$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d70ef6c8-3bfb-37ea-8b47-22c73f69faeb.roa File: d70ef6c8-3bfb-37ea-8b47-22c73f69faeb.roa (raw, json) Hash identifier: mpvQVOP30fooFJZVfePfqLlRZHn6mgBtSPE9MaTOqDo= Subject key identifier: 13:12:FB:76:5B:F9:04:F5:ED:4D:8E:F4:69:E7:1E:0F:B9:2D:38:0C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BABFD36308CA4C513BFD02880 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d70ef6c8-3bfb-37ea-8b47-22c73f69faeb.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.69.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:36:30:8c:a4:c5:13:bf:d0:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=f4bf942f-7e0c-4d7c-b4fd-1f2f737e897e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:73:b6:5a:75:04:5b:99:ec:e6:15:6b:aa:89: aa:d7:ac:f0:8f:a2:cb:4a:3a:c5:99:64:e1:39:63: 51:c2:67:df:d9:42:9c:54:ba:14:86:e9:1d:56:12: ae:76:21:c1:d5:57:28:77:70:27:16:a5:80:03:c3: 75:e5:a0:3e:b2:70:5c:d1:4d:e7:f6:78:8a:76:81: 59:e9:6a:f4:5e:9e:c4:62:09:ad:57:97:cc:30:44: 9b:c3:a3:c0:60:f0:3b:97:72:fe:4b:7a:18:db:a4: 7c:54:0b:ab:63:11:02:c2:16:91:d4:e4:0c:e7:62: ca:3c:5f:b6:ba:51:6f:1c:78:84:53:08:42:10:90: de:a4:c2:d9:4e:f6:12:0a:39:a4:0b:ce:73:51:f6: 2f:d9:cd:0d:ad:f3:4c:53:75:b2:4a:d1:6b:0e:c4: aa:e8:8f:a0:f4:4b:bc:a5:5c:5e:c7:bd:79:38:ab: 51:34:23:93:93:43:8b:d7:1b:16:ba:c5:99:8b:fd: 38:57:56:11:9e:24:4a:8a:b1:bc:f4:79:ff:0c:cb: 10:fe:6f:47:83:0c:18:5a:21:30:4b:52:74:c9:28: 44:66:6f:06:9d:a9:5f:2c:df:97:08:f6:e5:3c:f1: c2:f2:05:e9:f2:91:33:7f:f2:e2:3c:c6:7c:f4:75: 6f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:12:FB:76:5B:F9:04:F5:ED:4D:8E:F4:69:E7:1E:0F:B9:2D:38:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d70ef6c8-3bfb-37ea-8b47-22c73f69faeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:78:03:83:3f:0a:3f:62:8f:f3:f7:b7:45:b4:30:d9:6f:c2: e0:7e:de:40:a8:6e:21:a0:21:6c:c8:04:7b:2a:6d:7f:03:30: 2b:1c:9b:0f:ef:6d:7d:3f:62:1b:0f:9c:88:8e:75:ed:53:a1: 4c:4b:0c:91:69:c7:e2:02:fb:8f:59:59:39:86:a7:18:43:12: 1e:e5:aa:ed:47:fb:09:da:09:ff:e5:a1:cc:1c:15:bf:ef:2a: ec:a9:1c:d6:a5:44:dd:eb:8f:90:5a:5c:ad:7f:07:24:49:d8: 3b:6b:6e:25:be:98:93:00:95:49:e3:4b:c5:85:8c:7d:4c:b2: 41:f4:31:4a:a0:af:81:33:53:08:9a:7d:14:17:5e:cc:c9:fb: 2d:1d:0c:9e:26:7b:2a:40:79:a6:82:dc:87:99:c0:c0:14:ef: 62:60:3a:86:d8:64:1c:6b:c7:22:2d:49:ea:6a:2e:c2:d0:f0: 60:99:fc:bd:1b:77:cc:00:b7:8e:51:13:2a:83:93:a7:df:be: 39:fc:bb:5c:16:82:43:6d:10:cd:d1:30:7d:13:21:9b:e8:55: d7:cf:39:31:70:62:a3:e1:e3:d7:c0:3a:8f:ce:12:da:cb:61: 83:77:7d:14:50:e4:70:f1:dc:a7:23:04:ec:f9:a8:07:a7:bf: 27:2c:4f:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/TYwjKTFE7/QKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk ZjRiZjk0MmYtN2UwYy00ZDdjLWI0ZmQtMWYyZjczN2U4OTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnO2WnUEW5ns5hVrqomq16zwj6LLSjrFmWTh OWNRwmff2UKcVLoUhukdVhKudiHB1Vcod3AnFqWAA8N15aA+snBc0U3n9niKdoFZ 6Wr0Xp7EYgmtV5fMMESbw6PAYPA7l3L+S3oY26R8VAurYxECwhaR1OQM52LKPF+2 ulFvHHiEUwhCEJDepMLZTvYSCjmkC85zUfYv2c0NrfNMU3WyStFrDsSq6I+g9Eu8 pVxex715OKtRNCOTk0OL1xsWusWZi/04V1YRniRKirG89Hn/DMsQ/m9HgwwYWiEw S1J0yShEZm8GnalfLN+XCPblPPHC8gXp8pEzf/LiPMZ89HVvKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMS+3Zb+QT17U2O9GnnHg+5LTgMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDcwZWY2YzgtM2JmYi0z N2VhLThiNDctMjJjNzNmNjlmYWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEWiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJx4A4M/Cj9ij/P3t0W0MNlvwuB+3kCobiGgIWzIBHsqbX8DMCscmw/v bX0/YhsPnIiOde1ToUxLDJFpx+IC+49ZWTmGpxhDEh7lqu1H+wnaCf/locwcFb/v KuypHNalRN3rj5BaXK1/ByRJ2DtrbiW+mJMAlUnjS8WFjH1MskH0MUqgr4EzUwia fRQXXszJ+y0dDJ4meypAeaaC3IeZwMAU72JgOobYZBxrxyItSepqLsLQ8GCZ/L0b d8wAt45REyqDk6ffvjn8u1wWgkNtEM3RMH0TIZvoVdfPOTFwYqPh49fAOo/OEtrL YYN3fRRQ5HDx3KcjBOz5qAenvycsT4E= -----END CERTIFICATE-----Generated at Sat Nov 1 10:03:01 2025 by rpki-client