$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ace48e8d-036b-3d76-a21b-14225cfa7d86.roa File: ace48e8d-036b-3d76-a21b-14225cfa7d86.roa (raw, json) Hash identifier: ZaobZwE53wRA23CgUehDMPNo+Ko0khrHxl6Kj/JAYT4= Subject key identifier: D0:7B:B4:7E:B1:50:7C:08:03:6D:8E:FB:18:C2:CD:C4:5B:B1:EC:A6 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BABFD348A4436251E5D0B4700 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ace48e8d-036b-3d76-a21b-14225cfa7d86.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.69.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:34:8a:44:36:25:1e:5d:0b:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=74a727bd-2f19-4c13-881f-7341fd68e515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:4b:5e:b6:80:fb:0b:f3:ab:4b:ce:16:5b:2d: 73:bd:35:40:01:12:1a:1e:d7:5b:c5:1a:e2:c0:d6: 15:e1:c7:c0:2b:51:3b:fe:3f:75:33:de:18:96:bd: 7a:9a:94:99:12:a5:f7:28:45:3e:e6:85:76:e2:b0: ad:17:e9:71:3b:ab:40:a0:76:5c:89:13:0c:20:7a: 81:91:79:ff:e4:1a:cd:fe:48:52:43:33:4a:3a:15: 82:12:08:34:a5:6d:52:d9:b3:ee:e1:46:d1:78:ed: 89:d9:e3:bb:8b:35:c2:fa:cc:bc:fc:ef:81:d2:2e: cb:3d:ef:1b:87:2c:59:dc:af:b2:16:43:d8:8a:ba: 39:f3:1f:71:f8:9b:36:bf:06:fd:6f:50:12:84:a5: 96:70:d0:d1:51:82:a5:e6:28:27:8e:92:31:96:6f: 39:d2:37:0f:43:b8:59:67:38:cb:42:71:4b:eb:e9: 89:cc:03:f5:a6:9f:e3:fc:d3:7e:a9:34:70:a4:91: 2f:35:c1:8f:99:ff:2d:cf:7e:c5:fc:c5:61:a5:e2: c9:72:b2:21:c7:b3:44:c6:0e:de:e4:b1:b9:51:bb: 67:01:78:e0:29:fe:75:d5:4c:a6:d0:27:b4:2e:73: 47:01:b1:91:b9:a6:cb:63:f2:4e:69:06:82:ed:4d: c5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:7B:B4:7E:B1:50:7C:08:03:6D:8E:FB:18:C2:CD:C4:5B:B1:EC:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ace48e8d-036b-3d76-a21b-14225cfa7d86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:bc:37:b3:c5:e2:f7:24:e0:6b:75:5a:c2:d9:58:ee:79:6f: a0:85:ed:77:bb:ba:06:10:e1:5a:03:0e:c2:c7:d6:a2:75:67: b9:aa:05:bf:48:92:55:72:e0:82:03:13:1c:bf:6c:ec:fb:1d: a4:93:c7:64:04:0b:1f:25:bc:fc:18:cd:22:7a:fd:99:89:4c: f3:50:26:15:42:d3:1a:b5:f3:8f:e6:1c:e9:ff:39:73:56:d0: ef:b8:ce:b9:6c:68:21:bc:c2:48:5f:87:72:c7:14:cb:c3:b2: 04:ef:70:cb:1b:39:0d:84:46:b5:1b:9e:8b:a1:2e:93:58:16: d0:98:dc:78:01:d7:d0:67:37:6e:02:d3:d6:8d:2e:24:10:d6: a2:90:bf:b0:fd:a5:39:a6:e8:db:14:b1:f7:e9:69:fa:65:0e: 16:71:46:f2:12:71:b8:4e:db:ef:71:28:51:9e:6c:bc:5c:ac: 97:70:c2:7f:a1:86:4a:cd:23:9e:cf:27:60:9e:4e:58:2f:77: 35:13:90:c3:a9:8a:56:52:3a:23:6b:7f:9c:03:44:ea:ee:5c: f5:91:c8:dd:35:0e:d4:ae:14:b2:73:36:ea:26:5a:71:83:ba: 02:eb:e2:ab:f0:8a:9c:8a:36:ce:6f:68:69:6f:16:e8:9c:b2: 24:0f:7b:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/TSKRDYlHl0LRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk NzRhNzI3YmQtMmYxOS00YzEzLTg4MWYtNzM0MWZkNjhlNTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhktetoD7C/OrS84WWy1zvTVAARIaHtdbxRri wNYV4cfAK1E7/j91M94Ylr16mpSZEqX3KEU+5oV24rCtF+lxO6tAoHZciRMMIHqB kXn/5BrN/khSQzNKOhWCEgg0pW1S2bPu4UbReO2J2eO7izXC+sy8/O+B0i7LPe8b hyxZ3K+yFkPYiro58x9x+Js2vwb9b1AShKWWcNDRUYKl5ignjpIxlm850jcPQ7hZ ZzjLQnFL6+mJzAP1pp/j/NN+qTRwpJEvNcGPmf8tz37F/MVhpeLJcrIhx7NExg7e 5LG5UbtnAXjgKf511Uym0Ce0LnNHAbGRuabLY/JOaQaC7U3FgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNB7tH6xUHwIA22O+xjCzcRbseymMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWNlNDhlOGQtMDM2Yi0z ZDc2LWEyMWItMTQyMjVjZmE3ZDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAa8N7PF4vck4Gt1WsLZWO55b6CF7Xe7ugYQ4VoDDsLH1qJ1Z7mqBb9I klVy4IIDExy/bOz7HaSTx2QECx8lvPwYzSJ6/ZmJTPNQJhVC0xq184/mHOn/OXNW 0O+4zrlsaCG8wkhfh3LHFMvDsgTvcMsbOQ2ERrUbnouhLpNYFtCY3HgB19BnN24C 09aNLiQQ1qKQv7D9pTmm6NsUsffpafplDhZxRvIScbhO2+9xKFGebLxcrJdwwn+h hkrNI57PJ2CeTlgvdzUTkMOpilZSOiNrf5wDROruXPWRyN01DtSuFLJzNuomWnGD ugLr4qvwipyKNs5vaGlvFuicsiQPe8Y= -----END CERTIFICATE-----Generated at Sat Nov 1 10:03:21 2025 by rpki-client