$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c7a222f4-d550-33a0-8f0d-27e1447389c6.roa File: c7a222f4-d550-33a0-8f0d-27e1447389c6.roa (raw, json) Hash identifier: ZnetLizVHkUbIFIKBeDTlN/+JZFk4jwAo0Gw6/Qh+ew= Subject key identifier: C1:7B:11:1D:51:F4:55:4B:B9:5A:32:BD:0B:B3:00:64:C9:12:79:7A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA9327F1E064354556F31B140 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c7a222f4-d550-33a0-8f0d-27e1447389c6.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.64.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:7f:1e:06:43:54:55:6f:31:b1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=4cc6a186-cd8b-46d3-9fea-023f875c365b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a4:7e:ac:fc:17:fd:85:5f:fd:6a:1c:2f:8e: 33:12:7d:ae:54:ea:df:52:3d:95:e0:0a:d5:47:41: ca:3c:30:23:27:48:2e:f3:20:f5:1a:af:43:18:15: 9b:fa:07:8a:33:f4:6f:cc:95:bd:9f:1e:47:ce:cd: 54:0c:d6:e0:5e:8d:63:c2:5b:85:f0:c6:c9:dc:44: 60:e9:69:f1:aa:7d:4a:b2:f1:2f:23:e6:5d:f8:40: 5f:a6:76:04:99:c6:fc:36:04:87:57:f8:f6:ac:40: 56:f1:9e:43:4c:47:21:54:c9:57:90:f9:3a:4c:a5: e9:51:13:0e:4e:8d:6d:9f:72:6a:5f:55:46:5e:0e: 0d:be:d3:d8:a9:ff:c7:5c:de:8f:b3:0e:a0:7d:28: 79:31:28:52:23:13:ad:3f:f8:e4:92:97:ce:e9:60: d1:15:5d:2c:c1:b6:00:8a:ed:92:86:e6:ee:7c:25: 67:65:3a:33:65:4d:39:98:3c:86:c5:98:28:15:5e: e8:89:f5:0d:3b:b8:e5:9a:1b:fc:dd:5d:75:57:8b: bf:15:69:dd:3c:26:e8:a3:7d:dd:07:2b:b0:9b:5e: 5a:ff:96:90:59:bb:41:f2:23:42:4e:cd:b3:a9:2f: 0d:e8:b7:aa:a7:45:8e:96:02:52:37:30:6d:ec:6c: 3f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:7B:11:1D:51:F4:55:4B:B9:5A:32:BD:0B:B3:00:64:C9:12:79:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c7a222f4-d550-33a0-8f0d-27e1447389c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:88:77:f3:d9:b2:2a:51:63:88:5c:e1:6b:58:6c:1c:22:20: 89:98:bc:49:0b:05:c3:9c:6f:75:c4:65:b1:90:e9:11:d4:4f: bb:c6:fa:aa:cc:db:73:68:5d:50:8f:94:c8:40:f3:de:23:89: 1f:11:0e:99:fa:ae:dd:2a:70:2a:42:2b:ee:2b:22:39:09:68: 75:7f:91:36:cb:7d:4d:22:1e:b2:b1:5d:eb:27:87:00:32:27: 9e:a7:96:82:ee:f8:da:b0:8d:1f:32:f5:96:f4:13:8d:d6:f9: 28:26:80:2b:e3:f2:73:a4:d9:8e:f5:93:ed:a8:52:41:ac:39: dd:5d:16:72:87:df:4e:fa:c1:e6:d0:c8:11:6d:fa:4c:15:b4: ac:02:6b:3c:09:65:66:5d:cb:1a:ef:d0:63:6f:0f:d7:88:74: b8:b3:2b:e7:a2:d4:0a:b8:84:4d:65:6b:ad:3b:0d:e4:8d:99: 55:18:9d:0a:a9:e3:53:fa:39:50:f6:c7:05:b1:06:42:e3:84: 90:0c:35:9d:81:e1:b3:0a:47:58:3a:24:06:04:9c:8d:88:f8: 6e:ca:c7:f5:b0:5d:ac:d5:6b:f7:85:8f:f3:3d:c8:e0:17:5a: 5e:f8:01:e2:6a:b5:45:0a:45:7f:c8:7e:44:1a:4a:94:b4:dd: 77:51:3d:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMn8eBkNUVW8xsUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk NGNjNmExODYtY2Q4Yi00NmQzLTlmZWEtMDIzZjg3NWMzNjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6R+rPwX/YVf/WocL44zEn2uVOrfUj2V4ArV R0HKPDAjJ0gu8yD1Gq9DGBWb+geKM/RvzJW9nx5Hzs1UDNbgXo1jwluF8MbJ3ERg 6Wnxqn1KsvEvI+Zd+EBfpnYEmcb8NgSHV/j2rEBW8Z5DTEchVMlXkPk6TKXpURMO To1tn3JqX1VGXg4NvtPYqf/HXN6Psw6gfSh5MShSIxOtP/jkkpfO6WDRFV0swbYA iu2ShubufCVnZTozZU05mDyGxZgoFV7oifUNO7jlmhv83V11V4u/FWndPCboo33d Byuwm15a/5aQWbtB8iNCTs2zqS8N6Leqp0WOlgJSNzBt7Gw/9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMF7ER1R9FVLuVoyvQuzAGTJEnl6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzdhMjIyZjQtZDU1MC0z M2EwLThmMGQtMjdlMTQ0NzM4OWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEDqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJaId/PZsipRY4hc4WtYbBwiIImYvEkLBcOcb3XEZbGQ6RHUT7vG+qrM 23NoXVCPlMhA894jiR8RDpn6rt0qcCpCK+4rIjkJaHV/kTbLfU0iHrKxXesnhwAy J56nloLu+NqwjR8y9Zb0E43W+SgmgCvj8nOk2Y71k+2oUkGsOd1dFnKH3076webQ yBFt+kwVtKwCazwJZWZdyxrv0GNvD9eIdLizK+ei1Aq4hE1la607DeSNmVUYnQqp 41P6OVD2xwWxBkLjhJAMNZ2B4bMKR1g6JAYEnI2I+G7Kx/WwXazVa/eFj/M9yOAX Wl74AeJqtUUKRX/IfkQaSpS03XdRPXA= -----END CERTIFICATE-----Generated at Sun Nov 2 04:23:07 2025 by rpki-client