$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7aaf5e6b-1161-3340-b49a-e30753b858d7.roa File: 7aaf5e6b-1161-3340-b49a-e30753b858d7.roa (raw, json) Hash identifier: 5kpmuBVLwVlTNALMl5buSgNmVnXlTUJMXg8iQh/gRss= Subject key identifier: 97:5D:EE:50:4E:E9:0B:83:06:5F:EB:C5:8F:B1:01:1D:E5:CF:E0:DD Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BABFD37A1BD168A9F9CB7D180 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7aaf5e6b-1161-3340-b49a-e30753b858d7.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.69.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:37:a1:bd:16:8a:9f:9c:b7:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=a192d61e-afcf-435f-9e4d-362140f7c8df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:44:1d:e5:0d:92:65:c6:0f:89:f3:9c:b5:79: 6d:87:6a:f9:2d:a6:a3:48:17:f0:b0:58:c8:28:21: cf:42:17:6b:e3:9d:2a:10:78:93:19:46:cf:19:6e: 81:67:f1:20:61:c2:d8:8f:6c:f0:e8:ef:18:e9:84: d1:90:e8:11:79:0c:ab:8a:65:7d:16:be:41:8f:6a: 23:41:e5:62:a1:18:11:34:c8:4a:4c:a8:88:6c:d1: 4a:63:f9:a3:f0:36:97:76:0e:64:11:80:54:5d:e3: 26:e4:54:a6:e4:03:07:86:d1:ce:26:0b:ea:17:f4: 7e:e5:0b:20:f5:3f:ac:a4:61:b5:a2:13:cb:2b:0a: 46:3a:d8:c7:dd:a1:ce:d6:f7:bb:97:bd:fb:1c:d7: a6:cc:b2:7f:42:f9:04:32:47:79:2f:ee:ef:68:5e: 6f:fc:9c:67:ec:58:25:a2:ec:ae:da:f1:85:9d:9d: 83:76:3b:1b:8c:54:fa:9d:ce:ff:69:a7:a1:6f:b6: 65:c1:21:b9:2d:67:ae:56:39:74:2b:ab:c6:a2:e4: ca:b4:87:3d:24:5a:09:26:80:bc:03:7a:a0:af:e4: 26:db:f7:e0:21:4f:6f:84:a7:68:08:5c:f1:81:2c: 56:89:8a:5c:65:bd:38:e7:77:cf:9a:8c:da:bf:e9: a5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:5D:EE:50:4E:E9:0B:83:06:5F:EB:C5:8F:B1:01:1D:E5:CF:E0:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7aaf5e6b-1161-3340-b49a-e30753b858d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:f8:bb:da:bb:b2:4f:97:74:f2:e4:da:dc:97:fd:57:7e:88: a2:0e:05:a5:25:eb:0f:e0:88:86:10:3e:a2:da:c2:d9:37:a7: 0d:ab:85:18:6a:27:5f:02:da:21:31:49:95:14:1e:85:51:5a: b4:52:54:81:2b:a6:f9:63:fb:f2:97:33:54:13:91:35:26:22: ae:e1:8d:8a:7a:32:9f:bd:5d:a5:5e:62:df:2f:fb:a3:77:21: e1:74:f6:38:89:05:6a:ba:a3:0c:63:88:20:b4:4a:dd:24:58: ee:19:bd:9a:97:bc:28:27:40:16:c4:b1:b5:ba:11:a1:66:48: 9a:e5:57:3f:0d:5e:8b:bc:16:06:48:ee:45:97:40:61:ea:2c: d8:bf:e4:44:d8:13:49:80:87:cd:1a:a2:9c:24:d5:51:f9:73: 1c:30:6e:60:f1:c0:f1:cd:cd:fe:b7:8c:8e:09:5e:7e:3c:e4: 45:f7:f5:06:78:ca:ac:6f:e8:b0:46:4d:ff:e8:16:5e:30:c8: e0:bb:4f:d5:5d:81:58:87:5b:6d:de:9f:44:ca:ca:96:0d:4b: 38:7e:5d:34:17:42:88:be:3b:36:01:75:c9:04:90:7d:7a:4e: 80:88:62:62:b1:12:5c:89:b6:4d:ef:e6:aa:c8:ff:cf:d9:21: b1:ab:62:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/TehvRaKn5y30YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk YTE5MmQ2MWUtYWZjZi00MzVmLTllNGQtMzYyMTQwZjdjOGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUQd5Q2SZcYPifOctXlth2r5LaajSBfwsFjI KCHPQhdr450qEHiTGUbPGW6BZ/EgYcLYj2zw6O8Y6YTRkOgReQyrimV9Fr5Bj2oj QeVioRgRNMhKTKiIbNFKY/mj8DaXdg5kEYBUXeMm5FSm5AMHhtHOJgvqF/R+5Qsg 9T+spGG1ohPLKwpGOtjH3aHO1ve7l737HNemzLJ/QvkEMkd5L+7vaF5v/Jxn7Fgl ouyu2vGFnZ2DdjsbjFT6nc7/aaehb7ZlwSG5LWeuVjl0K6vGouTKtIc9JFoJJoC8 A3qgr+Qm2/fgIU9vhKdoCFzxgSxWiYpcZb0453fPmozav+ml+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdd7lBO6QuDBl/rxY+xAR3lz+DdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvN2FhZjVlNmItMTE2MS0z MzQwLWI0OWEtZTMwNzUzYjg1OGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAT4u9q7sk+XdPLk2tyX/Vd+iKIOBaUl6w/giIYQPqLawtk3pw2rhRhq J18C2iExSZUUHoVRWrRSVIErpvlj+/KXM1QTkTUmIq7hjYp6Mp+9XaVeYt8v+6N3 IeF09jiJBWq6owxjiCC0St0kWO4ZvZqXvCgnQBbEsbW6EaFmSJrlVz8NXou8FgZI 7kWXQGHqLNi/5ETYE0mAh80aopwk1VH5cxwwbmDxwPHNzf63jI4JXn485EX39QZ4 yqxv6LBGTf/oFl4wyOC7T9VdgViHW23en0TKypYNSzh+XTQXQoi+OzYBdckEkH16 ToCIYmKxElyJtk3v5qrI/8/ZIbGrYmA= -----END CERTIFICATE-----Generated at Sat Nov 1 10:00:46 2025 by rpki-client