$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c6e49794-8e97-3558-a224-aeb576e76a1f.roa File: c6e49794-8e97-3558-a224-aeb576e76a1f.roa (raw, json) Hash identifier: sJ3IaP6cDuKnOVSrJBD0UD9dHBZbwYgj8FiWfrxwCqM= Subject key identifier: 24:C1:85:AE:23:27:65:22:71:80:B0:E6:52:12:67:8F:BB:2D:08:E2 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB02D0CC6C5334D7ABD0FA480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c6e49794-8e97-3558-a224-aeb576e76a1f.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 172.69.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2d:0c:c6:c5:33:4d:7a:bd:0f:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=84f1408f-551c-423a-b5b8-c8813b9bc44e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b6:e1:cf:09:0c:06:a9:05:56:01:d7:a7:88: 17:54:52:0c:e0:f9:29:88:53:a9:5a:8a:db:55:25: a8:b6:25:30:d1:9d:00:5b:a4:82:c5:8f:81:11:d8: 98:21:f5:f9:a9:92:d0:05:f1:a7:50:ea:fd:f2:01: f2:c3:47:d1:86:97:30:3c:35:68:e4:c9:c6:75:c9: 53:b7:30:32:bd:d3:12:ba:1e:f7:a8:1e:51:37:6d: a6:22:a6:eb:c2:ed:d9:05:73:31:7c:94:7a:6c:12: 53:2f:c9:96:2a:32:46:6c:b4:66:a0:ba:58:e7:e6: ea:b3:af:9e:ea:f0:19:5a:68:76:97:43:5a:74:c4: a7:c7:92:4d:69:95:be:86:a6:dd:fa:fd:2c:d9:49: 9f:b5:b1:a4:83:09:39:8f:46:14:bc:86:1c:2d:6c: 2c:bf:59:5b:24:ef:e8:f6:59:83:c3:5b:80:4f:49: 13:7b:8a:65:32:46:ab:6b:22:e0:ec:94:27:72:c6: 7b:47:90:2a:86:ff:76:bd:b1:10:ee:ec:0c:62:64: c9:54:f7:04:78:cd:47:39:a0:5a:46:fb:76:d6:1e: 6f:19:2a:e5:c3:1e:09:59:6f:e7:0d:c9:11:c4:a2: 6b:7d:cc:a9:2d:68:db:10:fa:49:29:16:ff:45:d3: 32:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C1:85:AE:23:27:65:22:71:80:B0:E6:52:12:67:8F:BB:2D:08:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c6e49794-8e97-3558-a224-aeb576e76a1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:64:35:a0:2c:ad:02:64:3c:36:d9:72:d5:09:97:cd:8b:2b: a9:e6:fd:46:28:97:12:42:ab:c0:f8:10:6a:97:48:1d:b8:35: 63:34:e9:ec:7c:ea:d4:ab:c5:8c:37:36:4e:86:21:e0:39:79: ab:98:c8:93:d4:25:81:fc:17:ab:5a:60:77:b0:53:90:1b:60: f7:47:17:fc:c1:26:83:e6:bc:5f:31:b8:ef:66:d0:e0:4c:a1: b1:51:ad:cf:65:4c:84:f4:fc:51:ec:33:f3:59:e0:bb:0f:bc: 80:0d:0c:bc:b3:d5:8e:7c:cb:1d:c4:69:8f:00:05:be:6b:ab: ac:1c:5d:eb:22:57:78:10:5f:95:b1:08:f7:45:ab:40:37:d6: dd:1f:4a:46:f4:dd:1c:dd:51:cd:ef:ee:10:38:ef:1d:a8:6b: a4:74:9a:3b:44:b2:4d:3e:8e:b4:a5:48:e8:24:39:ec:51:11: 42:16:33:1b:5f:13:e7:ff:a0:39:0b:32:4e:83:c7:fd:6d:7d: 2e:0b:fb:e7:ff:93:01:8c:59:d9:b2:c1:ab:d1:9f:22:29:0c: 9a:4b:c9:56:50:94:a1:81:53:bd:02:19:62:3f:68:76:52:10: 4c:c2:49:05:76:a6:6d:dc:73:35:62:1c:1b:49:41:86:25:43: c3:b2:53:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLQzGxTNNer0PpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk ODRmMTQwOGYtNTUxYy00MjNhLWI1YjgtYzg4MTNiOWJjNDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLbhzwkMBqkFVgHXp4gXVFIM4PkpiFOpWorb VSWotiUw0Z0AW6SCxY+BEdiYIfX5qZLQBfGnUOr98gHyw0fRhpcwPDVo5MnGdclT tzAyvdMSuh73qB5RN22mIqbrwu3ZBXMxfJR6bBJTL8mWKjJGbLRmoLpY5+bqs6+e 6vAZWmh2l0NadMSnx5JNaZW+hqbd+v0s2UmftbGkgwk5j0YUvIYcLWwsv1lbJO/o 9lmDw1uAT0kTe4plMkarayLg7JQncsZ7R5Aqhv92vbEQ7uwMYmTJVPcEeM1HOaBa Rvt21h5vGSrlwx4JWW/nDckRxKJrfcypLWjbEPpJKRb/RdMyzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTBha4jJ2UicYCw5lISZ4+7LQjiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzZlNDk3OTQtOGU5Ny0z NTU4LWEyMjQtYWViNTc2ZTc2YTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEXZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJkNaAsrQJkPDbZctUJl82LK6nm/UYolxJCq8D4EGqXSB24NWM06ex8 6tSrxYw3Nk6GIeA5eauYyJPUJYH8F6taYHewU5AbYPdHF/zBJoPmvF8xuO9m0OBM obFRrc9lTIT0/FHsM/NZ4LsPvIANDLyz1Y58yx3EaY8ABb5rq6wcXesiV3gQX5Wx CPdFq0A31t0fSkb03RzdUc3v7hA47x2oa6R0mjtEsk0+jrSlSOgkOexREUIWMxtf E+f/oDkLMk6Dx/1tfS4L++f/kwGMWdmywavRnyIpDJpLyVZQlKGBU70CGWI/aHZS EEzCSQV2pm3cczViHBtJQYYlQ8OyU88= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:24 2025 by rpki-client