$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7e65b7b2-a8e7-36ee-a0f2-faec03cadd90.roa File: 7e65b7b2-a8e7-36ee-a0f2-faec03cadd90.roa (raw, json) Hash identifier: csqDQPUuVaBt9kG9XpucEaVwfjwurG2T6XoESML3sho= Subject key identifier: 4D:D0:BA:78:34:4C:F8:F5:AF:14:BA:C1:EF:ED:3B:5B:B8:41:38:50 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB02D0DF7F56C546FE3C13100 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7e65b7b2-a8e7-36ee-a0f2-faec03cadd90.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 172.69.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2d:0d:f7:f5:6c:54:6f:e3:c1:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=2b5dffe5-2057-4f05-88bf-8e4f1f332e15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:57:a9:8c:8d:69:a1:52:b8:15:b2:a3:31:23: 75:5f:48:d7:a6:06:09:84:c4:67:ad:ed:a3:ec:40: 88:51:76:54:84:20:83:6c:f9:e7:78:56:d1:3f:c4: 84:ec:97:3b:9e:15:be:87:5b:40:87:1c:f2:49:ce: ef:bc:a2:60:f6:e8:ff:46:c2:a6:a0:b5:b5:c8:e3: 4b:0b:1e:2c:27:84:9d:3e:1c:06:17:7d:7c:21:3c: 96:ab:2a:ca:93:d0:8a:00:62:34:9a:8c:3b:b4:47: 27:2a:2c:2f:f1:cd:04:ee:d8:a1:45:62:81:bc:83: cb:fe:f9:1a:61:a0:18:d5:82:7c:e9:9a:71:c7:00: 9a:0e:fc:ff:48:d7:36:f4:3b:87:5a:23:f4:ed:18: 65:79:4c:4f:78:9c:cb:81:19:f7:8f:4c:54:68:7c: 38:f1:b2:4c:5a:2d:d7:35:3e:69:6b:ec:5d:55:e5: 07:bf:fc:e1:28:3f:85:e5:f2:37:e1:c0:b2:b9:77: 4f:ea:30:99:13:2a:0c:7e:3a:03:9c:77:d8:8e:21: c3:85:0f:6f:d6:a0:03:65:b6:03:9b:e5:5e:4c:94: 6d:31:af:2a:12:7a:72:d4:33:b3:60:b7:98:93:6b: 86:6a:d9:d4:6b:d2:6a:00:88:a9:5c:7c:f3:0b:98: 64:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D0:BA:78:34:4C:F8:F5:AF:14:BA:C1:EF:ED:3B:5B:B8:41:38:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7e65b7b2-a8e7-36ee-a0f2-faec03cadd90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:47:2f:c2:ba:67:14:29:18:62:d4:c2:e3:4a:41:7e:4e:d5: b3:c3:37:dd:5d:24:a8:ec:17:0b:fd:a7:4e:92:f5:e1:f5:cb: 1a:42:11:82:c2:0f:65:90:27:c1:7f:7f:cf:09:db:15:0e:07: ad:8f:eb:a6:59:78:bc:99:e0:72:71:66:08:42:41:21:a1:27: 25:f4:12:b1:dd:f9:92:8c:03:b5:65:dc:d1:96:c0:44:d1:68: 71:1f:ef:35:3a:7d:33:e7:fa:81:29:0a:48:65:1d:e1:00:22: 57:f2:c0:9f:d9:bb:65:fd:d2:28:09:8f:60:e7:b9:a1:90:3a: 93:f3:af:82:bc:8e:e5:1d:4b:fa:86:3b:30:bc:78:34:1b:e8: 1c:19:97:b1:be:9b:49:2f:20:32:b5:d9:0c:a0:df:17:c4:d0: 70:50:51:0a:10:c9:f1:fa:19:6b:f5:5c:3e:ec:43:5e:20:2b: 40:66:17:dd:c3:4b:96:1a:ab:ed:cb:14:54:17:4c:0b:e8:4d: bc:1b:46:59:c8:1a:31:c9:2c:30:7a:39:60:08:c1:e2:32:0f: 24:cd:aa:26:db:34:33:4e:63:51:d6:67:55:c8:0e:b4:62:85: 0e:d3:db:fb:6c:f2:85:b1:6a:38:1e:69:a2:52:b9:36:8a:95: 80:fd:99:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLQ339WxUb+PBMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk MmI1ZGZmZTUtMjA1Ny00ZjA1LTg4YmYtOGU0ZjFmMzMyZTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFepjI1poVK4FbKjMSN1X0jXpgYJhMRnre2j 7ECIUXZUhCCDbPnneFbRP8SE7Jc7nhW+h1tAhxzySc7vvKJg9uj/RsKmoLW1yONL Cx4sJ4SdPhwGF318ITyWqyrKk9CKAGI0mow7tEcnKiwv8c0E7tihRWKBvIPL/vka YaAY1YJ86ZpxxwCaDvz/SNc29DuHWiP07RhleUxPeJzLgRn3j0xUaHw48bJMWi3X NT5pa+xdVeUHv/zhKD+F5fI34cCyuXdP6jCZEyoMfjoDnHfYjiHDhQ9v1qADZbYD m+VeTJRtMa8qEnpy1DOzYLeYk2uGatnUa9JqAIipXHzzC5hkKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3Qung0TPj1rxS6we/tO1u4QThQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvN2U2NWI3YjItYThlNy0z NmVlLWEwZjItZmFlYzAzY2FkZDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEXzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhHL8K6ZxQpGGLUwuNKQX5O1bPDN91dJKjsFwv9p06S9eH1yxpCEYLC D2WQJ8F/f88J2xUOB62P66ZZeLyZ4HJxZghCQSGhJyX0ErHd+ZKMA7Vl3NGWwETR aHEf7zU6fTPn+oEpCkhlHeEAIlfywJ/Zu2X90igJj2DnuaGQOpPzr4K8juUdS/qG OzC8eDQb6BwZl7G+m0kvIDK12Qyg3xfE0HBQUQoQyfH6GWv1XD7sQ14gK0BmF93D S5Yaq+3LFFQXTAvoTbwbRlnIGjHJLDB6OWAIweIyDyTNqibbNDNOY1HWZ1XIDrRi hQ7T2/ts8oWxajgeaaJSuTaKlYD9mU8= -----END CERTIFICATE-----Generated at Sat Nov 1 12:36:40 2025 by rpki-client