$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/787e13ef-670b-3b46-a9b2-cff42b10266a.roa File: 787e13ef-670b-3b46-a9b2-cff42b10266a.roa (raw, json) Hash identifier: 9ajf45VhLsRODfs1QpVZlQX41uNHhtI4w3/Hcncsx40= Subject key identifier: 1C:9A:B0:F7:4A:39:6C:89:3D:98:05:AE:5A:D3:64:30:36:68:FD:B6 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BABFD326FEE5B82DAAD2E68E0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/787e13ef-670b-3b46-a9b2-cff42b10266a.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.69.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:32:6f:ee:5b:82:da:ad:2e:68:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=4c3b763a-fc84-4d3e-b9dc-12c873868791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:77:3d:1a:e6:1a:db:0d:63:6f:e5:67:d1:18: cb:af:ea:fa:29:15:3f:93:46:ca:ae:04:9c:79:69: 49:c6:0a:90:97:07:ee:35:a3:47:58:6b:88:14:86: a5:3c:2b:48:41:8b:2e:49:cd:3a:0b:65:f4:28:7e: ee:76:3b:8b:b8:e5:55:67:12:43:a0:da:21:1e:45: 4f:38:6c:d0:5f:83:14:1d:8f:07:23:dd:4e:5b:f9: 69:49:f5:b2:7f:a9:82:3e:f5:f7:a1:a7:8c:e5:ca: 98:da:5c:04:fd:5d:55:03:40:b3:1c:b9:93:82:bd: 95:b9:d9:27:91:2b:0b:7d:a5:a2:2f:11:e0:bf:36: f5:b1:ca:48:2c:c0:9e:c6:9b:d0:25:4d:f8:fe:8a: 82:68:b2:ed:7e:b8:28:17:bc:52:dc:f1:da:75:2c: 3a:0e:67:65:fe:86:3a:02:1e:6d:8f:b7:1d:27:10: a7:fc:dd:43:fe:7f:54:ce:b4:3c:82:cb:f9:2b:6d: 36:7c:22:4a:d0:56:0f:a7:54:ae:7c:39:45:7b:4e: b9:92:62:27:ef:07:e1:7d:13:0d:72:07:ae:ba:c5: 44:b5:e3:55:6f:a8:66:d2:22:20:00:07:bc:4c:75: 30:b8:27:35:3c:c3:6f:aa:ab:3e:1e:3e:b2:23:ba: ed:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:9A:B0:F7:4A:39:6C:89:3D:98:05:AE:5A:D3:64:30:36:68:FD:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/787e13ef-670b-3b46-a9b2-cff42b10266a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:52:78:92:8b:69:bd:cb:66:12:8c:6e:e0:66:d0:45:70:0e: 9a:f0:35:d5:3a:7a:34:e1:07:f1:90:6f:74:3c:5a:1f:0e:f0: 60:78:4f:7f:99:57:e6:3d:84:3a:7d:a0:27:7c:28:17:ac:7c: 69:5f:62:c1:54:cc:37:88:81:cc:f8:1c:39:f9:85:50:b7:1f: f9:52:98:06:84:3e:87:90:04:04:90:b8:5a:9d:82:c4:ec:47: 84:88:e2:d9:80:c7:42:ee:ba:29:1b:8d:cb:c1:a3:6f:67:62: 10:c3:54:b7:04:45:e1:6d:7e:ff:0b:9f:73:41:47:0b:cd:93: 29:f4:35:5c:a1:97:35:57:df:a0:d9:61:0c:01:f8:21:4c:f9: 7e:d0:77:c4:de:ac:15:28:6d:7c:8c:72:09:80:19:35:03:66: 43:ce:18:0b:f2:f1:1c:bb:55:0b:d7:51:ef:68:f0:9c:3c:72: 51:2b:39:19:d6:32:13:37:82:4e:8c:d5:0e:ae:c0:31:be:c0: 25:dd:c2:11:35:3f:c7:56:16:b4:3b:9b:5e:81:be:44:71:05: f6:35:b7:a6:ab:1b:4a:c0:e4:98:40:8c:91:9c:d4:d4:f7:23: f2:5e:d8:48:72:b6:1b:1d:d7:1b:37:53:c4:0c:08:4a:8d:11: 6b:ae:a5:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/TJv7luC2q0uaOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk NGMzYjc2M2EtZmM4NC00ZDNlLWI5ZGMtMTJjODczODY4NzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHc9GuYa2w1jb+Vn0RjLr+r6KRU/k0bKrgSc eWlJxgqQlwfuNaNHWGuIFIalPCtIQYsuSc06C2X0KH7udjuLuOVVZxJDoNohHkVP OGzQX4MUHY8HI91OW/lpSfWyf6mCPvX3oaeM5cqY2lwE/V1VA0CzHLmTgr2Vudkn kSsLfaWiLxHgvzb1scpILMCexpvQJU34/oqCaLLtfrgoF7xS3PHadSw6Dmdl/oY6 Ah5tj7cdJxCn/N1D/n9UzrQ8gsv5K202fCJK0FYPp1SufDlFe065kmIn7wfhfRMN cgeuusVEteNVb6hm0iIgAAe8THUwuCc1PMNvqqs+Hj6yI7rtDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFByasPdKOWyJPZgFrlrTZDA2aP22MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzg3ZTEzZWYtNjcwYi0z YjQ2LWE5YjItY2ZmNDJiMTAyNjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5SeJKLab3LZhKMbuBm0EVwDprwNdU6ejThB/GQb3Q8Wh8O8GB4T3+Z V+Y9hDp9oCd8KBesfGlfYsFUzDeIgcz4HDn5hVC3H/lSmAaEPoeQBASQuFqdgsTs R4SI4tmAx0LuuikbjcvBo29nYhDDVLcEReFtfv8Ln3NBRwvNkyn0NVyhlzVX36DZ YQwB+CFM+X7Qd8TerBUobXyMcgmAGTUDZkPOGAvy8Ry7VQvXUe9o8Jw8clErORnW MhM3gk6M1Q6uwDG+wCXdwhE1P8dWFrQ7m16BvkRxBfY1t6arG0rA5JhAjJGc1NT3 I/Je2Ehythsd1xs3U8QMCEqNEWuupaA= -----END CERTIFICATE-----Generated at Sat Nov 1 10:03:20 2025 by rpki-client