$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cef30f1e-3901-3da5-ad67-60c39887457b.roa File: cef30f1e-3901-3da5-ad67-60c39887457b.roa (raw, json) Hash identifier: L+iJxpj2d+nTlogWtfRFWnCVpuNdS66y8I6fscNuwwk= Subject key identifier: 6F:47:5C:20:EC:EB:31:F4:24:30:BE:7B:E7:D6:EF:04:12:B7:AD:50 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584B92DD98FC5DA1A39286204F80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cef30f1e-3901-3da5-ad67-60c39887457b.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 13335 IP address blocks: 172.64.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:98:fc:5d:a1:a3:92:86:20:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=f5d0b029-2add-44eb-b823-af6432a5669a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c1:d6:06:cf:46:b5:27:76:30:a2:f2:b3:09: 09:95:ce:b8:ff:e3:32:43:1e:89:dd:00:43:5b:ad: 64:56:75:7d:89:7d:91:2c:d6:08:e3:5e:ec:f9:6f: fb:73:d9:65:d6:1c:e9:f0:bd:af:12:9b:d9:dd:0a: 9d:b2:4a:22:9e:28:59:6e:f9:e0:3c:8a:83:2b:32: 63:81:51:9c:1b:74:e7:3f:ca:1b:5e:89:84:73:39: 6b:b4:9f:01:b2:e4:d4:40:77:0d:67:61:50:54:ed: 7f:42:5e:dd:1c:9a:8a:10:ce:46:d2:e9:c4:43:78: 19:e2:c1:61:04:a3:fb:a0:14:d0:68:e2:cf:8c:d2: 46:21:2c:45:18:1b:05:08:eb:1f:ef:a6:28:cf:1e: b3:e1:f8:05:0f:bf:f5:94:31:ea:d8:a7:c0:7b:ac: e9:c5:40:08:9b:28:2b:69:87:10:14:3b:0a:73:37: 3a:a0:48:3e:23:b2:d5:f0:3a:92:83:09:f7:58:71: 2a:00:0f:61:42:49:d7:4b:f7:da:ad:f8:bf:3a:00: 9b:82:51:fc:fb:d4:49:84:3f:cc:0a:69:38:f4:52: 63:27:13:93:24:d7:32:b3:10:68:f7:b4:f3:0e:95: 48:e0:d6:1d:16:08:14:82:5d:47:87:c5:9c:76:1d: ea:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:47:5C:20:EC:EB:31:F4:24:30:BE:7B:E7:D6:EF:04:12:B7:AD:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cef30f1e-3901-3da5-ad67-60c39887457b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:11:8f:9d:d9:c4:dd:d8:a4:a5:a7:75:cc:13:43:fe:d2:24: b2:69:7e:e6:d0:c9:f9:ca:c5:b8:03:6e:e8:4e:df:e0:3f:1b: 32:da:84:f7:17:8e:29:07:ad:55:4f:ac:e4:0c:21:d5:8f:35: 0d:60:2c:f2:8e:29:a8:fa:09:d8:44:43:01:e9:8e:f1:65:26: 7d:13:94:e4:4b:3b:ce:fc:00:c5:a6:10:ed:8d:50:91:4a:13: bb:d5:c7:05:c2:bd:8b:9f:4e:c6:fe:a9:2c:87:05:b7:79:9e: 9c:cd:fa:02:9c:db:82:88:c5:97:82:9a:0e:2b:77:b7:c3:ab: bd:bf:9d:b6:65:6e:5c:6e:fa:07:f8:89:16:ef:25:ab:78:74: fd:db:7f:e5:b4:1b:8d:7b:95:e0:0c:7d:cc:0b:30:f6:8c:ac: 40:9c:90:f4:04:da:31:2d:6b:26:4c:26:bc:5f:b6:de:c5:ea: 8f:4c:16:0a:29:9e:d5:9a:c3:da:ed:55:09:05:84:7c:fc:47: 91:36:72:06:e5:90:22:c6:c0:e0:bb:6c:5f:09:48:d1:a6:6b: 03:a5:e7:82:c7:fd:1a:72:ea:8b:0d:c7:c6:e2:44:ff:ec:e9: ec:7e:e4:01:d5:e2:9c:76:db:d4:31:9b:97:9f:02:c5:ca:57: 09:88:04:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3Zj8XaGjkoYgT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk ZjVkMGIwMjktMmFkZC00NGViLWI4MjMtYWY2NDMyYTU2NjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcHWBs9GtSd2MKLyswkJlc64/+MyQx6J3QBD W61kVnV9iX2RLNYI417s+W/7c9ll1hzp8L2vEpvZ3QqdskoinihZbvngPIqDKzJj gVGcG3TnP8obXomEczlrtJ8BsuTUQHcNZ2FQVO1/Ql7dHJqKEM5G0unEQ3gZ4sFh BKP7oBTQaOLPjNJGISxFGBsFCOsf76Yozx6z4fgFD7/1lDHq2KfAe6zpxUAImygr aYcQFDsKczc6oEg+I7LV8DqSgwn3WHEqAA9hQknXS/farfi/OgCbglH8+9RJhD/M Cmk49FJjJxOTJNcysxBo97TzDpVI4NYdFggUgl1Hh8Wcdh3qCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG9HXCDs6zH0JDC+e+fW7wQSt61QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2VmMzBmMWUtMzkwMS0z ZGE1LWFkNjctNjBjMzk4ODc0NTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEDIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ8Rj53ZxN3YpKWndcwTQ/7SJLJpfubQyfnKxbgDbuhO3+A/GzLahPcX jikHrVVPrOQMIdWPNQ1gLPKOKaj6CdhEQwHpjvFlJn0TlORLO878AMWmEO2NUJFK E7vVxwXCvYufTsb+qSyHBbd5npzN+gKc24KIxZeCmg4rd7fDq72/nbZlblxu+gf4 iRbvJat4dP3bf+W0G417leAMfcwLMPaMrECckPQE2jEtayZMJrxftt7F6o9MFgop ntWaw9rtVQkFhHz8R5E2cgblkCLGwOC7bF8JSNGmawOl54LH/Rpy6osNx8biRP/s 6ex+5AHV4px229Qxm5efAsXKVwmIBB4= -----END CERTIFICATE-----Generated at Sun Oct 19 19:11:51 2025 by rpki-client