$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cd20c404-cc69-3bb9-b43b-40e5ec125ede.roa File: cd20c404-cc69-3bb9-b43b-40e5ec125ede.roa (raw, json) Hash identifier: /8jDW+w7vHkrM7cHn2E4aYmMu7Yw70S55/Zi5obZYvQ= Subject key identifier: D6:80:57:82:47:B0:63:AD:D2:82:3D:47:4B:92:D2:81:34:70:8A:7C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BABFD32F323B3135C1029D900 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cd20c404-cc69-3bb9-b43b-40e5ec125ede.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.69.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:32:f3:23:b3:13:5c:10:29:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=b509a483-4920-46ab-9f71-7757098d0e5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:35:e0:82:e0:e6:c8:43:be:82:82:a7:86:a6: 99:df:27:3e:e4:cf:69:df:93:c3:58:17:60:6b:85: ce:f8:9c:45:7f:be:ac:69:3e:b1:fd:bb:31:b4:da: ea:a4:06:08:f9:33:c7:a7:e6:74:db:49:64:51:6d: a9:a5:31:e8:2d:71:f5:8c:52:de:86:36:81:f6:22: 9d:45:90:db:00:72:aa:a9:ee:dc:20:63:fc:4c:e9: d5:6d:fb:10:98:db:a9:b2:1d:f1:7e:f8:39:74:a0: 45:b1:74:f8:52:e0:5e:b1:42:8c:5b:45:63:e0:b4: 74:39:ab:bd:0c:7a:31:a2:21:7b:0d:26:5c:ba:b1: b5:cb:cf:83:c9:aa:91:59:6a:fe:fa:d4:8c:fd:0c: 2a:11:2e:c1:71:8c:bd:ff:43:83:2d:74:cd:0f:40: 4f:90:fa:43:24:7c:49:f2:a8:b4:83:ce:96:ba:22: 37:40:e4:27:2d:0a:35:59:7d:97:19:e3:fa:4b:92: 1c:54:77:2f:e8:0c:d7:20:f1:d9:f1:ba:09:81:ef: 03:7b:e5:96:61:f7:bb:d7:94:12:c9:5a:27:9e:76: 24:6f:02:37:e3:62:d6:cc:4d:2f:9e:c3:21:fc:e7: 92:5a:5d:37:04:38:cc:46:7b:b5:a8:5c:fb:f0:82: e9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:80:57:82:47:B0:63:AD:D2:82:3D:47:4B:92:D2:81:34:70:8A:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cd20c404-cc69-3bb9-b43b-40e5ec125ede.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:65:37:ab:e6:db:09:5e:9d:d9:65:13:fe:43:a1:de:69:d2: d5:4c:db:ab:26:26:82:b2:2f:35:c4:17:a9:f7:f3:f5:9b:f6: 64:37:6d:33:13:4a:63:49:67:26:78:64:f5:92:fb:cf:6a:43: 9d:6c:02:90:f4:e8:3e:fb:01:df:ef:3c:b4:d9:5d:dc:da:e2: 56:67:40:3a:f7:91:9f:00:d2:1b:b9:fe:0c:79:1c:c4:f3:4e: 0c:11:ec:0c:d3:8f:12:94:71:e9:cc:63:85:2e:04:dd:6a:09: 33:0c:b0:2d:76:0b:e8:8c:42:bd:8b:c2:8e:d8:f6:ee:45:55: d8:44:32:b3:fd:c3:e8:9f:13:5f:26:dd:ef:02:d8:11:b3:8d: 9c:6d:d9:a4:cb:50:94:2f:fa:8a:5d:fb:0b:0d:b8:fa:29:14: 02:4b:c1:69:34:6c:e5:4f:0c:29:c0:da:e1:b2:37:5d:df:17: 5f:35:e8:08:0f:0d:fc:10:65:3b:b7:ca:13:58:f2:f1:16:9c: 4d:84:ff:c7:42:68:81:a7:89:79:11:d0:b7:54:85:21:34:c2: 01:aa:44:3b:48:fa:b6:ff:1a:f4:13:c0:ed:6b:f5:0c:dc:65: 44:35:6a:0f:6d:c5:a9:63:7a:3f:35:f4:8b:bd:94:db:6a:56: 00:52:72:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/TLzI7MTXBAp2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk YjUwOWE0ODMtNDkyMC00NmFiLTlmNzEtNzc1NzA5OGQwZTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDXgguDmyEO+goKnhqaZ3yc+5M9p35PDWBdg a4XO+JxFf76saT6x/bsxtNrqpAYI+TPHp+Z020lkUW2ppTHoLXH1jFLehjaB9iKd RZDbAHKqqe7cIGP8TOnVbfsQmNupsh3xfvg5dKBFsXT4UuBesUKMW0Vj4LR0Oau9 DHoxoiF7DSZcurG1y8+DyaqRWWr++tSM/QwqES7BcYy9/0ODLXTND0BPkPpDJHxJ 8qi0g86WuiI3QOQnLQo1WX2XGeP6S5IcVHcv6AzXIPHZ8boJge8De+WWYfe715QS yVonnnYkbwI342LWzE0vnsMh/OeSWl03BDjMRnu1qFz78ILp5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNaAV4JHsGOt0oI9R0uS0oE0cIp8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2QyMGM0MDQtY2M2OS0z YmI5LWI0M2ItNDBlNWVjMTI1ZWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEUrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdlN6vm2wlendllE/5Dod5p0tVM26smJoKyLzXEF6n38/Wb9mQ3bTMT SmNJZyZ4ZPWS+89qQ51sApD06D77Ad/vPLTZXdza4lZnQDr3kZ8A0hu5/gx5HMTz TgwR7AzTjxKUcenMY4UuBN1qCTMMsC12C+iMQr2Lwo7Y9u5FVdhEMrP9w+ifE18m 3e8C2BGzjZxt2aTLUJQv+opd+wsNuPopFAJLwWk0bOVPDCnA2uGyN13fF1816AgP DfwQZTu3yhNY8vEWnE2E/8dCaIGniXkR0LdUhSE0wgGqRDtI+rb/GvQTwO1r9Qzc ZUQ1ag9txaljej819Iu9lNtqVgBSci4= -----END CERTIFICATE-----Generated at Sat Nov 1 12:36:37 2025 by rpki-client