$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bab89aa8-f770-324f-b2eb-0ca45279ba2e.roa File: bab89aa8-f770-324f-b2eb-0ca45279ba2e.roa (raw, json) Hash identifier: bce7r52pTi9MfY12qAbjqbXpS/TpoZgn1lcbKcNcl0s= Subject key identifier: E5:5E:E1:06:ED:ED:AF:9E:98:1A:25:2B:0A:35:88:15:D1:29:F1:51 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA9327FF998C6E2CFADBBA000 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bab89aa8-f770-324f-b2eb-0ca45279ba2e.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.66.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:7f:f9:98:c6:e2:cf:ad:bb:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=b55dcd67-a2c6-439e-898e-153dd7872e07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:98:da:b8:01:e5:a5:94:a6:67:51:57:2c:70: e2:22:1e:6f:bf:b8:b7:1c:78:ed:cd:8c:ae:7b:67: 88:bd:bf:77:11:05:26:86:8f:7d:e1:17:1c:41:ec: 26:18:db:da:dc:98:8a:21:4a:cb:1f:17:cf:fc:85: 0c:3b:9b:18:84:f0:3a:2e:dd:cf:87:a8:1a:cc:d9: b8:27:2b:fc:04:a7:93:0b:5a:65:de:8e:b1:56:9a: 36:eb:78:71:51:80:0c:b7:b8:11:67:40:b5:b7:05: df:99:3b:c4:82:08:f1:33:12:0d:4d:4c:54:82:2c: e2:37:4d:20:96:2f:4e:20:2e:c5:a0:ce:65:74:f8: e2:4b:4f:b6:8b:2c:38:d3:1c:b0:cf:28:8c:6e:3d: 51:3e:be:97:8e:bb:94:5c:4a:95:95:64:5f:91:e8: b0:58:50:7a:06:2c:aa:c5:ea:f8:97:7d:03:69:84: 4b:1d:a0:ab:a1:c4:d5:bc:38:f6:6b:0e:54:d7:8e: fc:9a:2c:b7:d4:e4:69:45:07:7f:a4:d4:8f:7e:b6: a1:9a:c1:45:af:32:32:43:2c:67:42:47:f1:12:12: 02:cd:05:a1:80:c8:64:58:b4:f6:21:c4:70:bd:4e: 2b:d0:ea:5f:fa:5b:c6:80:87:72:64:9e:ac:43:45: 04:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:5E:E1:06:ED:ED:AF:9E:98:1A:25:2B:0A:35:88:15:D1:29:F1:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bab89aa8-f770-324f-b2eb-0ca45279ba2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.66.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:c5:76:a9:3c:ba:7e:7a:ff:8d:df:38:43:0b:47:08:bd:47: 09:91:5e:63:46:24:53:a8:6d:84:e3:1f:c0:f0:d8:a4:c7:a3: bc:aa:e9:b3:29:72:a9:09:82:ea:8c:62:79:0f:d9:f7:1c:74: 33:42:92:05:0d:9d:48:2b:00:f4:cd:e5:7a:97:e5:f6:b0:2d: 88:ee:c8:a8:3a:38:f2:bf:31:d9:a3:42:37:72:50:9c:05:7a: ca:41:8a:8e:23:d5:ad:13:9d:fb:77:77:ac:b5:d3:20:79:ee: 67:d1:84:14:af:0e:5c:3d:03:84:85:1c:74:c6:47:65:73:a1: 3d:b6:a9:12:35:3c:5a:46:9a:25:ac:7f:53:6e:5c:53:82:7b: c7:b1:1f:5d:63:83:40:8f:6d:9d:6d:fa:df:a1:98:25:77:45: 04:55:3a:fa:e6:b5:05:80:6d:e6:f4:0a:ee:65:82:fc:77:e9: b5:ac:1b:d5:08:e2:94:e2:08:9e:d9:b6:16:12:71:01:dd:b9: 31:9c:c0:2a:c5:a4:d6:f4:36:5a:d9:93:97:a8:c6:05:0f:e5: 40:a7:56:d0:0d:44:57:aa:a4:07:30:d9:d3:4f:ee:2d:3c:46: e6:6e:e6:8d:66:15:66:7e:78:bd:b0:5b:64:74:95:a1:00:48: e6:47:37:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMn/5mMbiz627oAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk YjU1ZGNkNjctYTJjNi00MzllLTg5OGUtMTUzZGQ3ODcyZTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpjauAHlpZSmZ1FXLHDiIh5vv7i3HHjtzYyu e2eIvb93EQUmho994RccQewmGNva3JiKIUrLHxfP/IUMO5sYhPA6Lt3Ph6gazNm4 Jyv8BKeTC1pl3o6xVpo263hxUYAMt7gRZ0C1twXfmTvEggjxMxINTUxUgiziN00g li9OIC7FoM5ldPjiS0+2iyw40xywzyiMbj1RPr6XjruUXEqVlWRfkeiwWFB6Biyq xer4l30DaYRLHaCrocTVvDj2aw5U1478miy31ORpRQd/pNSPfrahmsFFrzIyQyxn QkfxEhICzQWhgMhkWLT2IcRwvU4r0Opf+lvGgIdyZJ6sQ0UEEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVe4Qbt7a+emBolKwo1iBXRKfFRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmFiODlhYTgtZjc3MC0z MjRmLWIyZWItMGNhNDUyNzliYTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvFdqk8un56/43fOEMLRwi9RwmRXmNGJFOobYTjH8Dw2KTHo7yq6bMp cqkJguqMYnkP2fccdDNCkgUNnUgrAPTN5XqX5fawLYjuyKg6OPK/MdmjQjdyUJwF espBio4j1a0Tnft3d6y10yB57mfRhBSvDlw9A4SFHHTGR2VzoT22qRI1PFpGmiWs f1NuXFOCe8exH11jg0CPbZ1t+t+hmCV3RQRVOvrmtQWAbeb0Cu5lgvx36bWsG9UI 4pTiCJ7ZthYScQHduTGcwCrFpNb0NlrZk5eoxgUP5UCnVtANRFeqpAcw2dNP7i08 RuZu5o1mFWZ+eL2wW2R0laEASOZHN30= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:27 2025 by rpki-client