$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7cb40454-1108-3ee4-974e-253eff74a4e7.roa File: 7cb40454-1108-3ee4-974e-253eff74a4e7.roa (raw, json) Hash identifier: dQQypHSlS+YiM99J5HFK1xA+JqEgncNnTvAbP7EW8+M= Subject key identifier: 43:63:33:62:F6:E7:6A:EA:A7:E1:E2:B8:57:6B:F7:2B:D0:48:67:C7 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BABFD37954226CDFACEBB1800 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7cb40454-1108-3ee4-974e-253eff74a4e7.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.69.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:37:95:42:26:cd:fa:ce:bb:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=55cbce31-29ae-46b5-bf32-1c80c4c2d961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:38:45:36:23:d2:a2:13:6b:42:05:13:1e:f5: 8d:12:4b:41:23:65:da:f7:bd:db:d1:39:ff:30:7e: 4c:0e:79:8f:31:68:9a:d5:94:60:bc:54:f2:bf:63: 01:70:77:6e:b0:61:ee:5a:29:41:6f:07:8d:2e:bd: ee:a2:94:37:8d:ef:ef:cf:63:bf:dd:bb:b5:05:4f: b4:72:8f:72:40:ef:f6:9b:9b:23:70:3f:53:91:9b: 62:f1:0d:af:5e:78:d8:6d:b6:6e:67:64:a5:ff:d3: 51:2e:6c:54:9f:12:c8:4d:1a:8d:3a:b9:74:a1:e7: 03:b6:91:1d:ee:2d:97:19:eb:86:62:fc:52:d3:dd: 17:bf:ac:77:bc:1d:1d:11:d6:18:30:ad:37:c7:c7: 0f:b2:1a:23:dc:bf:bd:0d:4b:e5:da:7c:b5:ee:34: 9c:5a:72:64:a7:40:b8:9b:da:8a:86:52:ad:25:44: 4d:ef:94:a8:6c:fc:67:29:20:92:d9:df:d5:00:3e: 88:c6:4c:31:b8:03:67:2d:6d:8d:65:fc:92:30:49: 60:97:97:c3:6a:4b:ba:f9:8a:81:18:cc:ec:98:69: 3f:f3:24:73:c2:9a:c2:81:10:ef:0c:2f:62:9c:fe: 0c:d7:51:ae:46:0e:5b:b5:e9:4d:11:7a:55:0f:15: 20:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:63:33:62:F6:E7:6A:EA:A7:E1:E2:B8:57:6B:F7:2B:D0:48:67:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7cb40454-1108-3ee4-974e-253eff74a4e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:85:e5:05:65:77:69:0f:dc:f7:02:49:3c:dc:92:9e:fa:f1: 56:41:91:ec:8f:1e:62:21:e1:c4:c7:ed:a1:55:62:f9:1e:08: f0:88:af:12:4f:01:1b:e4:ba:93:ab:5f:f5:12:70:7e:5d:1a: 4c:de:95:8d:ca:97:22:e1:f6:08:2d:f4:bd:05:84:8a:4f:20: 58:2e:d6:4b:e0:98:18:ff:ca:d5:d5:8d:d3:62:65:8e:b0:a2: 71:cb:b0:94:3e:70:11:94:f2:65:01:55:32:1a:13:de:6b:d5: e5:e6:d0:87:59:a1:80:37:bd:3a:06:07:fc:f6:eb:53:82:58: c7:d3:ee:2a:f2:c2:92:b1:ff:59:bc:a8:5d:55:42:5c:30:4a: 64:b6:44:de:87:fa:45:d2:5e:5c:8a:1b:52:9a:0d:b7:ee:06: 4d:1b:5a:e9:ef:04:df:69:3d:3b:cf:ff:a4:94:e6:eb:6f:2d: 96:bb:2b:19:a0:b8:f9:92:eb:9f:e2:24:72:d8:0c:9f:03:1f: 2f:25:ea:72:22:f1:57:45:0a:0b:f7:1c:39:b2:50:a8:bc:da: 01:ab:40:dc:48:29:0e:c8:ba:13:6b:a6:7b:5f:55:50:8a:60: 03:5a:57:b9:92:72:9c:e3:8d:fd:06:1a:62:2c:10:63:24:e8: fe:ff:e4:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/TeVQibN+s67GAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk NTVjYmNlMzEtMjlhZS00NmI1LWJmMzItMWM4MGM0YzJkOTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyThFNiPSohNrQgUTHvWNEktBI2Xa973b0Tn/ MH5MDnmPMWia1ZRgvFTyv2MBcHdusGHuWilBbweNLr3uopQ3je/vz2O/3bu1BU+0 co9yQO/2m5sjcD9TkZti8Q2vXnjYbbZuZ2Sl/9NRLmxUnxLITRqNOrl0oecDtpEd 7i2XGeuGYvxS090Xv6x3vB0dEdYYMK03x8cPshoj3L+9DUvl2ny17jScWnJkp0C4 m9qKhlKtJURN75SobPxnKSCS2d/VAD6IxkwxuANnLW2NZfySMElgl5fDaku6+YqB GMzsmGk/8yRzwprCgRDvDC9inP4M11GuRg5btelNEXpVDxUgdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENjM2L252rqp+HiuFdr9yvQSGfHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvN2NiNDA0NTQtMTEwOC0z ZWU0LTk3NGUtMjUzZWZmNzRhNGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEXOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6F5QVld2kP3PcCSTzckp768VZBkeyPHmIh4cTH7aFVYvkeCPCIrxJP ARvkupOrX/UScH5dGkzelY3KlyLh9ggt9L0FhIpPIFgu1kvgmBj/ytXVjdNiZY6w onHLsJQ+cBGU8mUBVTIaE95r1eXm0IdZoYA3vToGB/z261OCWMfT7irywpKx/1m8 qF1VQlwwSmS2RN6H+kXSXlyKG1KaDbfuBk0bWunvBN9pPTvP/6SU5utvLZa7Kxmg uPmS65/iJHLYDJ8DHy8l6nIi8VdFCgv3HDmyUKi82gGrQNxIKQ7IuhNrpntfVVCK YANaV7mScpzjjf0GGmIsEGMk6P7/5Lc= -----END CERTIFICATE-----Generated at Sat Nov 1 10:02:58 2025 by rpki-client