$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aec5b6e3-eacf-3d0f-865b-403e11aff438.roa File: aec5b6e3-eacf-3d0f-865b-403e11aff438.roa (raw, json) Hash identifier: 1oNsKCfgB1kiBufpkbA+Bps25FF+tY0ifxWNxpzdzU0= Subject key identifier: 3F:7A:9A:2D:AF:55:46:4C:4C:31:99:04:72:55:C6:10:D5:69:7C:49 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BABFD35FEB397FBBCDA0AA980 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aec5b6e3-eacf-3d0f-865b-403e11aff438.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.69.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:35:fe:b3:97:fb:bc:da:0a:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=b44235e2-d31d-44dd-8338-c8a2f98c9a84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f5:45:5c:30:55:69:2d:bd:9e:dc:e0:67:20: 78:2d:54:b7:5e:c9:c2:37:02:3e:bb:d0:16:6e:d8: 4b:7a:ff:d5:9a:4f:9f:19:2f:e8:4f:e2:e1:7b:f7: f4:1c:05:01:be:2b:fb:fe:5b:e5:19:8e:54:fb:47: 25:71:e1:07:0b:a4:37:08:51:13:a9:2d:e0:af:d3: d5:ad:ba:85:69:e3:6a:f0:7d:67:8a:22:bd:07:f2: 4e:37:b2:a6:bc:78:0d:11:f8:d1:c8:04:6b:df:16: 18:1f:78:ae:af:9f:3e:31:ac:cb:c9:bb:aa:a7:e3: 34:31:88:e3:dc:9a:54:1b:b1:5c:cd:f3:5f:35:ea: e0:19:1f:a8:04:de:9a:d1:70:34:64:17:6e:92:88: ac:da:1b:17:e9:05:eb:69:ac:27:d1:28:3f:9e:2a: c4:67:77:ba:d9:07:27:8b:71:26:a9:e1:1b:52:d4: 18:4c:2f:cc:67:d4:42:79:e4:b2:63:59:9d:86:bb: af:95:29:bc:2d:bc:8e:e9:2e:3e:55:a1:d1:44:1b: c1:d1:ae:93:11:82:3b:de:4e:64:6c:3c:39:34:c0: 3a:7d:b0:ce:17:36:bf:c6:cc:2f:0e:2f:24:67:4e: ee:24:64:bb:8f:3b:2e:98:69:1f:65:11:5e:fe:46: 56:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:7A:9A:2D:AF:55:46:4C:4C:31:99:04:72:55:C6:10:D5:69:7C:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aec5b6e3-eacf-3d0f-865b-403e11aff438.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:8d:9d:62:26:f4:d2:28:16:15:d2:09:88:e9:f8:dd:6f:b5: 79:18:dc:ce:3b:d3:5c:7d:af:0e:65:76:e2:0c:64:6d:72:c1: d3:3a:48:ac:7c:f1:cd:c7:fe:ea:d5:46:37:98:7f:d0:cd:22: b8:71:40:9d:21:79:f0:c5:ac:f8:0d:95:49:64:ae:c4:0a:32: d7:a2:25:1a:f2:ca:55:2f:86:fa:2b:c7:37:32:59:15:0a:95: 71:4e:f0:97:bf:c7:f7:2e:c9:17:62:03:c9:d5:d6:b6:56:1f: 7a:9f:0b:49:78:c1:ed:7f:d3:72:da:22:a8:a2:04:f1:ea:6b: 94:57:7c:85:38:0e:0f:ed:41:b0:67:d2:81:b3:26:d5:e2:73: 38:d3:96:41:a4:b3:69:c0:e3:cd:83:32:9c:c0:db:ea:ca:4c: 76:34:52:3d:e7:14:c2:05:f7:b6:5a:18:c0:c2:4c:c0:ea:ab: 31:8e:c0:f0:94:0c:e6:49:bd:30:20:c4:d8:c4:db:68:54:9c: ba:01:fa:73:7f:e9:1c:6d:f4:2f:96:5a:55:cf:1c:05:1a:f2: 52:08:79:0e:2b:a3:9a:25:00:61:36:09:dc:61:2f:92:3f:7d: c7:19:14:bf:d5:a3:64:2a:35:ab:9b:be:e7:16:24:e1:1d:10: 4f:22:35:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/TX+s5f7vNoKqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk YjQ0MjM1ZTItZDMxZC00NGRkLTgzMzgtYzhhMmY5OGM5YTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/VFXDBVaS29ntzgZyB4LVS3XsnCNwI+u9AW bthLev/Vmk+fGS/oT+Lhe/f0HAUBviv7/lvlGY5U+0clceEHC6Q3CFETqS3gr9PV rbqFaeNq8H1niiK9B/JON7KmvHgNEfjRyARr3xYYH3iur58+MazLybuqp+M0MYjj 3JpUG7FczfNfNergGR+oBN6a0XA0ZBdukois2hsX6QXraawn0Sg/nirEZ3e62Qcn i3EmqeEbUtQYTC/MZ9RCeeSyY1mdhruvlSm8LbyO6S4+VaHRRBvB0a6TEYI73k5k bDw5NMA6fbDOFza/xswvDi8kZ07uJGS7jzsumGkfZRFe/kZWBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD96mi2vVUZMTDGZBHJVxhDVaXxJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWVjNWI2ZTMtZWFjZi0z ZDBmLTg2NWItNDAzZTExYWZmNDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEWfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKNnWIm9NIoFhXSCYjp+N1vtXkY3M4701x9rw5lduIMZG1ywdM6SKx8 8c3H/urVRjeYf9DNIrhxQJ0hefDFrPgNlUlkrsQKMteiJRryylUvhvorxzcyWRUK lXFO8Je/x/cuyRdiA8nV1rZWH3qfC0l4we1/03LaIqiiBPHqa5RXfIU4Dg/tQbBn 0oGzJtXiczjTlkGks2nA482DMpzA2+rKTHY0Uj3nFMIF97ZaGMDCTMDqqzGOwPCU DOZJvTAgxNjE22hUnLoB+nN/6Rxt9C+WWlXPHAUa8lIIeQ4ro5olAGE2CdxhL5I/ fccZFL/Vo2QqNaubvucWJOEdEE8iNZY= -----END CERTIFICATE-----Generated at Sat Nov 1 12:30:45 2025 by rpki-client