$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/be29a7c2-b17a-3694-b0c8-37f26b7cb781.roa File: be29a7c2-b17a-3694-b0c8-37f26b7cb781.roa (raw, json) Hash identifier: jByqhCtvOMTwaFchgFkygdQ3BmdrCBwc78IGyMcAicM= Subject key identifier: 19:51:3B:3E:68:89:AC:F8:62:99:8A:8B:06:C9:90:88:C0:3F:E8:D8 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584B3B1A0668A07B4DA7B7CD38E0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/be29a7c2-b17a-3694-b0c8-37f26b7cb781.roa Signing time: Thu 18 Sep 2025 02:32:50 +0000 ROA not before: Thu 18 Sep 2025 02:32:50 +0000 ROA not after: Wed 17 Dec 2025 03:32:50 +0000 asID: 13335 IP address blocks: 172.64.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3b:1a:06:68:a0:7b:4d:a7:b7:cd:38:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 18 02:32:50 2025 GMT Not After : Dec 17 03:32:50 2025 GMT Subject: CN=d7a731e2-5e52-4c78-8b0d-fdc0a38a2f58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:94:47:a7:31:89:23:e3:a1:ed:a3:5f:4f:2b: e9:6b:56:a3:51:18:5c:a6:43:8d:26:bf:00:62:1b: 8f:ed:56:88:44:44:63:ab:84:ac:86:4b:be:fa:65: 5d:38:28:1c:5e:77:f7:0a:f0:f5:2e:1a:04:09:d4: 26:01:0e:ad:4a:7d:e1:18:0a:94:ed:e5:19:8a:47: 7f:68:83:ee:ec:dc:1d:4f:73:a5:79:63:f0:28:96: c4:0a:04:50:08:c5:19:22:c2:54:61:ee:04:aa:aa: 49:7a:4a:af:67:81:24:9b:49:ab:97:9d:fe:7a:53: 0a:a0:0c:8a:fb:47:46:b2:16:03:dc:60:14:0c:9c: 1d:97:d6:fe:67:7f:6a:4d:38:fa:48:2d:61:c3:cc: f9:74:09:fc:22:f7:de:d7:07:b1:29:8f:f6:3e:59: f2:0d:20:4c:06:3c:91:ef:e4:81:77:24:32:7e:9e: a3:86:01:39:58:16:74:26:44:38:97:bc:4c:26:a3: 76:5f:37:47:30:c6:be:89:24:db:34:73:67:67:d7: 92:ad:e7:4c:15:7a:39:53:e4:82:36:a8:5e:7b:f6: b7:45:c1:bc:83:56:0d:68:1a:41:96:29:a9:9e:2d: 27:f6:7a:9e:17:76:8f:78:0a:8e:3e:80:e7:90:25: d1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:51:3B:3E:68:89:AC:F8:62:99:8A:8B:06:C9:90:88:C0:3F:E8:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/be29a7c2-b17a-3694-b0c8-37f26b7cb781.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:02:a5:f4:f0:fd:53:7b:fb:91:fd:72:e8:43:1e:25:b0:32: 57:89:1a:e3:44:02:ad:54:3c:08:d7:5a:9e:86:e9:fb:68:a2: da:e9:5a:f3:9f:bf:61:41:2e:59:a6:c4:25:a4:48:29:90:29: dd:c5:1d:ce:8b:b0:e6:0e:9b:cb:ba:43:92:9f:d4:3e:3c:2f: 0f:5b:f5:9e:a9:28:56:90:2b:8a:58:84:e5:9a:54:54:ac:cf: f9:51:1a:c0:b4:5a:b3:59:57:c9:10:ac:79:cd:6d:82:c5:e2: 53:4e:e3:88:db:5e:70:50:e6:6d:1f:13:b6:2d:05:01:cd:a4: 1b:89:34:85:69:df:44:ef:58:f1:a4:3c:db:f2:38:fe:0a:4d: c6:b4:b2:5c:13:7a:84:c6:85:24:d0:3d:24:f0:61:e1:c2:cc: c0:51:41:1e:26:6e:47:b5:74:5d:aa:53:fb:fa:26:00:6f:ee: fb:3c:e5:f7:ee:fb:cf:8b:85:80:a8:5d:fa:da:44:6a:77:a6: 71:cf:8c:7e:f8:a6:a2:ea:ab:36:8b:fa:f2:08:15:49:b4:8b: 82:30:db:dd:9e:15:b3:67:88:88:3b:93:59:27:d7:44:8b:8c: a8:d4:09:ec:87:00:70:e8:91:63:da:6b:3a:d4:d9:6f:6c:e7: 6e:51:78:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs7GgZooHtNp7fNOOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDkxODAyMzI1MFoXDTI1MTIxNzAzMzI1MFowLzEtMCsGA1UEAxMk ZDdhNzMxZTItNWU1Mi00Yzc4LThiMGQtZmRjMGEzOGEyZjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypRHpzGJI+Oh7aNfTyvpa1ajURhcpkONJr8A YhuP7VaIRERjq4Sshku++mVdOCgcXnf3CvD1LhoECdQmAQ6tSn3hGAqU7eUZikd/ aIPu7NwdT3OleWPwKJbECgRQCMUZIsJUYe4EqqpJekqvZ4Ekm0mrl53+elMKoAyK +0dGshYD3GAUDJwdl9b+Z39qTTj6SC1hw8z5dAn8Ivfe1wexKY/2PlnyDSBMBjyR 7+SBdyQyfp6jhgE5WBZ0JkQ4l7xMJqN2XzdHMMa+iSTbNHNnZ9eSredMFXo5U+SC Nqhee/a3RcG8g1YNaBpBlimpni0n9nqeF3aPeAqOPoDnkCXRUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlROz5oiaz4YpmKiwbJkIjAP+jYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmUyOWE3YzItYjE3YS0z Njk0LWIwYzgtMzdmMjZiN2NiNzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4CpfTw/VN7+5H9cuhDHiWwMleJGuNEAq1UPAjXWp6G6ftootrpWvOf v2FBLlmmxCWkSCmQKd3FHc6LsOYOm8u6Q5Kf1D48Lw9b9Z6pKFaQK4pYhOWaVFSs z/lRGsC0WrNZV8kQrHnNbYLF4lNO44jbXnBQ5m0fE7YtBQHNpBuJNIVp30TvWPGk PNvyOP4KTca0slwTeoTGhSTQPSTwYeHCzMBRQR4mbke1dF2qU/v6JgBv7vs85ffu +8+LhYCoXfraRGp3pnHPjH74pqLqqzaL+vIIFUm0i4Iw292eFbNniIg7k1kn10SL jKjUCeyHAHDokWPaazrU2W9s525ReHU= -----END CERTIFICATE-----Generated at Sun Oct 19 19:02:52 2025 by rpki-client