$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/797dc0f9-8fa9-347e-ab47-5a2d9cdc8fb7.roa File: 797dc0f9-8fa9-347e-ab47-5a2d9cdc8fb7.roa (raw, json) Hash identifier: ykWLjDhn4VACcCe5ZN5r0w5St1fOQh8Lv2Ik8xBZCt0= Subject key identifier: 04:E8:95:79:64:D6:6D:D9:32:C4:C3:2B:B7:08:72:FB:54:A5:C8:D0 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BABFD343D475CB29165F1E100 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/797dc0f9-8fa9-347e-ab47-5a2d9cdc8fb7.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.69.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:34:3d:47:5c:b2:91:65:f1:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=d08231d1-7c8f-46f0-bad5-47395890b39c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:98:92:7f:53:81:68:73:1d:c9:04:6c:35:4b: 57:5e:f1:7d:98:aa:0e:5d:03:84:71:72:17:00:ad: e4:81:fe:d5:9e:92:f6:19:a3:4d:63:35:dd:0f:02: 27:80:de:d3:93:07:41:28:0c:aa:64:05:1e:53:31: 40:73:56:d8:5c:22:97:48:3b:1b:01:f0:42:e9:b6: 11:1b:17:c9:a8:00:5e:ef:7d:23:c5:ab:10:25:d9: db:46:1e:8e:ee:12:3d:f9:29:ac:b3:1b:1e:6e:dc: 9e:1a:a4:52:44:06:c6:58:fd:ae:62:d1:d1:c9:61: 8f:29:f2:dd:24:1c:0f:54:29:b5:8c:93:87:b4:ce: 07:b4:5c:d0:cb:e4:b1:ab:76:5e:24:05:15:7c:a1: 41:b7:da:b8:95:49:8a:a2:6f:50:2a:0a:06:62:28: b0:c8:27:4f:04:65:70:2f:9c:18:9a:23:e1:0c:ae: 92:48:81:db:71:fe:27:36:aa:e2:7b:c3:af:c6:99: df:59:93:3d:02:10:73:5e:95:d9:4c:3c:58:10:07: 97:63:72:fd:eb:e7:c8:37:f1:2f:43:72:08:8b:49: 61:2a:f3:1d:57:9d:ab:b1:ad:0a:f4:4e:69:45:47: 42:0e:da:81:76:88:f1:01:ce:7f:d3:5f:1a:4c:24: a7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E8:95:79:64:D6:6D:D9:32:C4:C3:2B:B7:08:72:FB:54:A5:C8:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/797dc0f9-8fa9-347e-ab47-5a2d9cdc8fb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:82:4d:90:c2:da:37:66:8d:b4:c9:5c:47:93:dc:cb:3b:c5: cd:c3:bd:f6:95:6a:c7:b6:1a:3c:58:fd:8b:60:c2:f4:14:64: a8:72:4e:7b:aa:61:ce:6f:72:b3:ff:84:07:c1:41:ec:31:8b: 30:a1:a6:a5:c6:ae:c4:1a:5c:5a:85:9f:4c:c8:85:bd:ce:e5: f3:37:b3:1e:0f:b1:ad:7b:6c:f6:9c:05:45:71:bd:ec:5d:4a: ae:bb:c4:30:5b:35:e7:82:52:4f:44:95:0f:59:46:27:5f:1b: b9:38:4b:24:0d:1f:df:29:d0:4c:aa:68:94:91:37:b1:ed:f4: 58:9b:65:17:ff:6b:2f:be:69:6a:4f:13:c7:8b:39:46:a4:86: 94:53:c0:2e:05:8b:ea:38:60:0a:fc:4c:a0:7b:61:7d:24:b3: f7:02:a6:38:8c:6d:13:65:e2:d2:af:b8:52:d4:97:f0:f0:43: f3:b0:30:fc:a6:54:31:2e:40:c1:f5:b2:e6:23:db:7d:da:79: db:8a:bb:f0:21:2a:60:5e:c3:92:04:0d:f0:e6:1c:a9:42:08: 40:e8:8a:8d:05:aa:41:d4:ef:8c:4a:a0:8a:cf:b6:19:1c:3f: a8:e6:96:d4:31:29:cc:a2:e6:e0:de:c1:a1:6b:50:02:32:26: 82:4e:95:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/TQ9R1yykWXx4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk ZDA4MjMxZDEtN2M4Zi00NmYwLWJhZDUtNDczOTU4OTBiMzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1piSf1OBaHMdyQRsNUtXXvF9mKoOXQOEcXIX AK3kgf7VnpL2GaNNYzXdDwIngN7TkwdBKAyqZAUeUzFAc1bYXCKXSDsbAfBC6bYR GxfJqABe730jxasQJdnbRh6O7hI9+SmssxsebtyeGqRSRAbGWP2uYtHRyWGPKfLd JBwPVCm1jJOHtM4HtFzQy+Sxq3ZeJAUVfKFBt9q4lUmKom9QKgoGYiiwyCdPBGVw L5wYmiPhDK6SSIHbcf4nNqrie8OvxpnfWZM9AhBzXpXZTDxYEAeXY3L96+fIN/Ev Q3IIi0lhKvMdV52rsa0K9E5pRUdCDtqBdojxAc5/018aTCSnlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATolXlk1m3ZMsTDK7cIcvtUpcjQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzk3ZGMwZjktOGZhOS0z NDdlLWFiNDctNWEyZDljZGM4ZmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEVZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqCTZDC2jdmjbTJXEeT3Ms7xc3DvfaVase2GjxY/YtgwvQUZKhyTnuq Yc5vcrP/hAfBQewxizChpqXGrsQaXFqFn0zIhb3O5fM3sx4Psa17bPacBUVxvexd Sq67xDBbNeeCUk9ElQ9ZRidfG7k4SyQNH98p0EyqaJSRN7Ht9FibZRf/ay++aWpP E8eLOUakhpRTwC4Fi+o4YAr8TKB7YX0ks/cCpjiMbRNl4tKvuFLUl/DwQ/OwMPym VDEuQMH1suYj233aeduKu/AhKmBew5IEDfDmHKlCCEDoio0FqkHU74xKoIrPthkc P6jmltQxKcyi5uDewaFrUAIyJoJOlXc= -----END CERTIFICATE-----Generated at Sat Nov 1 15:23:42 2025 by rpki-client