$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cd81bfde-6f07-378f-a65d-fd19d546ca2e.roa File: cd81bfde-6f07-378f-a65d-fd19d546ca2e.roa (raw, json) Hash identifier: x1oQ2suM1MJKPcKd9yc1jU8uBm+hQU6eHxJl51pEXfs= Subject key identifier: 0B:07:27:2B:DB:E4:42:00:1B:11:ED:CE:B9:F8:89:D5:09:60:0E:8C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA9327DF2CC64E1362A9C4B00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cd81bfde-6f07-378f-a65d-fd19d546ca2e.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.64.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:7d:f2:cc:64:e1:36:2a:9c:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=bed47fbd-d955-4141-9c43-8a45aa9c89da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e5:12:8f:46:75:d6:2b:5c:cf:c6:39:e8:35: 1b:48:98:78:92:42:72:e5:2d:45:70:61:05:d9:3b: 89:9f:9b:aa:c8:72:4d:02:b4:6c:af:f7:b9:25:2c: e9:bb:8b:51:12:04:ef:3c:99:4a:4d:68:44:ac:ce: b7:9f:18:9a:c8:c9:7f:99:01:1c:e3:2e:8c:a2:cb: 8f:d2:e7:ee:28:5b:55:c5:38:ee:71:36:dd:b5:de: c4:b9:5c:4c:8f:91:28:6b:98:f7:dc:46:d7:90:65: a6:7a:40:1d:bb:3e:db:6a:5a:2a:d5:26:15:0e:33: 78:35:41:bb:10:12:31:46:38:d4:76:b8:fe:1d:9e: 99:37:d0:03:9d:fc:c2:f9:72:d8:d0:49:4e:9f:bf: 98:0d:ae:78:10:02:b3:27:f9:ea:f3:b2:74:13:af: 32:85:7c:90:0c:ac:8e:53:b3:1e:5b:e0:9d:8b:68: 18:32:6c:91:7d:c6:3d:33:51:e4:f2:c4:b3:80:73: 6a:ae:87:23:d5:9a:01:be:80:66:5d:19:98:42:fa: 91:38:3d:61:58:b8:70:f4:1e:97:69:9b:fe:94:76: 92:0c:16:b4:1b:6b:2d:6c:3c:c4:cc:40:42:33:13: 1e:a1:fa:77:3e:ac:0e:9b:70:d4:e6:8f:71:f2:9a: ab:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:07:27:2B:DB:E4:42:00:1B:11:ED:CE:B9:F8:89:D5:09:60:0E:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cd81bfde-6f07-378f-a65d-fd19d546ca2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:08:36:0f:20:7f:34:ab:a1:a7:0e:61:ae:ea:4a:6e:85:f4: d2:28:e3:97:aa:80:23:e8:fa:29:e5:81:38:09:13:f9:b6:f3: c9:15:e7:71:d1:51:0f:e6:b0:0e:d2:a0:e1:17:be:c9:d9:07: 71:86:9a:8a:0f:bc:a4:91:fc:61:6a:86:38:45:c4:4f:79:3f: 43:ed:1b:b8:06:76:46:1c:4a:0f:1d:18:7f:9c:92:8c:91:3e: 44:b3:af:3b:1a:ea:1f:c3:62:52:b6:0c:76:b2:fb:8f:4e:e0: f3:c7:bc:00:ab:cc:65:f8:ae:66:40:cf:37:9d:1e:a6:c7:8d: 90:6c:85:3e:45:91:84:06:b0:c9:58:fa:20:8a:e6:b0:42:0a: 1b:2f:58:f4:ad:f8:00:aa:11:7d:7a:6f:10:5b:2a:86:b2:84: 1b:0f:ca:05:7b:7e:fd:17:04:a3:50:04:07:2c:62:4c:fc:6f: 27:e1:9d:27:13:8f:90:bf:83:46:2f:c5:b3:03:d9:cf:2d:28: c2:8f:40:5a:cc:39:2c:f2:ed:10:7c:6b:4f:09:81:f4:f1:0d: a8:1c:7f:8f:35:f1:b8:26:d5:42:ff:4d:aa:15:b9:5b:ff:c0: a2:f0:47:b4:1a:bc:7f:2e:db:86:c7:77:47:0d:87:2b:9f:e3: 40:a2:d5:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMn3yzGThNiqcSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk YmVkNDdmYmQtZDk1NS00MTQxLTljNDMtOGE0NWFhOWM4OWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+USj0Z11itcz8Y56DUbSJh4kkJy5S1FcGEF 2TuJn5uqyHJNArRsr/e5JSzpu4tREgTvPJlKTWhErM63nxiayMl/mQEc4y6MosuP 0ufuKFtVxTjucTbdtd7EuVxMj5Eoa5j33EbXkGWmekAduz7baloq1SYVDjN4NUG7 EBIxRjjUdrj+HZ6ZN9ADnfzC+XLY0ElOn7+YDa54EAKzJ/nq87J0E68yhXyQDKyO U7MeW+Cdi2gYMmyRfcY9M1Hk8sSzgHNqrocj1ZoBvoBmXRmYQvqROD1hWLhw9B6X aZv+lHaSDBa0G2stbDzEzEBCMxMeofp3PqwOm3DU5o9x8pqr3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAsHJyvb5EIAGxHtzrn4idUJYA6MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2Q4MWJmZGUtNmYwNy0z NzhmLWE2NWQtZmQxOWQ1NDZjYTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4INg8gfzSroacOYa7qSm6F9NIo45eqgCPo+inlgTgJE/m288kV53HR UQ/msA7SoOEXvsnZB3GGmooPvKSR/GFqhjhFxE95P0PtG7gGdkYcSg8dGH+ckoyR PkSzrzsa6h/DYlK2DHay+49O4PPHvACrzGX4rmZAzzedHqbHjZBshT5FkYQGsMlY +iCK5rBCChsvWPSt+ACqEX16bxBbKoayhBsPygV7fv0XBKNQBAcsYkz8byfhnScT j5C/g0YvxbMD2c8tKMKPQFrMOSzy7RB8a08JgfTxDagcf4818bgm1UL/TaoVuVv/ wKLwR7QavH8u24bHd0cNhyuf40Ci1Tg= -----END CERTIFICATE-----Generated at Sat Nov 1 12:30:49 2025 by rpki-client