$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8951cdf5-ce90-391e-81ed-4ff99db0c9de.roa File: 8951cdf5-ce90-391e-81ed-4ff99db0c9de.roa (raw, json) Hash identifier: J/LuwgJUe4Rfa+ugz1WRhz/zFX4DNQh6ldbp0tbeDrY= Subject key identifier: 33:86:D4:12:C4:00:2E:AA:34:16:FF:55:76:87:05:1E:C8:4F:1A:CF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA9328EBD15C1CC7C88C6DFE8 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8951cdf5-ce90-391e-81ed-4ff99db0c9de.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.69.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:8e:bd:15:c1:cc:7c:88:c6:df:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=fbb9e5e5-2b4a-4bf2-b504-74f4760855b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:86:76:c8:a9:7a:6a:5d:41:7f:08:44:8f:11: 99:79:ef:14:43:9b:5d:63:a2:81:ce:f3:77:4f:04: 98:e1:26:ea:12:3e:d9:46:22:52:1e:72:14:88:ed: e9:98:f3:29:25:0d:8e:2d:d5:d9:8d:0b:d5:91:75: e6:a1:3a:5d:e3:95:d6:74:18:e9:62:f1:31:1c:7d: 10:a8:98:c3:39:74:23:83:d0:73:8a:f6:b8:19:dd: 30:e8:99:89:32:a2:7b:f4:98:ef:84:eb:e1:59:25: c1:57:0a:62:b7:cb:a2:a1:cd:8a:e7:b5:8c:9e:38: 3b:b7:1d:15:1b:b3:5c:fc:42:a9:bb:8a:65:54:de: 37:3c:43:f5:c0:08:ec:cb:1e:01:fd:c1:c3:b4:6b: 36:ec:c8:7a:e2:c8:70:f5:81:98:5f:5a:57:92:6f: a1:e4:06:42:cb:c3:11:02:67:fd:ff:6c:f8:d9:1a: 15:25:6b:56:88:e4:a9:6c:84:8e:86:31:92:8a:f8: ff:06:c6:2c:c6:0b:af:e3:35:40:a2:30:47:3c:e5: 7e:ae:f9:b5:5a:07:a9:74:48:9a:99:68:7b:44:97: fc:54:72:ff:d3:b2:72:a3:e8:83:6f:bd:a2:76:5e: 50:9f:e2:31:39:20:ff:06:fe:e5:75:a7:58:dd:b4: 70:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:86:D4:12:C4:00:2E:AA:34:16:FF:55:76:87:05:1E:C8:4F:1A:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8951cdf5-ce90-391e-81ed-4ff99db0c9de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:3e:4a:f1:5b:4c:16:55:50:f0:56:c7:ea:4a:be:bd:8d:3e: 55:c9:8c:c1:c9:68:b2:d6:84:3f:ae:9a:2a:a8:13:1f:bc:43: 2a:90:7b:6d:60:3e:c5:6e:45:65:8c:fa:ab:66:0f:84:fe:52: b1:a8:aa:d8:f8:c6:67:b7:63:c9:e7:62:e5:b2:13:04:d2:f9: 8f:7b:35:e3:28:a8:8c:59:2d:de:de:25:19:77:a1:a5:a1:94: c5:4c:a1:84:48:54:d2:6f:fc:b9:60:7e:8b:92:49:a3:47:dc: f9:57:51:cd:bf:c6:49:04:c2:e7:2b:44:28:63:50:07:98:19: 97:6c:11:7f:29:db:01:b3:a9:68:01:71:49:47:91:91:a8:de: 9e:ad:57:d1:fc:c0:c1:8d:e7:3e:e0:55:31:e7:14:22:25:6d: 74:4a:d9:e7:ed:ed:21:72:9f:b4:92:57:f0:b0:61:8a:e2:43: 85:c8:4e:d0:23:c9:93:26:63:4f:01:9a:4f:40:06:6f:f5:18: 22:dc:85:8f:05:87:62:45:83:17:f3:8b:d9:a9:2f:06:eb:fd: fc:29:da:19:3d:6e:be:0a:0e:ea:44:ad:00:15:cc:c2:e8:b2: 4d:e0:70:ea:c2:07:e3:b6:06:7e:98:5b:a0:a8:1c:c5:d2:7f: ab:12:cb:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMo69FcHMfIjG3+gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk ZmJiOWU1ZTUtMmI0YS00YmYyLWI1MDQtNzRmNDc2MDg1NWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIZ2yKl6al1BfwhEjxGZee8UQ5tdY6KBzvN3 TwSY4SbqEj7ZRiJSHnIUiO3pmPMpJQ2OLdXZjQvVkXXmoTpd45XWdBjpYvExHH0Q qJjDOXQjg9Bziva4Gd0w6JmJMqJ79JjvhOvhWSXBVwpit8uioc2K57WMnjg7tx0V G7Nc/EKpu4plVN43PEP1wAjsyx4B/cHDtGs27Mh64shw9YGYX1pXkm+h5AZCy8MR Amf9/2z42RoVJWtWiOSpbISOhjGSivj/BsYsxguv4zVAojBHPOV+rvm1WgepdEia mWh7RJf8VHL/07Jyo+iDb72idl5Qn+IxOSD/Bv7ldadY3bRwdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOG1BLEAC6qNBb/VXaHBR7ITxrPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODk1MWNkZjUtY2U5MC0z OTFlLTgxZWQtNGZmOTlkYjBjOWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEW9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGM+SvFbTBZVUPBWx+pKvr2NPlXJjMHJaLLWhD+umiqoEx+8QyqQe21g PsVuRWWM+qtmD4T+UrGoqtj4xme3Y8nnYuWyEwTS+Y97NeMoqIxZLd7eJRl3oaWh lMVMoYRIVNJv/LlgfouSSaNH3PlXUc2/xkkEwucrRChjUAeYGZdsEX8p2wGzqWgB cUlHkZGo3p6tV9H8wMGN5z7gVTHnFCIlbXRK2eft7SFyn7SSV/CwYYriQ4XITtAj yZMmY08Bmk9ABm/1GCLchY8Fh2JFgxfzi9mpLwbr/fwp2hk9br4KDupErQAVzMLo sk3gcOrCB+O2Bn6YW6CoHMXSf6sSy78= -----END CERTIFICATE-----Generated at Sat Nov 1 15:18:05 2025 by rpki-client