$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/84e9dac0-efd0-305b-b142-eeff0dc29e7f.roa File: 84e9dac0-efd0-305b-b142-eeff0dc29e7f.roa (raw, json) Hash identifier: +1cLiPhRKX+bpHHIG8fK+0Xh2G1rQxnIBmd6lU6T+nw= Subject key identifier: 92:DB:F4:11:56:6A:77:DF:34:DE:C6:48:92:38:F0:E0:16:3B:46:86 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584B94BD468A985ECCE31CF54F80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/84e9dac0-efd0-305b-b142-eeff0dc29e7f.roa Signing time: Mon 20 Oct 2025 05:08:42 +0000 ROA not before: Mon 20 Oct 2025 05:08:42 +0000 ROA not after: Sun 18 Jan 2026 06:08:42 +0000 asID: 13335 IP address blocks: 172.64.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:bd:46:8a:98:5e:cc:e3:1c:f5:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 20 05:08:42 2025 GMT Not After : Jan 18 06:08:42 2026 GMT Subject: CN=e60395d2-a796-466a-b16f-121c5d52248c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d5:7b:0c:0e:c8:76:e4:71:de:56:19:2e:73: 91:e8:c8:de:da:b4:0b:f1:9f:27:8c:8a:1c:a9:e1: b3:ce:ea:af:88:11:88:63:9e:6a:09:02:5b:20:87: b9:24:86:53:56:bc:97:65:86:46:d4:b8:3b:ee:f5: 13:57:0b:dc:71:e5:b9:33:c9:52:a9:28:33:dd:ba: 11:23:03:3a:9c:ba:12:89:3a:f1:10:03:9e:2d:a6: 7b:1f:0c:53:5d:98:2e:3d:7d:cd:5c:f1:41:95:3c: 38:b5:ae:68:9d:e6:b0:2a:7c:11:93:76:3a:52:2a: e4:45:1d:22:92:99:16:34:19:c7:47:ad:73:f5:16: 90:39:5b:c3:c4:7d:1e:05:c6:66:d8:bb:c9:b2:df: 6d:25:4a:fb:fa:55:0c:50:3e:34:c9:58:27:c9:27: 44:c2:3e:84:e9:28:38:28:89:d5:ec:50:78:a0:7c: 97:b6:c3:6f:fb:f8:e1:0d:8b:c0:49:a7:8b:7c:a0: 61:4b:bf:90:5f:20:31:a9:f8:35:d4:bc:37:6e:74: 4e:63:71:b7:2b:26:b1:5f:fd:ce:cd:ab:a3:a8:3b: 4b:dc:77:da:d6:42:42:89:69:dd:d2:43:b1:db:8d: b2:f4:83:f9:32:cc:94:91:e5:ea:64:af:bd:f4:59: c5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:DB:F4:11:56:6A:77:DF:34:DE:C6:48:92:38:F0:E0:16:3B:46:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/84e9dac0-efd0-305b-b142-eeff0dc29e7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:95:8a:61:18:42:c3:52:f3:94:d2:d4:39:ff:32:c4:7e:51: 23:2d:75:e9:a7:34:33:6b:78:c2:9d:85:70:4a:08:17:92:82: 0c:1f:68:0d:c2:31:06:b2:0b:9c:1e:8c:82:64:4b:d3:fa:9e: dd:9c:b7:68:91:e1:b6:7b:a5:a6:2a:56:85:77:a0:ff:46:ee: 39:da:8d:a8:dc:f6:eb:c0:61:6e:96:58:a4:9a:5f:ea:5a:5c: 68:0d:ad:10:5b:7c:27:9d:b7:a2:c5:01:30:48:7e:c7:fa:8a: f0:9c:5d:70:8a:61:d4:d2:95:c8:c4:33:56:e1:91:b5:27:25: 41:d9:fb:c0:6a:45:bb:bf:4c:98:b3:e7:6a:b4:4b:22:4f:42: cd:da:ab:05:7d:ac:cb:95:4b:84:1e:01:a5:a4:22:82:5f:c4: 5e:df:80:3c:af:a8:0b:72:7a:0b:99:81:94:f2:3b:4a:70:c3: c6:ce:16:0d:24:8b:71:ac:2f:f4:fb:4c:7f:24:ac:f3:dc:59: 8d:35:93:d8:bf:8d:24:da:3e:31:59:6b:9a:3b:5e:47:fe:79: 08:a0:94:7f:37:57:1f:47:16:ee:9e:7e:97:20:55:40:93:2d: a9:4d:df:24:c9:a5:e5:27:fa:84:1f:d4:3d:1d:e5:bd:40:49: 0a:54:85:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuUvUaKmF7M4xz1T4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyMDA1MDg0MloXDTI2MDExODA2MDg0MlowLzEtMCsGA1UEAxMk ZTYwMzk1ZDItYTc5Ni00NjZhLWIxNmYtMTIxYzVkNTIyNDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNV7DA7IduRx3lYZLnOR6Mje2rQL8Z8njIoc qeGzzuqviBGIY55qCQJbIIe5JIZTVryXZYZG1Lg77vUTVwvcceW5M8lSqSgz3boR IwM6nLoSiTrxEAOeLaZ7HwxTXZguPX3NXPFBlTw4ta5oneawKnwRk3Y6UirkRR0i kpkWNBnHR61z9RaQOVvDxH0eBcZm2LvJst9tJUr7+lUMUD40yVgnySdEwj6E6Sg4 KInV7FB4oHyXtsNv+/jhDYvASaeLfKBhS7+QXyAxqfg11Lw3bnROY3G3KyaxX/3O zaujqDtL3Hfa1kJCiWnd0kOx242y9IP5MsyUkeXqZK+99FnFCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJLb9BFWanffNN7GSJI48OAWO0aGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODRlOWRhYzAtZWZkMC0z MDViLWIxNDItZWVmZjBkYzI5ZTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEDdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOVimEYQsNS85TS1Dn/MsR+USMtdemnNDNreMKdhXBKCBeSggwfaA3C MQayC5wejIJkS9P6nt2ct2iR4bZ7paYqVoV3oP9G7jnajajc9uvAYW6WWKSaX+pa XGgNrRBbfCedt6LFATBIfsf6ivCcXXCKYdTSlcjEM1bhkbUnJUHZ+8BqRbu/TJiz 52q0SyJPQs3aqwV9rMuVS4QeAaWkIoJfxF7fgDyvqAtyeguZgZTyO0pww8bOFg0k i3GsL/T7TH8krPPcWY01k9i/jSTaPjFZa5o7Xkf+eQiglH83Vx9HFu6efpcgVUCT LalN3yTJpeUn+oQf1D0d5b1ASQpUhUU= -----END CERTIFICATE-----Generated at Sat Nov 1 09:59:08 2025 by rpki-client