$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7ae52762-9596-3548-a3c2-3fa8c0fa3de8.roa File: 7ae52762-9596-3548-a3c2-3fa8c0fa3de8.roa (raw, json) Hash identifier: 4jfRSHbGAbSn6TIKCvqX+wH6MFM3g2cfwb0POctW4x8= Subject key identifier: 7D:5B:E8:09:52:B7:38:3E:89:B0:25:CC:11:74:8E:3D:C4:AD:BF:01 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA9327EA1E6741F19E4F28D00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7ae52762-9596-3548-a3c2-3fa8c0fa3de8.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.64.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:7e:a1:e6:74:1f:19:e4:f2:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=374aa0bf-c783-43e7-9c89-b1d2968d6f4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:07:e6:06:be:9c:14:60:59:0c:e6:29:04:a7: 74:fc:97:f9:04:fa:29:cb:5a:b1:30:db:fd:38:18: b8:39:80:ef:b0:fa:5c:ed:58:9f:be:41:ae:0d:c4: 02:ee:46:e0:57:32:0c:89:a6:20:68:df:ec:1b:82: 5e:8e:d3:3c:2e:71:0d:f9:e8:81:18:c1:05:06:81: ff:c3:a5:08:f3:5d:68:d4:38:4e:10:60:ac:9f:3f: d2:6f:0a:fe:69:ba:f4:81:7f:d9:dc:cf:64:c6:bd: 70:f7:52:b8:e8:a6:0b:f0:cb:35:48:aa:e5:c2:f5: a8:7f:49:1f:28:a5:68:36:70:bb:fc:b8:9b:a6:f8: 2f:84:de:9d:41:59:3b:64:91:60:80:04:ff:a8:7e: e3:e6:a8:8c:d3:35:c4:d8:b1:31:db:2d:9a:5b:da: 35:a2:87:6b:24:fd:f8:28:32:b6:f0:50:ab:08:c1: 6b:e7:76:55:43:0f:f2:ee:b5:de:0b:5e:3d:89:ad: 62:38:8e:d1:f1:54:96:b0:e7:b8:eb:bf:80:62:b9: 91:2d:f5:b3:be:e4:05:4a:42:2b:15:f2:4f:b7:39: f8:af:79:b3:67:d1:5c:65:28:90:98:38:e0:f3:83: 7b:6c:db:83:a2:b4:54:06:a7:73:ec:2d:45:10:ec: e1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:5B:E8:09:52:B7:38:3E:89:B0:25:CC:11:74:8E:3D:C4:AD:BF:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7ae52762-9596-3548-a3c2-3fa8c0fa3de8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:48:01:65:d6:55:7f:e1:e6:42:39:75:21:0b:26:97:5b:94: f2:6a:a1:47:5c:f6:5a:3c:79:30:94:17:62:ae:9e:86:2b:9a: 8d:2f:d3:ea:a3:b2:c1:df:96:22:3f:3b:47:99:e1:da:0a:22: cd:82:d3:41:c6:b6:38:74:c1:00:00:d9:67:e8:b1:6d:32:3b: f3:87:8b:40:5e:d1:6d:f7:d8:ea:22:c2:d3:45:21:2f:83:8c: e3:bb:b3:b2:50:d4:7a:60:1a:f4:c7:b7:d6:86:68:62:e8:22: cf:90:6e:b9:f4:af:a3:f7:45:ef:52:10:57:a3:dc:b8:3e:58: b2:86:7e:83:95:c7:01:2f:a8:97:43:ee:23:fd:04:bc:9c:a4: f2:d5:c0:6b:75:52:35:7a:b4:05:ef:1e:2c:9e:f0:d0:06:12: a1:f1:f8:a1:37:fe:09:37:c3:cd:5e:67:0e:58:b9:fb:a6:77: 47:47:68:4e:2a:4a:e6:d1:df:4f:0f:38:5c:4d:8d:a2:01:e6: 17:d2:e9:72:c6:0b:97:2c:48:a7:0a:df:b0:41:fc:e8:3e:ce: 62:5a:a3:31:2b:1f:e6:52:82:d3:81:d4:a5:5d:12:e2:1e:41: 35:83:e2:ab:9f:17:c6:ee:86:3e:9b:86:83:ac:1c:45:38:06: e7:a2:00:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMn6h5nQfGeTyjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk Mzc0YWEwYmYtYzc4My00M2U3LTljODktYjFkMjk2OGQ2ZjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAfmBr6cFGBZDOYpBKd0/Jf5BPopy1qxMNv9 OBi4OYDvsPpc7VifvkGuDcQC7kbgVzIMiaYgaN/sG4JejtM8LnEN+eiBGMEFBoH/ w6UI811o1DhOEGCsnz/Sbwr+abr0gX/Z3M9kxr1w91K46KYL8Ms1SKrlwvWof0kf KKVoNnC7/LibpvgvhN6dQVk7ZJFggAT/qH7j5qiM0zXE2LEx2y2aW9o1oodrJP34 KDK28FCrCMFr53ZVQw/y7rXeC149ia1iOI7R8VSWsOe467+AYrmRLfWzvuQFSkIr FfJPtzn4r3mzZ9FcZSiQmDjg84N7bNuDorRUBqdz7C1FEOzh/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH1b6AlStzg+ibAlzBF0jj3Erb8BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvN2FlNTI3NjItOTU5Ni0z NTQ4LWEzYzItM2ZhOGMwZmEzZGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1IAWXWVX/h5kI5dSELJpdblPJqoUdc9lo8eTCUF2KunoYrmo0v0+qj ssHfliI/O0eZ4doKIs2C00HGtjh0wQAA2WfosW0yO/OHi0Be0W332OoiwtNFIS+D jOO7s7JQ1HpgGvTHt9aGaGLoIs+Qbrn0r6P3Re9SEFej3Lg+WLKGfoOVxwEvqJdD 7iP9BLycpPLVwGt1UjV6tAXvHiye8NAGEqHx+KE3/gk3w81eZw5Yufumd0dHaE4q SubR308POFxNjaIB5hfS6XLGC5csSKcK37BB/Og+zmJaozErH+ZSgtOB1KVdEuIe QTWD4qufF8buhj6bhoOsHEU4BueiACw= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:56 2025 by rpki-client