$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d0c91acd-0fed-3eb9-bc0f-714dae796e0a.roa File: d0c91acd-0fed-3eb9-bc0f-714dae796e0a.roa (raw, json) Hash identifier: bZv+Es5eHFVVyffsKgBa4pEN9Lfan/xhqlqMICfHUiI= Subject key identifier: 9B:52:BC:1D:9B:72:A5:03:E7:6D:D6:2A:58:BE:A5:B1:18:D1:66:4C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB02D0CFD87D758D5E0E5E980 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d0c91acd-0fed-3eb9-bc0f-714dae796e0a.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 172.69.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2d:0c:fd:87:d7:58:d5:e0:e5:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=53c494c8-5d29-42b2-b9cd-bda32772f243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:78:26:2a:eb:57:8e:13:25:34:7a:c4:7d:7a: c9:31:99:99:07:01:c9:4c:ef:f4:69:5a:31:0d:58: 8e:d2:7a:9f:a4:09:6e:45:79:b4:7b:52:4b:3c:1e: 5e:7a:9c:7f:0e:1a:20:8b:72:ed:e6:0a:8f:d9:9b: 7b:a6:11:40:55:38:02:fc:46:9f:97:0d:9a:b7:76: b8:31:fa:9e:9d:1a:fe:4d:f6:11:c9:d1:46:30:58: da:5f:99:40:6f:8a:32:c2:cc:e0:e0:ed:ca:c0:9e: c1:3f:c6:3e:f2:5b:ac:9c:44:f1:d0:c7:91:08:61: ad:eb:7b:31:ab:9c:94:6e:78:ef:44:01:13:99:4d: 2e:41:95:c0:64:83:9f:e8:16:26:c8:88:37:eb:9b: ae:ee:77:55:d2:59:ad:90:e8:3c:04:a0:9d:7a:d4: 97:c6:11:1d:a5:08:09:7d:6e:ed:81:11:be:07:d7: b3:17:8d:0a:1a:2f:34:a8:20:52:64:27:f6:f6:6b: 80:59:5c:0a:f7:f6:72:a6:60:d0:65:88:94:36:2f: c5:88:27:45:65:d5:b1:70:52:54:ad:81:7e:f5:2e: c1:7a:69:7e:00:49:03:1a:bd:ed:6a:f7:21:7c:a8: 8c:d8:22:c2:bb:a8:58:80:9a:06:a2:0a:1f:23:b7: c8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:52:BC:1D:9B:72:A5:03:E7:6D:D6:2A:58:BE:A5:B1:18:D1:66:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d0c91acd-0fed-3eb9-bc0f-714dae796e0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:e8:ce:2e:3e:f0:fa:61:f1:9c:38:0f:71:dd:f2:16:41:81: 46:05:5f:4d:64:ec:07:2f:64:c1:cf:40:e6:b5:ce:e4:6b:3e: 61:34:67:46:e4:90:7a:c6:02:4e:f0:dc:42:2f:cb:6c:e3:97: cb:88:37:2b:b5:d5:17:dd:06:73:04:84:6f:6a:d6:50:2e:14: b6:d3:ef:66:2d:12:23:35:82:4e:41:01:ae:0a:82:ea:ad:8a: cd:c6:f7:f4:dd:bf:e9:aa:61:9b:ec:68:6d:af:3f:2f:da:d9: 9b:b7:ce:e8:c2:5b:c3:15:4e:84:db:51:9a:6d:80:d0:85:34: ba:9b:38:80:3d:77:99:49:3f:fb:8c:6d:15:e2:bf:4b:32:a6: 95:ca:bc:de:e0:ea:eb:7e:01:88:26:9e:42:fe:19:2f:4a:ff: 64:1f:70:1e:63:f6:c2:d3:42:ea:cd:50:da:ea:0e:d6:a5:78: 64:5a:ca:26:d6:3f:c0:2a:93:6b:b7:29:d5:66:af:ff:69:a9: 80:f6:d1:e3:6b:2a:f8:53:f0:ed:81:ae:4b:da:ef:4b:40:bd: 1d:23:59:0c:c2:b1:21:3c:8b:7d:e1:99:cf:aa:25:18:10:2b: 73:92:9f:bd:71:13:a7:5b:e8:3c:6a:d9:f2:13:78:ee:95:92: 0d:44:d5:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLQz9h9dY1eDl6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk NTNjNDk0YzgtNWQyOS00MmIyLWI5Y2QtYmRhMzI3NzJmMjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3gmKutXjhMlNHrEfXrJMZmZBwHJTO/0aVox DViO0nqfpAluRXm0e1JLPB5eepx/Dhogi3Lt5gqP2Zt7phFAVTgC/Eaflw2at3a4 MfqenRr+TfYRydFGMFjaX5lAb4oywszg4O3KwJ7BP8Y+8lusnETx0MeRCGGt63sx q5yUbnjvRAETmU0uQZXAZIOf6BYmyIg365uu7ndV0lmtkOg8BKCdetSXxhEdpQgJ fW7tgRG+B9ezF40KGi80qCBSZCf29muAWVwK9/ZypmDQZYiUNi/FiCdFZdWxcFJU rYF+9S7Beml+AEkDGr3tavchfKiM2CLCu6hYgJoGogofI7fIuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJtSvB2bcqUD523WKli+pbEY0WZMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDBjOTFhY2QtMGZlZC0z ZWI5LWJjMGYtNzE0ZGFlNzk2ZTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEXdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/ozi4+8Pph8Zw4D3Hd8hZBgUYFX01k7AcvZMHPQOa1zuRrPmE0Z0bk kHrGAk7w3EIvy2zjl8uINyu11RfdBnMEhG9q1lAuFLbT72YtEiM1gk5BAa4Kguqt is3G9/Tdv+mqYZvsaG2vPy/a2Zu3zujCW8MVToTbUZptgNCFNLqbOIA9d5lJP/uM bRXiv0syppXKvN7g6ut+AYgmnkL+GS9K/2QfcB5j9sLTQurNUNrqDtaleGRayibW P8Aqk2u3KdVmr/9pqYD20eNrKvhT8O2Brkva70tAvR0jWQzCsSE8i33hmc+qJRgQ K3OSn71xE6db6Dxq2fITeO6Vkg1E1ek= -----END CERTIFICATE-----Generated at Sat Nov 1 10:03:08 2025 by rpki-client