a:96:f2: ab:1d:1a:88:32:e2:be:01:ae:09:1a:f3:ef:21:92: b4:2c:bd:69:6d:01:ae:0c:25:35:84:43:bf:29:e9: 87:ca:5a:25:7c:f5:25:57:95:b2:82:73:50:eb:2c: 4f:d0:03:e0:48:31:bb:ed:cc:b4:1b:dd:44:3d:f5: bd:c1:48:78:31:44:e4:10:b6:50:fc:7d:1f:49:ee: 8f:d5:d7:b3:6e:83:fb:0c:00:d4:0a:3e:83:32:32: d5:c8:2d:a4:e5:23:01:f6:b8:14:50:e3:e6:09:11: da:83:46:91:78:36:2b:87:9e:3c:ed:5c:75:4c:75: 27:ab:49:62:8f:18:b2:13:9f:d4:dd:e3:6f:0d:30: 90:5b:20:90:79:42:73:ac:70:92:a8:f8:87:f5:1b: 9b:c1:00:e3:81:8a:eb:db:84:84:a8:8f:b9:21:ed: 9c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:E2:85:3A:4A:5D:63:A2:E7:F2:03:6E:B0:01:C5:45:6A:B2:40:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/721533ef-e8d8-339f-a6fc-095c78b535c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:4e:b9:f9:f8:38:06:c5:14:68:17:e3:42:99:7b:60:d9:8f: d3:69:43:00:1b:fa:3d:65:35:e4:72:35:42:39:4d:96:86:d9: 56:b5:ba:9d:44:5f:05:aa:25:04:ce:8a:54:1c:ce:60:0a:32: 99:43:74:27:c9:d4:0a:94:49:b0:45:59:e8:f2:f3:73:8d:28: 7e:f1:70:36:eb:d0:eb:2d:ec:5f:85:e2:4a:11:2b:45:3b:5b: 6a:d5:5d:f3:84:15:98:ea:f7:b8:d1:cc:9f:70:ae:67:be:31: 29:b2:c6:44:9f:1f:73:64:24:53:4f:c3:40:9e:10:60:9b:d2: e7:ca:ec:98:8c:21:0a:ed:0c:f9:03:b2:2e:cd:aa:4d:02:37: 07:9f:5a:fb:2e:9a:75:c1:e2:eb:d4:cd:aa:3f:8e:24:86:32: 14:29:5d:46:6c:14:8d:48:6d:1c:19:e0:d0:a7:fc:59:55:ba: 41:e4:3f:94:6a:39:cd:e1:0d:8c:a7:bc:46:5d:06:ce:09:20: 97:92:0d:ab:26:1f:ee:7a:7e:14:a6:27:11:c4:4f:f2:a4:c5: cd:f1:b8:6f:08:80:4a:92:da:28:b8:c5:67:4c:74:f9:68:9a: 25:f9:c1:44:2b:40:bf:bb:48:97:59:69:43:39:b4:80:32:b5: 71:a3:d9:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/TYfOL/5f7qR6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk YzRjNDlmOTEtZjE0Yy00ODhjLTkxODMtYmU4ZDNmNjE4ZjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL4NZjYmVHZR2EOoc2t2upc9bxNZo6xLrE4t gZp1WqTyw38TLr7h8XxS406b3a4pWT3QemChJrPnJoYlpcKogMcv5lMy0injm4Ms zaKo0P1I2ziqJcyalvKrHRqIMuK+Aa4JGvPvIZK0LL1pbQGuDCU1hEO/KemHylol fPUlV5WygnNQ6yxP0APgSDG77cy0G91EPfW9wUh4MUTkELZQ/H0fSe6P1dezboP7 DADUCj6DMjLVyC2k5SMB9rgUUOPmCRHag0aReDYrh5487Vx1THUnq0lijxiyE5/U 3eNvDTCQWyCQeUJzrHCSqPiH9RubwQDjgYrr24SEqI+5Ie2c/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/ihTpKXWOi5/IDbrABxUVqskAbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzIxNTMzZWYtZThkOC0z MzlmLWE2ZmMtMDk1Yzc4YjUzNWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEWhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNOufn4OAbFFGgX40KZe2DZj9NpQwAb+j1lNeRyNUI5TZaG2Va1up1E XwWqJQTOilQczmAKMplDdCfJ1AqUSbBFWejy83ONKH7xcDbr0Ost7F+F4koRK0U7 W2rVXfOEFZjq97jRzJ9wrme+MSmyxkSfH3NkJFNPw0CeEGCb0ufK7JiMIQrtDPkD si7Nqk0CNwefWvsumnXB4uvUzao/jiSGMhQpXUZsFI1IbRwZ4NCn/FlVukHkP5Rq Oc3hDYynvEZdBs4JIJeSDasmH+56fhSmJxHET/Kkxc3xuG8IgEqS2ii4xWdMdPlo miX5wUQrQL+7SJdZaUM5tIAytXGj2fs= -----END CERTIFICATE-----Generated at Sat Nov 1 10:03:03 2025 by rpki-client