$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b66d146-4874-3d10-ad3b-ba8000e1fc38.roa File: 9b66d146-4874-3d10-ad3b-ba8000e1fc38.roa (raw, json) Hash identifier: yd1TvUwrZcUE9rernqGCaI/qMYxnvkduuiXPORqa8S8= Subject key identifier: 61:4D:CF:FA:6C:D1:A8:06:5D:7A:29:55:1A:01:D5:07:5F:46:A5:3F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA9327EFE0C8275274B3E7F40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b66d146-4874-3d10-ad3b-ba8000e1fc38.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.64.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:7e:fe:0c:82:75:27:4b:3e:7f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=45a868b5-74bf-4248-b34b-d636c9fa7e62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:54:5b:6f:09:8e:c2:14:76:2a:f8:86:3b:c2: 74:68:62:42:9d:1f:06:b1:00:b2:33:f2:8f:72:7f: ab:d9:02:97:ed:d3:ab:2c:af:e7:80:fa:4b:2d:1c: 02:1c:aa:f8:50:e4:6f:b6:e3:e0:3c:27:b9:c1:af: 00:80:72:9d:34:a5:d5:59:29:b3:6a:3e:10:ec:e4: 13:f8:00:ba:42:24:12:7e:16:a3:22:16:bb:4a:d6: 59:c4:a6:63:5c:af:bc:3d:18:e2:7f:6a:b9:2a:a2: 4d:17:5f:ad:a9:9e:e6:2c:a9:6f:55:cf:b4:8d:a9: 88:0c:98:43:45:ea:10:a3:3f:25:7d:d4:f9:45:7e: 60:36:38:69:c7:e7:4f:40:c6:7a:a9:3a:3d:bd:9f: 42:90:9d:10:20:ad:86:db:60:a6:4f:27:e7:02:07: 3c:2b:39:92:72:d3:44:24:b0:48:78:28:9c:42:1d: fd:77:0b:1c:57:42:f2:09:ed:ad:d2:40:f3:da:9b: ab:48:3c:20:8d:8a:83:39:73:b3:b4:b8:af:50:7b: 10:fd:3e:73:79:f8:9b:73:b1:55:eb:47:35:35:92: b7:5e:e7:82:c2:87:7d:70:ac:35:b0:8d:ad:99:ed: dd:3d:f5:d6:61:fe:7f:40:cb:8f:91:44:35:11:76: 29:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:4D:CF:FA:6C:D1:A8:06:5D:7A:29:55:1A:01:D5:07:5F:46:A5:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b66d146-4874-3d10-ad3b-ba8000e1fc38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:1d:54:1e:8e:ed:2f:18:71:33:4a:ff:c9:44:a8:7d:25:62: 4c:a2:d3:20:3b:a5:35:03:ab:a9:53:44:a2:83:45:9d:1a:14: f8:cf:4d:06:77:ed:7f:47:4c:79:94:b8:c6:89:9a:5a:96:a8: d9:f4:bf:0e:99:b8:a2:6e:9a:37:3b:f5:97:38:63:9e:4f:2d: 70:7f:a4:07:82:78:ab:17:28:c2:33:f5:db:27:18:9b:bb:dc: 36:7c:1b:45:6d:1c:9e:67:d5:7d:56:51:0b:05:66:20:0c:2d: 6c:f0:24:79:ed:1c:8c:16:e3:d0:fb:a8:60:e6:75:46:2b:d9: f3:fc:6d:aa:40:1d:0c:78:c5:73:dc:83:ad:75:d9:20:74:ce: 53:77:9a:15:05:42:4f:9a:01:af:19:63:6e:26:3f:01:83:ad: 6f:26:f2:5a:3b:62:35:8e:ec:be:ba:90:e8:58:b5:94:5b:c3: 12:78:be:7e:e6:ab:2e:20:60:18:26:c0:3e:de:13:27:18:6a: d5:b7:fd:f6:25:16:0c:22:46:c5:95:d2:5f:1d:6a:11:25:a8: fb:43:c9:8f:49:bc:02:16:0f:a4:c6:f3:ac:ac:c0:c3:89:21: 5e:73:c5:17:93:8b:be:1f:85:61:fb:06:24:a6:36:93:9a:24: 3f:f1:25:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMn7+DIJ1J0s+f0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk NDVhODY4YjUtNzRiZi00MjQ4LWIzNGItZDYzNmM5ZmE3ZTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVRbbwmOwhR2KviGO8J0aGJCnR8GsQCyM/KP cn+r2QKX7dOrLK/ngPpLLRwCHKr4UORvtuPgPCe5wa8AgHKdNKXVWSmzaj4Q7OQT +AC6QiQSfhajIha7StZZxKZjXK+8PRjif2q5KqJNF1+tqZ7mLKlvVc+0jamIDJhD ReoQoz8lfdT5RX5gNjhpx+dPQMZ6qTo9vZ9CkJ0QIK2G22CmTyfnAgc8KzmSctNE JLBIeCicQh39dwscV0LyCe2t0kDz2purSDwgjYqDOXOztLivUHsQ/T5zefibc7FV 60c1NZK3XueCwod9cKw1sI2tme3dPfXWYf5/QMuPkUQ1EXYpZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFNz/ps0agGXXopVRoB1QdfRqU/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWI2NmQxNDYtNDg3NC0z ZDEwLWFkM2ItYmE4MDAwZTFmYzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEDmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcdVB6O7S8YcTNK/8lEqH0lYkyi0yA7pTUDq6lTRKKDRZ0aFPjPTQZ3 7X9HTHmUuMaJmlqWqNn0vw6ZuKJumjc79Zc4Y55PLXB/pAeCeKsXKMIz9dsnGJu7 3DZ8G0VtHJ5n1X1WUQsFZiAMLWzwJHntHIwW49D7qGDmdUYr2fP8bapAHQx4xXPc g6112SB0zlN3mhUFQk+aAa8ZY24mPwGDrW8m8lo7YjWO7L66kOhYtZRbwxJ4vn7m qy4gYBgmwD7eEycYatW3/fYlFgwiRsWV0l8dahElqPtDyY9JvAIWD6TG86yswMOJ IV5zxReTi74fhWH7BiSmNpOaJD/xJf0= -----END CERTIFICATE-----Generated at Sat Nov 1 12:35:05 2025 by rpki-client