$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d59e955a-b36b-344b-81cd-7f5b4670c997.roa File: d59e955a-b36b-344b-81cd-7f5b4670c997.roa (raw, json) Hash identifier: cWM43tg8/8ytufmtcMo5xWcSsVmEx+hEsQruae6Cm+0= Subject key identifier: 07:E3:F2:68:85:DE:BA:7A:77:1B:6E:A4:1E:B9:73:49:54:79:72:FF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BABFD321B5FCB70AA504D7E40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d59e955a-b36b-344b-81cd-7f5b4670c997.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.69.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:32:1b:5f:cb:70:aa:50:4d:7e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=56fd98c3-bf83-4b7e-b031-3bf46c99b051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:51:1f:79:81:77:74:65:ff:92:df:eb:52:35: 4a:aa:01:1d:41:a1:4e:cc:6b:f0:47:d1:88:15:74: 03:a1:20:a8:7a:1e:45:ca:65:42:1c:c3:d7:fb:9c: 16:8d:af:3c:d9:ed:91:31:5f:3a:0a:dc:8d:1c:15: e7:cb:72:fd:42:1a:87:7c:e3:91:25:7c:3f:4a:3c: cc:db:3e:23:51:03:4a:f2:f6:0e:22:06:eb:60:52: 57:33:b9:28:a5:2c:68:6e:b2:fe:dd:c2:37:95:58: 2b:1c:be:8d:8d:fb:5a:57:16:dc:28:01:73:e6:e1: 4b:54:d4:34:99:ce:5c:1b:2d:69:b4:d8:cc:72:e9: 4a:5b:e7:e7:79:3c:3a:87:5b:46:fb:ea:fc:dc:40: 7b:77:09:66:38:f8:ac:0a:e9:2d:45:80:51:18:c0: 48:92:42:41:93:22:24:7a:e0:4d:21:69:c7:e0:ed: 4d:3c:11:10:bd:73:4d:19:c3:a8:b7:14:cf:46:66: b6:a0:33:46:6b:e2:16:26:02:58:b7:cd:36:b7:fd: 9c:cb:7b:3c:88:b6:91:db:a1:5c:28:7f:03:8b:fb: 31:1f:81:50:9f:41:7a:86:37:5a:f2:67:93:89:88: f5:73:bb:b6:d0:31:1f:90:4d:b1:d1:f3:f3:39:bc: 94:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:E3:F2:68:85:DE:BA:7A:77:1B:6E:A4:1E:B9:73:49:54:79:72:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d59e955a-b36b-344b-81cd-7f5b4670c997.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:e3:25:b7:87:f1:4e:5c:0f:ac:99:37:12:55:10:95:29:3f: 56:a3:bd:ae:2a:68:39:64:85:de:11:97:15:42:dd:3e:a8:c8: da:1a:83:b7:d3:a1:bf:bd:7b:bd:36:7e:a5:c2:38:9d:7c:57: 0d:3b:f2:fe:82:03:6e:c0:12:99:c8:27:93:95:d0:4a:43:55: 15:31:2b:aa:d6:17:1e:a4:84:b5:e5:4b:33:13:3e:8c:58:4d: 2b:a7:7d:de:00:55:4b:ad:02:0a:ff:ea:ca:3a:95:f4:1f:2d: 20:a3:33:45:69:da:6e:46:5a:29:49:6b:e6:e4:c3:e0:69:28: c0:5d:34:69:43:47:a7:a4:f9:08:1e:ed:79:c2:56:82:22:91: 61:2e:43:c8:07:43:31:5f:33:20:00:e4:b2:91:b9:28:71:3a: 1d:ec:9a:7f:2e:22:df:d2:0f:ee:33:de:c1:56:ea:a1:c7:e9: 4d:ab:67:e7:b9:cc:c2:ae:55:39:73:b0:94:82:93:bc:d8:09: 64:da:30:d9:2e:5a:13:8f:60:ad:3d:22:06:0c:cd:aa:76:50: 30:97:0c:e3:3c:f1:4f:d6:94:2e:29:d1:2c:12:01:7a:90:6f: 18:9e:2e:58:78:03:38:2f:e1:7a:be:3a:43:9a:cc:48:2c:98: b0:e9:4c:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/TIbX8twqlBNfkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk NTZmZDk4YzMtYmY4My00YjdlLWIwMzEtM2JmNDZjOTliMDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1EfeYF3dGX/kt/rUjVKqgEdQaFOzGvwR9GI FXQDoSCoeh5FymVCHMPX+5wWja882e2RMV86CtyNHBXny3L9QhqHfOORJXw/SjzM 2z4jUQNK8vYOIgbrYFJXM7kopSxobrL+3cI3lVgrHL6NjftaVxbcKAFz5uFLVNQ0 mc5cGy1ptNjMculKW+fneTw6h1tG++r83EB7dwlmOPisCuktRYBRGMBIkkJBkyIk euBNIWnH4O1NPBEQvXNNGcOotxTPRma2oDNGa+IWJgJYt802t/2cy3s8iLaR26Fc KH8Di/sxH4FQn0F6hjda8meTiYj1c7u20DEfkE2x0fPzObyUGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAfj8miF3rp6dxtupB65c0lUeXL/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDU5ZTk1NWEtYjM2Yi0z NDRiLTgxY2QtN2Y1YjQ2NzBjOTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEUJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDjJbeH8U5cD6yZNxJVEJUpP1ajva4qaDlkhd4RlxVC3T6oyNoag7fT ob+9e702fqXCOJ18Vw078v6CA27AEpnIJ5OV0EpDVRUxK6rWFx6khLXlSzMTPoxY TSunfd4AVUutAgr/6so6lfQfLSCjM0Vp2m5GWilJa+bkw+BpKMBdNGlDR6ek+Qge 7XnCVoIikWEuQ8gHQzFfMyAA5LKRuShxOh3smn8uIt/SD+4z3sFW6qHH6U2rZ+e5 zMKuVTlzsJSCk7zYCWTaMNkuWhOPYK09IgYMzap2UDCXDOM88U/WlC4p0SwSAXqQ bxieLlh4Azgv4Xq+OkOazEgsmLDpTKU= -----END CERTIFICATE-----Generated at Sat Nov 1 10:02:31 2025 by rpki-client