$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/97bee003-d1bb-39ce-9daf-43612ec74efd.roa File: 97bee003-d1bb-39ce-9daf-43612ec74efd.roa (raw, json) Hash identifier: LtZbUFXv5eXxGXk8/FHnCQv4M/Dshu2o4CcqRmFPyoc= Subject key identifier: C5:64:39:9C:C9:CC:5A:C9:A8:45:7B:E2:A1:39:3E:1A:9A:54:07:67 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA9328BD6FF605698BCED8980 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/97bee003-d1bb-39ce-9daf-43612ec74efd.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.64.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:8b:d6:ff:60:56:98:bc:ed:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=1b9f7386-aa39-4651-abf9-e4517928dd09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:48:6f:9a:df:8d:06:64:0c:10:a1:d1:54:0a: 2a:12:5b:4a:65:16:b6:02:9c:ae:f0:cf:43:17:43: 5b:db:71:96:53:5f:aa:9c:96:66:3d:a1:96:33:79: e0:37:90:b1:d9:0b:e4:ea:27:77:f1:02:50:88:cd: 4c:47:3f:5a:f2:1b:6d:ee:6f:1c:b1:a6:f1:ef:a7: a2:00:73:c2:d3:93:d4:7f:c3:6c:91:0d:b6:33:34: 05:d2:b8:10:35:01:06:77:a6:5c:02:c5:1a:46:3d: 49:8d:6c:c0:8a:6e:42:c0:d4:0b:1c:87:19:e7:1b: ee:4a:06:23:89:0c:97:a7:a1:bb:49:4a:e5:fd:b8: 49:a1:4e:78:0f:f0:78:96:0f:95:1b:95:4a:28:31: 1e:f9:a1:08:4b:2c:0c:fc:ae:9e:47:54:32:8f:52: 85:94:d8:8b:17:08:18:3d:82:81:65:be:d6:30:11: ef:4b:6b:2c:bc:85:91:c1:fa:a3:6c:e8:7a:1c:78: ed:3f:35:3d:d0:31:7f:7e:21:32:c9:8c:a6:0e:96: 8d:4d:32:01:f7:8b:63:1c:d3:45:63:83:12:0c:10: 96:2a:c1:35:fb:54:5f:f3:23:8b:01:45:a9:94:7f: 3d:d9:3e:d7:79:e1:0a:3b:81:9f:ad:9e:59:07:93: a1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:64:39:9C:C9:CC:5A:C9:A8:45:7B:E2:A1:39:3E:1A:9A:54:07:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/97bee003-d1bb-39ce-9daf-43612ec74efd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:96:6f:86:f7:d3:31:9b:44:3f:a9:3c:48:2a:4d:ca:d7:1a: 4d:ab:97:8f:80:cc:2b:de:68:be:42:f5:45:87:b4:45:27:03: 78:1b:be:b7:ad:de:b2:e9:7d:c4:4f:36:5c:73:4b:43:3a:5e: 39:e7:d0:2f:19:77:5b:c7:d8:83:af:1c:31:f4:82:67:c6:55: cf:ab:4e:a0:ed:3b:66:9b:21:b8:9e:8f:86:0a:42:6b:36:c7: fb:b3:3d:38:6d:97:a8:4f:4a:2b:cf:7d:d9:1e:4c:4b:da:c4: ca:32:87:5d:17:ba:e2:c3:75:76:04:bd:07:a6:13:be:fd:77: 81:e6:da:28:d0:97:99:85:be:23:75:fa:f9:96:d5:6d:b3:3a: cc:a7:7f:af:f4:74:b3:0a:a2:99:66:27:ae:8d:bd:5f:b2:90: 31:93:a7:d6:33:d0:64:a6:0e:3f:c4:06:72:60:df:0b:69:9b: 18:ba:cd:6d:b3:06:80:4b:d6:83:26:1d:4a:51:b5:a7:e1:99: 84:8f:ed:fc:b9:28:c6:3b:6a:07:cc:3f:86:ad:a5:ba:5f:dd: 4a:4c:f4:ed:6b:a5:1a:cc:1b:36:59:76:dc:6c:87:37:6b:cf: 14:56:c4:19:ba:ba:a3:59:7b:08:3d:a1:73:87:77:31:95:82: ce:76:dc:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMovW/2BWmLztiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk MWI5ZjczODYtYWEzOS00NjUxLWFiZjktZTQ1MTc5MjhkZDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkhvmt+NBmQMEKHRVAoqEltKZRa2Apyu8M9D F0Nb23GWU1+qnJZmPaGWM3ngN5Cx2Qvk6id38QJQiM1MRz9a8htt7m8csabx76ei AHPC05PUf8NskQ22MzQF0rgQNQEGd6ZcAsUaRj1JjWzAim5CwNQLHIcZ5xvuSgYj iQyXp6G7SUrl/bhJoU54D/B4lg+VG5VKKDEe+aEISywM/K6eR1Qyj1KFlNiLFwgY PYKBZb7WMBHvS2ssvIWRwfqjbOh6HHjtPzU90DF/fiEyyYymDpaNTTIB94tjHNNF Y4MSDBCWKsE1+1Rf8yOLAUWplH892T7XeeEKO4GfrZ5ZB5OhVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVkOZzJzFrJqEV74qE5PhqaVAdnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTdiZWUwMDMtZDFiYi0z OWNlLTlkYWYtNDM2MTJlYzc0ZWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEBIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByWb4b30zGbRD+pPEgqTcrXGk2rl4+AzCveaL5C9UWHtEUnA3gbvret 3rLpfcRPNlxzS0M6Xjnn0C8Zd1vH2IOvHDH0gmfGVc+rTqDtO2abIbiej4YKQms2 x/uzPThtl6hPSivPfdkeTEvaxMoyh10XuuLDdXYEvQemE779d4Hm2ijQl5mFviN1 +vmW1W2zOsynf6/0dLMKoplmJ66NvV+ykDGTp9Yz0GSmDj/EBnJg3wtpmxi6zW2z BoBL1oMmHUpRtafhmYSP7fy5KMY7agfMP4atpbpf3UpM9O1rpRrMGzZZdtxshzdr zxRWxBm6uqNZewg9oXOHdzGVgs523PY= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:45 2025 by rpki-client