$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/76e7108e-50ed-3796-b172-e968e0bcb786.roa File: 76e7108e-50ed-3796-b172-e968e0bcb786.roa (raw, json) Hash identifier: cMyzI/2k6QNwGhvtQycXPYeYQMttGKV/uquQsm/y61k= Subject key identifier: 28:BB:61:B8:65:D0:76:EC:D3:24:D6:F6:26:6C:EC:27:4D:7D:FD:C8 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA9327DE16B347EAC556A7C80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/76e7108e-50ed-3796-b172-e968e0bcb786.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.64.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:7d:e1:6b:34:7e:ac:55:6a:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=52abefc5-d83e-4ec2-993b-cd9155e4b4c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4e:b6:e5:c3:96:0d:bf:06:04:4c:53:7a:3a: da:8c:e5:d5:ef:a4:a2:46:20:91:f0:8a:08:2e:73: b3:bf:1e:d5:11:db:a3:db:27:89:43:50:14:1e:e7: 12:a6:94:cd:7f:53:a9:97:f4:df:48:f5:e7:12:e2: 3e:05:ec:a6:9c:3b:2b:22:fd:9c:27:87:cd:e0:90: 60:7b:89:51:fd:37:7c:74:4c:3f:ac:9e:34:9d:dc: 6d:6e:d8:94:ef:46:93:27:1e:6a:d2:3c:92:74:ac: f4:16:f1:3b:44:9a:bf:cd:bd:fc:35:f1:78:eb:09: 4d:dc:c9:9a:1a:77:d5:c7:b1:46:9d:3f:71:aa:20: 1f:66:8f:67:7d:0b:57:5f:1b:e7:af:ed:09:69:2c: 51:61:37:bf:c1:92:c2:ce:2a:47:2d:ef:70:bc:f0: 4d:8e:b2:02:0f:2d:f8:ee:d4:17:b3:7b:67:2e:23: c8:fe:af:6c:3e:88:82:8d:af:6b:ff:b7:13:77:c8: 2a:a0:71:ee:90:f6:e4:b1:45:45:da:ce:c6:53:a2: 70:cd:91:c7:25:ba:7a:37:a9:45:b3:9b:a6:bc:e1: 01:23:55:76:48:0c:78:d3:81:3e:f2:04:c7:46:ad: 57:1a:37:80:68:36:7c:ce:f1:65:ad:e5:56:db:74: b7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:BB:61:B8:65:D0:76:EC:D3:24:D6:F6:26:6C:EC:27:4D:7D:FD:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/76e7108e-50ed-3796-b172-e968e0bcb786.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:4a:f3:6d:9b:62:70:60:e5:9d:d7:9c:27:ba:d7:23:19:cb: cb:76:05:60:7a:cc:45:0e:69:2d:d0:b1:7f:04:0e:c9:06:8a: 2c:1a:49:73:06:b1:db:5d:33:de:93:da:3f:34:16:86:21:3d: a5:8e:38:32:7a:8c:77:7a:8e:e4:09:dc:86:94:8c:71:91:0d: e5:6e:4d:be:70:86:64:9d:ef:77:00:54:00:7b:49:86:bb:62: f0:e3:00:f6:df:98:ad:96:4b:c9:45:4b:16:45:94:04:0e:4c: 95:53:48:50:a1:29:a5:5a:2c:33:46:d5:9d:a1:42:c2:8b:63: d6:b4:0e:b4:48:0c:d4:ed:de:6e:1e:9a:8a:91:d0:85:0b:c7: 9a:a2:67:a0:b2:41:d9:fa:b2:14:87:dd:27:b6:9a:e0:1b:5f: 95:20:26:02:66:ec:0a:ec:04:c2:4b:6e:73:5f:30:c6:8e:7a: ff:53:b0:b9:16:26:b6:03:fd:32:d7:08:9f:c7:d3:db:e9:af: 7e:5c:1d:57:01:4a:cd:61:56:af:8a:ee:71:1f:7d:52:09:4e: a1:8b:be:39:51:63:89:15:fc:bc:ee:9f:da:93:99:97:9a:69: 5c:6f:46:de:1e:4e:e6:f5:6c:e3:e1:b8:07:85:06:48:42:74: 7e:1c:ea:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMn3hazR+rFVqfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk NTJhYmVmYzUtZDgzZS00ZWMyLTk5M2ItY2Q5MTU1ZTRiNGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtE625cOWDb8GBExTejrajOXV76SiRiCR8IoI LnOzvx7VEduj2yeJQ1AUHucSppTNf1Opl/TfSPXnEuI+BeymnDsrIv2cJ4fN4JBg e4lR/Td8dEw/rJ40ndxtbtiU70aTJx5q0jySdKz0FvE7RJq/zb38NfF46wlN3Mma GnfVx7FGnT9xqiAfZo9nfQtXXxvnr+0JaSxRYTe/wZLCzipHLe9wvPBNjrICDy34 7tQXs3tnLiPI/q9sPoiCja9r/7cTd8gqoHHukPbksUVF2s7GU6JwzZHHJbp6N6lF s5umvOEBI1V2SAx404E+8gTHRq1XGjeAaDZ8zvFlreVW23S3DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCi7Ybhl0Hbs0yTW9iZs7CdNff3IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzZlNzEwOGUtNTBlZC0z Nzk2LWIxNzItZTk2OGUwYmNiNzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5K822bYnBg5Z3XnCe61yMZy8t2BWB6zEUOaS3QsX8EDskGiiwaSXMG sdtdM96T2j80FoYhPaWOODJ6jHd6juQJ3IaUjHGRDeVuTb5whmSd73cAVAB7SYa7 YvDjAPbfmK2WS8lFSxZFlAQOTJVTSFChKaVaLDNG1Z2hQsKLY9a0DrRIDNTt3m4e moqR0IULx5qiZ6CyQdn6shSH3Se2muAbX5UgJgJm7ArsBMJLbnNfMMaOev9TsLkW JrYD/TLXCJ/H09vpr35cHVcBSs1hVq+K7nEffVIJTqGLvjlRY4kV/Lzun9qTmZea aVxvRt4eTub1bOPhuAeFBkhCdH4c6ko= -----END CERTIFICATE-----Generated at Sat Nov 1 10:01:33 2025 by rpki-client