$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a12efd23-1da3-3127-950e-d6f4cfde3c50.roa File: a12efd23-1da3-3127-950e-d6f4cfde3c50.roa (raw, json) Hash identifier: Wg8LwXYhHdPGiV4I0f0OsmPagAMbkxNboBzjmErsx+I= Subject key identifier: 00:88:A2:98:C4:5B:80:3B:83:1A:95:BA:D2:42:0E:D8:4B:0E:24:73 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA9327E66424A97FAEC1D37C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a12efd23-1da3-3127-950e-d6f4cfde3c50.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.64.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:7e:66:42:4a:97:fa:ec:1d:37:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=20c159bc-1572-4d6c-b0f0-3dbe8facaed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f2:e5:3e:e3:34:01:e1:80:fc:ea:1c:07:2e: 56:79:c6:a1:39:89:91:da:e3:9e:aa:2f:9c:80:51: 5b:00:d2:bf:89:fd:de:ac:b4:a7:0b:9c:79:2f:83: 1b:fd:ba:f7:98:56:a4:72:d9:fe:ca:14:c6:6a:1e: 35:8f:35:de:1c:d7:f6:8e:fe:b1:eb:0f:c0:0a:0a: 67:4b:9e:e0:b7:78:b0:24:aa:85:74:c9:55:ec:b4: ea:0f:8b:71:a7:6f:a5:61:ec:fe:3c:33:91:57:5c: d8:68:d0:d1:38:c8:33:81:59:71:d6:cc:4d:08:a2: 76:c4:cc:97:1d:67:c4:c0:cd:fb:db:31:b4:c3:df: 31:28:1b:c2:9f:7b:52:00:d9:ec:bf:3c:6e:a1:82: 90:b0:1a:3e:26:56:6b:89:1e:ed:6a:7c:56:ec:02: 6f:21:a0:a3:6c:9e:50:5a:57:17:ab:6d:bd:14:fa: 83:43:2d:44:4f:bd:a3:1a:81:3e:23:04:4c:39:ee: 42:07:2b:9b:a0:7b:4f:e2:6e:8a:14:99:a9:16:e8: 59:ec:e5:2a:81:a4:aa:62:41:b5:f5:be:89:25:98: 60:a1:0e:e7:a6:23:6c:f7:45:68:f5:e9:2d:85:de: 7c:c6:1d:ac:98:d3:51:75:80:37:40:9f:7d:ff:c5: b1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:88:A2:98:C4:5B:80:3B:83:1A:95:BA:D2:42:0E:D8:4B:0E:24:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a12efd23-1da3-3127-950e-d6f4cfde3c50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:34:57:5c:b3:dd:41:f2:b2:78:72:a4:21:5b:21:db:a6:88: 9e:ea:39:7e:2e:96:ed:03:47:39:0a:c0:f1:34:4b:b7:17:56: 78:5d:73:b8:29:a0:cf:f7:34:df:85:b8:1a:e7:b9:38:b6:d6: a4:4d:ee:b8:29:e8:1e:bf:f9:b2:97:fa:5f:a4:65:23:14:c1: 41:00:07:f0:c7:fa:13:a4:30:ec:cc:db:c1:32:e9:2b:36:f1: e4:14:7d:ac:5d:e7:4b:9a:5e:72:da:a2:7f:5d:db:c1:ac:35: 16:58:ce:83:39:0e:16:94:44:43:92:e3:8a:2b:c7:1f:73:c9: d6:7c:11:fd:35:04:84:40:44:dd:41:f7:e2:aa:b6:86:bf:b0: 24:c4:99:13:35:27:d4:3f:ef:32:12:86:7a:0a:f1:be:13:59: ec:dc:05:28:89:c3:7d:c6:31:f5:17:ea:2c:8c:36:dd:39:40: 11:2c:39:59:8f:5d:fb:df:ad:0e:eb:14:2b:9e:40:56:c4:6d: bc:48:1e:a1:8d:63:a8:8f:c7:c2:70:94:c6:dd:4c:68:2a:f0: 22:b1:d1:8b:89:1e:90:5c:a5:01:6f:88:8c:76:69:ca:8b:8d: 81:e2:f4:cc:25:7f:39:9c:76:26:42:1c:e6:df:6a:8c:96:5c: 08:53:42:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMn5mQkqX+uwdN8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk MjBjMTU5YmMtMTU3Mi00ZDZjLWIwZjAtM2RiZThmYWNhZWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/LlPuM0AeGA/OocBy5WecahOYmR2uOeqi+c gFFbANK/if3erLSnC5x5L4Mb/br3mFakctn+yhTGah41jzXeHNf2jv6x6w/ACgpn S57gt3iwJKqFdMlV7LTqD4txp2+lYez+PDORV1zYaNDROMgzgVlx1sxNCKJ2xMyX HWfEwM372zG0w98xKBvCn3tSANnsvzxuoYKQsBo+JlZriR7tanxW7AJvIaCjbJ5Q WlcXq229FPqDQy1ET72jGoE+IwRMOe5CByuboHtP4m6KFJmpFuhZ7OUqgaSqYkG1 9b6JJZhgoQ7npiNs90Vo9ekthd58xh2smNNRdYA3QJ99/8Wx7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACIopjEW4A7gxqVutJCDthLDiRzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTEyZWZkMjMtMWRhMy0z MTI3LTk1MGUtZDZmNGNmZGUzYzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABs0V1yz3UHysnhypCFbIdumiJ7qOX4ulu0DRzkKwPE0S7cXVnhdc7gp oM/3NN+FuBrnuTi21qRN7rgp6B6/+bKX+l+kZSMUwUEAB/DH+hOkMOzM28Ey6Ss2 8eQUfaxd50uaXnLaon9d28GsNRZYzoM5DhaUREOS44orxx9zydZ8Ef01BIRARN1B 9+Kqtoa/sCTEmRM1J9Q/7zIShnoK8b4TWezcBSiJw33GMfUX6iyMNt05QBEsOVmP XfvfrQ7rFCueQFbEbbxIHqGNY6iPx8JwlMbdTGgq8CKx0YuJHpBcpQFviIx2acqL jYHi9MwlfzmcdiZCHObfaoyWXAhTQrE= -----END CERTIFICATE-----Generated at Sat Nov 1 12:31:10 2025 by rpki-client