$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c92bb610-ad00-3fe7-a886-3bdc5129605d.roa File: c92bb610-ad00-3fe7-a886-3bdc5129605d.roa (raw, json) Hash identifier: EkSDYkKSxWptbOe2Ad7+WviBDQznqrSmvd594T0wIlQ= Subject key identifier: 84:96:32:BF:84:BC:00:9F:98:01:A0:41:8A:47:DA:4A:55:02:37:DF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA9328D75AC917F2EF0033380 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c92bb610-ad00-3fe7-a886-3bdc5129605d.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.66.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:8d:75:ac:91:7f:2e:f0:03:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=7f12204f-f9ae-4f3d-9b42-3078b6e639b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c7:25:24:6e:fd:68:67:e2:67:d5:47:68:41: 30:b5:d5:65:c2:98:88:ee:d2:90:1e:36:32:62:60: f5:c6:7e:11:9f:28:88:c9:c1:3b:0d:6f:90:91:68: b9:19:88:c6:92:15:d9:b9:f5:f9:8c:36:b7:9b:df: 5b:6e:d5:e1:dc:bb:0e:3a:42:ba:f2:7d:ea:5c:30: d6:7d:7e:9b:7c:dc:86:b9:94:32:d2:9e:c2:c5:cf: d5:93:a2:37:a4:c2:d5:62:30:9b:de:24:eb:f1:1b: b0:07:77:09:2e:3c:e5:7f:3d:71:53:4b:52:84:79: 7e:6e:5c:ae:5f:c0:4e:0d:45:27:fd:4f:2e:1c:c2: b6:f5:6b:a7:3c:0b:18:7c:9b:4e:0c:94:5f:06:51: 71:13:3c:6a:3c:23:2c:ba:13:20:2d:43:ff:22:62: 9d:33:65:1d:4a:f7:f4:06:a6:69:d1:7f:6f:99:b5: f7:ba:d2:14:e3:72:6e:16:a9:ed:bb:a9:a8:f4:ee: 02:dc:00:4f:a7:43:36:6d:7a:6e:98:81:75:9e:f6: 33:27:98:e4:d0:52:d3:35:a7:8d:df:dd:0e:50:89: 22:3b:b5:ac:22:70:b8:5c:82:46:dd:07:1e:47:61: aa:89:0b:c6:fe:61:5b:22:d9:ac:c4:71:2e:1a:20: 31:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:96:32:BF:84:BC:00:9F:98:01:A0:41:8A:47:DA:4A:55:02:37:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c92bb610-ad00-3fe7-a886-3bdc5129605d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.66.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:84:7a:2a:81:e0:40:d9:18:10:a3:09:41:8b:aa:f1:a1:e0: fe:89:02:3f:52:c2:91:ec:c0:b8:e8:34:f4:db:3f:42:ec:7e: f2:9c:57:58:eb:82:91:6b:ad:94:e1:be:72:fa:26:31:b2:ee: 0c:bf:bc:34:4c:4e:13:5f:23:8c:e4:f4:53:ac:2a:a9:44:0d: ff:d9:28:8f:09:58:d1:c2:d0:54:ca:96:69:97:cd:4d:2f:bb: 16:49:00:44:27:6a:27:02:06:c5:31:ea:68:6e:4f:e3:c7:bf: 2c:a2:18:de:71:b0:10:54:03:7c:62:d3:3a:03:cb:f5:9a:fc: 89:98:a0:11:63:58:7a:03:3a:5f:46:94:11:9d:97:66:31:96: bc:cc:19:65:6b:f9:e7:c2:4a:02:46:86:b8:f5:18:b9:d8:5b: 72:93:86:c4:b8:ec:b3:4d:08:bf:89:c5:31:7f:89:dc:e6:0f: 85:a2:c5:c2:21:41:0e:d1:3b:1b:21:b1:e9:5d:3d:4b:42:f4: 58:9a:08:29:83:aa:c3:43:d5:19:55:56:93:68:c5:33:d7:15: 1f:67:5f:99:7e:5a:a2:03:ad:c8:c9:c1:db:24:87:6d:8b:01: 6c:a3:3c:14:c0:d9:17:06:38:87:c4:3e:71:72:9b:a5:59:18: 3d:9a:8e:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMo11rJF/LvADM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk N2YxMjIwNGYtZjlhZS00ZjNkLTliNDItMzA3OGI2ZTYzOWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8clJG79aGfiZ9VHaEEwtdVlwpiI7tKQHjYy YmD1xn4RnyiIycE7DW+QkWi5GYjGkhXZufX5jDa3m99bbtXh3LsOOkK68n3qXDDW fX6bfNyGuZQy0p7Cxc/Vk6I3pMLVYjCb3iTr8RuwB3cJLjzlfz1xU0tShHl+blyu X8BODUUn/U8uHMK29WunPAsYfJtODJRfBlFxEzxqPCMsuhMgLUP/ImKdM2UdSvf0 BqZp0X9vmbX3utIU43JuFqntu6mo9O4C3ABPp0M2bXpumIF1nvYzJ5jk0FLTNaeN 390OUIkiO7WsInC4XIJG3QceR2GqiQvG/mFbItmsxHEuGiAxewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFISWMr+EvACfmAGgQYpH2kpVAjffMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzkyYmI2MTAtYWQwMC0z ZmU3LWE4ODYtM2JkYzUxMjk2MDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrELQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJyEeiqB4EDZGBCjCUGLqvGh4P6JAj9SwpHswLjoNPTbP0LsfvKcV1jr gpFrrZThvnL6JjGy7gy/vDRMThNfI4zk9FOsKqlEDf/ZKI8JWNHC0FTKlmmXzU0v uxZJAEQnaicCBsUx6mhuT+PHvyyiGN5xsBBUA3xi0zoDy/Wa/ImYoBFjWHoDOl9G lBGdl2YxlrzMGWVr+efCSgJGhrj1GLnYW3KThsS47LNNCL+JxTF/idzmD4WixcIh QQ7ROxshseldPUtC9FiaCCmDqsND1RlVVpNoxTPXFR9nX5l+WqIDrcjJwdskh22L AWyjPBTA2RcGOIfEPnFym6VZGD2ajiE= -----END CERTIFICATE-----Generated at Sat Nov 1 12:36:58 2025 by rpki-client