$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a8e90bfd-bb16-3280-aa79-c05315465f01.roa File: a8e90bfd-bb16-3280-aa79-c05315465f01.roa (raw, json) Hash identifier: fxXF/hjUKj1PrC9wzUQXOFId4/BoL6Pma5RYNTcebzk= Subject key identifier: 21:60:FF:02:17:49:42:8A:E0:70:77:D5:03:C9:6F:87:93:B4:F7:05 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BABFD21AFEC224707F7CD1E00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a8e90bfd-bb16-3280-aa79-c05315465f01.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.69.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:21:af:ec:22:47:07:f7:cd:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=8d460c03-29f3-4247-b3f1-0272489794d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:14:f4:32:c9:eb:ba:63:f4:09:8f:4f:58:52: 52:b4:61:f2:36:94:2a:b3:92:cb:5b:1f:6f:25:28: 5a:13:47:57:d2:22:86:61:9b:d4:05:00:eb:3e:b2: c2:cd:3c:e1:87:0b:ce:b6:86:ac:7a:8a:a7:f1:53: 5b:1e:68:93:12:c1:22:a8:b0:d7:34:f1:61:43:f3: bf:4b:7d:3d:3d:91:c5:53:aa:b5:62:41:d0:fc:ae: 8d:a9:2e:07:c3:a1:fa:e5:7a:e4:99:e0:cd:15:da: d5:70:5d:aa:80:b5:33:2c:5a:00:5e:e2:d5:67:65: 63:dc:0c:36:44:63:d1:fd:d6:d0:f1:70:5a:e5:05: fc:88:ef:3d:0c:84:04:0b:31:65:60:ae:cd:02:2e: 77:75:3d:83:65:0e:8a:77:4f:57:a4:0c:0a:12:2b: ab:49:78:7b:9f:f3:f2:d3:16:df:c2:c4:47:5e:7d: 76:f8:6b:c0:b8:a7:76:5b:4d:5f:0d:7b:97:97:ec: 9a:d7:41:80:7c:ca:b1:6c:17:f3:83:5d:b1:34:fe: ce:af:a9:14:c6:77:b4:58:40:04:95:9f:84:1f:ae: 50:2d:ad:0e:36:f0:6f:a6:47:e6:00:8a:59:1e:d2: ca:46:66:b0:1e:1c:f8:50:ed:b2:08:d2:b6:5d:15: 86:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:60:FF:02:17:49:42:8A:E0:70:77:D5:03:C9:6F:87:93:B4:F7:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a8e90bfd-bb16-3280-aa79-c05315465f01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:a6:81:ec:ac:14:cf:76:0b:bd:5b:5f:11:4b:7d:7e:db:c1: 68:8f:ad:58:d0:53:1b:86:85:7a:75:10:20:31:4a:8d:7c:ee: 00:29:60:81:f0:29:00:47:90:e3:63:25:e1:40:80:52:f8:a6: d2:d8:12:19:7c:8f:ab:99:b5:a6:da:ee:4c:fa:4a:a0:ae:8d: f6:08:a9:7f:b3:72:30:d0:0a:77:85:39:7a:07:33:0b:55:8e: 58:52:2d:53:e6:39:fb:88:3e:d7:06:d3:c3:12:7a:b2:cf:8b: db:05:74:87:30:6c:e4:af:3e:a9:db:29:5f:b8:b2:fd:c1:73: 07:94:a0:58:40:3e:ba:0f:0f:04:27:eb:24:80:e2:b1:fa:fa: 91:ec:13:ff:da:ae:31:1d:84:ce:54:fa:11:d2:98:e2:c4:0a: 80:0c:3d:bd:b8:39:1f:cb:e4:25:d3:56:61:fd:96:75:33:5a: 19:5a:71:c3:b6:fd:ca:4d:92:de:d7:e4:b6:9a:1b:ae:13:0d: 97:f9:ab:95:7d:51:81:6f:57:b9:85:3b:39:29:30:9f:2e:c6: 61:0e:66:d1:ab:32:31:3f:4a:f0:8b:6f:8c:c0:a6:33:6f:c2: e7:d5:50:90:ae:84:14:10:b0:b3:fa:0f:bc:c8:3b:1a:aa:3e: aa:3b:0f:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/SGv7CJHB/fNHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk OGQ0NjBjMDMtMjlmMy00MjQ3LWIzZjEtMDI3MjQ4OTc5NGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRT0MsnrumP0CY9PWFJStGHyNpQqs5LLWx9v JShaE0dX0iKGYZvUBQDrPrLCzTzhhwvOtoaseoqn8VNbHmiTEsEiqLDXNPFhQ/O/ S309PZHFU6q1YkHQ/K6NqS4Hw6H65XrkmeDNFdrVcF2qgLUzLFoAXuLVZ2Vj3Aw2 RGPR/dbQ8XBa5QX8iO89DIQECzFlYK7NAi53dT2DZQ6Kd09XpAwKEiurSXh7n/Py 0xbfwsRHXn12+GvAuKd2W01fDXuXl+ya10GAfMqxbBfzg12xNP7Or6kUxne0WEAE lZ+EH65QLa0ONvBvpkfmAIpZHtLKRmawHhz4UO2yCNK2XRWGVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFg/wIXSUKK4HB31QPJb4eTtPcFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYThlOTBiZmQtYmIxNi0z MjgwLWFhNzktYzA1MzE1NDY1ZjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEWnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCmgeysFM92C71bXxFLfX7bwWiPrVjQUxuGhXp1ECAxSo187gApYIHw KQBHkONjJeFAgFL4ptLYEhl8j6uZtaba7kz6SqCujfYIqX+zcjDQCneFOXoHMwtV jlhSLVPmOfuIPtcG08MSerLPi9sFdIcwbOSvPqnbKV+4sv3BcweUoFhAProPDwQn 6ySA4rH6+pHsE//arjEdhM5U+hHSmOLECoAMPb24OR/L5CXTVmH9lnUzWhlaccO2 /cpNkt7X5LaaG64TDZf5q5V9UYFvV7mFOzkpMJ8uxmEOZtGrMjE/SvCLb4zApjNv wufVUJCuhBQQsLP6D7zIOxqqPqo7Dyk= -----END CERTIFICATE-----Generated at Sat Nov 1 15:23:42 2025 by rpki-client