$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c20c2d78-c8ba-399b-af83-7f6f16553fb4.roa File: c20c2d78-c8ba-399b-af83-7f6f16553fb4.roa (raw, json) Hash identifier: Ed+uiV7rpRzITnP4Q3xQ21SvF46KZlyG6Tu+3+AlIhw= Subject key identifier: DD:33:30:61:B8:1D:0A:97:9D:01:77:37:D1:EC:B8:56:9A:6D:F2:0D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA9327FE72650AFCD0508C140 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c20c2d78-c8ba-399b-af83-7f6f16553fb4.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.65.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:7f:e7:26:50:af:cd:05:08:c1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=ae431cdf-a3c0-4981-9cff-7bc96d23f3f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:72:9d:82:0d:89:17:43:f9:77:58:ab:bc:48: 16:dd:d6:1e:46:63:d5:37:76:a2:be:26:85:d0:4b: b6:a8:5a:76:54:33:81:df:11:e0:57:b0:12:c2:a1: df:69:0d:f5:4a:f2:f3:9a:4c:23:73:88:cc:c0:23: ca:31:7a:39:45:e5:a1:65:5d:e4:c3:04:88:1e:5a: 37:79:a8:1e:5a:c2:36:2d:58:71:a1:a6:e5:be:6f: 67:83:24:21:e8:8e:98:80:15:35:25:db:4c:10:87: 6b:61:1a:b7:5a:be:b9:50:e3:6a:c6:1b:65:5f:d1: e8:00:7b:82:dd:a3:bc:a3:9d:74:fa:3d:39:eb:a9: 15:ec:ba:1c:ef:e1:a1:1b:94:58:53:30:fc:e7:1d: 8e:fd:d3:2f:4f:c8:77:8f:b6:3b:c2:87:32:96:d7: 84:b4:25:fe:30:f6:6a:99:7f:60:c8:86:ce:c0:55: e6:0a:10:4f:56:11:44:bf:7c:0f:6f:3b:9b:f6:2f: b1:82:4f:7d:21:13:6c:a1:d7:ad:28:c2:00:8a:40: 02:64:45:5e:09:8a:57:f0:9a:74:0b:67:54:83:8e: a6:d3:0f:e3:48:47:93:45:e6:02:33:0c:a1:fb:48: 88:3e:04:e9:9c:d6:1b:b4:79:41:f5:95:9a:58:96: d3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:33:30:61:B8:1D:0A:97:9D:01:77:37:D1:EC:B8:56:9A:6D:F2:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c20c2d78-c8ba-399b-af83-7f6f16553fb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.65.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:6a:f2:c8:14:5c:85:13:a5:ae:69:1c:b3:06:e3:12:c9:d2: 94:c8:18:e6:a1:fc:a1:b0:83:1b:e7:a2:44:8d:d0:f8:12:ca: e6:88:9d:9d:48:df:ec:68:6f:9c:99:3d:aa:c1:9c:ed:40:0e: 47:69:c7:e5:05:1c:ec:0b:d6:06:fe:a5:71:b5:0f:5b:fe:a4: 53:c7:51:0c:fd:b8:df:db:30:db:2b:c2:4e:05:75:40:f9:13: 6d:58:21:7f:af:e0:82:72:66:94:b4:a6:7f:24:88:d4:6e:54: 00:67:f1:08:dc:15:be:5e:8f:96:96:52:56:e1:cc:38:7d:6e: ea:3b:5a:91:3e:49:f2:81:20:7f:ee:c1:7b:84:29:8f:ea:2f: 29:13:07:37:b6:6a:19:cb:55:c0:62:19:37:af:21:96:85:52: 79:82:75:03:54:cc:69:08:9e:7d:52:89:87:58:ab:e0:73:53: 74:3b:de:c4:fa:a0:03:39:a0:6d:9e:72:c9:1d:e2:f6:74:ff: a6:b8:12:c6:95:fc:84:97:43:31:aa:83:d6:d0:a1:ec:06:0e: 84:9d:ba:c6:af:4c:7a:c5:d7:78:77:b7:a7:64:7d:3f:f7:87: 08:b0:66:e2:35:05:39:1e:af:1c:49:86:f6:a4:f3:14:87:54: a1:46:c3:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMn/nJlCvzQUIwUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk YWU0MzFjZGYtYTNjMC00OTgxLTljZmYtN2JjOTZkMjNmM2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHKdgg2JF0P5d1irvEgW3dYeRmPVN3aiviaF 0Eu2qFp2VDOB3xHgV7ASwqHfaQ31SvLzmkwjc4jMwCPKMXo5ReWhZV3kwwSIHlo3 eageWsI2LVhxoablvm9ngyQh6I6YgBU1JdtMEIdrYRq3Wr65UONqxhtlX9HoAHuC 3aO8o510+j0566kV7Loc7+GhG5RYUzD85x2O/dMvT8h3j7Y7wocylteEtCX+MPZq mX9gyIbOwFXmChBPVhFEv3wPbzub9i+xgk99IRNsodetKMIAikACZEVeCYpX8Jp0 C2dUg46m0w/jSEeTReYCMwyh+0iIPgTpnNYbtHlB9ZWaWJbTiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0zMGG4HQqXnQF3N9HsuFaabfINMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzIwYzJkNzgtYzhiYS0z OTliLWFmODMtN2Y2ZjE2NTUzZmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExq8sgUXIUTpa5pHLMG4xLJ0pTIGOah/KGwgxvnokSN0PgSyuaInZ1I 3+xob5yZParBnO1ADkdpx+UFHOwL1gb+pXG1D1v+pFPHUQz9uN/bMNsrwk4FdUD5 E21YIX+v4IJyZpS0pn8kiNRuVABn8QjcFb5ej5aWUlbhzDh9buo7WpE+SfKBIH/u wXuEKY/qLykTBze2ahnLVcBiGTevIZaFUnmCdQNUzGkInn1SiYdYq+BzU3Q73sT6 oAM5oG2ecskd4vZ0/6a4EsaV/ISXQzGqg9bQoewGDoSdusavTHrF13h3t6dkfT/3 hwiwZuI1BTkerxxJhvak8xSHVKFGwzQ= -----END CERTIFICATE-----Generated at Sat Nov 1 12:36:35 2025 by rpki-client