$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/955b5c5b-556c-3812-bac1-0a6fae51e8ad.roa File: 955b5c5b-556c-3812-bac1-0a6fae51e8ad.roa (raw, json) Hash identifier: dwWp1uRolwd0ZDQLPwLXtvQ4iEkLnPYKzo50sRT4Qvg= Subject key identifier: 67:D8:20:C8:0B:B5:7A:EC:A8:02:D6:A6:72:DA:14:22:27:99:35:65 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA9328CE8BC4EBA0E0C40CE80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/955b5c5b-556c-3812-bac1-0a6fae51e8ad.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.65.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:8c:e8:bc:4e:ba:0e:0c:40:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=f94619cd-6f42-4073-a166-588527ae62d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b2:f2:8d:e9:47:5d:57:b8:1f:ee:3f:a6:98: 4a:8b:13:83:3f:cd:26:19:54:68:98:b1:0a:66:03: ec:4c:2f:98:11:b6:aa:8e:ce:86:11:49:e8:1f:aa: 71:02:dc:df:fd:7b:23:21:76:0a:79:c4:c9:9f:61: 28:bd:c1:50:5d:43:cd:0d:7e:bb:f1:fe:08:ee:f9: 93:0e:64:e7:b3:96:5f:a1:d9:0d:7d:b0:b4:17:17: 73:4b:2b:df:a0:bf:1d:f6:9d:44:44:10:74:39:a8: fc:00:e4:3c:fa:06:c3:03:42:2c:8d:e2:5d:e9:7c: 2a:eb:6b:6c:cb:55:fc:c6:6c:da:2f:95:b1:26:72: 90:50:73:ea:3d:ca:20:99:46:83:ce:a9:3d:62:e3: 6f:1e:26:52:16:38:24:ee:aa:22:a7:55:78:e4:dc: 30:d3:90:ee:84:6c:3a:a2:31:c7:60:45:c3:4f:35: 77:58:ff:64:ea:2a:06:9c:ba:c8:5c:6c:f5:26:de: 09:25:ac:a3:18:4d:6e:e8:08:be:9c:43:79:9c:0b: 9e:3e:7a:57:fe:62:dc:a9:f1:23:df:5e:02:7a:41: 31:8b:01:67:62:39:12:f0:3c:1e:20:6b:ce:2b:0c: 75:25:8f:0d:2d:8d:a5:70:87:9f:08:6a:b2:94:3b: de:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D8:20:C8:0B:B5:7A:EC:A8:02:D6:A6:72:DA:14:22:27:99:35:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/955b5c5b-556c-3812-bac1-0a6fae51e8ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.65.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:a8:73:08:82:a1:fe:3c:1a:9c:23:21:ac:41:42:84:ff:fe: 9b:21:6c:53:ab:d3:30:b1:1f:31:73:95:b5:36:10:b9:f6:8f: c8:bd:6e:e5:f8:29:26:8d:d6:b1:c6:4d:40:b0:15:5d:94:b2: cb:0a:69:dd:a9:e7:d1:a0:03:48:82:ef:ff:ca:76:82:d9:ce: d9:27:dc:c4:5c:ce:3f:69:32:29:4d:d4:bf:6f:fc:81:0e:03: 84:0f:8e:48:95:53:89:7a:e5:fc:ca:ae:29:37:af:fc:dd:0f: 3a:73:1c:d8:3b:31:3c:ec:3f:6f:62:af:b8:92:5c:5b:e6:4b: 63:c5:d8:2c:ee:c8:0b:14:85:4f:ef:d9:b8:6d:b0:9d:de:71: b3:2d:14:89:4e:71:8a:c4:40:40:79:a8:e4:e0:55:3f:9c:e3: 95:8e:dd:c9:19:9b:a5:36:86:b4:c9:24:68:c6:de:71:62:56: 81:2e:3a:59:86:7a:56:32:5b:31:ae:28:9b:8a:4f:6f:d0:7a: 83:31:cc:76:ef:37:4c:1c:ea:5d:44:dd:4b:81:98:11:44:c7: 49:fe:ea:e7:f4:d2:a7:05:d0:ae:a7:30:58:96:59:33:43:a3: ef:be:5a:bb:31:11:0e:7a:09:78:f8:b9:2b:79:18:b6:af:91: c5:39:73:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMozovE66DgxAzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk Zjk0NjE5Y2QtNmY0Mi00MDczLWExNjYtNTg4NTI3YWU2MmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbLyjelHXVe4H+4/pphKixODP80mGVRomLEK ZgPsTC+YEbaqjs6GEUnoH6pxAtzf/XsjIXYKecTJn2EovcFQXUPNDX678f4I7vmT DmTns5ZfodkNfbC0FxdzSyvfoL8d9p1ERBB0Oaj8AOQ8+gbDA0IsjeJd6Xwq62ts y1X8xmzaL5WxJnKQUHPqPcogmUaDzqk9YuNvHiZSFjgk7qoip1V45Nww05DuhGw6 ojHHYEXDTzV3WP9k6ioGnLrIXGz1Jt4JJayjGE1u6Ai+nEN5nAuePnpX/mLcqfEj 314CekExiwFnYjkS8DweIGvOKwx1JY8NLY2lcIefCGqylDveqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfYIMgLtXrsqALWpnLaFCInmTVlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTU1YjVjNWItNTU2Yy0z ODEyLWJhYzEtMGE2ZmFlNTFlOGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmocwiCof48GpwjIaxBQoT//pshbFOr0zCxHzFzlbU2ELn2j8i9buX4 KSaN1rHGTUCwFV2UsssKad2p59GgA0iC7//KdoLZztkn3MRczj9pMilN1L9v/IEO A4QPjkiVU4l65fzKrik3r/zdDzpzHNg7MTzsP29ir7iSXFvmS2PF2CzuyAsUhU/v 2bhtsJ3ecbMtFIlOcYrEQEB5qOTgVT+c45WO3ckZm6U2hrTJJGjG3nFiVoEuOlmG elYyWzGuKJuKT2/QeoMxzHbvN0wc6l1E3UuBmBFEx0n+6uf00qcF0K6nMFiWWTND o+++WrsxEQ56CXj4uSt5GLavkcU5c/o= -----END CERTIFICATE-----Generated at Sat Nov 1 15:22:01 2025 by rpki-client