$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c4b67133-ec8f-3fd1-9abc-89cff6cda970.roa File: c4b67133-ec8f-3fd1-9abc-89cff6cda970.roa (raw, json) Hash identifier: 2kTGnzQcT6/lF9UewYrGmtqNWqWCtmpA55KodhDke+c= Subject key identifier: 8C:C4:2F:54:13:01:6D:01:72:2A:28:A5:72:22:6D:13:B9:C0:9C:B4 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA932802D0E62FDB78D673050 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c4b67133-ec8f-3fd1-9abc-89cff6cda970.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.66.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:80:2d:0e:62:fd:b7:8d:67:30:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=0ae9d0c0-f2e4-46db-8631-bcd1787bcf72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:82:f6:be:0b:90:3a:fb:df:32:e6:5c:48:0a: 6f:db:6c:85:ae:85:0b:04:e7:7f:4d:4d:5a:6c:9e: e6:83:5e:d0:e3:86:a3:49:b0:cf:85:63:02:a8:08: 5a:76:4a:68:e5:eb:da:90:65:6f:ab:c2:b6:95:37: 02:ab:19:48:60:89:fc:d8:58:a4:42:9e:a3:c6:d4: df:d0:43:eb:44:b7:e0:15:1a:b1:96:d8:59:c5:ef: 21:9e:e8:96:f4:be:1e:fe:6b:4c:f6:1a:6b:1f:67: 79:a1:da:1f:62:0b:58:89:98:0e:7b:dc:e6:3d:41: a0:5a:02:58:9e:a3:ba:45:ab:1a:eb:a0:f9:98:61: 08:e1:71:36:17:74:16:b7:d4:f5:cc:b8:49:dc:2d: bc:e7:13:ff:ce:32:7d:3a:01:22:70:c9:c5:57:6e: 21:e3:db:fd:e0:6c:07:15:35:88:d9:5b:e3:e1:d5: ef:e7:a0:70:49:36:1c:6f:e1:7f:91:27:ba:bb:0f: c1:1d:7b:b3:67:4b:dd:29:09:c4:c5:5c:96:cb:88: 09:63:57:ff:ba:46:b7:67:b6:86:98:9d:d7:b9:a8: ec:6d:39:9b:56:e4:61:7d:37:c9:26:e1:fc:42:b1: cc:97:15:c1:7c:60:9c:9c:c2:43:ab:e7:b4:98:3d: b5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C4:2F:54:13:01:6D:01:72:2A:28:A5:72:22:6D:13:B9:C0:9C:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c4b67133-ec8f-3fd1-9abc-89cff6cda970.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.66.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:b9:b9:d4:4e:a2:d2:66:0c:a8:00:14:c6:d4:68:da:34:5a: 60:87:b6:2e:f2:4e:4e:36:46:f7:be:37:c0:ae:a0:f1:96:3f: da:fa:9e:15:19:a0:bc:66:0c:76:94:21:7d:2b:1d:c0:7d:49: f6:66:ef:ef:6e:ab:84:3e:30:e2:da:ce:dd:0b:3a:4a:bc:c9: 50:67:01:c3:ff:7d:57:ba:69:55:c3:dc:78:f3:13:97:9c:ef: 05:d0:23:ad:b3:21:1e:cb:d0:0a:ea:83:f1:27:fc:b8:ed:27: 57:8c:ae:5f:6e:29:66:d2:d6:3c:5a:da:a6:83:47:37:f4:62: a8:eb:e0:00:8a:6a:b3:cb:03:45:b6:45:77:ca:4f:81:30:cc: 8d:b4:b2:50:6e:02:9a:16:8d:d4:2e:55:2e:c2:d4:2a:e7:85: ca:e8:90:4d:4f:ae:15:ab:3d:05:4e:25:4f:d9:5d:03:6f:d3: 6c:30:9a:44:59:90:36:e5:0f:ad:b8:ed:b9:99:30:c4:06:0a: 96:3b:cb:b2:e2:5a:f8:92:99:3e:c9:47:a8:62:d9:01:00:c1: 19:5d:98:71:95:bc:6f:f4:58:38:39:d7:df:ef:c0:91:23:04: 6b:4c:b1:ee:d7:4b:84:00:77:2d:70:72:2e:e4:d0:9e:76:b6: 6d:ed:bd:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMoAtDmL9t41nMFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk MGFlOWQwYzAtZjJlNC00NmRiLTg2MzEtYmNkMTc4N2JjZjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYL2vguQOvvfMuZcSApv22yFroULBOd/TU1a bJ7mg17Q44ajSbDPhWMCqAhadkpo5evakGVvq8K2lTcCqxlIYIn82FikQp6jxtTf 0EPrRLfgFRqxlthZxe8hnuiW9L4e/mtM9hprH2d5odofYgtYiZgOe9zmPUGgWgJY nqO6Rasa66D5mGEI4XE2F3QWt9T1zLhJ3C285xP/zjJ9OgEicMnFV24h49v94GwH FTWI2Vvj4dXv56BwSTYcb+F/kSe6uw/BHXuzZ0vdKQnExVyWy4gJY1f/uka3Z7aG mJ3XuajsbTmbVuRhfTfJJuH8QrHMlxXBfGCcnMJDq+e0mD21iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzEL1QTAW0BcioopXIibRO5wJy0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzRiNjcxMzMtZWM4Zi0z ZmQxLTlhYmMtODljZmY2Y2RhOTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEKwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALq5udROotJmDKgAFMbUaNo0WmCHti7yTk42Rve+N8CuoPGWP9r6nhUZ oLxmDHaUIX0rHcB9SfZm7+9uq4Q+MOLazt0LOkq8yVBnAcP/fVe6aVXD3HjzE5ec 7wXQI62zIR7L0Arqg/En/LjtJ1eMrl9uKWbS1jxa2qaDRzf0Yqjr4ACKarPLA0W2 RXfKT4EwzI20slBuApoWjdQuVS7C1CrnhcrokE1PrhWrPQVOJU/ZXQNv02wwmkRZ kDblD6247bmZMMQGCpY7y7LiWviSmT7JR6hi2QEAwRldmHGVvG/0WDg519/vwJEj BGtMse7XS4QAdy1wci7k0J52tm3tvVI= -----END CERTIFICATE-----Generated at Sat Nov 1 12:30:55 2025 by rpki-client