$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cce9a9a8-7742-3ed1-ac02-781a65455f83.roa File: cce9a9a8-7742-3ed1-ac02-781a65455f83.roa (raw, json) Hash identifier: vcU6UnzY0sdl5f+ZQQcbLjXzWM6LJK1GtRMnyz7PQgE= Subject key identifier: DC:4B:DA:3F:67:61:5F:8B:B9:2E:29:1E:FD:97:66:93:D9:68:68:BE Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA932913E689451F54FA43240 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cce9a9a8-7742-3ed1-ac02-781a65455f83.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.64.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:91:3e:68:94:51:f5:4f:a4:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=2db2c357-471f-4852-b158-c86f7e62483c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8b:91:6d:f8:27:16:c5:86:88:f9:a1:01:f9: 57:12:2a:f9:ba:ae:69:43:b9:7d:d3:89:3f:cb:2b: ca:56:12:fd:dc:66:89:7c:0e:49:b4:ed:46:e8:d4: 61:d8:04:2d:f7:ac:90:ef:51:f7:51:37:da:3b:8b: bd:7f:77:07:59:4d:ca:21:34:3a:12:64:3c:d2:2c: 48:df:2b:b6:4f:11:aa:77:0d:62:0d:2d:c1:31:02: 32:48:dd:08:cf:03:54:1f:a8:8e:df:40:df:8a:99: 23:f9:1f:9a:72:b1:91:d7:55:6f:80:08:f9:e1:98: 78:4b:12:09:f2:6f:b0:9a:41:74:31:78:df:1a:ff: 36:b4:0e:ca:35:d0:fc:df:3d:fa:cc:ee:b1:3a:23: cd:17:37:3d:b0:bb:e6:2b:cb:67:1d:85:ff:d4:d4: 85:96:28:ba:96:9a:00:eb:54:7e:6e:47:e7:b6:68: 8a:54:d3:39:74:4d:91:3f:82:dd:0f:13:e3:36:5c: 66:0b:9b:5d:99:95:cf:22:11:01:95:e0:d9:69:49: 1f:32:99:71:34:7c:24:08:ef:30:2b:11:1e:3b:8d: fe:97:2c:a9:39:45:2b:c5:43:4b:08:07:b6:de:3f: c6:f2:96:bd:d6:c7:34:2f:68:9d:eb:8a:f9:c3:05: 75:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:4B:DA:3F:67:61:5F:8B:B9:2E:29:1E:FD:97:66:93:D9:68:68:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cce9a9a8-7742-3ed1-ac02-781a65455f83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:85:99:0b:57:09:bd:f8:67:29:d5:e5:73:9f:dc:fa:56:03: 57:87:f9:dd:af:06:72:47:9b:6c:5e:58:e7:19:8c:ed:e0:6f: 42:ef:8a:16:8d:db:6d:c2:d4:6c:03:65:fd:64:54:0c:6c:bc: 38:e0:d3:d0:25:0d:43:32:4c:ee:fd:7b:ee:2b:1c:d0:8e:c0: 70:49:52:da:a1:d4:98:68:50:59:8a:64:5f:5d:fd:bf:ba:4c: 95:a7:17:d1:33:0c:43:46:24:e5:7d:af:22:65:89:ee:6b:b2: 4e:ae:33:00:be:11:cd:f3:1e:a2:81:39:8c:d4:ee:76:81:64: bb:e4:b3:6a:9d:6b:7d:3d:d0:57:5c:ce:47:2e:f7:0f:76:f2: 95:78:7f:b3:13:a7:50:b2:b5:33:c8:0f:c8:a4:0c:30:d9:d5: 5e:6d:aa:1b:05:60:d4:ce:29:f9:35:aa:8b:5c:7b:af:6c:e6: 48:1a:a3:ad:2f:b2:ba:7c:cd:d1:1d:a8:bc:1f:b8:9e:e1:7d: 23:bf:4c:da:ef:09:47:d0:af:95:82:31:9c:e0:c9:37:1a:b5: eb:81:fd:e0:dd:3d:8d:d7:64:78:d1:8e:2e:0b:00:67:64:d8: 35:46:14:97:dc:e4:ff:4c:d7:18:21:6b:5f:30:b8:08:85:cc: 61:02:5d:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMpE+aJRR9U+kMkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk MmRiMmMzNTctNDcxZi00ODUyLWIxNTgtYzg2ZjdlNjI0ODNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4uRbfgnFsWGiPmhAflXEir5uq5pQ7l904k/ yyvKVhL93GaJfA5JtO1G6NRh2AQt96yQ71H3UTfaO4u9f3cHWU3KITQ6EmQ80ixI 3yu2TxGqdw1iDS3BMQIySN0IzwNUH6iO30Dfipkj+R+acrGR11VvgAj54Zh4SxIJ 8m+wmkF0MXjfGv82tA7KNdD83z36zO6xOiPNFzc9sLvmK8tnHYX/1NSFlii6lpoA 61R+bkfntmiKVNM5dE2RP4LdDxPjNlxmC5tdmZXPIhEBleDZaUkfMplxNHwkCO8w KxEeO43+lyypOUUrxUNLCAe23j/G8pa91sc0L2id64r5wwV1twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxL2j9nYV+LuS4pHv2XZpPZaGi+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2NlOWE5YTgtNzc0Mi0z ZWQxLWFjMDItNzgxYTY1NDU1ZjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEBCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqFmQtXCb34ZynV5XOf3PpWA1eH+d2vBnJHm2xeWOcZjO3gb0LvihaN 223C1GwDZf1kVAxsvDjg09AlDUMyTO79e+4rHNCOwHBJUtqh1JhoUFmKZF9d/b+6 TJWnF9EzDENGJOV9ryJlie5rsk6uMwC+Ec3zHqKBOYzU7naBZLvks2qda3090Fdc zkcu9w928pV4f7MTp1CytTPID8ikDDDZ1V5tqhsFYNTOKfk1qotce69s5kgao60v srp8zdEdqLwfuJ7hfSO/TNrvCUfQr5WCMZzgyTcateuB/eDdPY3XZHjRji4LAGdk 2DVGFJfc5P9M1xgha18wuAiFzGECXRk= -----END CERTIFICATE-----Generated at Sat Nov 1 15:22:01 2025 by rpki-client