$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c6e72714-34ac-38a7-bffa-ad961fb680dd.roa File: c6e72714-34ac-38a7-bffa-ad961fb680dd.roa (raw, json) Hash identifier: PkX9GqG6cLu9nxS7vu2jzmN6yOZex1y3VyRODaqiKpg= Subject key identifier: 74:60:1A:ED:9E:AC:26:3F:00:C0:17:8B:F0:6F:B2:79:A7:58:5D:61 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BABFD218DCC559BBDA1AA7000 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c6e72714-34ac-38a7-bffa-ad961fb680dd.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.69.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:21:8d:cc:55:9b:bd:a1:aa:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=4c2817c3-4934-4beb-8f5c-ed4e24fd7f34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6e:78:41:f8:88:b7:86:0f:22:8b:2d:71:08: 1c:fa:45:61:c8:b1:7e:18:ca:a5:8d:4f:70:53:fa: ed:8c:cc:24:1b:c2:87:3c:34:66:2a:36:53:b9:ac: 07:f2:9b:69:6d:69:d3:31:5d:58:53:1f:fa:1f:e9: d7:25:b9:e9:1e:95:5f:0b:ab:8a:b4:32:eb:53:34: e2:0b:a6:01:ee:9a:51:c1:f2:f3:ae:f9:3a:ab:07: 92:da:d7:04:f1:6e:bb:5d:25:e3:0b:d7:14:82:b6: 0f:b8:01:c5:ed:37:0e:b4:6e:e6:96:e7:1a:30:a2: 28:90:4c:64:c1:cc:ca:24:fe:ce:11:bc:e9:df:8d: 83:3f:d2:eb:ba:28:6c:77:63:55:cd:0f:72:1d:a6: 63:c3:ee:70:c6:09:58:94:ea:02:58:04:c1:8d:7b: 1a:12:5a:48:57:04:f0:12:23:ab:58:2e:92:c4:ac: bc:05:cd:a6:ef:54:06:4c:5d:c0:c3:be:32:07:ec: 92:67:54:bf:37:aa:67:53:05:27:cb:4b:6c:ff:fe: 5a:e0:e9:b4:0f:7d:14:3d:e9:bb:20:56:19:fb:d2: 72:82:04:ee:47:be:c5:df:51:4c:ea:8c:63:f1:8a: 10:c6:a4:80:11:ef:16:81:6e:7e:dd:94:13:bb:65: 33:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:60:1A:ED:9E:AC:26:3F:00:C0:17:8B:F0:6F:B2:79:A7:58:5D:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c6e72714-34ac-38a7-bffa-ad961fb680dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:4d:5a:b3:64:79:d7:8f:21:3c:56:3d:b8:ab:e2:7e:67:fa: 0d:59:e7:3c:7e:86:b1:70:7b:66:bf:e2:8e:55:f3:13:66:65: 8d:43:7b:63:fb:21:ff:05:9f:41:f3:88:bd:81:83:54:f5:e1: 4d:e3:e6:7d:7d:b1:86:ca:ea:6e:2e:36:13:0e:cd:79:d4:de: 7c:c0:97:53:a2:1b:06:f1:d8:5a:8a:d5:a3:e0:b1:35:cf:fa: 00:0a:f3:fc:a9:0f:fd:a9:9f:df:15:d3:3f:81:2e:9a:a7:74: 99:ff:58:73:2b:88:24:e7:16:b1:16:23:ec:10:28:c1:f5:4b: a8:9a:19:21:ee:7d:da:03:45:94:3a:75:49:60:1d:91:8a:cd: 4c:5c:4c:24:71:3f:de:f7:e1:49:17:20:59:9c:11:6c:9e:21: 80:7b:39:c6:4f:15:cb:96:7c:87:e2:1c:aa:79:90:b4:e9:3f: c6:b1:37:2d:44:82:61:aa:72:50:e1:d6:f5:1a:8a:a3:e8:3d: 4d:14:89:64:55:aa:fb:b2:4c:f4:2c:d3:4e:11:90:78:15:1f: 9b:e9:2e:52:3e:0a:ac:4d:7a:e4:a3:80:50:c5:d4:ac:68:9a: 7a:7b:18:1d:74:1e:84:e1:4b:96:77:98:cd:8b:5a:29:73:56: 2b:7f:2c:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/SGNzFWbvaGqcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk NGMyODE3YzMtNDkzNC00YmViLThmNWMtZWQ0ZTI0ZmQ3ZjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlm54QfiIt4YPIostcQgc+kVhyLF+GMqljU9w U/rtjMwkG8KHPDRmKjZTuawH8ptpbWnTMV1YUx/6H+nXJbnpHpVfC6uKtDLrUzTi C6YB7ppRwfLzrvk6qweS2tcE8W67XSXjC9cUgrYPuAHF7TcOtG7mlucaMKIokExk wczKJP7OEbzp342DP9Lruihsd2NVzQ9yHaZjw+5wxglYlOoCWATBjXsaElpIVwTw EiOrWC6SxKy8Bc2m71QGTF3Aw74yB+ySZ1S/N6pnUwUny0ts//5a4Om0D30UPem7 IFYZ+9JyggTuR77F31FM6oxj8YoQxqSAEe8WgW5+3ZQTu2Uz0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRgGu2erCY/AMAXi/BvsnmnWF1hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzZlNzI3MTQtMzRhYy0z OGE3LWJmZmEtYWQ5NjFmYjY4MGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEWdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALFNWrNkedePITxWPbir4n5n+g1Z5zx+hrFwe2a/4o5V8xNmZY1De2P7 If8Fn0HziL2Bg1T14U3j5n19sYbK6m4uNhMOzXnU3nzAl1OiGwbx2FqK1aPgsTXP +gAK8/ypD/2pn98V0z+BLpqndJn/WHMriCTnFrEWI+wQKMH1S6iaGSHufdoDRZQ6 dUlgHZGKzUxcTCRxP9734UkXIFmcEWyeIYB7OcZPFcuWfIfiHKp5kLTpP8axNy1E gmGqclDh1vUaiqPoPU0UiWRVqvuyTPQs004RkHgVH5vpLlI+CqxNeuSjgFDF1Kxo mnp7GB10HoThS5Z3mM2LWilzVit/LAg= -----END CERTIFICATE-----Generated at Sat Nov 1 12:35:04 2025 by rpki-client